last executing test programs: 6.249600272s ago: executing program 3 (id=2391): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)="cd", 0x1}, {&(0x7f0000000c00)="9cd2f4972eac7604b535bdb37ba8e5187380dde57fe80953fe60fb0ec05b01c4043c7f5dc373023681ea05d10f703d2155cf5826df292d1a11a02ffe9fbbcfe07de956c3981fa2f7960d9843a708a247357c9e00", 0x54}], 0x2, 0x0, 0x0) 6.191856907s ago: executing program 4 (id=2392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.091028754s ago: executing program 4 (id=2393): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000008e80)=[{&(0x7f0000007d80)=""/4093, 0xffd}], 0x1}}], 0x1, 0x0, 0x0) 6.084973248s ago: executing program 3 (id=2394): syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f00000002c0)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@nossd_spread}, {@nobarrier}, {@nospace_cache}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f0000005180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) 5.803776768s ago: executing program 4 (id=2395): r0 = io_uring_setup(0x1951, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xbffffffffffeff01) close_range(r0, 0xffffffffffffffff, 0x0) 5.653161032s ago: executing program 4 (id=2396): r0 = socket$inet(0x2, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 5.65166255s ago: executing program 2 (id=2397): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000340)) 5.351846647s ago: executing program 2 (id=2398): modify_ldt$write2(0x11, &(0x7f0000000480), 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 5.238368015s ago: executing program 2 (id=2399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 4.226421415s ago: executing program 2 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000000c0)=""/156, &(0x7f0000000040)=0x28) 3.859836293s ago: executing program 4 (id=2403): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000380)={[{@nouid32}, {@dioread_nolock}]}, 0x1, 0x4bf, &(0x7f0000000940)="$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") mkdir(&(0x7f00000001c0)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0xffd9, 0x9, 0x8, 0x2}}}}, 0x15) connect$packet(r0, &(0x7f0000000400)={0x11, 0x3daa3f836e504ccb, 0x0, 0x1, 0x4, 0x6, @local}, 0x5b) syz_emit_vhci(0x0, 0x7) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x60, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x55) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) syz_emit_vhci(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.151874073s ago: executing program 1 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 3.141700049s ago: executing program 0 (id=2411): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000000200000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.990007621s ago: executing program 0 (id=2412): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) 2.919989293s ago: executing program 3 (id=2413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x3, &(0x7f00000001c0)='\x00\x9b\x88\xf3T\x9f;!e\xa3\xcc\x93v\xc3\xca\xa1\xe3\xdc\x8fr\xdb\xaa\xeb\xfe5\a\x8b\x97\xb4\x03\x95\x88\xe2K\xec\xa3\xb7\xb6\xcf\'\xca%\x00\xca\xe0\x92t\x87D\x93\xf2\x13\xfc\xdd\xee\xbbR\xb2\x8b\xf5\xf2\x0ec}m\xb9vY.\x12\xb6\xd4\xc3K\xe9\x14\xcb4\x11\xb6\xb5\x8ck\x1e\x9as.\xab\xf0Q\x1c\x98\x89\xe6\xa9\xe5\x832\xd2\x81(\x87\xd1\b\xbb\xfc\x9dF\xd8C,\xd2\xb6\xe3{i\xb0\xa5\xc0\x1d\xb8FX\xe8\xc34\x99\xa4\x93\xaf\n\xae\xfc\xd6\x02\x01-s\xb2\xd9)\xa3$\xab\xa6\xd7q\xcd\xf4\xf8J\xd9\xd7\xba\xc9VGB\x85\xb7\x14~\x1d\x7f\xc6Rs\xaf:\xbaj\x84\x83\xb8\xcaV\xb1\xbdin\fx\xcb\xe2\xf4[\xa7C\xe8\x9a\xf4\x15\xc3\\:#+\xafw\x87\xa8)\xe1\xb7\x1c;\x11\x9dL\xaa\xc66EX\xcc7\x1eG\xe5bz\xd0\xdd\xbd\xcf\xba\x1e\x97F\x0f', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.867598783s ago: executing program 0 (id=2414): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000000, 0x0, 0x0, 0xffffffff}]}) 2.243038284s ago: executing program 0 (id=2415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.128488907s ago: executing program 1 (id=2416): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f0000000140)=ANY=[], 0x3, 0x6b5, &(0x7f0000001240)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) r1 = request_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000440)='\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x52, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @val={0x5, 0x4, {0x0, 0x0, 0x0, "83"}}, @void, @void, @val={0x3c, 0x4}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0xf, 0x20}}, @val={0x76, 0x6}}}]}, 0x70}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x4) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0x100000000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010300000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r10], 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000d5c300000000f5ff0000000018110000", @ANYRES32=r10, @ANYBLOB, @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4040091) 1.999573809s ago: executing program 0 (id=2417): setrlimit(0x8, &(0x7f0000000380)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) 1.823916068s ago: executing program 0 (id=2418): openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) creat(0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0) 1.604898579s ago: executing program 3 (id=2419): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='0', 0x1) write$char_usb(r0, &(0x7f0000000140)='0', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) 1.537395605s ago: executing program 1 (id=2420): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.495973591s ago: executing program 2 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, 0x0, 0x0) 1.199971493s ago: executing program 1 (id=2422): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x3665, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x24018011, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 1.173648125s ago: executing program 2 (id=2423): mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_ino']) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x63, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(0x0, 0x0, 0x1) pipe2(&(0x7f0000000040), 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) 1.080045855s ago: executing program 1 (id=2424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="08000100da"], 0x20}}, 0x0) 148.062365ms ago: executing program 3 (id=2425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) 93.114644ms ago: executing program 4 (id=2426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 66.981518ms ago: executing program 1 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=2428): syz_io_uring_setup(0xd79, &(0x7f00000035c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x18, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[], 0x0) kernel console output (not intermixed with test programs): SB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.091698][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.100155][ T5185] usb 4-1: config 0 descriptor?? [ 577.131534][ T5185] option 4-1:0.151: GSM modem (1-port) converter detected [ 577.285206][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 577.570042][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.668879][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.861513][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.870612][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.889167][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.898032][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.931679][ T5217] usb 4-1: USB disconnect, device number 14 [ 578.941081][ T5217] option 4-1:0.151: device disconnected [ 579.669593][T13084] loop1: detected capacity change from 0 to 1024 [ 579.683030][T13085] loop3: detected capacity change from 0 to 17 [ 579.755697][T13085] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 579.771591][T13084] hfsplus: invalid extended attribute record [ 579.964791][ T8105] hfsplus: b-tree write err: -5, ino 8 [ 580.050288][ T5185] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 580.703552][ T5185] usb 3-1: Using ep0 maxpacket: 32 [ 580.726166][ T5185] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 581.549403][ T5185] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 581.565955][ T5185] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 581.574151][ T5185] usb 3-1: Product: syz [ 581.585795][ T5185] usb 3-1: Manufacturer: syz [ 581.590418][ T5185] usb 3-1: SerialNumber: syz [ 581.597508][ T5185] usb 3-1: config 0 descriptor?? [ 581.603289][T13089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 582.033076][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 583.021643][ T1154] usb 3-1: USB disconnect, device number 21 [ 584.431319][T13142] loop1: detected capacity change from 0 to 1024 [ 584.665227][T13142] hfsplus: invalid extended attribute record [ 585.629478][ T8153] hfsplus: b-tree write err: -5, ino 8 [ 585.754570][T13164] loop1: detected capacity change from 0 to 128 [ 585.774410][T13164] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 586.183707][T13161] loop3: detected capacity change from 0 to 32768 [ 586.201051][T13161] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1772 (13161) [ 586.326864][T13161] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 586.495278][T13161] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 586.565908][T13161] BTRFS info (device loop3): using free-space-tree [ 587.002350][ T1154] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 587.657094][T13189] loop2: detected capacity change from 0 to 32768 [ 587.667011][T13189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1778 (13189) [ 587.705239][T13189] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 587.715469][T13189] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 587.724192][T13189] BTRFS info (device loop2): using free-space-tree [ 587.888575][ T1154] usb 2-1: Using ep0 maxpacket: 32 [ 587.900430][ T1154] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 587.952121][ T1154] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 587.964569][ T1154] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 587.975546][ T1154] usb 2-1: Product: syz [ 587.987192][ T1154] usb 2-1: Manufacturer: syz [ 587.991816][ T1154] usb 2-1: SerialNumber: syz [ 588.011605][ T1154] usb 2-1: config 0 descriptor?? [ 588.026453][T13173] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 588.031336][T12124] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 588.184673][T12208] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 588.655142][ T1154] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 589.411820][ T1154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 589.411872][ T1154] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 589.411897][ T1154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.417258][ T1154] usb 1-1: config 0 descriptor?? [ 589.424660][ T1154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 589.505931][ T1154] usb 2-1: USB disconnect, device number 14 [ 589.911755][ T58] usb 1-1: USB disconnect, device number 29 [ 589.963170][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 590.120020][T13248] bond1 (unregistering): Released all slaves [ 590.945925][ T5144] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 591.868597][ T5144] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 591.891822][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 591.945471][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 591.989161][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.013123][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.017243][T13259] loop2: detected capacity change from 0 to 32768 [ 