last executing test programs: 37.137495714s ago: executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) 36.96959383s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x1004b99, '\x00', 0x0, 0x0, 0xfffffffd}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000780)={[{@dioread_nolock}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@orlov}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x43a, &(0x7f00000001c0)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400), 0x208e24b) ioctl$KDFONTOP_SET(r1, 0x4b72, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e21, 0x1, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000740), 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 36.023524315s ago: executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$eJzs3c1vXGe9B/Dv8UviulWStrm9vVGbTNKb1G19Hdu5TW7UxSWxJ4mLX5DtSI1YNKVxUBRDoQWprZBIJWBFBRKIBewqVqwqdUM3qDvYwYoFEuq/UCEWYWV0zoyTsT1jO2lsp+nnY83Mefmd5/mdOS+PZ3x8nrCzLj+y3twba6Ys7V0xtrRUPe5y/OLvPk/qfPGdHf/0gw/fLx/v3ciudOfF4vdJX5Ja0pPkyaR3bHx2ZmqDgq4nl5N8khRJdqfxuimXU/wsLYfBJyl+U9bb0a7NlsxGlvhS2+n9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7kfF2Pjw8EixKxPTF1+pNSS1NcbGZ2eKLC2tnbO8TMPHVa/fxccb1psU5SN9fctdfT+5//bsJ5LUjuSpxthTVYfk6cu7Dz+x76XHe7qWl++Uzeeye/PFvvXOu9dfW1xceHNLErn/na9PT8zNTEydOV+vTczN1E6fPDl8/MK5udq5icn63KW5+fpUbWy2fmZ+ZrY2MPZcbeT06RO1+tClmYvT58eHJuvLE0/9z+jw8Mnay0Nfq5+ZnZuZPv7y0NzYhYnJyYnp81VMObuMOVXuiF+dmK/N189M1WpXry0unFiVU3dW7b9l0MhGa1IGjW4UNDo8OjoyMjo68l6z9+xbE06+ePrFU8PDPcOrZE3EFu203F8e6ryZ7/1JHO5SV6P9TyYzkelczCuptf0Zy3hmM5OpDvObltv/o8fr69bb2v43W/meltkHyqcjOdic2Neh/e+Qy/b9vJV38m6u57UsZjELeXPHM9ren/OpZzoTmctMJjKVM9WUWnNKLadzMicznFdzIYcyl1rOZSKTqWculzKX+dSrPWoss6nnTOYzk9nUMpCxPJdaRnI6p3MitdQzlEuZycVM53zGc6Yq5WquVe/7iXVyvBU0spmg0XWC1jTmd9z+11f/csKXzlacxuGuLDXb/10bhw6MbUdCAAAAwD33X3/Knv2P/fHvSZGnq+/lz01M1od3Oi0AAADgHqou13uqfOkth55O4fM/AAAAPGiKHGx+C9CfQ42h5f+E8iUAAAAAPCCqv/8fTHHo9gSf/wEAAOAB89DyQMd77G94F/5icPn2v7UrjdcrzYjGWNF/bmKyPjQ2M/nSSI5Vdxmo/tNgTWndSdFb/fvB8znciDrc33jtv11iWWdfGTUy9NJIns+RRsSRgWfKl2cG2kSONiKfbUQ+2xrZnRWRJ8pIAHjQHWnfHhebbP97VxQ2eKBq8nsOtGmDh7WsAHC/OFJd/5/kX80uzdp8/m9GHOz0+f9/V33+77mysv1/LFcPNS4pGMrreSOLuZLBNK84ONSu1OXeCBqXIQxu8G1Af/OShb+c6srgmu8D+m6ta2vsQkYz2PYbgZZyi+UcTjTiurdoIwDANjuybju8ufZ/MIONiA6f//tdUggA95VbPdhv4cBOryMAsJJWGgAAAAAAAAAAAAAAAAAAAAAAAAAAAO69Td3A/8/HksXFhWQbOgu4NdB3JxmuP9CVbcp5xwe6k+xU7f+fO16q3Mb3y1v34A38+J+NI+juFt/JsxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbpUi6203vSnYnGU5yfPuz2jo3djqBe6W27tz3Os0obuZm3s6erUgJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODLrHn//640Xh9uTEpPV3I0yeUkX9/pHO+lmzudwI75VvXccv//rqQ3S7nR0+wAougdG5+dmSo3f7G7nP/pBx++Xz42LnttrwplAWUNKzqXaNbQMqV35VKPVkv1jy+8df17b3ynNn622jHPzp+bHJ86P/uV24FPFB81ukBo7QZhOd8fHP3Dz1sm72pW/lF6OuW/ut5zVb3ja+v9z3ZLd6h3E64tLoyWNc3XX5n//revvd0y67EcTp4ZSAZW1vTN8tGhpsOr38+Vis+KnxR78qtcrrZ/+W4US0W5ifZW6//Q1WuLC0Ovv7F45VZOP1yR074cSnIl6VuZ0/Jou5wOVeeTth6uau0tax2ugsqn/Rus47paShzp8L4+Wu0y/WvWYb06a53XobLB+97M6ETbjH7x3cdz7I639LENamyr+Kz4W3Ehf82PWvr/6Cq3/9G0PTrbFFFFtuwprfNWHF5djchqzUdbZ7y6usyORyVb4Kf5Rv7v1vbvWirK97/luNmm81FLje2Pi+TOj4vf7l3TotxWtUj7V7VIzbNPp2Waee5vRHXI8z/yQtJz4I7OKC9scEbZquP/18VA/pEb+v8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuf0XS3W56V3I0yb4ke8vxWrK0OubGXdTX1V/cTZr3zN3k/MVTdFzR4mZu5u3s2e6MAAAAAAAAANgaZ8c//eDD98tH9ff47vx3V3NOLelJsq/4Ze/Y+OzM1AYF9SaXl/+k33dnOVwunx65Pf5JOfbkBgvt7OUDAPCF9u8AAAD//yjzadA=") r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) syz_open_dev$usbfs(0x0, 0x73, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.934032349s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) pipe2$9p(&(0x7f0000000640), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 34.386359887s ago: executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ppoll(&(0x7f0000000280)=[{r3}, {}, {r3, 0x2000}, {r2}, {r0}], 0x5, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 34.186288557s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 34.160139151s ago: executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) 34.000339056s ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val, @void, @eth={@multicast, @remote, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}}}}}}, 0x72) 33.847078099s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r3}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 33.545830056s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r0}, 0x10) 33.098793334s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 33.053429351s ago: executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$unix(r5, &(0x7f0000010440)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 33.045612542s ago: executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x107403, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 33.020520476s ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ppoll(&(0x7f0000000280)=[{r3}, {}, {r3, 0x2000}, {r2}, {r0}], 0x5, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 32.840764274s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) pipe2$9p(&(0x7f0000000640), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 32.819483427s ago: executing program 4: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280), 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 32.73531389s ago: executing program 4: mkdir(0x0, 0x0) chroot(&(0x7f0000000180)='./file1\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xe03) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) 32.589408603s ago: executing program 4: symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file1/file0\x00') mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x4f4b) rename(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000300)='./bus\x00') 32.494667467s ago: executing program 2: setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="003400000081003400000081f360705eb6710f1d4d38a830440488fb", 0x1c, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 32.439452226s ago: executing program 4: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x3}, 0x14}}, 0x0) 32.406351001s ago: executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.316445978s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000903001f0000000000ffffffffffffff7f040001000000", 0x24) 31.261623226s ago: executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x28, r0, 0x801, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x15}]}]}, 0x28}}, 0x0) 31.126650927s ago: executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) sendmmsg$unix(r4, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="445841aca15c92b8890cf7975ddadb05113fe74ead61d0883350574e96f8666e3dcdd5e8e4a6b0381c14b5bed3f176f1841c7c4f02932dfc3fe6db216c409845ee5d772564d01e993a2addaf99310d4a968819d499decfdd2a5c34cfe979db2d5242b91abe6bdeb377324582573943b93753d86255dcbdd01ad48390e28d6e11ec0e6e47ed0c5feb96ad4a9590967c408222caf93e0087c0a1b87173666fc56f5d2f8b13aa79766a2b0aefa0bf5ba1fcb0454acc506393a0ba072629e84c80b8e9100ff1abba84a5208670422e6a80fb332043911478d1b1ee217ca6d808ed3d85cd68422bb213ae951528bca01d6d94d70288ba7be554e2a8e7a84d8f47155c2c6527fd8483b1f883b6cf994b2263f0aea8ea8ee9ab06a41ecb8cc21d87aaa4f83ff04e4a630ed7108cf0071b7c555260f350b0595958c0749e3be4b2b629bfe246d9c32ee2f3b38d1033b13320261824b19b459070ad2a17d8cc2857e51ecd23543c39ec4efc9baecf9f687a1e80f3c0634e0a9fd5a9a132b5880923b375cfb8b4bc9255c4a32457cacf08031b2ea45931a5be265e1396aed087b1d31876360995767fc3748afe822fcbc452ca53199dce1a954fdba2942cbac0695dd0d554bbdcba28f907ce9a9ce89e2ce3ae02d364ce5f165eddc030872162e47007d26b909e2578b0b4bea93a06d677fb9457f6dd273bce0d0f3c7f11fb04b860ad7561b435aa20cb1fd7b9bb38cdd844b9ad888e3a9d69fd18d553dac541709b8be04eff91897596747594275e84787360b1f0cb8f518e9d16f3d4989255307f56db75c09f6b093167df835604ad14dbd6216ad94772fdb6046354c2fc23693288716b70655d3ca1222937370f702a0332ea2f0d0ba3ea9bbcd72fec061d3660e08cbdc1964b33b04f0ec5b5e8745cfa99a4faeb3504be2682c1e20b33ec3c489c611d02d156098f44f84ec08c7f21e2e1620dbe2369105e9351b55ab7feb53e2df7a65c57e9d9012d8e19c6723c17a2a08a0da8933f1005b6d7e86e1f7980ba52bfeee1d3164c22bdc957ded1b6f27bed48558d5b97647837756061ab793de7c103b525693be6488379688a009bc41302a926a6fe01fb835ec092c0e161b624c57196999d2b492482bef6d94a086fdb1b86146f43229dee682564b5a4055d81619d36bd34d27d40b0c488e9c14ef54dedebb377485ae6ef864a886bfe523c5cf1324dcf0144f68068fde70b92966f8b967820145bf447e8a8c64702c3d18db1add7e36ffd59ee4da993e8bcdc0d38b3b633edb11146a58d090f8264f1cc261224588641c5f833a019354ef33fe5205c6fb586ce9d16e6793d6f10278db5d70601ae8661fa5c555e5a2e0084fa1f79d4be21b80aaa6289aeaacfc1cf4e7c5fcb187042c2642694d5a9db2fb33d287d9ce9f7192086923cab3654782865828a0bf12351ea04db5bd80336f88f2d70cb073adaa18440fe8bc1eb18a6224b6af995e95765026127fb0252f95c7a5e0e45642698d665f8b38926e4b345173c2f7877ad8617b294bbd352ad115f6a8c1c01f1d8587a5ef903df8c7d30d583ee79afa3c34e9fe921682605c64005c039d796f5097ac0876d6a420e56bcd7ac4c0231fb6ce578b29dd18abb5e3ceea6873b45ed639da372c18bf704417d2c7a110c8d8f8f2bf38d1c1a780d6c8c66871105a8fc348f31ceb3c3af38036ef84b17a818a8ceda25eb2cdab809a375a61f97b7b80af031bc9105e4f711368a1a06a2318059617ce24e56de12d8bc7084a943ab77f96f125c78c6234d16968ce762a0797019fe06f9ea76902281a4851404a787656b6efee275531439ee29b891af8ee3aef8fee136f96d1900b95004de195e620c9a1ff600f942712db2d93b687cf3dfc99724157aa97b45d647f03c9116ce2faa66bf02147349f8330bc70d730be3c903c2f58e7de499df4c6306e5bbd51fb38db14ceaf59deb1cec85c65800e721effb5c66a0135eb3b68ec4cd4c9522b4bbdd4d828054bbd53bbff2e0c2f293abe4bca68b9a5bd8453ecca7c8c966edc9075a7a7a42a23be7030aff57f4f765d94d62992f815e3212a9431735eb798ae18634ae21efef81e073c260d0ea7769f0246966e1d3a0b9ebf332a1a51e47f714dae4368c4e2df394fb6b1be83ed575766abe9b51f5532270f9c4664ce57f2748c0d6dfce84d496015d095ff0b4aca2ba7e8d661af460dcd2a873931d293d8bcf07b76c1ab6ebe15bf6c7aa8811d32d95be2d250b62b86520d647d68e08eea6a5717cb28e3d35003cb7f10d9b6864f799583a9c8a11ed184ea4d03641c09ca17bafd03e9d9712bee224a1377bac08064019487709b2ed56c5e61e3e7e23d35ff5675322f43c050c113cdc73771263d2512d328bd49a32e876a88d6c04402d7eb0acd695fe05f855db25ca4ad89e4d556778aa1dc8192bc4a40e09d03f5db4313c6f436b13f009cb9c55b899d30d97c68d1382a0939aa18c526a2f209dbf90fea53511cd0385466145e2f8741ed2995904a16a73627fdb4a0e0c09d7a84fc5e67b1e67f22a82c407e51f32c8d5443196d06069a4baf4700170b967acd496d3435a72887e97d68665c1c9baa91e3830e0bc4f6018e8fc0541c06ecf841b0cbb17d80cb79d3867da7f886deddd62756b8e20158a7ab88728ac905e399592b06c0c7effc3a89a6c86402c8792faefd26f2a8429a7cf20d4907fd7e2ddf13b5ac567684cb3676e09ab2fc8f398f879e79fc73fbefe77386ee68151e884cdaf08283101fc93f18ee80d7be1a9b3557a774b1147b46ecb237ce991342788d03093746d08f42af708bdb717e09193cf294044d62038cbaa0c274fbc812b1985e6692f4c816b600421e75576c7115d0fe38f523ce361dc9c675f5d8b9f128ac13d85c063605e1be4b605bbc34d180c60cba0b49f34ddb8967489b5d7b0293767b34fcf131d040f8a94a9755074331a37974c00c468c4d86a5238907159f46b60c8652f45baa186ed6716f0993d2b89b8c2f082318196a809938b8a4a794cd439c3e29db44ff6f559ff8d1e29099abd294a3f53268b0b66de9dfb4958e99f1bb0242d5e3e323c96c2860bb5eb769f8d65030f875a269671bec9276ecb050fc92600688d4438bb708db56d6f223943f51f351400c2893b981e037b005c20b1e0f4161618c7c018f20b62353bccb5d65f037d3899b486506b33a9f5147dfdffcf12f2fd9f3a3d735bc0e6113360f95e9e9197493b8179b4f6349e53d0cb1e557e6150110d03e8b9f7dba260b438b06a5d625f8bda27dc0a7ce4fee2c960d156e94bbe80d1f00f7749cc877d55522c69c30b754a155d269fa5a2243536c8bba354b7f6274ba5fa7991dcef9899d6535168893262bf33e62514e96d4261fea64602320888d7fd4fe889d38c57926f6aab14a97ef4796d14b89bb04e708e8ee2704792c01e83ad991389feb423600a22a4493ae8540d1a8e93547fbe8b4d765a4623a971be266067dd34a926a3a6f638f3ed2c9c6cf7ad5ac3362914dd19008072d988d0a1217ec14de4338a89bc2de3b3acd0c685419df168e812dff3b513af92c79b5d42a002013ab8da3d5524dd7096f749f991c4dff93ceb932fcd9284497d2b4e9ac07b3c7d0da6841daccfb175d1abf8d99b2255b757851a588cf1e960393b8df6d3f9e21c060284a2b5f9aaf16425128c0257f128db2155f3d63ad67d45efa975a59797c886a4c68a7aabfeda18b3384649642e07d616f93c4c2438e8dd12a60ef3c51f920209cbee2906ae17b2a7ced2bc280bdb087ffd5c412e4398a113c7f84d07967123432f5ac4c002c2fca8dedec0e2eb72717edc364594b9ff8d0412a0179ac8bc1480bc96af248aa1e4ffe699f4f0a7f70fe7c735b0ee20430c2db00e392046a4501d35b63307239a3e9b23c723c8ac8a272c822ed3e1a5cdff63d0fd25c473d9872a6e1e95df2cb33df7cbaae59dc69973f88101ab202aec3abcf8b287d6fd9a6ac9a1009ef0cbc83e9d60629a830478162ba9001d08ef6355c6c10ff263e36ea963e8509359a7bfbf3db8c690877f33883aab79b633f6aac17717102b3d9565849b0867263733351bd686f3b126114cbebb42195b45ca53587a0349544c4ce8ffb1b95af185d5a346407132e91aa22a0ee607adb789d80500fe654fa3ad378324d4067bb1935aad5cad88120eaa2d3617c66865908c7ca616b49f062966dc65044e6d74cf1be80a671637745f4b81edd1fdeefff7aecbd1a416076f71f13f8f81e2731ec82058cb57b6aba587a635ff40006ca644c1ea94e2d05b414bd162bf1426e0a58edd044916394b250a3f53072e07e9f96b0c3973d7e66989d04605a3cd1d1f25a7a2591dda665864a93531c0d093de7f199e713da1c76d02831844525c49b633bc4beca310258d475190544b56bc43db05a60839875a9bfb669289b9eb6277009e93a38ca10a71a9d40b36d25117cad6f9ab80b1616970476eeda41ff243d8eee90dbb9cff51549f6ca904a46d190a464bdbe50eded436442bcc37a92c9388bda6627b3c2a138a67a795d612a579c7ddb58811a09c05222eaaa673b4dadd50e2108e67955a4efbe96a586eb37bfd8aba990804c61d0d252a3a7edd83f79cec1705a5c57e7873e8c3987dcc470e7e3fb44c0cb9fadf1faff9ac1e185842705a30674783e73cc1af1c243643d43ef05c263a48dc914e28da63bfd3fc6787ea9d981ef6ad1d72bd805e79773e148b9453cf13c7e5664a8a759285f0d981dd064a11863d39afd9c48f91cb2fa26c7edf7789156218eb06e023b20bc56adc76c4dad9bb325a4531520580992c2cfcb26d632321c980dd499abdf880d1a5a19bf21769c6c573bf4ec2cc0bca7366bb4b9c44f6f6d8711162c16147034f18ad08556a9d9ff29aa54b979ac7ccaa00c0e3d70d3ff09c0c3cb44223b6a53dfa5aaeade0ee15e9bd2c7623f8d355bbf232701df7ac27dae2c0105e974f36b7416d6535577c3f6eab4a068e3f0f45dca9ec6aff49a3a1ddabc57cddc38c70cf01f11c15f9f048a7b915a76831bda4da552f1faad5eabde3ee9a9bdcc8d983019b4722ab642b41235344a8859d39af40c0cd6576e99447eac751337a2df14fb907bff7feb31bf06c933c1cf62ffd39baef1a8149ac8ed370d11b803506da622defb6925f84066719ab2f2552062ef25ecc98e35fbe46e5f4a5312c9bdcd5c79ed0fa19d1930bc57ae65a43a2fe662db19176347a71310737031587bcc54f230fc5c30401d00042e27b8137f008b2d7579a6e6a4b317044a82c2200e69201595564eb225bd8acd29329ad4725ecf7c1dc0f4c717984da9a969a1e95e76a66c1fadae576490be0b9e377e11164fe04f93a5cae876f7ba357247d8a1e3dd36adb7d85d580f3bcef061c1ad5d907456a2246e2a66ae4f2ae785947551aca96db63178f2f0d708ce579247848e896c53232f2b41745ad65fd3445e97051ceb0d8b88dc4b769528def3a0c6840c51c3ec56e1c01153d36b30028a967735ccbefdc1b5113328adc7a13d557580ddc2f522b11a6022da7ef85bf4e44abfa58ffb6c601eec6538381f8dd3d931218eeacf9554d05b35b8f6ca1a7d3aae031e5b934845707336f7c7e8cf86e40e7ddd9164e907fc67c44a27c8ae5635bce82625aa31477413410324525eca29eee5e7405672b2d86521759867ffa7552717247041d6cc9667dab3e89e24aa00e56e9e162f235d927b52682ba3f02b92af4d9a273ab015311e86404f10d1a96f2cac821b904a015db3d69ad8d32ad8c", 0xfff}, {&(0x7f00000002c0)="fcbdeaa71da190544bd208973686be79139dec975549ff", 0x17}, {&(0x7f0000000300)="c05ce488a780e6fbea73601a4c9d29a46ce090efff91ddf6b461792eb6b3f62fcce5d2e51d88a9af956f0d1d2b3727fba7e2be0edb8d8893b7718132dc5fc738f6c4f1f3e9a409d62caced24d90b1ac7e2a2885380f6396507c2bc2cca6d153fc704e446921c9d490f55c5ab594288911366e7fd2815b66d3e4721b4b9290d5f693f5c6812e0f0b0be6f7d0ea42782f2ff0f8bf4d56888957343da1770f18b0ae148cf1afa50db2fcafe806be8ec9144755cacb5", 0xb4}, {&(0x7f00000003c0)="4b1e5bddb225b0bbe982a423dda6a6b116459febb92752bb81e535ac2bcaab258359ee8052b0366152c3c314caafb4ba5ef67ac760c5863a0441b6c0a0f404f47fc7b7691209d8266d9e32551ca6e37a5fe6723bc04858e6d697373df6eca584df364622e789c74081c9e9", 0x6b}], 0x5, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18, 0x20000004}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="69ecaa46a08fa26845405c6f0dda8aafd73bc8e1c432d23e094f0ccc12da2130cef2f3cb79257f585c504c3045aa62d0e20c66106b02e20d42b03a7bda43c817f1d2bf5179ac91343ce3b7c14d3998650b0156c19d24fd29e6d136aa09e3f38b2f8a843a975d9969cec89df360bec6f4a628", 0x72}, {&(0x7f00000005c0)="0fd7899464ef558e926e49cac25351cb5931b1a9292a6a81fdf3f43731dcc1e48d35b2381eddb3b80e866dbf9cc48dffb297d52304f1b12288cf17e0e8e4489121e64480af57b22808a41171bde64462a89beb23c77bf41b36", 0x59}], 0x2, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [r4, r0, r5]}}], 0x20, 0x200480c1}}, {{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000740)="aa", 0x1}, {&(0x7f0000000780)="9d85210552f6ad4c053b306abb32c9da75c5719cde80737a1124725a867ec3034c48ed360c020a0aa1a926fa6fed1ea2a0048f4bddbe03622f178cdce87ea5edc98b8470788849dc694a281fb5c8bb479f4910a532f9098b3e183f30dba1d6b95564fd", 0x63}, {&(0x7f0000000800)="617f6212842bb841b2a4b52e808fb3a1f2e399d050973fd2448bfff1f4b35feab9594ee9fc124b50ccd7d131a0e3e43b80c9d86f8c03ebea370642c51348977de7c5df8cee0ae6042bd45eaaad4aa34862e80ebde63b9d3fbe83f9479be19267bcfcb5263f26fdf825", 0x69}, {&(0x7f0000000880)="4a1bd51cf9fdc10ca0726ff802489a2a1114938ae971db9844c149d73c120048859f7efa55b3ba1a769a78ea36", 0x2d}, {&(0x7f0000000900)="eca76493f94f3d75504ed534e97015b26594cd9874830843a533dd681268e496826aaa5f74a55bfaa93d4c8aee74c06cb03926a5510163e0ee9bde2b43cf3f05ade0877837272c68dbe90a4df787e09288f95852c286227571bad4d10fd93bd21e4dfb9120c91fef42cbd6704d4983", 0x6f}, {&(0x7f0000000980)="32c59846894f627c4556aaac44319fad2a38063a1fa3f2ca61a310794fb3659052ec", 0x22}, {&(0x7f0000004bc0)="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", 0x1000}], 0x7, &(0x7f0000000cc0)=[@rights={{0x20, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x60, 0x20000000}}], 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0xfffffffffffffdef) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/93) sendmmsg$inet6(r6, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000fb009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000100)={0x3, "249e0b45c0d8e7063f9839f36aeef67e326a9cc65e4079ff17065af8b09d78dc"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r8, 0x80084522, &(0x7f0000001f40)=""/231) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7}}) 30.111281014s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@multicast, @remote, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}}}}}}, 0x72) 2.334355861s ago: executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.292949567s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x0, 0x0, 0xa}, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) chdir(&(0x7f0000000300)='./bus\x00') link(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001800090400000000000000000a140000000000000000000008001e000100000014000200fc020000b2000000000000000000000008000e00070000001400020000000000000000000000ffffac14140e"], 0x54}}, 0x20000080) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x0, 0x0) 1.214651873s ago: executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x1, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000280)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) syz_emit_vhci(0x0, 0x7) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40}]) r5 = memfd_create(&(0x7f0000002280)='\xcaB\x89\xed`@>\x89=\x9e', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) 1.150705722s ago: executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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") r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) syz_open_dev$usbfs(0x0, 0x73, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0: setresuid(0x0, 0x0, 0xee00) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4272920451/syzkaller.lo5utO/408/file0" dev="sda1" ino=1966 res=1 errno=0 [ 770.812599][ T3661] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.828252][ T3661] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.840461][ T3661] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.501836][ T4140] usb 5-1: USB disconnect, device number 39 [ 771.524077][T11031] sysv_free_block: trying to free block not in datazone [ 771.542045][T11031] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 771.662785][ T3661] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.671878][ T3661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.687869][ T3774] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 771.696990][ T3661] usb 1-1: Product: syz [ 771.701272][ T3661] usb 1-1: Manufacturer: syz [ 771.714972][ T3774] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 771.721690][ T3661] usb 1-1: SerialNumber: syz [ 771.731783][T13762] loop3: detected capacity change from 0 to 1024 [ 771.757816][T13762] hfsplus: invalid catalog btree flag [ 771.770737][T13762] hfsplus: failed to load catalog file [ 771.775201][ T3661] usb 1-1: selecting invalid altsetting 1 [ 771.929803][T13767] loop2: detected capacity change from 0 to 8192 [ 771.967633][T13768] loop4: detected capacity change from 0 to 2048 [ 771.976750][T13767] loop2: p2 p3 p4 [ 771.980905][T13767] loop2: p2 start 452985600 is beyond EOD, truncated [ 771.992872][ T3661] cdc_ncm 1-1:1.0: bind() failure [ 772.011124][T13767] loop2: p3 start 4177527808 is beyond EOD, truncated [ 772.020648][ T3661] usb 1-1: USB disconnect, device number 39 [ 772.037680][T13767] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 772.148985][T13768] loop4: p2 p3 p7 [ 772.322442][ T2535] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 772.340421][T13781] loop2: detected capacity change from 0 to 1764 [ 772.429020][T13781] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 772.451561][T13781] ISOFS: unable to read i-node block [ 772.461280][T13781] isofs_fill_super: get root inode failed [ 772.572350][ T2535] usb 4-1: Using ep0 maxpacket: 32 [ 772.692582][ T2535] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.792513][ T4129] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 772.892695][ T2535] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 772.941170][ T2535] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 772.955749][ T2535] usb 4-1: Product: syz [ 772.970684][ T2535] usb 4-1: Manufacturer: syz [ 772.988837][ T2535] usb 4-1: SerialNumber: syz [ 773.011446][ T2535] usb 4-1: config 0 descriptor?? [ 773.042379][ T4129] usb 3-1: Using ep0 maxpacket: 16 [ 773.162647][ T4129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.191475][ T4129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.221234][ T4129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.250426][ T4129] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 773.275185][ T4129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.310537][ T4129] usb 3-1: config 0 descriptor?? [ 773.331561][ T4131] usb 4-1: USB disconnect, device number 28 [ 773.865613][ T27] audit: type=1804 audit(1717531805.072:276): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1016185976/syzkaller.bhw5fQ/57/file0" dev="sda1" ino=1952 res=1 errno=0 [ 773.904661][ T4129] microsoft 0003:045E:07DA.001A: No inputs registered, leaving [ 774.147452][T13799] loop4: detected capacity change from 0 to 128 [ 774.207969][T13799] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 774.223789][T13799] sysv_count_free_blocks: cannot read free-list block [ 774.365795][T13802] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 774.444818][T13799] sysv_count_free_inodes: unable to read inode table [ 774.452067][T13801] sysv_count_free_blocks: cannot read free-list block [ 774.462128][T13801] sysv_count_free_inodes: unable to read inode table [ 774.626457][ T4129] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 774.661710][ T4129] microsoft 0003:045E:07DA.001A: no inputs found [ 774.672520][ T4140] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 774.675264][ T4129] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 774.715679][ T4129] usb 3-1: USB disconnect, device number 30 [ 774.914661][T13813] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.166053][T13818] loop3: detected capacity change from 0 to 8192 [ 775.182676][ T4140] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 775.192063][ T4140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.202427][ T4140] usb 5-1: config 0 descriptor?? [ 775.212956][T13818] loop3: p2 p3 p4 [ 775.217029][T13818] loop3: p2 start 452985600 is beyond EOD, truncated [ 775.224458][T13818] loop3: p3 start 4177527808 is beyond EOD, truncated [ 775.231526][T13818] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 775.262215][ T4140] rndis_wlan: probe of 5-1:0.0 failed with error -22 [ 775.269822][ T4140] rndis_host: probe of 5-1:0.0 failed with error -22 [ 776.342599][T13826] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 776.988620][T11031] sysv_free_block: trying to free block not in datazone [ 776.999379][ T2535] usb 5-1: USB disconnect, device number 40 [ 777.026828][T11031] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 777.193233][ T4140] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 778.272376][ T4140] usb 3-1: Using ep0 maxpacket: 32 [ 778.290403][ T2535] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 778.402680][ T4140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.532362][ T2535] usb 2-1: Using ep0 maxpacket: 32 [ 778.612743][ T4140] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 778.625580][ T4140] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 778.673047][ T4140] usb 3-1: Product: syz [ 778.677710][ T4140] usb 3-1: Manufacturer: syz [ 778.698872][ T4140] usb 3-1: SerialNumber: syz [ 778.731602][ T4140] usb 3-1: config 0 descriptor?? [ 778.732552][ T2535] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 778.986362][ T4140] usb 3-1: USB disconnect, device number 31 [ 778.993789][ T2535] usb 2-1: string descriptor 0 read error: -22 [ 779.000056][ T2535] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 779.045877][ T2535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.114514][ T2535] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 779.381838][T13847] loop4: detected capacity change from 0 to 40427 [ 779.399787][T13847] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 779.407878][T13857] loop3: detected capacity change from 0 to 8192 [ 779.417336][T13847] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 779.468228][T13857] loop3: p2 p3 p4 [ 779.475096][T13857] loop3: p2 start 452985600 is beyond EOD, truncated [ 779.476221][T13847] F2FS-fs (loop4): invalid crc value [ 779.492664][T13857] loop3: p3 start 4177527808 is beyond EOD, truncated [ 779.500007][T13857] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 779.507259][T13847] F2FS-fs (loop4): Found nat_bits in checkpoint [ 779.570313][T13847] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 779.578197][T13847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 779.760221][ T27] audit: type=1326 audit(1717531811.002:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d2747cee9 code=0x0 [ 779.799336][T13872] loop2: detected capacity change from 0 to 16 [ 779.897579][T13872] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 780.574189][ T3613] usb 2-1: USB disconnect, device number 38 [ 780.625066][T13881] loop0: detected capacity change from 0 to 1024 [ 780.695123][T13881] hfsplus: failed to load root directory [ 780.737596][ T3884] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 780.826879][ T3884] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 781.262483][ T4131] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 781.512412][ T4131] usb 2-1: Using ep0 maxpacket: 32 [ 781.536564][T13900] loop0: detected capacity change from 0 to 8192 [ 781.593187][T13900] loop0: p2 p3 p4 [ 781.597256][T13900] loop0: p2 start 452985600 is beyond EOD, truncated [ 781.625002][T13900] loop0: p3 start 4177527808 is beyond EOD, truncated [ 781.632132][T13900] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 781.641914][ T4131] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.672762][ T27] audit: type=1804 audit(1717531812.912:278): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729587576/syzkaller.iUs0tM/155/file0" dev="sda1" ino=1966 res=1 errno=0 [ 781.842519][ T4131] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 781.851842][ T4131] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 781.860554][ T4131] usb 2-1: Product: syz [ 781.865151][ T4131] usb 2-1: Manufacturer: syz [ 781.870061][ T4131] usb 2-1: SerialNumber: syz [ 781.883464][ T4131] usb 2-1: config 0 descriptor?? [ 782.126100][ T3661] usb 2-1: USB disconnect, device number 39 [ 782.702604][ T4131] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 783.243500][ T27] audit: type=1326 audit(1717531814.492:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13917 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cef67cee9 code=0x0 [ 783.256757][T13916] tipc: Cannot configure node identity twice [ 783.402708][ T4131] usb 4-1: Using ep0 maxpacket: 32 [ 783.509670][T13925] loop2: detected capacity change from 0 to 16 [ 783.526074][T13925] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 783.602619][ T4131] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 783.842549][ T3616] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 783.860392][T13935] loop2: detected capacity change from 0 to 8192 [ 783.862167][T13920] loop1: detected capacity change from 0 to 40427 [ 783.867494][ T4131] usb 4-1: string descriptor 0 read error: -22 [ 783.880442][ T4131] usb 4-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 783.883588][T13920] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 783.890113][ T4131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.897510][T13920] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 783.917185][T13920] F2FS-fs (loop1): invalid crc value [ 783.925604][T13920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 783.938237][T13935] loop2: p2 p3 p4 [ 783.942144][T13935] loop2: p2 start 452985600 is beyond EOD, truncated [ 783.948953][T13935] loop2: p3 start 4177527808 is beyond EOD, truncated [ 783.958076][ T4131] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 783.965609][T13935] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 783.990798][T13920] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 783.998082][T13920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 784.177050][T13942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 784.182475][ T3616] usb 1-1: Using ep0 maxpacket: 32 [ 784.772543][ T3616] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.785076][ T3616] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.033917][ T27] audit: type=1804 audit(1717531816.582:280): pid=13951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4272920451/syzkaller.lo5utO/421/file0" dev="sda1" ino=1966 res=1 errno=0 [ 786.085042][ T3771] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 786.085203][ T3661] usb 4-1: USB disconnect, device number 29 [ 786.112169][ T3771] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 786.122063][ T3616] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 786.143127][ T3616] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 786.172132][ T3616] usb 1-1: Product: syz [ 786.187019][ T3616] usb 1-1: Manufacturer: syz [ 786.197608][T13957] tipc: Started in network mode [ 786.211810][ T3616] usb 1-1: SerialNumber: syz [ 786.230082][T13957] tipc: Node identity 2007ff, cluster identity 4711 [ 786.242520][T13957] tipc: Node number set to 2099199 [ 786.263191][ T3616] usb 1-1: config 0 descriptor?? [ 786.384379][T13965] loop2: detected capacity change from 0 to 16 [ 786.399861][T13965] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 786.518093][ T3616] usb 1-1: USB disconnect, device number 40 [ 786.786617][T13972] Bluetooth: MGMT ver 1.22 [ 786.927473][T13975] loop1: detected capacity change from 0 to 1024 [ 786.952934][T13975] hfsplus: failed to load root directory [ 788.215588][T13986] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 789.683663][ T4140] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 789.972439][ T4140] usb 5-1: Using ep0 maxpacket: 32 [ 790.224692][T14022] tipc: Started in network mode [ 790.224718][T14022] tipc: Node identity 2007ff, cluster identity 4711 [ 790.224735][T14022] tipc: Node number set to 2099199 [ 790.252648][ T4140] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 790.297938][T14027] loop2: detected capacity change from 0 to 16 [ 790.299311][T14027] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 790.527581][ T4140] usb 5-1: string descriptor 0 read error: -22 [ 790.527674][ T4140] usb 5-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 790.527700][ T4140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.564693][ T4140] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 790.886369][ T4140] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 791.575062][ T4140] usb 4-1: Using ep0 maxpacket: 32 [ 791.812668][ T4131] usb 5-1: USB disconnect, device number 41 [ 791.882509][ T4140] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.905151][ T4140] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 792.132874][ T4140] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 792.207144][ T4140] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 792.378538][ T4140] usb 4-1: Product: syz [ 792.470174][ T4140] usb 4-1: Manufacturer: syz [ 792.598698][ T4140] usb 4-1: SerialNumber: syz [ 792.691371][ T4140] usb 4-1: config 0 descriptor?? [ 793.014219][ T4140] usb 4-1: USB disconnect, device number 30 [ 793.944730][T14067] loop3: detected capacity change from 0 to 1024 [ 793.964687][T14071] loop4: detected capacity change from 0 to 16 [ 793.985500][T14067] hfsplus: failed to load root directory [ 794.005000][T14071] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 794.123964][T14071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.620868][T14075] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 794.975211][T14085] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 796.707656][ T3661] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 796.957579][ T3661] usb 5-1: Using ep0 maxpacket: 32 [ 797.087792][ T3661] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.087829][ T3661] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 797.264569][ T3661] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 797.281899][ T3661] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 797.291812][ T3661] usb 5-1: Product: syz [ 797.303419][ T3661] usb 5-1: Manufacturer: syz [ 797.308528][ T3661] usb 5-1: SerialNumber: syz [ 797.339025][ T3661] usb 5-1: config 0 descriptor?? [ 797.385094][T14110] loop1: detected capacity change from 0 to 16 [ 797.394594][T14110] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 797.547875][ T3621] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 797.606576][ T3661] usb 5-1: USB disconnect, device number 42 [ 797.623200][T14114] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 797.802547][ T3621] usb 1-1: Using ep0 maxpacket: 32 [ 797.916168][T14120] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 797.937879][ T3621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.961581][ T3621] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.187688][ T3621] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 798.201547][ T3621] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 798.226926][ T3621] usb 1-1: Product: syz [ 798.254866][ T3621] usb 1-1: Manufacturer: syz [ 798.259604][ T3621] usb 1-1: SerialNumber: syz [ 798.294445][ T3621] usb 1-1: config 0 descriptor?? [ 798.542388][ T27] audit: type=1326 audit(1717531829.782:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cef67cee9 code=0x0 [ 798.561765][ T3621] usb 1-1: USB disconnect, device number 41 [ 798.795261][T14142] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 800.189423][T14150] loop1: detected capacity change from 0 to 256 [ 800.357430][T14146] loop0: detected capacity change from 0 to 32768 [ 800.426190][T14152] loop1: detected capacity change from 0 to 2048 [ 800.448726][T14146] XFS (loop0): Mounting V5 Filesystem [ 800.522129][T14152] loop1: p2 p3 p7 [ 800.527564][T14146] XFS (loop0): Ending clean mount [ 800.563884][T14146] XFS (loop0): Quotacheck needed: Please wait. [ 800.612727][T14152] FAT-fs (loop1p2): bogus number of reserved sectors [ 800.620175][T14152] FAT-fs (loop1p2): Can't find a valid FAT filesystem [ 800.687388][T14146] XFS (loop0): Quotacheck: Done. [ 800.762648][ T3661] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 800.852141][T14148] loop4: detected capacity change from 0 to 40427 [ 800.887820][T14167] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 800.916210][ T9040] XFS (loop0): Unmounting Filesystem [ 800.965130][T14148] F2FS-fs (loop4): Found nat_bits in checkpoint [ 801.012429][ T3661] usb 4-1: Using ep0 maxpacket: 32 [ 801.142611][ T3661] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.221465][T14148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 801.282946][ T27] audit: type=1800 audit(1717531832.532:282): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 801.338819][T14173] loop2: detected capacity change from 0 to 1764 [ 801.350132][T11031] syz-executor.4: attempt to access beyond end of device [ 801.350132][T11031] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.378031][T14173] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 801.387629][ T3661] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 801.393539][T14173] ISOFS: unable to read i-node block [ 801.404294][ T3661] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 801.422443][ T3661] usb 4-1: Product: syz [ 801.422461][T14173] isofs_fill_super: get root inode failed [ 801.446600][ T3661] usb 4-1: Manufacturer: syz [ 801.457211][ T3661] usb 4-1: SerialNumber: syz [ 801.474574][ T3661] usb 4-1: config 0 descriptor?? [ 801.752478][ T3614] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 801.883150][ T3661] usb 4-1: USB disconnect, device number 31 [ 801.932546][ T4131] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 802.012509][ T3614] usb 3-1: Using ep0 maxpacket: 16 [ 802.049206][ T27] audit: type=1804 audit(1717531833.292:283): pid=14187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1016185976/syzkaller.bhw5fQ/82/file0" dev="sda1" ino=1965 res=1 errno=0 [ 802.152621][ T3614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.172395][ T3614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.190621][ T3614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 802.203761][ T4131] usb 1-1: Using ep0 maxpacket: 32 [ 802.226872][ T3614] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 802.236397][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.247811][ T3614] usb 3-1: config 0 descriptor?? [ 802.301650][T14190] loop3: detected capacity change from 0 to 64 [ 802.322662][ T4131] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 802.398540][T14190] minix_free_block (loop3:1): bit already cleared [ 802.408122][T14190] minix_free_block (loop3:4): bit already cleared [ 802.418418][T14190] minix_free_block (loop3:3): bit already cleared [ 802.419392][T14186] loop4: detected capacity change from 0 to 32768 [ 802.425068][T14190] minix_free_block (loop3:2): bit already cleared [ 802.442821][T14186] XFS (loop4): Mounting V5 Filesystem [ 802.492666][ T4131] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 802.501856][ T4131] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 802.514331][ T4131] usb 1-1: Product: syz [ 802.518634][ T4131] usb 1-1: Manufacturer: syz [ 802.523456][ T4131] usb 1-1: SerialNumber: syz [ 802.529745][ T4131] usb 1-1: config 0 descriptor?? [ 802.530196][T14186] XFS (loop4): Ending clean mount [ 802.593469][T11031] XFS (loop4): Unmounting Filesystem [ 802.734879][ T3614] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 802.747095][ T3614] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 802.759675][ T3614] microsoft 0003:045E:07DA.001B: no inputs found [ 802.785436][ T3614] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 802.831933][ T4129] usb 1-1: USB disconnect, device number 42 [ 802.929119][T14205] loop1: detected capacity change from 0 to 16 [ 802.956215][T14205] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 802.996537][T14206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 803.055630][ T4129] usb 3-1: USB disconnect, device number 32 [ 803.406913][T14217] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.162836][ T3661] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 804.432443][ T3661] usb 3-1: Using ep0 maxpacket: 32 [ 804.550444][T14228] loop3: detected capacity change from 0 to 512 [ 804.574726][ T3661] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.589565][T14228] EXT4-fs: Ignoring removed orlov option [ 804.596482][ T3661] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 804.628414][T14228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 804.651774][T14228] EXT4-fs (loop3): Test dummy encryption mode enabled [ 804.779068][T14228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 804.797539][T14228] System zones: 1-12 [ 804.822058][T14228] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 804.862566][ T3661] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 804.880805][ T3661] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 804.898677][T14228] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 804.912631][T14219] loop0: detected capacity change from 0 to 32768 [ 804.931650][ T3661] usb 3-1: Product: syz [ 804.947609][ T3661] usb 3-1: Manufacturer: syz [ 804.961508][T14228] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 804.986016][ T3661] usb 3-1: SerialNumber: syz [ 804.992800][T14219] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 804.992800][T14219] [ 804.993033][T14228] EXT4-fs (loop3): 1 orphan inode deleted [ 805.023193][ T3661] usb 3-1: config 0 descriptor?? [ 805.027365][T14228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 805.115152][T14233] loop1: detected capacity change from 0 to 64 [ 805.191878][T14233] minix_free_block (loop1:1): bit already cleared [ 805.211296][T14233] minix_free_block (loop1:4): bit already cleared [ 805.218126][T14233] minix_free_block (loop1:3): bit already cleared [ 805.224802][T14233] minix_free_block (loop1:2): bit already cleared [ 805.278829][ T3661] usb 3-1: USB disconnect, device number 33 [ 805.422475][ T27] audit: type=1804 audit(1717531836.652:284): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729587576/syzkaller.iUs0tM/172/file0" dev="sda1" ino=1961 res=1 errno=0 [ 805.459363][T14243] loop0: detected capacity change from 0 to 16 [ 805.470364][T10508] EXT4-fs (loop3): unmounting filesystem. [ 805.470787][T14243] erofs: (device loop0): erofs_init_device: empty device tag @ pos 0 [ 805.529434][T14243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 805.602567][ T4131] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 805.701482][T14253] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 805.863043][ T2535] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 805.962649][ T4131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.092551][ T3661] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 806.102421][ T2535] usb 4-1: Using ep0 maxpacket: 32 [ 806.132483][ T4131] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.141796][ T4131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.150252][ T4131] usb 2-1: Product: syz [ 806.154908][ T4131] usb 2-1: Manufacturer: syz [ 806.159869][ T4131] usb 2-1: SerialNumber: syz [ 806.222581][ T2535] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 806.231110][T14260] loop4: detected capacity change from 0 to 512 [ 806.258004][T14260] EXT4-fs: Ignoring removed nobh option [ 806.306105][T14260] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #16: comm syz-executor.4: corrupted xattr block 8 [ 806.327263][T14260] EXT4-fs (loop4): Remounting filesystem read-only [ 806.337949][T14260] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 806.348553][T14260] EXT4-fs (loop4): 1 orphan inode deleted [ 806.360579][T14260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 806.370971][T14260] ext4 filesystem being mounted at /root/syzkaller-testdir729587576/syzkaller.iUs0tM/173/file1 supports timestamps until 2038 (0x7fffffff) [ 806.392671][ T2535] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 806.492787][ T2535] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 806.501014][ T2535] usb 4-1: Product: syz [ 806.505412][ T2535] usb 4-1: Manufacturer: syz [ 806.510541][ T2535] usb 4-1: SerialNumber: syz [ 806.518738][ T2535] usb 4-1: config 0 descriptor?? [ 806.532527][ T3661] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.543421][ T3661] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 807.172742][ T3661] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.209249][T11031] EXT4-fs (loop4): unmounting filesystem. [ 807.216630][ T2535] usb 4-1: USB disconnect, device number 32 [ 807.378425][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 807.392633][ T3661] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.405070][ T3661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.415561][ T3661] usb 1-1: Product: syz [ 807.420564][ T3661] usb 1-1: Manufacturer: syz [ 807.423192][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.437623][T14269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 807.445314][ T3661] usb 1-1: SerialNumber: syz [ 807.463854][T14269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 807.503062][ T3661] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 807.510691][T14270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 807.520613][ T3661] cdc_ncm 1-1:1.0: bind() failure [ 807.549696][T14270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.559212][T14270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 807.592935][T14270] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 807.706470][ T2535] usb 1-1: USB disconnect, device number 43 [ 807.852806][T14276] loop3: detected capacity change from 0 to 64 [ 807.872726][ T4131] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 807.879239][ T4131] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 807.916810][ T4131] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 807.958648][T14276] minix_free_block (loop3:1): bit already cleared [ 808.001672][T14276] minix_free_block (loop3:4): bit already cleared [ 808.049677][T14276] minix_free_block (loop3:3): bit already cleared [ 808.080374][T14276] minix_free_block (loop3:2): bit already cleared [ 808.092504][ T4131] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 808.100906][ T4131] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 808.180127][ T4131] usb 2-1: USB disconnect, device number 40 [ 808.203165][ T4131] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 808.342261][T14280] loop3: detected capacity change from 0 to 512 [ 808.370533][T14280] EXT4-fs: Ignoring removed orlov option [ 808.387928][T14280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 808.408930][T14280] EXT4-fs (loop3): Test dummy encryption mode enabled [ 808.470343][T14280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 808.491956][T14280] System zones: 1-12 [ 808.531381][T14280] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 808.545481][T14280] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 808.559316][T14280] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 808.734510][T14292] loop2: detected capacity change from 0 