592.047215][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.157176][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.201441][T13259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1792 (13259) [ 592.301945][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.411963][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.491235][T13259] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 592.576119][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.597023][T13259] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 592.624417][T13259] BTRFS info (device loop2): using free-space-tree [ 592.631053][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.653795][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.675210][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.683749][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.726181][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.773952][ T1154] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 592.781625][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.832347][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.861951][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.907282][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.938461][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.966109][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.987030][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.988768][ T1154] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 592.994945][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.004666][ T1154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.004702][ T1154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.004726][ T1154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 593.005771][ T1154] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 593.034032][T12208] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 593.045332][ T1154] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 593.053017][ T5144] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.065741][ T1154] usb 4-1: Manufacturer: syz [ 593.096418][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 593.112065][ T1154] usb 4-1: config 0 descriptor?? [ 593.128821][T12431] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 593.142860][ T5144] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 593.158374][ T5144] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 593.182105][ T5144] usb 1-1: Product: syz [ 593.194616][ T5144] usb 1-1: Manufacturer: syz [ 593.200259][ T5144] usb 1-1: SerialNumber: syz [ 593.222015][ T5144] usb 1-1: config 0 descriptor?? [ 593.238171][T13265] loop4: detected capacity change from 0 to 32768 [ 593.260806][ T5144] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 593.311426][T13265] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 593.326925][T12431] usb 2-1: Using ep0 maxpacket: 8 [ 593.345505][T12431] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.363926][T12431] usb 2-1: config 0 has no interface number 0 [ 593.384166][T12431] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 593.411145][T12431] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 593.438951][T12431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.481381][T12431] usb 2-1: config 0 descriptor?? [ 593.528649][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.537371][T12431] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 593.577953][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.597406][T13265] XFS (loop4): Ending clean mount [ 593.606151][ T1154] usbhid 4-1:0.0: can't add hid device: -71 [ 593.612183][ T1154] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 593.630749][T13265] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 593.661052][T13303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.667584][ T1154] usb 4-1: USB disconnect, device number 15 [ 593.687328][T13303] netlink: 'syz.2.1799': attribute type 3 has an invalid length. [ 593.708823][T13303] netlink: 168364 bytes leftover after parsing attributes in process `syz.2.1799'. [ 594.627559][T13311] loop2: detected capacity change from 0 to 512 [ 594.717979][T13311] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1801: corrupted in-inode xattr: bad e_name length [ 594.758160][T13311] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1801: couldn't read orphan inode 15 (err -117) [ 594.776120][T13311] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000060000 r/w without journal. Quota mode: writeback. [ 594.788582][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 594.795692][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 594.823731][ T5185] usb 1-1: USB disconnect, device number 30 [ 594.830360][T12431] usb 2-1: USB disconnect, device number 15 [ 594.847820][ T5185] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 595.143506][ T5144] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 595.207299][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 595.356292][ T5144] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 595.421352][ T5144] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 595.462085][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.600661][ T5144] usb 3-1: config 0 descriptor?? [ 595.840929][ T5144] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 596.433867][ T5185] usb 3-1: USB disconnect, device number 22 [ 596.660537][T13352] xt_l2tp: invalid flags combination: 0 [ 596.985814][ T5142] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 597.003891][T12208] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000060000. [ 597.095845][T12431] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 597.196635][ T5142] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 597.235331][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.255047][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.295785][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.305129][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.315796][T12431] usb 1-1: Using ep0 maxpacket: 8 [ 597.324256][T12431] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 597.335848][T12431] usb 1-1: config 0 has no interface number 0 [ 597.341968][T12431] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.352356][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.375784][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.385943][T12431] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 597.394994][T12431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.413758][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.423487][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.435498][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.443210][T12431] usb 1-1: config 0 descriptor?? [ 597.450283][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.463047][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.477446][T12431] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 597.486036][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.503451][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.514406][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.528122][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 597.560896][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.580198][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.589714][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.601203][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.610478][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.622958][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.641386][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.653450][ T5142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 597.665666][ T5142] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 597.677274][ T5142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 597.690814][ T5142] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 597.704262][ T5142] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 597.719804][T12431] usb 1-1: USB disconnect, device number 31 [ 597.773693][ T5142] usb 2-1: Product: syz [ 597.788224][ T5142] usb 2-1: Manufacturer: syz [ 597.792842][ T5142] usb 2-1: SerialNumber: syz [ 597.824197][ T5142] usb 2-1: config 0 descriptor?? [ 597.854113][ T5142] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 597.871090][T13382] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.1824'. [ 597.881266][T13382] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 597.905802][T13382] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1824'. [ 598.449240][T13376] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 599.150829][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'. [ 599.780094][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 599.787684][ C0] usb 2-1: yurex_control_callback - control failed: -32 [ 600.245618][ T5185] usb 2-1: USB disconnect, device number 16 [ 600.275192][T13426] loop4: detected capacity change from 0 to 512 [ 600.326682][ T5185] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 600.479821][T13426] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1837: casefold flag without casefold feature [ 600.551880][T13426] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1837: couldn't read orphan inode 15 (err -117) [ 600.616898][T13426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.655689][T13436] loop2: detected capacity change from 0 to 1024 [ 600.885917][ T5144] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 601.153698][ T5144] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 601.269230][ T5144] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 601.307634][ T5144] usb 2-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 601.358760][ T5144] usb 2-1: config 0 has no interface number 0 [ 601.394160][ T5144] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.471999][ T5144] usb 2-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=c0.d9 [ 601.517652][ T5674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.533801][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'. [ 601.543434][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.582708][ T5144] usb 2-1: config 0 descriptor?? [ 601.611344][ T5144] option 2-1:0.151: GSM modem (1-port) converter detected [ 601.942016][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.004382][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.071610][T13454] loop3: detected capacity change from 0 to 8 [ 602.625474][T13460] SQUASHFS error: lzo decompression failed, data probably corrupt [ 602.633530][T13460] SQUASHFS error: Failed to read block 0x71: -5 [ 602.641045][T13460] SQUASHFS error: lzo decompression failed, data probably corrupt [ 602.649386][T13460] SQUASHFS error: Failed to read block 0x71: -5 [ 602.705459][ T29] audit: type=1800 audit(1720205069.323:423): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1848" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 602.857259][T13434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.960162][T13434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.029166][T13434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.074826][T13434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.204365][T12431] usb 2-1: USB disconnect, device number 17 [ 603.231451][T12431] option 2-1:0.151: device disconnected [ 603.725607][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 604.015808][ T5142] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 604.388171][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'. [ 604.464442][T13499] loop2: detected capacity change from 0 to 1024 [ 