to 128 [ 808.786078][T14292] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 808.800524][T14292] sysv_count_free_blocks: cannot read free-list block [ 808.885243][T14280] EXT4-fs (loop3): 1 orphan inode deleted [ 808.961977][T14292] sysv_count_free_inodes: unable to read inode table [ 808.969284][T14294] sysv_count_free_blocks: cannot read free-list block [ 808.979662][T14294] sysv_count_free_inodes: unable to read inode table [ 809.066872][T14280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 809.094751][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.101195][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.272465][ T3661] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 809.350026][T14297] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.661545][T10508] EXT4-fs (loop3): unmounting filesystem. [ 809.692484][ T4131] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 809.702685][ T3661] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 809.702716][ T3661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.713753][ T3661] usb 3-1: config 0 descriptor?? [ 809.793386][ T3661] rndis_wlan: probe of 3-1:0.0 failed with error -22 [ 809.795608][ T3661] rndis_host: probe of 3-1:0.0 failed with error -22 [ 809.797141][ T27] audit: type=1804 audit(1717531841.042:285): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017778520/syzkaller.wa7d7Q/209/file0" dev="sda1" ino=1964 res=1 errno=0 [ 809.934581][ T4131] usb 2-1: Using ep0 maxpacket: 32 [ 810.052693][ T4131] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.052722][ T4131] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.225495][ T4131] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 810.225530][ T4131] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 810.225552][ T4131] usb 2-1: Product: syz [ 810.225569][ T4131] usb 2-1: Manufacturer: syz [ 810.225584][ T4131] usb 2-1: SerialNumber: syz [ 810.227498][ T4131] usb 2-1: config 0 descriptor?? [ 810.464993][ T4131] usb 2-1: USB disconnect, device number 41 [ 810.892455][ T3661] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 811.056286][T14317] loop0: detected capacity change from 0 to 40427 [ 811.093645][T14317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 811.172437][ T3661] usb 4-1: Using ep0 maxpacket: 32 [ 811.190318][T14317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 811.228386][ T27] audit: type=1800 audit(1717531842.472:286): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 811.287263][ T9040] syz-executor.0: attempt to access beyond end of device [ 811.287263][ T9040] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 811.323384][ T3661] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 811.385242][ T4140] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 811.393168][ T6543] sysv_free_block: trying to free block not in datazone [ 811.403093][ T3613] usb 3-1: USB disconnect, device number 34 [ 811.422413][ T6543] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 811.534718][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.552049][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.583944][ T3661] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 811.595977][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.606482][ T3661] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 811.628869][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.640033][ T3661] usb 4-1: Product: syz [ 811.645746][ T3661] usb 4-1: Manufacturer: syz [ 811.650447][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.661134][ T3661] usb 4-1: SerialNumber: syz [ 811.669281][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.690983][ T3661] usb 4-1: config 0 descriptor?? [ 811.696777][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.704322][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.711834][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.720108][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.727737][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.738642][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.746199][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.753929][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.761987][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.772285][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.773366][ T4140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.793243][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.800794][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.810398][ T4140] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 811.820240][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.827916][ T4140] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.841531][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.849084][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.857097][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.865362][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.873515][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.881089][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.888728][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.896537][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.904971][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.912567][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.921023][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.928557][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.936332][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.943040][ T2535] usb 4-1: USB disconnect, device number 33 [ 811.943842][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.957812][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.965365][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.973137][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.980712][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 811.988487][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 812.006492][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 812.014224][ T4140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.026379][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 812.033911][ T4140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.042075][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 812.049870][ T4140] usb 2-1: Product: syz [ 812.054749][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 812.062225][ T4140] usb 2-1: Manufacturer: syz [ 812.067011][ T4140] usb 2-1: SerialNumber: syz [ 812.071983][ T7331] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 812.093665][ T7331] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 812.123208][ T4140] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 812.141723][ T4140] cdc_ncm 2-1:1.0: bind() failure [ 812.327340][ T4140] usb 2-1: USB disconnect, device number 42 [ 812.476079][T14335] loop2: detected capacity change from 0 to 256 [ 812.704712][ T27] audit: type=1326 audit(1717531843.952:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.758616][T14345] loop4: detected capacity change from 0 to 512 [ 812.779080][ T27] audit: type=1804 audit(1717531843.982:288): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir587516827/syzkaller.UFuccP/267/file0" dev="sda1" ino=1965 res=1 errno=0 [ 812.862718][T14352] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.891883][ T27] audit: type=1326 audit(1717531843.982:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.891987][T14345] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz-executor.4: iget: bogus i_mode (0) [ 812.892186][ T27] audit: type=1326 audit(1717531843.982:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.892217][ T27] audit: type=1326 audit(1717531843.982:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.892290][T14345] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 812.892569][ T27] audit: type=1326 audit(1717531843.982:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.892599][ T27] audit: type=1326 audit(1717531843.982:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.892628][ T27] audit: type=1326 audit(1717531843.982:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.892673][ T27] audit: type=1326 audit(1717531843.982:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14334 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 812.892811][T14345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 812.902050][T14345] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 812.949521][T14357] loop1: detected capacity change from 0 to 512 [ 812.980614][T11031] EXT4-fs (loop4): unmounting filesystem. [ 813.036341][T14357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 813.132484][ T4140] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 813.213693][T14357] ext4 filesystem being mounted at /root/syzkaller-testdir1016185976/syzkaller.bhw5fQ/90/bus supports timestamps until 2038 (0x7fffffff) [ 813.422863][T12709] EXT4-fs (loop1): unmounting filesystem. [ 813.532548][ T4140] usb 3-1: Using ep0 maxpacket: 32 [ 813.612929][T14365] loop4: detected capacity change from 0 to 128 [ 813.628816][T14365] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 813.635449][T14365] sysv_count_free_blocks: cannot read free-list block [ 813.743528][ T4140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.743596][ T4140] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.829953][T14365] sysv_count_free_inodes: unable to read inode table [ 813.830407][T14366] sysv_count_free_blocks: cannot read free-list block [ 813.834033][T14366] sysv_count_free_inodes: unable to read inode table [ 813.973763][ T4140] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 813.973835][ T4140] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 813.973877][ T4140] usb 3-1: Product: syz [ 813.973911][ T4140] usb 3-1: Manufacturer: syz [ 813.973946][ T4140] usb 3-1: SerialNumber: syz [ 813.980451][ T4140] usb 3-1: config 0 descriptor?? [ 814.062550][ T3661] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 814.231993][ T4140] usb 3-1: USB disconnect, device number 35 [ 814.453408][ T3661] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 814.470321][ T3661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.471979][ T3661] usb 5-1: config 0 descriptor?? [ 814.505977][ T3661] rndis_wlan: probe of 5-1:0.0 failed with error -22 [ 814.506501][ T3661] rndis_host: probe of 5-1:0.0 failed with error -22 [ 814.825843][T14382] loop2: detected capacity change from 0 to 2048 [ 814.856277][T14382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 814.898261][T14382] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 814.918126][ T3661] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 814.977815][ T6543] EXT4-fs (loop2): unmounting filesystem. [ 815.167402][T14391] loop1: detected capacity change from 0 to 256 [ 815.203235][ T3661] usb 4-1: Using ep0 maxpacket: 32 [ 815.382819][ T3661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 815.572599][ T4131] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 815.572818][ T3661] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 815.601333][ T3661] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 815.618018][T14395] loop1: detected capacity change from 0 to 512 [ 815.629581][ T3661] usb 4-1: Product: syz [ 815.634449][ T3661] usb 4-1: Manufacturer: syz [ 815.641319][T14395] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 815.651501][ T3661] usb 4-1: SerialNumber: syz [ 815.652583][T14395] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 815.658082][ T3661] usb 4-1: config 0 descriptor?? [ 815.680348][T14395] EXT4-fs (loop1): 1 truncate cleaned up [ 815.689544][T14395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 815.777936][T14395] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz-executor.1: Logical block already allocated [ 815.810670][T14395] EXT4-fs (loop1): Remounting filesystem read-only [ 815.928356][ T3661] usb 4-1: USB disconnect, device number 34 [ 815.952660][ T4131] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.964404][ T4131] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 815.975035][ T4131] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.137270][T12709] EXT4-fs (loop1): unmounting filesystem. [ 816.143484][ T4131] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.159812][ T4131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.187174][ T4131] usb 3-1: Product: syz [ 816.191545][ T4131] usb 3-1: Manufacturer: syz [ 816.196639][ T4131] usb 3-1: SerialNumber: syz [ 816.284154][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 816.284172][ T27] audit: type=1804 audit(1717531847.531:306): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1016185976/syzkaller.bhw5fQ/94/file0" dev="sda1" ino=1965 res=1 errno=0 [ 816.301950][ T4131] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 816.324584][ T4131] cdc_ncm 3-1:1.0: bind() failure [ 816.339421][T11031] sysv_free_block: trying to free block not in datazone [ 816.348915][ T4131] usb 5-1: USB disconnect, device number 43 [ 816.382358][T11031] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 816.457846][ T7331] usb 3-1: USB disconnect, device number 36 [ 816.566212][T14405] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 817.126179][ T7331] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 817.177084][ T27] audit: type=1804 audit(1717531848.427:307): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017778520/syzkaller.wa7d7Q/215/bus" dev="sda1" ino=1964 res=1 errno=0 [ 817.262029][T14426] loop2: detected capacity change from 0 to 1024 [ 817.305842][T14426] hfsplus: failed to load root directory [ 817.557694][T14437] loop4: detected capacity change from 0 to 128 [ 817.574303][T14437] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 817.589789][T14437] sysv_count_free_blocks: cannot read free-list block [ 817.770220][T14437] sysv_count_free_inodes: unable to read inode table [ 817.777721][T14438] sysv_count_free_blocks: cannot read free-list block [ 817.787973][T14438] sysv_count_free_inodes: unable to read inode table [ 817.842421][ T7331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.124380][ T3661] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 818.165354][ T7331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.180985][ T7331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.194811][ T2535] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 818.209495][ T7331] usb 1-1: Product: syz [ 818.213717][ T7331] usb 1-1: Manufacturer: syz [ 818.222546][ T7331] usb 1-1: SerialNumber: syz [ 818.354025][T14446] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 818.446993][ T2535] usb 2-1: Using ep0 maxpacket: 32 [ 818.528380][ T3661] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 818.540694][ T3661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.558664][ T3661] usb 5-1: config 0 descriptor?? [ 818.568036][ T2535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 818.609220][T14449] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 818.658090][ T3661] rndis_wlan: probe of 5-1:0.0 failed with error -22 [ 818.686443][ T3661] rndis_host: probe of 5-1:0.0 failed with error -22 [ 818.739553][ T2535] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 818.756620][ T2535] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 818.784964][ T2535] usb 2-1: Product: syz [ 818.791473][ T2535] usb 2-1: Manufacturer: syz [ 818.796289][ T2535] usb 2-1: SerialNumber: syz [ 818.816249][ T2535] usb 2-1: config 0 descriptor?? [ 819.077784][ T3661] usb 2-1: USB disconnect, device number 43 [ 819.156157][T14454] loop3: detected capacity change from 0 to 1024 [ 819.170502][T14454] hfsplus: failed to