604.485668][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 604.514502][ T5142] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 604.531450][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.548303][ T5142] usb 4-1: config 0 descriptor?? [ 604.566128][ T5142] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 604.843691][T13474] loop3: detected capacity change from 0 to 1024 [ 604.919563][T13474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.005929][ T5142] usb 4-1: USB disconnect, device number 16 [ 605.713839][T12124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.191542][T13542] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1876'. [ 606.235679][T13542] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1876'. [ 606.351791][T13542] xt_CT: No such helper "syz0" [ 606.430714][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 607.020726][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'. [ 607.178611][T13556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'. [ 607.327809][T13558] bond1 (unregistering): Released all slaves [ 607.681260][T13566] lo speed is unknown, defaulting to 1000 [ 608.019688][T13578] loop2: detected capacity change from 0 to 1024 [ 609.750168][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.052540][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1904'. [ 610.176229][ T5185] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 610.290234][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 610.386264][ T5185] usb 1-1: Using ep0 maxpacket: 8 [ 610.397891][ T5185] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.425910][ T5185] usb 1-1: config 0 has no interface number 0 [ 610.432138][ T5185] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.453397][ T5185] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 610.473645][ T5185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.496803][ T5185] usb 1-1: config 0 descriptor?? [ 610.504460][ T5185] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 610.739329][ T5185] usb 1-1: USB disconnect, device number 32 [ 610.766193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.122967][T13648] ieee802154 phy0 wpan0: encryption failed: -22 [ 611.806751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.919524][T13667] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 611.954737][T13667] netlink: 'syz.0.1918': attribute type 4 has an invalid length. [ 611.966647][T13667] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1918'. [ 611.991042][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1919'. [ 612.025309][T13669] loop4: detected capacity change from 0 to 1024 [ 612.172991][T13647] loop2: detected capacity change from 0 to 32768 [ 612.202770][T13647] btrfs: Deprecated parameter 'usebackuproot' [ 612.219576][T13647] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 612.272843][T13647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1914 (13647) [ 612.395519][T13647] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 612.446107][T13647] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 612.466105][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1924'. [ 612.593644][T13683] bond1 (unregistering): Released all slaves [ 612.677659][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 612.741816][T13647] BTRFS warning (device loop2): couldn't read tree root [ 612.776093][T13647] BTRFS warning (device loop2): try to load backup roots slot 1 [ 612.800394][ T8153] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 612.845911][T13647] BTRFS warning (device loop2): couldn't read tree root [ 612.881213][T13647] BTRFS warning (device loop2): try to load backup roots slot 2 [ 612.923057][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 613.050488][T13647] BTRFS warning (device loop2): couldn't read tree root [ 613.062502][T13647] BTRFS warning (device loop2): try to load backup roots slot 3 [ 613.155261][T13647] BTRFS info (device loop2): rebuilding free space tree [ 613.233385][T13647] BTRFS info (device loop2): disabling free space tree [ 613.292876][T13647] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 613.377642][T13647] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 614.404711][T12208] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 614.657770][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 614.833508][T13727] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 614.860329][T13727] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 614.878653][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 614.887510][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 614.898652][T13727] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1931'. [ 614.920133][ T25] usb 4-1: config 0 has no interface number 0 [ 614.936071][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.973993][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 614.987151][T13730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1932'. [ 615.002967][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.035825][ T25] usb 4-1: config 0 descriptor?? [ 615.050897][ T25] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 615.277635][ T25] usb 4-1: USB disconnect, device number 17 [ 616.383222][T13749] kvm: kvm [13748]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xd00000800 [ 616.412804][T13749] kvm_intel: kvm [13748]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 616.823521][T13745] loop2: detected capacity change from 0 to 32768 [ 616.868362][T13745] btrfs: Deprecated parameter 'usebackuproot' [ 617.029094][T13745] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 617.080250][T13745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1939 (13745) [ 617.276267][T13745] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 617.338186][T13745] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 617.443495][T13751] loop3: detected capacity change from 0 to 32768 [ 617.455715][T13751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1941 (13751) [ 617.473944][T13751] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 617.484480][T13751] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 617.495218][T13751] BTRFS info (device loop3): using free-space-tree [ 617.643967][ T8109] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 617.694738][T13791] Bluetooth: MGMT ver 1.23 [ 617.720098][T13745] BTRFS warning (device loop2): couldn't read tree root [ 617.730168][T13745] BTRFS warning (device loop2): try to load backup roots slot 1 [ 617.740071][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 617.771032][T13751] BTRFS info (device loop3): rebuilding free space tree [ 617.799163][T13795] loop1: detected capacity change from 0 to 1024 [ 617.817437][T13745] BTRFS warning (device loop2): couldn't read tree root [ 617.846504][T13745] BTRFS warning (device loop2): try to load backup roots slot 2 [ 617.877536][ T8109] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 617.916498][T13745] BTRFS warning (device loop2): couldn't read tree root [ 617.923494][T13745] BTRFS warning (device loop2): try to load backup roots slot 3 [ 617.998908][T13745] BTRFS info (device loop2): rebuilding free space tree [ 618.042797][T13745] BTRFS info (device loop2): disabling free space tree [ 618.057143][T13745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 618.068454][T13745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 618.178470][T12124] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 618.953187][T12208] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 619.675899][ T58] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 619.829017][T13817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.866747][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 619.874916][ T58] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.895270][ T58] usb 4-1: config 0 has no interface number 0 [ 619.925351][ T58] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 619.964042][ T58] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 619.980023][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.998173][ T58] usb 4-1: config 0 descriptor?? [ 620.022779][ T58] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 620.265586][ T58] usb 4-1: USB disconnect, device number 18 [ 620.339461][T13823] loop1: detected capacity change from 0 to 2048 [ 620.401198][T13823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.423869][T13823] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.1953: reserved inode found cleared - inode=1 [ 620.485342][T12312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.132949][ T29] audit: type=1326 audit(1720205087.793:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.4.1959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4d6775bd9 code=0x0 [ 621.265939][ T58] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 621.456867][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.456904][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.456942][ T58] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 621.456966][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.460452][ T58] usb 3-1: config 0 descriptor?? [ 621.558003][T13845] xt_socket: unknown flags 0x50 [ 622.095390][T13828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.129245][T13828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.182165][T13828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 622.188732][T13828] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.239020][T13858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.276948][T13828] vhci_hcd vhci_hcd.0: Device attached [ 622.304743][T13858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.395660][ T29] audit: type=1326 audit(1720205089.053:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x0 [ 622.489660][ T25] vhci_hcd: vhci_device speed not set [ 622.499498][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 622.533600][ T29] audit: type=1326 audit(1720205089.193:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 622.629057][T13856] vhci_hcd: connection closed [ 622.629470][ T8109] vhci_hcd: stop threads [ 622.663553][ T8109] vhci_hcd: release socket [ 622.686681][ T29] audit: type=1326 audit(1720205089.223:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 622.712892][ T8109] vhci_hcd: disconnect device [ 622.802277][ T29] audit: type=1326 audit(1720205089.223:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 622.894886][ T29] audit: type=1326 audit(1720205089.223:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 622.974654][ T29] audit: type=1326 audit(1720205089.223:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 623.029494][ T58] usb 3-1: string descriptor 0 read error: -71 [ 623.035924][ T25] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 623.043822][ T25] usb 13-1: enqueue for inactive port 0 [ 623.050921][ T58] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 623.059847][ T58] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 623.069384][ T58] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 623.077598][ T58] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 623.085425][ T58] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 623.085823][ T29] audit: type=1326 audit(1720205089.223:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 623.117168][ T58] usb 3-1: USB disconnect, device number 23 [ 623.129203][ T29] audit: type=1326 audit(1720205089.223:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 623.147403][ T25] vhci_hcd: vhci_device speed not set [ 623.200364][ T29] audit: type=1326 audit(1720205089.223:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13859 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 623.565871][T12431] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 623.756162][ T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 623.765954][ T1154] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 623.783269][T12431] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 623.802592][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.819404][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.833937][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.845622][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.868416][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.880628][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.899758][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.915094][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.931820][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.941028][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.951440][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.962712][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.966457][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 623.974032][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.984018][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.984234][ T58] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 623.996238][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.014490][ T1154] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 624.014839][ T58] usb 3-1: config 0 has no interface number 0 [ 624.031830][ T1154] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 624.045951][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.063036][ T58] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 624.065266][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.072994][ T58] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 624.086008][ T1154] usb 1-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 624.099136][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.107626][ T1154] usb 1-1: config 0 has no interface number 0 [ 624.117936][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.124771][ T1154] usb 1-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.138729][ T1154] usb 1-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=c0.d9 [ 624.149546][ T1154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.157731][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.167076][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.179392][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.190413][T12431] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.199646][T12431] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.211768][T12431] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.221500][T12431] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 624.233338][ T1154] usb 1-1: config 0 descriptor?? [ 624.246361][ T1154] option 1-1:0.151: GSM modem (1-port) converter detected [ 624.254825][T12431] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 624.280325][T12431] usb 4-1: Product: syz [ 624.303459][T12431] usb 4-1: Manufacturer: syz [ 624.321488][ T58] usb 3-1: config 0 descriptor?? [ 624.329778][ T58] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 624.334972][T12431] usb 4-1: SerialNumber: syz [ 624.355171][T12431] usb 4-1: config 0 descriptor?? [ 624.363915][T12431] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 624.380446][T13888] xt_socket: unknown flags 0x50 [ 624.525272][T13889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.540207][T13889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.570207][ T58] usb 3-1: USB disconnect, device number 24 [ 624.693018][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 624.701653][T12431] usb 4-1: USB disconnect, device number 19 [ 624.709829][T12431] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 624.784202][T13893] loop1: detected capacity change from 0 to 1024 [ 624.869678][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.888391][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.927964][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.948437][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.029048][ T58] usb 1-1: USB disconnect, device number 33 [ 625.046204][ T58] option 1-1:0.151: device disconnected [ 625.091105][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.097688][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.327532][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 626.093417][T13916] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 626.254098][T13908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.325235][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 626.325253][ T29] audit: type=1326 audit(1720205092.973:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.4.1985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4d6775bd9 code=0x0 [ 627.402900][T13946] loop4: detected capacity change from 0 to 1024 [ 627.491874][ T29] audit: type=1326 audit(1720205094.153:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd0db75bd9 code=0x0 [ 627.616854][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 627.680852][ T29] audit: type=1326 audit(1720205094.343:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 627.723409][ T29] audit: type=1326 audit(1720205094.343:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 627.768084][ T29] audit: type=1326 audit(1720205094.343:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 627.865918][ T29] audit: type=1326 audit(1720205094.343:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 627.907876][ T29] audit: type=1326 audit(1720205094.343:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 628.010162][ T29] audit: type=1326 audit(1720205094.343:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 628.135027][ T29] audit: type=1326 audit(1720205094.343:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 628.209188][ T29] audit: type=1326 audit(1720205094.343:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.2.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd0db75bd9 code=0x7ffc0000 [ 629.508988][T13970] loop2: detected capacity change from 0 to 16 [ 629.566707][T13970] erofs: (device loop2): mounted with root inode @ nid 36. [ 629.668250][T13972] loop3: detected capacity change from 0 to 512 [ 629.726832][T13972] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.733313][T13972] EXT4-fs: Ignoring removed i_version option [ 629.993960][T13972] EXT4-fs error (device loop3): __ext4_iget:4980: inode #11: block 1: comm syz.3.2004: invalid block [ 630.022278][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.030605][T13972] EXT4-fs (loop3): Remounting filesystem read-only [ 630.046009][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.055229][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.063797][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.073339][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 630.081470][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.087266][T13972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.215034][T13987] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.284247][T12124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.285493][T13983] lo speed is unknown, defaulting to 1000 [ 631.246422][ T5093] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 631.246584][ T5093] Bluetooth: hci5: Injecting HCI hardware error event [ 631.249709][ T5107] Bluetooth: hci5: hardware error 0x00 [ 631.668700][T13983] chnl_net:caif_netlink_parms(): no params data found [ 631.737658][T14011] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2013'. [ 632.085877][ T5142] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 632.158557][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.167241][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.175015][T13983] bridge_slave_0: entered allmulticast mode [ 632.176836][T14025] loop2: detected capacity change from 0 to 256 [ 632.189989][T13983] bridge_slave_0: entered promiscuous mode [ 632.198732][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.206208][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.206262][ T5093] Bluetooth: hci1: command tx timeout [ 632.213457][T13983] bridge_slave_1: entered allmulticast mode [ 632.226353][T13983] bridge_slave_1: entered promiscuous mode [ 632.243823][T14025] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 632.292357][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 632.314973][T14027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.317775][ T5142] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 632.322569][T14027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.347283][T14027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.354380][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.356882][T14027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.379030][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 632.379046][ T29] audit: type=1800 audit(1720205099.043:534): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2016" name="bus" dev="loop2" ino=1048648 res=0 errno=0 [ 632.417466][ T5142] usb 4-1: config 0 descriptor?? [ 632.422483][T14025] Trying to write to read-only block-device loop2 [ 632.432253][ T29] audit: type=1800 audit(1720205099.083:535): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2016" name="file0" dev="loop2" ino=1048650 res=0 errno=0 [ 632.461737][T13983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.474659][T13983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.532504][T13983] team0: Port device team_slave_0 added [ 632.566802][T13983] team0: Port device team_slave_1 added [ 632.634353][ T5142] ath6kl: Failed to submit usb control message: -71 [ 632.651723][ T5142] ath6kl: unable to send the bmi data to the device: -71 [ 632.662065][ T5142] ath6kl: Unable to send get target info: -71 [ 632.669127][ T5142] ath6kl: Failed to init ath6kl core: -71 [ 632.683677][T14031] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.692003][ T5142] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 632.723853][ T5142] usb 4-1: USB disconnect, device number 20 [ 632.742317][T13983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.772274][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.803309][T13983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.816489][T13983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.824424][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.875096][T13983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.071365][T13983] hsr_slave_0: entered promiscuous mode [ 633.087181][T13983] hsr_slave_1: entered promiscuous mode [ 633.095232][T13983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.109125][T13983] Cannot create hsr debugfs directory [ 633.420003][ T5107] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 633.484564][T13983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.661217][T13983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.910207][T13983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.285911][ T5107] Bluetooth: hci1: command tx timeout [ 634.489736][T13983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.518342][T14066] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.795201][T13983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 634.813949][T13983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 634.841282][T13983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 634.866664][T13983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 635.547129][T14084] loop1: detected capacity change from 0 to 1024 [ 