load root directory [ 819.646180][ T7331] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 819.660700][ T7331] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 819.686458][ T7331] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 819.872746][ T3616] usb 1-1: USB disconnect, device number 44 [ 819.873454][ T3616] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 819.923200][T14461] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 820.073869][ T27] audit: type=1804 audit(1717531851.294:308): pid=14468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1016185976/syzkaller.bhw5fQ/98/file0" dev="sda1" ino=1964 res=1 errno=0 [ 820.256778][ T7331] usb 5-1: USB disconnect, device number 44 [ 820.257532][T11031] sysv_free_block: trying to free block not in datazone [ 820.260420][T11031] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 820.816240][ T7331] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 821.225137][T14477] loop0: detected capacity change from 0 to 1024 [ 821.244048][T14477] hfsplus: failed to load root directory [ 821.259380][ T7331] usb 5-1: Using ep0 maxpacket: 32 [ 821.491570][ T7331] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 821.518518][T14491] loop2: detected capacity change from 0 to 1024 [ 821.527546][T14491] hfsplus: failed to load root directory [ 821.797008][ T7331] usb 5-1: string descriptor 0 read error: -22 [ 821.875494][ T3613] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 822.066608][ T7331] usb 5-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 822.178041][T14487] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 822.233173][ T7331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.300527][ T7331] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 822.439852][ T3613] usb 1-1: Using ep0 maxpacket: 32 [ 822.785191][T14509] loop3: detected capacity change from 0 to 128 [ 822.796355][T14509] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 822.809736][T14509] sysv_count_free_blocks: cannot read free-list block [ 822.850637][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 822.902314][T14509] sysv_count_free_inodes: unable to read inode table [ 822.909588][T14510] sysv_count_free_blocks: cannot read free-list block [ 822.912812][T14510] sysv_count_free_inodes: unable to read inode table [ 823.134197][ T3613] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 823.195713][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 823.325179][ T3613] usb 1-1: Product: syz [ 823.403557][ T3613] usb 1-1: Manufacturer: syz [ 823.448859][ T3613] usb 1-1: SerialNumber: syz [ 823.456359][ T4131] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 823.472117][ T3613] usb 1-1: config 0 descriptor?? [ 823.550544][ T3661] usb 5-1: USB disconnect, device number 45 [ 823.678662][ T27] audit: type=1804 audit(1717531854.836:309): pid=14518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729587576/syzkaller.iUs0tM/186/file0" dev="sda1" ino=1965 res=1 errno=0 [ 823.753721][ T3613] usb 1-1: USB disconnect, device number 45 [ 823.960363][ T4131] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 823.975768][ T4131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.996777][ T4131] usb 4-1: config 0 descriptor?? [ 824.055140][ T4131] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 824.072854][ T4131] rndis_host: probe of 4-1:0.0 failed with error -22 [ 824.236479][T14524] loop2: detected capacity change from 0 to 1024 [ 824.255046][T14524] hfsplus: failed to load root directory [ 824.892119][T14526] loop0: detected capacity change from 0 to 512 [ 824.900969][T14526] EXT4-fs (loop0): filesystem is read-only [ 824.911565][T14526] EXT4-fs (loop0): filesystem is read-only [ 824.919103][T14526] EXT4-fs (loop0): orphan cleanup on readonly fs [ 824.926190][T14526] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 824.936936][T14531] device hsr_slave_0 left promiscuous mode [ 824.943096][T14526] ext4_test_bit(bit=15, block=3) = 0 [ 824.948738][T14526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 824.972661][ T9040] EXT4-fs (loop0): unmounting filesystem. [ 824.991644][T14531] device hsr_slave_1 left promiscuous mode [ 825.065171][T14537] loop0: detected capacity change from 0 to 512 [ 825.088737][T14537] EXT4-fs (loop0): Unsupported encryption level 9 [ 825.184877][T14540] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 825.373821][ T3621] usb 4-1: USB disconnect, device number 35 [ 825.390694][T10508] sysv_free_block: trying to free block not in datazone [ 825.391743][T10508] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 826.529262][ T4129] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 826.770977][ T4129] usb 2-1: Using ep0 maxpacket: 32 [ 826.973069][ T4129] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 827.168961][ T27] audit: type=1804 audit(1717531858.330:310): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017778520/syzkaller.wa7d7Q/224/bus" dev="sda1" ino=1967 res=1 errno=0 [ 827.173447][T14545] loop4: detected capacity change from 0 to 32768 [ 827.264618][ T4129] usb 2-1: string descriptor 0 read error: -22 [ 827.264673][ T4129] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 827.264688][ T4129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.306819][ T4129] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 828.074402][T14567] loop0: detected capacity change from 0 to 512 [ 828.084479][T14567] EXT4-fs (loop0): filesystem is read-only [ 828.191673][ T27] audit: type=1804 audit(1717531859.293:311): pid=14575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2017778520/syzkaller.wa7d7Q/225/file0" dev="sda1" ino=1965 res=1 errno=0 [ 828.260939][T14567] EXT4-fs (loop0): filesystem is read-only [ 828.267444][T14567] EXT4-fs (loop0): orphan cleanup on readonly fs [ 828.274539][T14567] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 828.286255][T14567] ext4_test_bit(bit=15, block=3) = 0 [ 828.295633][T14567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 828.485173][ T9040] EXT4-fs (loop0): unmounting filesystem. [ 829.168417][ T3614] usb 2-1: USB disconnect, device number 44 [ 830.203495][T14603] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.092373][T14615] loop4: detected capacity change from 0 to 256 [ 831.172674][T14618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.188589][T14618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.190164][T14618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.229626][T14618] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 831.261073][T14619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.305906][T14619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.306102][T14619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.308634][T14619] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 832.017546][ T27] audit: type=1326 audit(1717531862.521:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017597][ T27] audit: type=1326 audit(1717531862.550:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017633][ T27] audit: type=1326 audit(1717531862.560:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017663][ T27] audit: type=1326 audit(1717531862.560:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017692][ T27] audit: type=1326 audit(1717531862.580:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017721][ T27] audit: type=1326 audit(1717531862.590:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017751][ T27] audit: type=1326 audit(1717531862.600:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017779][ T27] audit: type=1326 audit(1717531862.600:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017809][ T27] audit: type=1326 audit(1717531862.600:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.017839][ T27] audit: type=1326 audit(1717531862.610:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14621 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb597e7cee9 code=0x7ffc0000 [ 832.168044][T14630] loop4: detected capacity change from 0 to 256 [ 832.376990][T14627] loop0: detected capacity change from 0 to 512 [ 832.402080][T14627] EXT4-fs (loop0): filesystem is read-only [ 832.426342][T14627] EXT4-fs (loop0): filesystem is read-only [ 832.437440][T14627] EXT4-fs (loop0): orphan cleanup on readonly fs [ 832.448162][T14627] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 833.257734][T14627] ext4_test_bit(bit=15, block=3) = 0 [ 833.278440][T14627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 833.533498][ T9040] EXT4-fs (loop0): unmounting filesystem. [ 833.597985][ T2535] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 833.869730][ T2535] usb 4-1: Using ep0 maxpacket: 32 [ 834.071903][ T2535] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 834.373107][ T2535] usb 4-1: string descriptor 0 read error: -22 [ 834.382663][ T2535] usb 4-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 834.440364][ T2535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.556468][ T2535] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 835.164232][T14661] loop2: detected capacity change from 0 to 256 [ 835.764640][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 835.773624][ T3613] usb 4-1: USB disconnect, device number 36 [ 835.847385][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 835.862993][T14667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.895880][T14667] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 836.913540][T14684] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 837.260089][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 837.260117][ T27] audit: type=1804 audit(1717531868.353:329): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir587516827/syzkaller.UFuccP/288/file0" dev="sda1" ino=1964 res=1 errno=0 [ 837.517226][T14695] loop3: detected capacity change from 0 to 256 [ 839.520987][T14706] loop2: detected capacity change from 0 to 2048 [ 839.617838][T14714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 839.666082][T14714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 839.688331][T14706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 839.705250][T14714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 839.752087][ T3621] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 840.115680][T14725] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 840.390287][ T3621] usb 2-1: Using ep0 maxpacket: 32 [ 840.631968][ T3621] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 840.684404][T14733] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 840.752638][ T3614] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 840.816421][T14726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 840.974955][ T3621] usb 2-1: string descriptor 0 read error: -22 [ 840.985177][ T3621] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 841.088374][ T3621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.296043][ T3621] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 841.803453][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 841.836975][T14743] device vlan3 entered promiscuous mode [ 841.857260][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.869531][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.879947][ T3614] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 841.892713][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.914703][ T3614] usb 4-1: config 0 descriptor?? [ 841.920878][ T6543] EXT4-fs (loop2): unmounting filesystem. [ 841.971589][ T27] audit: type=1326 audit(1717531873.044:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14742 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cef67cee9 code=0x0 [ 842.518684][ T3614] hid (null): bogus close delimiter [ 842.684057][ T3621] usb 2-1: USB disconnect, device number 45 [ 842.865124][ T3614] usb 4-1: string descriptor 0 read error: -71 [ 842.868357][T14751] loop4: detected capacity change from 0 to 1024 [ 842.884119][T14751] hfsplus: failed to load root directory [ 842.885016][ T3614] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 842.899854][ T3614] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 843.627837][ T3614] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 844.043767][ T3614] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 844.051303][ T3614] uclogic: probe of 0003:256C:006D.001D failed with error -71 [ 844.065932][ T3614] usb 4-1: USB disconnect, device number 37 [ 844.184768][T14755] loop1: detected capacity change from 0 to 2048 [ 844.234578][T14769] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 844.237189][T14767] loop0: detected capacity change from 0 to 1024 [ 844.887847][T14784] loop1: detected capacity change from 0 to 256 [ 845.254552][T14779] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 845.552957][T14797] loop1: detected capacity change from 0 to 1024 [ 845.625700][T14797] hfsplus: failed to load root directory [ 846.296029][T14805] loop1: detected capacity change from 0 to 1024 [ 846.343936][T14805] hfsplus: failed to load root directory [ 847.202866][T14806] loop2: detected capacity change from 0 to 2048 [ 848.153299][T14820] loop1: detected capacity change from 0 to 256 [ 848.312601][ T27] audit: type=1326 audit(1717531879.349:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63687cee9 code=0x7ffc0000 [ 848.351763][ T27] audit: type=1326 audit(1717531879.379:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd63687cee9 code=0x7ffc0000 [ 848.451564][ T27] audit: type=1326 audit(1717531879.379:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63687cee9 code=0x7ffc0000 [ 849.193623][T14839] loop1: detected capacity change from 0 to 128 [ 849.207289][T14839] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 849.221784][T14839] sysv_count_free_blocks: cannot read free-list block [ 849.315112][T14839] sysv_count_free_inodes: unable to read inode table [ 849.322477][T14840] sysv_count_free_blocks: cannot read free-list block [ 849.332720][T14840] sysv_count_free_inodes: unable to read inode table [ 850.038780][ T2535] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 850.099273][T14847] loop4: detected capacity change from 0 to 16 [ 850.193741][T14847] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 850.278590][T14847] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 850.390078][T14850] loop2: detected capacity change from 0 to 1024 [ 850.415499][T14850] hfsplus: failed to load root directory [ 850.450500][ T2535] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 850.465619][ T2535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.483143][ T2535] usb 2-1: config 0 descriptor?? [ 850.572667][ T2535] rndis_wlan: probe of 2-1:0.0 failed with error -22 [ 850.610175][ T2535] rndis_host: probe of 2-1:0.0 failed with error -22 [ 850.958611][ T2535] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 851.318695][T14855] loop3: detected capacity change from 0 to 32768 [ 851.332710][ T2535] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.352776][ T2535] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 851.396834][ T2535] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.423138][ T2535] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.591988][ T2535] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.601060][ T2535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.641164][ T2535] usb 3-1: Product: syz [ 851.650751][ T2535] usb 3-1: Manufacturer: syz [ 851.679390][ T2535] usb 3-1: SerialNumber: syz [ 851.747091][ T27] audit: type=1326 audit(1717531882.761:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14866 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d2747cee9 code=0x0 [ 851.770666][ T2535] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 