635.557326][T14084] ext4: Unknown parameter 'smackfsfloor' [ 636.313865][T13983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.347251][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.380072][ T5107] Bluetooth: hci1: command tx timeout [ 636.394940][T12431] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.402145][T12431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.419409][T12431] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.426607][T12431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.489962][T13983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.105288][T14104] loop1: detected capacity change from 0 to 512 [ 637.281744][T14104] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 637.282312][T14104] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2043: invalid indirect mapped block 1 (level 1) [ 637.395165][T14104] EXT4-fs (loop1): 1 truncate cleaned up [ 637.404005][T14104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.592901][T13983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.254272][T12312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.447650][ T5107] Bluetooth: hci1: command tx timeout [ 638.531814][T14128] overlay: Unknown parameter 'fscontext' [ 639.115154][T13983] veth0_vlan: entered promiscuous mode [ 639.192170][T13983] veth1_vlan: entered promiscuous mode [ 639.350580][T13983] veth0_macvtap: entered promiscuous mode [ 639.374039][T13983] veth1_macvtap: entered promiscuous mode [ 639.561645][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.616273][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.626657][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.651327][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.675833][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.689501][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.850188][T14143] loop1: detected capacity change from 0 to 1024 [ 639.860078][T14143] ext4: Unknown parameter 'smackfsfloor' [ 640.054884][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.380679][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.397950][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.451394][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.495402][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.541282][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.581184][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.615413][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.665829][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.695822][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.725833][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.757351][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.800991][T13983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.822253][T13983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.856067][T13983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.864782][T13983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.183179][ T8153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.207986][ T8153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.275888][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.283723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.358479][T14146] loop3: detected capacity change from 0 to 32768 [ 641.388201][T14146] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2053 (14146) [ 641.457001][T14146] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 641.502025][T14146] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 641.545973][T14146] BTRFS info (device loop3): disk space caching is enabled [ 641.676706][T14146] BTRFS info (device loop3): rebuilding free space tree [ 641.800903][T14146] BTRFS info (device loop3): disabling free space tree [ 641.852832][T14146] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 641.946839][T14146] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 642.458637][T12124] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 642.526380][ T5093] Bluetooth: hci3: command 0x0406 tx timeout [ 643.156098][T14197] loop2: detected capacity change from 0 to 256 [ 643.364124][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 643.417420][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 644.740933][T14240] loop3: detected capacity change from 0 to 256 [ 645.488402][ T5107] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 645.497233][ T5107] Bluetooth: hci1: Injecting HCI hardware error event [ 645.507294][ T5093] Bluetooth: hci1: hardware error 0x00 [ 645.616368][T14261] loop2: detected capacity change from 0 to 8 [ 645.935573][ T29] audit: type=1326 audit(1720205112.593:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14264 comm="syz.4.2088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4eb575bd9 code=0x0 [ 645.944106][T14261] loop2: detected capacity change from 0 to 2048 [ 647.192698][T14280] loop2: detected capacity change from 0 to 1024 [ 647.199953][T14280] ext4: Unknown parameter 'smackfsfloor' [ 647.518212][T14279] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 647.775067][ T5093] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 647.827488][T14279] netlink: 'syz.1.2092': attribute type 4 has an invalid length. [ 647.884248][T14279] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2092'. [ 647.966312][ T5107] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 648.193623][T14286] loop3: detected capacity change from 0 to 256 [ 648.323761][T14300] loop2: detected capacity change from 0 to 8 [ 648.550307][T14300] loop2: detected capacity change from 0 to 2048 [ 648.985626][ T5093] Bluetooth: hci4: sending frame failed (-49) [ 648.995061][ T5107] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 649.012356][ T29] audit: type=1326 audit(1720205115.673:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.4.2106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4eb575bd9 code=0x0 [ 649.703496][T14322] loop3: detected capacity change from 0 to 1024 [ 649.720443][T14322] ext4: Unknown parameter 'smackfsfloor' [ 650.643080][T14335] loop4: detected capacity change from 0 to 256 [ 650.649554][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 650.857631][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.885961][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.888488][T14339] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.917896][ T25] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 650.933687][T14308] loop1: detected capacity change from 0 to 32768 [ 650.940294][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.950290][T14308] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2104 (14308) [ 650.973209][ T25] usb 3-1: config 0 descriptor?? [ 650.989966][T14308] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 651.009083][T14308] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 651.018002][T14308] BTRFS info (device loop1): using free-space-tree [ 651.029071][T14341] loop4: detected capacity change from 0 to 8 [ 651.249399][T12312] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 651.785032][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.821085][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.486025][T14325] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 652.492587][T14325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 652.563235][T14325] vhci_hcd vhci_hcd.0: Device attached [ 652.573606][T14325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.586164][T14325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.766133][ T5217] vhci_hcd: vhci_device speed not set [ 652.846076][T14366] vhci_hcd: connection closed [ 652.846260][ T29] audit: type=1326 audit(1720205119.453:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.4.2122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4eb575bd9 code=0x0 [ 652.874110][ T5217] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 652.913505][ T11] vhci_hcd: stop threads [ 652.934252][ T25] usb 3-1: string descriptor 0 read error: -71 [ 652.939507][ T11] vhci_hcd: release socket [ 652.946846][ T25] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 652.956177][ T25] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 652.965710][ T11] vhci_hcd: disconnect device [ 652.965924][ T25] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 652.979994][ T25] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 652.987960][ T25] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 652.999869][ T25] usb 3-1: USB disconnect, device number 25 [ 653.651702][T14389] loop1: detected capacity change from 0 to 256 [ 653.991580][T14402] loop3: detected capacity change from 0 to 512 [ 654.022988][T14402] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 654.073475][T14402] UDF-fs: Scanning with blocksize 512 failed [ 654.102037][T14402] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 654.125422][T14402] UDF-fs: Scanning with blocksize 1024 failed [ 654.423930][T14402] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 654.925968][ T5107] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 655.053320][T14402] UDF-fs: Scanning with blocksize 2048 failed [ 655.115386][T14402] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 655.161861][T14402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.237822][T14433] loop3: detected capacity change from 0 to 256 [ 656.940734][T14454] loop2: detected capacity change from 0 to 512 [ 656.973625][T14423] loop1: detected capacity change from 0 to 32768 [ 657.054214][ T29] audit: type=1800 audit(1720205123.713:539): pid=14423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2139" name="file0" dev="loop1" ino=35 res=0 errno=0 [ 658.066098][ T5217] vhci_hcd: vhci_device speed not set [ 658.413933][T14474] syzkaller0: entered promiscuous mode [ 658.419829][T14474] syzkaller0: entered allmulticast mode [ 658.691300][T14484] xt_socket: unknown flags 0x50 [ 659.435890][ T5217] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 659.616207][ T5217] usb 1-1: device descriptor read/64, error -71 [ 659.895914][ T5217] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 660.098839][ T5217] usb 1-1: device descriptor read/64, error -71 [ 660.216310][ T5217] usb usb1-port1: attempt power cycle [ 661.105608][T14510] xt_hashlimit: overflow, try lower: 0/0 [ 661.321150][ T5217] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 661.373157][ T5217] usb 1-1: device descriptor read/8, error -71 [ 661.658428][ T5217] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 661.699891][ T5217] usb 1-1: device descriptor read/8, error -71 [ 661.830918][ T5217] usb usb1-port1: unable to enumerate USB device [ 662.478057][T14525] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2171'. [ 662.930974][ T29] audit: type=1326 audit(1720205129.533:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 663.466018][ T29] audit: type=1326 audit(1720205129.533:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d74610 code=0x7ffc0000 [ 663.547143][ T29] audit: type=1326 audit(1720205129.543:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd256d77367 code=0x7ffc0000 [ 663.571920][ T29] audit: type=1326 audit(1720205129.543:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 663.594587][ T29] audit: type=1326 audit(1720205129.543:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd256d77367 code=0x7ffc0000 [ 663.621884][ T29] audit: type=1326 audit(1720205129.543:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd256d7490a code=0x7ffc0000 [ 663.653361][ T29] audit: type=1326 audit(1720205129.543:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 663.784068][ T29] audit: type=1326 audit(1720205129.543:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 663.875390][ T29] audit: type=1326 audit(1720205129.553:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 663.957395][ T29] audit: type=1326 audit(1720205129.553:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14526 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 664.024121][ T5093] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 665.819363][ T5217] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 666.054804][ T5217] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 666.090372][ T5217] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 666.120748][ T5217] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 666.166187][ T5217] usb 3-1: config 0 has no interface number 0 [ 666.172616][ T5217] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 666.196602][ T5217] usb 3-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=c0.d9 [ 666.205662][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.214177][T14570] loop3: detected capacity change from 0 to 40427 [ 666.228965][T14570] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 666.251865][ T5217] usb 3-1: config 0 descriptor?? [ 666.267608][T14570] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 666.279636][ T5217] option 3-1:0.151: GSM modem (1-port) converter detected [ 666.414488][T14570] F2FS-fs (loop3): invalid crc value [ 666.503041][T14570] F2FS-fs (loop3): Found nat_bits in checkpoint [ 667.159331][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.216279][T14570] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 667.246203][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.256872][T14570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 668.062144][ T5093] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 668.071186][ T5093] Bluetooth: hci3: Injecting HCI hardware error event [ 668.081644][ T5093] Bluetooth: hci3: hardware error 0x00 [ 668.393136][T14573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.432757][T14573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.506678][T14573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.535710][T14573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.714175][T14610] xt_socket: unknown flags 0x50 [ 668.822351][ T5144] usb 3-1: USB disconnect, device number 26 [ 668.842771][ T5144] option 3-1:0.151: device disconnected [ 669.373562][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 669.373580][ T29] audit: type=1326 audit(1720205136.033:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x0 [ 669.492589][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'. [ 669.568795][ T29] audit: type=1326 audit(1720205136.213:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 669.601188][T14609] loop4: detected capacity change from 0 to 32768 [ 669.636114][T14609] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2201 (14609) [ 669.639997][ T29] audit: type=1326 audit(1720205136.213:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 669.672042][ T29] audit: type=1326 audit(1720205136.213:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 669.694419][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.700661][ T29] audit: type=1326 audit(1720205136.213:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 669.874550][ T29] audit: type=1326 audit(1720205136.213:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 670.214090][ T5093] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 670.333925][ T29] audit: type=1326 audit(1720205136.213:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 670.386036][ T5217] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 670.415097][ T29] audit: type=1326 audit(1720205136.213:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 670.466036][T14609] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 670.508151][T14609] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 670.539362][ T29] audit: type=1326 audit(1720205136.213:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 670.562326][T14609] BTRFS info (device loop4): using free-space-tree [ 670.590074][ T29] audit: type=1326 audit(1720205136.213:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 670.797777][ T5217] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 670.806916][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 670.826069][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 670.845849][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.539976][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.549143][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.575835][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.583722][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.592687][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.616169][T12431] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 671.623868][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.637346][T13983] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 671.639046][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.681094][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.697875][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.720207][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.741682][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.777599][T12431] usb 1-1: device descriptor read/64, error -71 [ 671.800977][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.821057][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.843054][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.886213][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.911599][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.925957][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.964912][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.983514][ T5217] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 672.015994][ T5217] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.049614][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 672.056430][T12431] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 672.094029][ T5217] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 672.140726][ T5217] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 672.190952][ T5217] usb 3-1: Product: syz [ 672.222867][T12431] usb 1-1: device descriptor read/64, error -71 [ 672.234205][ T5217] usb 3-1: Manufacturer: syz [ 672.279649][ T5217] usb 3-1: SerialNumber: syz [ 672.348274][T12431] usb usb1-port1: attempt power cycle [ 672.464250][ T5217] usb 3-1: config 0 descriptor?? [ 672.561467][ T5217] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 672.808211][ T5217] usb 3-1: USB disconnect, device number 27 [ 672.816090][T12431] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 672.839283][ T5217] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 672.887460][T12431] usb 1-1: device descriptor read/8, error -71 [ 673.198799][T12431] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 673.205881][ T5144] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 673.246744][T12431] usb 1-1: device descriptor read/8, error -71 [ 673.366359][T12431] usb usb1-port1: unable to enumerate USB device [ 673.398442][ T5144] usb 2-1: Using ep0 maxpacket: 8 [ 673.405565][ T5144] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.413837][ T5144] usb 2-1: config 0 has no interface number 0 [ 673.420258][ T5144] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.431333][ T5144] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 673.440886][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.477806][ T5144] usb 2-1: config 0 descriptor?? [ 673.504041][ T5144] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 673.824382][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 675.478543][T13022] usb 2-1: USB disconnect, device number 18 [ 675.493197][T13022] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 676.921019][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 676.921039][ T29] audit: type=1326 audit(1720205143.583:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x0 [ 677.027655][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 677.061727][ T29] audit: type=1326 audit(1720205143.723:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.118021][ T29] audit: type=1326 audit(1720205143.723:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.195541][ T29] audit: type=1326 audit(1720205143.723:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.251765][ T29] audit: type=1326 audit(1720205143.723:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.282616][ T29] audit: type=1326 audit(1720205143.723:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.307687][ T29] audit: type=1326 audit(1720205143.753:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.375956][ T29] audit: type=1326 audit(1720205143.753:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.452639][ T29] audit: type=1326 audit(1720205143.753:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 677.482077][ T29] audit: type=1326 audit(1720205143.763:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9fc975bd9 code=0x7ffc0000 [ 678.686123][ T5144] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 678.900430][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 679.270066][ T5144] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 679.604680][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.638837][ T5144] usb 4-1: config 0 descriptor?? [ 679.872984][ T5144] ath6kl: Failed to submit usb control message: -71 [ 679.934402][ T5144] ath6kl: unable to send the bmi data to the device: -71 [ 679.951423][ T5144] ath6kl: Unable to send get target info: -71 [ 680.156406][ T5144] ath6kl: Failed to init ath6kl core: -71 [ 680.190607][ T5144] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 680.244776][ T5144] usb 4-1: USB disconnect, device number 21 [ 680.492621][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 680.507965][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 680.708186][T14788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.875976][ T5144] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 680.914558][T14761] loop2: detected capacity change from 0 to 32768 [ 681.035919][ T5144] usb 2-1: device descriptor read/64, error -71 [ 682.129175][ T5144] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 682.405921][ T5144] usb 2-1: device descriptor read/64, error -71 [ 682.566136][ T5144] usb usb2-port1: attempt power cycle [ 682.850247][T14796] loop4: detected capacity change from 0 to 32768 [ 682.863627][T14796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2257 (14796) [ 682.893015][T14796] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 682.905923][T14796] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 682.930122][T14796] BTRFS info (device loop4): using free-space-tree [ 682.997495][ T5144] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 683.036810][ T5144] usb 2-1: device descriptor read/8, error -71 [ 683.108775][T14796] BTRFS info (device loop4): rebuilding free space tree [ 683.303653][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 683.303671][ T29] audit: type=1326 audit(1720205149.963:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8386175bd9 code=0x0 [ 683.316188][ T5144] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 683.409664][ T5144] usb 2-1: device descriptor read/8, error -71 [ 683.417595][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 683.433565][ T29] audit: type=1326 audit(1720205150.093:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.449325][T13983] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 683.463181][ T29] audit: type=1326 audit(1720205150.123:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.547330][ T5144] usb usb2-port1: unable to enumerate USB device [ 683.555877][ T29] audit: type=1326 audit(1720205150.123:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.617698][ T29] audit: type=1326 audit(1720205150.123:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.672658][ T29] audit: type=1326 audit(1720205150.123:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.768352][T14863] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2274'. [ 683.777965][ T29] audit: type=1326 audit(1720205150.123:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.855909][ T29] audit: type=1326 audit(1720205150.123:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 683.960193][ T29] audit: type=1326 audit(1720205150.123:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 684.050463][ T29] audit: type=1326 audit(1720205150.123:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14850 comm="syz.0.