851.786694][ T2535] cdc_ncm 3-1:1.0: bind() failure [ 851.882448][T12709] sysv_free_block: trying to free block not in datazone [ 851.897901][T12709] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 851.916798][ T2535] usb 2-1: USB disconnect, device number 46 [ 851.975507][ T3614] usb 3-1: USB disconnect, device number 37 [ 852.252066][T14876] loop4: detected capacity change from 0 to 64 [ 852.517149][T14880] loop1: detected capacity change from 0 to 2048 [ 852.691105][T14885] loop2: detected capacity change from 0 to 512 [ 852.762014][T14885] EXT4-fs: Ignoring removed orlov option [ 852.780412][T14885] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 852.818951][T14885] EXT4-fs (loop2): Test dummy encryption mode enabled [ 852.853783][T14885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 852.883120][T14880] loop1: p2 p3 p7 [ 852.884513][T14885] System zones: 1-12 [ 852.942595][T14885] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 852.958013][T14885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 853.130153][T14885] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 853.201553][T14885] EXT4-fs (loop2): 1 orphan inode deleted [ 853.232043][T14885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 853.739820][ T6543] EXT4-fs (loop2): unmounting filesystem. [ 854.785043][ T3578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 854.785984][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.849856][ T3578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 854.927074][ T3578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 854.943123][ T3578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.955016][ T3578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 854.963532][ T3578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 855.555648][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.705720][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.806928][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.005408][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 856.117921][T14922] loop3: detected capacity change from 0 to 64 [ 856.275377][T14904] chnl_net:caif_netlink_parms(): no params data found [ 856.352484][ T56] tipc: Left network mode [ 856.521935][T14904] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.524536][T14904] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.525782][T14904] device bridge_slave_0 entered promiscuous mode [ 856.541621][T14904] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.542587][T14904] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.545638][T14904] device bridge_slave_1 entered promiscuous mode [ 856.566140][ T3616] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 856.716928][T14904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.749133][T14904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.928286][T14904] team0: Port device team_slave_0 added [ 856.929740][ T3616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.992532][ T56] batman_adv: batadv0: Removing interface: vlan2 [ 857.042688][T14904] team0: Port device team_slave_1 added [ 857.068856][ T3616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 857.085368][ T3616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.096606][ T3578] Bluetooth: hci3: command tx timeout [ 857.117638][ T3616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.128189][T14904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.174155][T14904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.285245][T14904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.299809][ T3616] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.324257][T14933] loop0: detected capacity change from 0 to 1764 [ 857.327018][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.339456][T14904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.358541][ T3616] usb 4-1: Product: syz [ 857.363916][T14904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.367412][ T3616] usb 4-1: Manufacturer: syz [ 857.398275][T14933] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 857.408462][ T3616] usb 4-1: SerialNumber: syz [ 857.459667][T14933] ISOFS: unable to read i-node block [ 857.461229][ T3616] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 857.472134][ T3616] cdc_ncm 4-1:1.0: bind() failure [ 857.479490][T14933] isofs_fill_super: get root inode failed [ 857.511528][T14904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.666769][T14904] device hsr_slave_0 entered promiscuous mode [ 857.670834][ T3616] usb 4-1: USB disconnect, device number 38 [ 857.692264][T14904] device hsr_slave_1 entered promiscuous mode [ 857.699795][T14935] loop4: detected capacity change from 0 to 512 [ 857.707585][T14935] EXT4-fs: Ignoring removed orlov option [ 857.714260][T14935] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 857.726220][T14935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 857.760663][T14935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 857.768906][T14935] System zones: 1-12 [ 857.776458][T14935] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 857.796454][T14935] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 857.812994][ T56] device hsr_slave_0 left promiscuous mode [ 857.819598][ T56] device hsr_slave_1 left promiscuous mode [ 857.826253][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.827434][T14935] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 857.842150][ T4129] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 857.859705][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.878198][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.886870][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.899886][T14935] EXT4-fs (loop4): 1 orphan inode deleted [ 857.906910][T14935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 857.924051][ T56] device bridge_slave_1 left promiscuous mode [ 857.930413][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.958446][ T56] device bridge_slave_0 left promiscuous mode [ 857.972747][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.013651][ T56] device veth1_macvtap left promiscuous mode [ 858.034031][ T56] device veth0_macvtap left promiscuous mode [ 858.047198][ T56] device veth1_vlan left promiscuous mode [ 858.068658][ T56] device veth0_vlan left promiscuous mode [ 858.224132][ T4129] usb 1-1: Using ep0 maxpacket: 16 [ 858.356870][ T4129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.376429][ T4129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.391724][ T4129] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 858.415170][ T4129] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 858.424255][ T4129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.448113][ T56] team0 (unregistering): Port device team_slave_1 removed [ 858.466291][ T4129] usb 1-1: config 0 descriptor?? [ 858.483709][ T56] team0 (unregistering): Port device team_slave_0 removed [ 858.503271][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.988817][T11031] EXT4-fs (loop4): unmounting filesystem. [ 859.017831][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.142603][ T4129] microsoft 0003:045E:07DA.001E: No inputs registered, leaving [ 859.178529][ T3578] Bluetooth: hci3: command tx timeout [ 859.271630][ T4129] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 859.359636][ T4129] microsoft 0003:045E:07DA.001E: no inputs found [ 859.395485][ T4129] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 859.471587][T14950] loop4: detected capacity change from 0 to 1024 [ 859.489853][ T4129] usb 1-1: USB disconnect, device number 46 [ 859.552564][T14950] hfsplus: failed to load root directory [ 859.605445][ T56] bond0 (unregistering): Released all slaves [ 859.792152][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.799596][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.846548][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.868007][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.886981][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.908412][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.929067][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.951753][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.959227][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.987285][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 859.997831][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.010844][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.026652][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.035617][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.048654][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.057568][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.071389][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.080128][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.094698][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.102221][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.116609][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.126335][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.138138][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.151521][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.165788][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.176840][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.188247][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.208784][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.225763][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.238219][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.245871][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.253847][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.261384][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.269103][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.276761][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.291912][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.299603][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.308253][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.315959][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.323913][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.331539][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.339124][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.352891][ T4129] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 860.383308][ T4129] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 860.617929][T14965] loop4: detected capacity change from 0 to 1024 [ 860.634407][T14965] hfsplus: failed to load root directory [ 861.267804][ T3578] Bluetooth: hci3: command tx timeout [ 861.526179][T14904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 861.530329][T14977] loop4: detected capacity change from 0 to 512 [ 861.531312][T14977] EXT4-fs: Ignoring removed orlov option [ 861.535591][T14904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 861.535948][T14977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 861.536162][T14977] EXT4-fs (loop4): Test dummy encryption mode enabled [ 861.563821][T14904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 862.387705][T14904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 862.388673][T14977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 862.388725][T14977] System zones: 1-12 [ 862.409658][T14977] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 862.409882][T14977] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 862.410019][T14977] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 862.410164][T14977] EXT4-fs (loop4): 1 orphan inode deleted [ 862.410182][T14977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 862.603144][T14904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.712475][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 862.720957][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 862.732004][T14904] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.753028][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 862.764370][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 862.773820][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.773860][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.781900][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 862.782247][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 862.782642][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 862.782910][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.782945][ T4129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.783178][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 862.783679][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 862.787049][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 862.788699][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.789431][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.792462][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 862.793058][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.795682][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 862.796056][ T4129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 862.798446][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 862.798758][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 862.800791][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 863.173326][T14996] loop1: detected capacity change from 0 to 1764 [ 863.202388][T14996] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 863.202573][T14996] ISOFS: unable to read i-node block [ 863.202618][T14996] isofs_fill_super: get root inode failed [ 863.207094][T11031] EXT4-fs (loop4): unmounting filesystem. [ 863.292662][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 863.292792][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 863.316373][T14904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.322618][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.378021][ T3584] Bluetooth: hci3: command tx timeout [ 863.515258][T14904] device veth0_vlan entered promiscuous mode [ 863.545938][T14904] device veth1_vlan entered promiscuous mode [ 863.547759][ T3613] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 863.642856][T14904] device veth0_macvtap entered promiscuous mode [ 863.664379][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664410][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664431][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664451][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664471][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664490][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664509][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664529][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664549][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664569][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664590][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664609][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664628][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664649][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664668][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664688][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664708][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664727][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664745][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664766][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664787][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664807][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664827][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664847][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664865][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664882][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664900][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664916][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664933][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664952][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664971][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.664990][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665008][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665029][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665049][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665069][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665090][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665109][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665130][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665149][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665170][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.665190][ T3614] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 863.669064][T14904] device veth1_macvtap entered promiscuous mode [ 863.676796][ T3614] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 863.686520][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 863.687118][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 863.687699][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 863.688351][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 863.690168][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 863.690655][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 863.691086][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 863.696360][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 863.696924][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 863.702294][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.702308][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.702315][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.702322][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.702329][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.702336][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.702342][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.702349][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.703047][T14904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.704227][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.704238][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.704245][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.704252][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.704258][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.704265][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.704271][T14904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.704278][T14904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.704864][T14904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.706267][T14904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.706289][T14904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.706304][T14904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.706319][T14904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.730720][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 863.731314][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 863.731767][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 863.732249][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 863.732707][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.733203][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 863.733706][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 863.762881][T15009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.808941][ T3613] usb 2-1: Using ep0 maxpacket: 16 [ 863.949586][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.949610][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.949623][ T3613] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 863.949652][ T3613] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 863.949666][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.950852][ T3613] usb 2-1: config 0 descriptor?? [ 864.081306][ T3885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.081385][ T3885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.089402][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 864.238008][ T3885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.238054][ T3885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.246825][ T4133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 864.445026][ T3613] microsoft 0003:045E:07DA.0021: No inputs registered, leaving [ 864.445637][ T3613] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 864.445656][ T3613] microsoft 0003:045E:07DA.0021: no inputs found [ 864.445665][ T3613] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 864.732196][T14996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 864.755182][ T3613] usb 2-1: USB disconnect, device number 47 [ 866.648130][T15013] loop2: detected capacity change from 0 to 32768 [ 866.708366][T15035] loop1: detected capacity change from 0 to 512 [ 866.709374][T15035] EXT4-fs: Ignoring removed orlov option [ 866.721045][T15035] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 867.501525][T15044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 867.516563][T15044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 867.544889][T15044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 867.659512][T15051] loop0: detected capacity change from 0 to 256 [ 867.688925][ T27] audit: type=1326 audit(1717531898.639:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1b67cee9 code=0x7ffc0000 [ 867.754376][ T27] audit: type=1326 audit(1717531898.639:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9d1b67cee9 code=0x7ffc0000 [ 867.789502][T15035] EXT4-fs (loop1): Test dummy encryption mode enabled [ 867.938900][ T27] audit: type=1326 audit(1717531898.639:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15050 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d1b67cee9 code=0x7ffc0000 [ 867.946361][T15035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 867.990480][T15035] System zones: 1-12 [ 868.008149][T15061] loop2: detected capacity change from 0 to 1764 [ 868.013649][T15035] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 868.724119][T15035] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 868.743749][T15061] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 868.783657][T15061] ISOFS: unable to read i-node block [ 868.792002][T15035] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 868.809363][T15061] isofs_fill_super: get root inode failed [ 868.834205][T15035] EXT4-fs (loop1): 1 orphan inode deleted [ 868.850433][T15035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 869.321989][ T4140] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 869.459161][T15084] loop0: detected capacity change from 0 to 128 [ 869.477711][T15084] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 869.491931][T15084] sysv_count_free_blocks: cannot read free-list block [ 869.577622][T12709] EXT4-fs (loop1): unmounting filesystem. [ 869.633368][ T4140] usb 3-1: Using ep0 maxpacket: 16 [ 869.656246][T15084] sysv_count_free_inodes: unable to read inode table [ 869.663524][T15086] sysv_count_free_blocks: cannot read free-list block [ 869.673626][T15086] sysv_count_free_inodes: unable to read inode table [ 869.783569][ T4140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.873369][ T4140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.944031][ T4140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 869.961410][ T4140] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 869.977255][ T4140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.997090][ T4140] usb 3-1: config 0 descriptor?? [ 870.122013][ T27] audit: type=1804 audit(1717531901.049:338): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1016185976/syzkaller.bhw5fQ/131/file0" dev="sda1" ino=1964 res=1 errno=0 [ 870.164800][ T3613] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 870.216530][T15093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 870.233720][T15093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.242243][T15093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.262422][T15093] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 870.388417][T15096] loop3: detected capacity change from 0 to 256 [ 870.460729][ T27] audit: type=1326 audit(1717531901.398:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2747cee9 code=0x7ffc0000 [ 870.486666][ T27] audit: type=1326 audit(1717531901.428:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2747cee9 code=0x7ffc0000 [ 870.519501][ T4140] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 870.525707][ T27] audit: type=1326 audit(1717531901.428:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0d2747cee9 code=0x7ffc0000 [ 870.540892][ T4140] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 870.555601][ T27] audit: type=1326 audit(1717531901.428:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2747cee9 code=0x7ffc0000 [ 870.572568][ T4140] microsoft 0003:045E:07DA.0022: no inputs found [ 870.591518][ T4140] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 870.598397][ T27] audit: type=1326 audit(1717531901.428:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2747cee9 code=0x7ffc0000 [ 870.601243][ T3613] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 870.636174][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.645451][ T3613] usb 1-1: config 0 descriptor?? [ 870.701390][ T3613] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 870.715498][ T3613] rndis_host: probe of 1-1:0.0 failed with error -22 [ 870.847945][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.855158][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.965230][T15110] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 870.973994][ T3613] usb 3-1: USB disconnect, device number 38 [ 871.590093][T15119] loop1: detected capacity change from 0 to 32768 [ 871.598068][T15119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (15119) [ 871.621482][T15119] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 871.632497][T15119] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 871.641362][T15119] BTRFS info (device loop1): using free space tree [ 871.667458][T15119] BTRFS info (device loop1): enabling ssd optimizations [ 872.178776][ T2535] usb 1-1: USB disconnect, device number 47 [ 872.203379][ T9040] sysv_free_block: trying to free block not in datazone [ 872.242594][ T9040] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 872.363771][T15146] loop0: detected capacity change from 0 to 512 [ 872.404096][T15146] EXT4-fs (loop0): filesystem is read-only [ 872.451079][T15146] EXT4-fs (loop0): filesystem is read-only [ 872.466364][T15146] EXT4-fs (loop0): orphan cleanup on readonly fs [ 872.497041][T15146] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 872.524482][T15146] ext4_test_bit(bit=15, block=3) = 0 [ 872.535593][T15146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 872.634925][ T9040] EXT4-fs (loop0): unmounting filesystem. [ 872.731629][T15153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 873.021044][T15158] loop0: detected capacity change from 0 to 1024 [ 873.043703][T15158] hfsplus: failed to load root directory [ 873.091928][T15160] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 873.735041][T12709] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 873.882022][T15175] loop3: detected capacity change from 0 to 1764 [ 873.903483][T15175] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 873.926111][T15175] ISOFS: unable to read i-node block [ 873.941126][T15175] isofs_fill_super: get root inode failed [ 874.238683][T15182] loop0: detected capacity change from 0 to 512 [ 874.270027][T15182] EXT4-fs (loop0): filesystem is read-only [ 874.280425][ T4131] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 874.301289][T15182] EXT4-fs (loop0): filesystem is read-only [ 874.308921][T15182] EXT4-fs (loop0): orphan cleanup on readonly fs [ 874.327054][T15182] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 16 [ 874.371238][T15182] ext4_test_bit(bit=15, block=3) = 0 [ 874.376753][T15182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 874.405852][ T9040] EXT4-fs (loop0): unmounting filesystem. [ 874.521356][ T4131] usb 4-1: Using ep0 maxpacket: 16 [ 874.641876][ T4131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.665566][ T4131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.691077][ T4131] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 874.760199][ T4131] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 874.808212][ T4131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.841921][T15180] loop4: detected capacity change from 0 to 32768 [ 874.867762][ T4131] usb 4-1: config 0 descriptor?? [ 875.387176][T15210] loop0: detected capacity change from 0 to 32768 [ 875.404701][T15210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (15210) [ 875.419906][T15210] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 875.430361][T15210] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 875.439999][T15210] BTRFS info (device loop0): using free space tree [ 875.487574][T15222] loop4: detected capacity change from 0 to 64 [ 875.534584][ T4131] microsoft 0003:045E:07DA.0023: No inputs registered, leaving [ 875.589200][ T4131] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 875.600649][T15210] BTRFS info (device loop0): enabling ssd optimizations [ 875.615475][ T4131] microsoft 0003:045E:07DA.0023: no inputs found [ 875.621942][ T4131] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 875.789042][T15235] loop1: detected capacity change from 0 to 512 [ 875.797968][T15235] EXT4-fs (loop1): filesystem is read-only [ 875.823570][T15235] EXT4-fs (loop1): filesystem is read-only [ 875.832603][T15172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 875.862830][T15235] EXT4-fs (loop1): orphan cleanup on readonly fs [ 875.870707][ T4138] usb 4-1: USB disconnect, device number 39 [ 875.884786][T15235] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 16 [ 875.950681][T15235] ext4_test_bit(bit=15, block=3) = 0 [ 875.981623][T15235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 876.080854][T12709] EXT4-fs (loop1): unmounting filesystem. [ 876.875926][T15272] loop2: detected capacity change from 0 to 512 [ 876.900603][T15272] EXT4-fs: Ignoring removed orlov option [ 876.922730][T15272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 876.967998][T15272] EXT4-fs (loop2): Test dummy encryption mode enabled [ 877.006002][T15272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 877.020386][T15272] System zones: 1-12 [ 877.035669][T15272] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 877.115564][T15272] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 877.144721][T15279] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 877.144792][T15258] loop3: detected capacity change from 0 to 32768 [ 877.160461][T15272] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 877.175140][T15272] EXT4-fs (loop2): 1 orphan inode deleted [ 877.181639][T15272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 877.193107][ T9040] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 877.786425][T14904] EXT4-fs (loop2): unmounting filesystem. [ 877.911975][T15287] loop2: detected capacity change from 0 to 1764 [ 878.056267][T15287] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 878.099722][T15287] ISOFS: unable to