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8386175bd9 code=0x7ffc0000 [ 684.255993][T13022] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 684.464752][T14852] loop2: detected capacity change from 0 to 32768 [ 684.474071][T13022] usb 4-1: Using ep0 maxpacket: 32 [ 684.490309][T13022] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 684.506730][T14852] btrfs: Deprecated parameter 'usebackuproot' [ 684.515858][T13022] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 684.537086][T14852] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 684.546951][T13022] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 684.566687][T13022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.790471][T13022] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.801091][T13022] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 684.815003][T13022] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 684.824394][T13022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.836881][T13022] usb 4-1: config 0 descriptor?? [ 684.851154][T14865] loop4: detected capacity change from 0 to 32768 [ 684.880436][T14865] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2271 (14865) [ 685.083561][T14865] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 685.156044][T14865] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 685.228127][T14865] BTRFS info (device loop4): disk space caching is enabled [ 685.401347][T13022] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 685.447828][T13022] usb 4-1: USB disconnect, device number 22 [ 685.487379][T13022] usblp0: removed [ 685.509072][T14865] BTRFS info (device loop4): rebuilding free space tree [ 685.611821][T14865] BTRFS info (device loop4): disabling free space tree [ 685.652866][T14865] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 685.685984][T14865] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 685.916071][T13022] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 686.365617][T13022] usb 4-1: Using ep0 maxpacket: 32 [ 686.428462][T13022] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 686.528205][T13022] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 686.537830][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.544138][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.574432][T13022] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 686.615003][T13022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 686.641807][T13983] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 686.662882][T13022] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 686.700952][T13022] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 686.761914][T13022] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 686.788971][T13022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.827121][T13022] usb 4-1: config 0 descriptor?? [ 687.029050][T13022] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 687.092078][T13022] usb 4-1: USB disconnect, device number 23 [ 687.142345][T13022] usblp0: removed [ 687.149339][T14917] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2287'. [ 687.623855][T14926] xt_socket: unknown flags 0x50 [ 687.975899][T13022] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 688.187824][T13022] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.212144][T13022] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.241459][T13022] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 688.313426][T13022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.360369][T13022] usb 1-1: config 0 descriptor?? [ 688.537451][T14946] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2298'. [ 688.655985][ T58] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 688.841606][T14937] loop4: detected capacity change from 0 to 32768 [ 688.855952][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 688.863141][T14937] btrfs: Deprecated parameter 'usebackuproot' [ 688.878290][ T58] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 688.896051][T14937] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 688.905518][ T58] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 688.923976][T14937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2294 (14937) [ 688.937352][ T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 688.946666][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.957198][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 688.974135][T14937] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 688.985568][T14937] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 689.000148][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.003466][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 689.039360][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.050452][ T58] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 689.060375][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.070536][T14931] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 689.077073][T14931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 689.124772][ T58] usb 3-1: config 0 descriptor?? [ 689.139447][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.160098][T14942] loop3: detected capacity change from 0 to 32768 [ 689.171442][T14942] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2296 (14942) [ 689.193264][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.226218][T14931] vhci_hcd vhci_hcd.0: Device attached [ 689.241995][ T8109] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 689.258958][T14937] BTRFS warning (device loop4): couldn't read tree root [ 689.279891][T14937] BTRFS warning (device loop4): try to load backup roots slot 1 [ 689.313089][T14942] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 689.337143][ T8105] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 689.364534][T14942] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 689.378522][T14942] BTRFS info (device loop3): disk space caching is enabled [ 689.386687][T14937] BTRFS warning (device loop4): couldn't read tree root [ 689.394625][ T58] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 689.402928][T14937] BTRFS warning (device loop4): try to load backup roots slot 2 [ 689.419137][ T58] usb 3-1: USB disconnect, device number 28 [ 689.426499][ T5144] vhci_hcd: vhci_device speed not set [ 689.441959][ T58] usblp0: removed [ 689.453954][ T11] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 689.471914][T14953] vhci_hcd: connection closed [ 689.472322][ T12] vhci_hcd: stop threads [ 689.481945][ T12] vhci_hcd: release socket [ 689.486656][ T12] vhci_hcd: disconnect device [ 689.493559][T14937] BTRFS warning (device loop4): couldn't read tree root [ 689.502332][T13022] usb 1-1: string descriptor 0 read error: -71 [ 689.510668][ T5144] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 689.533539][T13022] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 689.542923][T14937] BTRFS warning (device loop4): try to load backup roots slot 3 [ 689.556245][ T5144] usb 9-1: enqueue for inactive port 0 [ 689.566436][T13022] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 689.585444][T13022] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 689.607216][T13022] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 689.608377][T14942] BTRFS info (device loop3): rebuilding free space tree [ 689.625043][T13022] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 689.641361][T14937] BTRFS info (device loop4): rebuilding free space tree [ 689.647951][T13022] usb 1-1: USB disconnect, device number 42 [ 689.655943][ T5144] vhci_hcd: vhci_device speed not set [ 689.698617][T14937] BTRFS info (device loop4): disabling free space tree [ 689.705664][T14937] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 689.708992][T14948] loop1: detected capacity change from 0 to 32768 [ 689.719968][T14937] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 689.746592][T14942] BTRFS info (device loop3): disabling free space tree [ 689.753711][T14948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2299 (14948) [ 689.753948][T14942] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 689.777036][T14942] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 690.054246][T14948] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 690.066553][T14948] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 690.466650][ T58] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 690.512827][T14948] BTRFS info (device loop1): using free-space-tree [ 690.687865][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 690.701127][ T58] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 690.713002][ T58] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 690.724821][ T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 690.742204][T13983] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 690.758430][T12124] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 690.768685][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 690.768714][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 690.768738][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 690.768858][ T58] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 690.768883][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.831092][ T58] usb 3-1: config 0 descriptor?? [ 690.904477][T14948] BTRFS info (device loop1): rebuilding free space tree [ 691.356491][ T58] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 691.394339][ T58] usb 3-1: USB disconnect, device number 29 [ 692.083135][ T58] usblp0: removed [ 692.229963][T15025] loop4: detected capacity change from 0 to 512 [ 692.282606][T12312] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 692.359255][T15025] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.2306: corrupted in-inode xattr: bad e_name length [ 692.477537][T15025] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2306: couldn't read orphan inode 15 (err -117) [ 692.519405][T15034] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2309'. [ 692.578031][T15025] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000060000 r/w without journal. Quota mode: writeback. [ 693.513267][T15038] loop2: detected capacity change from 0 to 32768 [ 693.523359][T15038] btrfs: Deprecated parameter 'usebackuproot' [ 693.531067][T15038] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 693.633029][T15042] loop3: detected capacity change from 0 to 32768 [ 693.645004][T15042] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2312 (15042) [ 693.696865][T12431] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 693.793694][T15042] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 