read i-node block [ 878.109774][T15287] isofs_fill_super: get root inode failed [ 878.455781][ T4133] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 878.676198][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.689379][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.707666][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.716324][ T4133] usb 3-1: Using ep0 maxpacket: 16 [ 878.731296][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.753373][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.771388][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.787258][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.808559][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.823926][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.836868][ T4133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.850554][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.861706][ T4133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.875094][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.887805][ T4133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 878.903236][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.917695][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.928738][ T4133] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 878.942599][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.954794][ T4133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.965382][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 878.985340][ T4133] usb 3-1: config 0 descriptor?? [ 878.991697][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.011954][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.034277][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.062782][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.077313][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.102227][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.123358][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.144714][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.159965][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.167578][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.175324][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.190463][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.201392][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.211317][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.222262][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.241637][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.262736][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.283672][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.295332][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.306673][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.326445][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.334170][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.348863][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.356709][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.364658][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.372442][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.393953][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.403625][ T3614] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 879.438213][ T3614] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 879.491766][ T4133] microsoft 0003:045E:07DA.0025: No inputs registered, leaving [ 879.508519][ T4133] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 879.537296][ T4133] microsoft 0003:045E:07DA.0025: no inputs found [ 879.561047][T15331] loop4: detected capacity change from 0 to 256 [ 879.574267][ T4133] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway [ 879.640007][ T27] audit: type=1326 audit(1717531910.544:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cef67cee9 code=0x7ffc0000 [ 879.687009][ T27] audit: type=1326 audit(1717531910.544:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9cef67cee9 code=0x7ffc0000 [ 879.715145][ T27] audit: type=1326 audit(1717531910.544:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cef67cee9 code=0x7ffc0000 [ 879.817609][ T4133] usb 3-1: USB disconnect, device number 39 [ 881.000144][T15367] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 881.104645][ T4140] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 881.536087][ T4140] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 881.565197][ T4140] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 881.609341][ T4140] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.662186][ T4140] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 881.691651][ T4140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.802245][ T4140] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 881.999052][ T4140] usb 2-1: USB disconnect, device number 48 [ 911.759232][ T3584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 911.771362][ T3584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 911.785325][ T3584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 911.796517][ T3584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 911.808053][ T3584] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 911.815489][ T3584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 911.889673][ T3585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 911.904904][ T3585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 911.914715][ T3585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 911.928311][ T3585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 911.937876][ T3585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 911.945273][ T3585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 912.996770][ T3584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 913.007635][ T3584] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 913.025850][ T3584] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 913.034654][ T3584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 913.042932][ T3584] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 913.050242][ T3584] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 913.060402][ T3584] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 913.067796][T15412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 913.077272][ T3584] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 913.086206][ T3584] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 913.094451][T15412] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 913.103821][ T3578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 913.914597][ T3585] Bluetooth: hci4: command tx timeout [ 913.994766][ T3585] Bluetooth: hci6: command tx timeout [ 914.066603][T15412] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 914.079181][T15412] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 914.088617][T15412] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 914.098347][T15412] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 914.105976][T15412] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 914.113420][T15412] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 915.205878][ T3585] Bluetooth: hci8: command tx timeout [ 915.213601][ T3578] Bluetooth: hci7: command tx timeout [ 915.999150][ T3578] Bluetooth: hci4: command tx timeout [ 916.081075][ T3578] Bluetooth: hci6: command tx timeout [ 916.160220][ T3578] Bluetooth: hci9: command tx timeout [ 917.291119][ T3578] Bluetooth: hci8: command tx timeout [ 917.296772][ T3578] Bluetooth: hci7: command tx timeout [ 918.083495][ T3578] Bluetooth: hci4: command tx timeout [ 918.163649][ T3578] Bluetooth: hci6: command tx timeout [ 918.243874][ T3578] Bluetooth: hci9: command tx timeout [ 919.376527][ T3578] Bluetooth: hci7: command tx timeout [ 919.382360][ T3578] Bluetooth: hci8: command tx timeout [ 920.168008][ T3578] Bluetooth: hci4: command tx timeout [ 920.252965][ T3585] Bluetooth: hci6: command tx timeout [ 920.328201][ T3578] Bluetooth: hci9: command tx timeout [ 921.451248][ T3578] Bluetooth: hci7: command tx timeout [ 921.451255][ T3585] Bluetooth: hci8: command tx timeout [ 922.412393][ T3578] Bluetooth: hci9: command tx timeout [ 932.433498][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.439812][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.927410][ T3585] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 976.939727][ T3585] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 976.948293][ T3585] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 976.959530][ T3585] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 976.968135][ T3585] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 976.975562][ T3585] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 977.043665][ T3578] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 977.054500][ T3578] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 977.065628][ T3578] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 977.081100][ T3578] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 977.088775][ T3578] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 977.096207][ T3578] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 978.005618][ T3585] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 978.022468][ T3585] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 978.032042][ T3585] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 978.041712][ T3585] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 978.049862][ T3585] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 978.057251][ T3585] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 978.194674][T15412] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 978.213018][T15412] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 978.221376][T15412] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 978.230127][T15412] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 978.237870][T15412] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 978.246216][T15412] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 979.057046][ T3585] Bluetooth: hci10: command tx timeout [ 979.142615][ T3585] Bluetooth: hci11: command tx timeout [ 979.251161][T15412] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 979.263726][T15412] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 979.274334][T15412] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 979.283859][T15412] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 979.291548][T15412] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 979.300388][T15412] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 980.098268][T15412] Bluetooth: hci12: command tx timeout [ 980.338503][T15412] Bluetooth: hci13: command tx timeout [ 980.668809][T15412] Bluetooth: hci3: command 0x0406 tx timeout [ 981.139381][T15412] Bluetooth: hci10: command tx timeout [ 981.219420][T15412] Bluetooth: hci11: command tx timeout [ 981.379744][T15412] Bluetooth: hci14: command tx timeout [ 982.180603][T15412] Bluetooth: hci12: command tx timeout [ 982.421863][T15412] Bluetooth: hci13: command tx timeout [ 983.221648][T15412] Bluetooth: hci10: command tx timeout [ 983.301688][T15412] Bluetooth: hci11: command tx timeout [ 983.461838][T15412] Bluetooth: hci14: command tx timeout [ 984.262708][T15412] Bluetooth: hci12: command tx timeout [ 984.503020][T15412] Bluetooth: hci13: command tx timeout [ 985.313837][T15412] Bluetooth: hci10: command tx timeout [ 985.383883][T15412] Bluetooth: hci11: command tx timeout [ 985.544054][ T3578] Bluetooth: hci14: command tx timeout [ 986.344883][ T3578] Bluetooth: hci12: command tx timeout [ 986.585206][T15412] Bluetooth: hci13: command tx timeout [ 987.626214][ T3578] Bluetooth: hci14: command tx timeout [ 993.961165][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.967541][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1037.029781][ T3584] Bluetooth: hci4: command 0x0406 tx timeout [ 1037.035835][ T3584] Bluetooth: hci8: command 0x0406 tx timeout [ 1037.037582][T15414] Bluetooth: hci6: command 0x0406 tx timeout [ 1037.041896][ T3585] Bluetooth: hci7: command 0x0406 tx timeout [ 1037.048381][T15434] Bluetooth: hci9: command 0x0406 tx timeout [ 1038.150471][ T28] INFO: task syz-executor.4:15381 blocked for more than 143 seconds. [ 1038.158587][ T28] Not tainted 6.1.92-syzkaller #0 [ 1038.180356][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1038.189069][ T28] task:syz-executor.4 state:D stack:26072 pid:15381 ppid:11031 flags:0x00004006 2024/06/04 20:14:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1038.203540][ T28] Call Trace: [ 1038.230554][ T28] [ 1038.233543][ T28] __schedule+0x142d/0x4550 [ 1038.238094][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1038.250459][ T28] ? __sched_text_start+0x8/0x8 [ 1038.255398][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1038.270295][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1038.275533][ T28] schedule+0xbf/0x180 [ 1038.279626][ T28] schedule_preempt_disabled+0xf/0x20 [ 1038.300316][ T28] __mutex_lock+0x6b9/0xd80 [ 1038.304876][ T28] ? __mutex_lock+0x53c/0xd80 [ 1038.309886][ T28] ? ip_tunnel_init_net+0x20f/0x700 [ 1038.340322][ T28] ? mutex_lock_nested+0x10/0x10 [ 1038.345328][ T28] ? read_word_at_a_time+0xe/0x20 [ 1038.362979][ T28] ? strscpy+0x89/0x220 [ 1038.367183][ T28] ip_tunnel_init_net+0x20f/0x700 [ 1038.390358][ T28] ? ip_tunnel_get_iflink+0x50/0x50 [ 1038.395623][ T28] ops_init+0x35d/0x610 [ 1038.399802][ T28] setup_net+0x4b5/0xb90 [ 1038.425927][ T28] ? copy_net_ns+0x5d0/0x5d0 [ 1038.430622][ T28] copy_net_ns+0x392/0x5d0 [ 1038.435062][ T28] create_new_namespaces+0x425/0x7a0 [ 1038.461340][ T28] ? bpf_lsm_capable+0x5/0x10 [ 1038.466091][ T28] unshare_nsproxy_namespaces+0x11e/0x170 [ 1038.490456][ T28] ksys_unshare+0x580/0xb20 [ 1038.495162][ T28] ? unshare_fd+0x240/0x240 [ 1038.499695][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1038.520480][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1038.525740][ T28] __x64_sys_unshare+0x34/0x40 [ 1038.540506][ T28] do_syscall_64+0x3b/0xb0 [ 1038.544974][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1038.549669][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.555627][ T28] RIP: 0033:0x7f9cef67cee9 [ 1038.560070][ T28] RSP: 002b:00007f9cf049e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1038.568573][ T28] RAX: ffffffffffffffda RBX: 00007f9cef7b3f80 RCX: 00007f9cef67cee9 [ 1038.577758][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068060200 [ 1038.585808][ T28] RBP: 00007f9cef6da6fe R08: 0000000000000000 R09: 0000000000000000 [ 1038.593830][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.601958][ T28] R13: 000000000000000b R14: 00007f9cef7b3f80 R15: 00007ffe2a475418 [ 1038.609991][ T28] [ 1038.614882][ T28] INFO: task syz-executor.3:15388 blocked for more than 143 seconds. [ 1038.627218][ T28] Not tainted 6.1.92-syzkaller #0 [ 1038.634245][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1038.649110][ T28] task:syz-executor.3 state:D stack:27240 pid:15388 ppid:10508 flags:0x00004006 [ 1038.659508][ T28] Call Trace: [ 1038.667040][ T28] [ 1038.669985][ T28] __schedule+0x142d/0x4550 [ 1038.675697][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1038.680389][ T28] ? __sched_text_start+0x8/0x8 [ 1038.690168][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1038.696888][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1038.706362][ T28] schedule+0xbf/0x180 [ 1038.710463][ T28] schedule_preempt_disabled+0xf/0x20 [ 1038.717742][ T28] __mutex_lock+0x6b9/0xd80 [ 1038.727663][ T28] ? __mutex_lock+0x53c/0xd80 [ 1038.744720][ T28] ? __netlink_dump_start+0x12e/0x6e0 [ 1038.750142][ T28] ? mutex_lock_nested+0x10/0x10 [