693.825229][T15042] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 693.901429][T15042] BTRFS info (device loop3): disk space caching is enabled [ 693.925972][T12431] usb 2-1: Using ep0 maxpacket: 32 [ 693.950255][T12431] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 694.009986][T12431] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 694.055935][T12431] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 694.113661][T12431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 694.174820][T12431] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 694.216836][T12431] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 694.294393][T15042] BTRFS info (device loop3): rebuilding free space tree [ 694.325861][T12431] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 694.366328][T12431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.396491][T12431] usb 2-1: config 0 descriptor?? [ 694.407166][T15042] BTRFS info (device loop3): disabling free space tree [ 694.434438][T15042] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 694.469227][T15042] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 695.170249][T12431] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 695.316168][ T5148] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 695.434346][T12431] usb 2-1: USB disconnect, device number 23 [ 695.486213][T15031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 312: padding at end of block bitmap is not set [ 695.575595][ T5148] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 695.614030][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'. [ 695.620141][T12431] usblp0: removed [ 695.636087][ T5148] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 695.649299][T13983] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000060000. [ 695.654369][ T5148] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 695.772819][ T5148] usb 3-1: config 0 has no interface number 0 [ 695.779034][ T5148] usb 3-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.792186][ T5148] usb 3-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=c0.d9 [ 695.800196][T15087] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 695.801322][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.820331][ T5148] usb 3-1: config 0 descriptor?? [ 695.833245][T12124] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 695.833781][ T5148] option 3-1:0.151: GSM modem (1-port) converter detected [ 696.026032][T15088] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 696.117941][T15088] bond1 (unregistering): Released all slaves [ 696.135049][T12431] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 696.234505][T15096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.289212][T15096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.356432][T15094] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2322'. [ 696.398736][T12431] usb 2-1: Using ep0 maxpacket: 32 [ 696.428048][T12431] usb 2-1: device descriptor read/all, error -71 [ 697.210766][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.401901][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.656427][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.705623][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.796534][T13022] usb 3-1: USB disconnect, device number 30 [ 697.803764][T13022] option 3-1:0.151: device disconnected [ 698.058811][T15118] loop3: detected capacity change from 0 to 256 [ 698.151613][T15100] loop1: detected capacity change from 0 to 32768 [ 698.158869][T15118] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 698.178233][T15100] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 698.178233][T15100] disk_groups (size 2912): [ 698.178233][T15100] [deleted] [deleted] [deleted] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [ 698.636626][T15125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.918091][T15100] loop1: detected capacity change from 0 to 1024 [ 699.176555][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 699.932174][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 699.932213][ T29] audit: type=1800 audit(1720205166.583:799): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2324" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 700.070161][T13022] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 701.132170][T15160] loop4: detected capacity change from 0 to 512 [ 701.152413][T13022] usb 4-1: Using ep0 maxpacket: 32 [ 701.160794][T15160] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 701.202863][T13022] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 701.224566][T15160] UDF-fs: Scanning with blocksize 512 failed [ 701.296631][T13022] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 701.305259][T13022] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 701.420435][T15160] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 701.460908][T15160] UDF-fs: Scanning with blocksize 1024 failed [ 701.506335][T15160] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 701.545113][T13022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 701.554320][T15160] UDF-fs: Scanning with blocksize 2048 failed [ 701.558494][T13022] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 701.571488][T13022] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 701.576810][T15160] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 701.603490][T15170] loop2: detected capacity change from 0 to 512 [ 701.605883][T13022] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 701.623274][T13022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.635413][T13022] usb 4-1: config 0 descriptor?? [ 701.647950][T15160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.880188][T12431] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 701.978811][T13022] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 701.997225][T13022] usb 4-1: USB disconnect, device number 24 [ 702.006832][T13022] usblp0: removed [ 702.104004][T12431] usb 1-1: Using ep0 maxpacket: 8 [ 702.126994][T12431] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 702.233196][T12431] usb 1-1: config 135 has an invalid descriptor of length 252, skipping remainder of the config [ 702.274320][T12431] usb 1-1: config 135 has no interface number 0 [ 702.294586][T12431] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.338373][T12431] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 702.357781][T12431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.384416][T12431] usb 1-1: Product: syz [ 702.396187][T12431] usb 1-1: Manufacturer: syz [ 702.411191][T12431] usb 1-1: SerialNumber: syz [ 702.536338][ T5217] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 702.704142][T12431] usb 1-1: USB disconnect, device number 43 [ 702.738173][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 702.755907][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 702.770981][ T5217] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.792399][ T5217] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.802041][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.807473][T15173] loop1: detected capacity change from 0 to 32768 [ 702.821052][ T5217] usb 3-1: config 0 descriptor?? [ 702.833772][T15173] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2344 (15173) [ 702.865715][T15173] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 702.876801][T15173] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 702.889229][T15173] BTRFS info (device loop1): using free-space-tree [ 702.906112][T13022] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 703.096041][T13022] usb 4-1: Using ep0 maxpacket: 32 [ 703.110222][T13022] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 703.122066][T13022] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 703.131329][T13022] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 703.140520][T13022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 703.166700][T13022] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 703.195148][T13022] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 703.212647][T12312] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 703.238600][T13022] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 703.254008][T13022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.281590][T13022] usb 4-1: config 0 descriptor?? [ 703.284224][ T5217] usbhid 3-1:0.0: can't add hid device: -71 [ 703.292802][ T5217] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 703.337437][T13022] usb 4-1: can't set config #0, error -71 [ 703.343353][ T5217] usb 3-1: USB disconnect, device number 31 [ 703.350992][T15198] loop4: detected capacity change from 0 to 512 [ 703.402312][T15198] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 703.403023][T13022] usb 4-1: USB disconnect, device number 25 [ 703.471523][T15198] EXT4-fs (loop4): Remounting filesystem read-only [ 703.510611][T15198] EXT4-fs (loop4): 1 truncate cleaned up [ 703.550222][T15198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.914547][T13983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.082352][ T29] audit: type=1326 audit(1720205170.683:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 704.635915][ T29] audit: type=1326 audit(1720205170.683:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d74610 code=0x7ffc0000 [ 704.658255][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.674233][ T29] audit: type=1326 audit(1720205170.693:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd256d77367 code=0x7ffc0000 [ 704.762030][ T29] audit: type=1326 audit(1720205170.693:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 704.874627][ T29] audit: type=1326 audit(1720205170.693:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd256d77367 code=0x7ffc0000 [ 704.956526][ T29] audit: type=1326 audit(1720205170.693:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd256d7490a code=0x7ffc0000 [ 704.979102][ T29] audit: type=1326 audit(1720205170.693:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 705.002099][ T29] audit: type=1326 audit(1720205170.693:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 705.204712][ T29] audit: type=1326 audit(1720205170.693:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 705.452256][ T29] audit: type=1326 audit(1720205170.703:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 705.866344][ T29] audit: type=1326 audit(1720205170.703:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 705.942706][ T29] audit: type=1326 audit(1720205170.703:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd256d74610 code=0x7ffc0000 [ 705.975611][ T29] audit: type=1326 audit(1720205170.713:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd256d77367 code=0x7ffc0000 [ 706.053599][ T29] audit: type=1326 audit(1720205170.713:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd256d75bd9 code=0x7ffc0000 [ 706.075843][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.123283][ T29] audit: type=1326 audit(1720205170.713:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd256d77367 code=0x7ffc0000 [ 706.286135][ T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 706.291491][T15239] ipip0: entered promiscuous mode [ 706.345658][T15208] loop1: detected capacity change from 0 to 32768 [ 706.355620][T15208] btrfs: Deprecated parameter 'usebackuproot' [ 706.366951][T15241] loop3: detected capacity change from 0 to 2048 [ 706.380453][T15208] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 706.411605][T15208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2347 (15208) [ 706.460555][T15241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.479285][T15208] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 706.499827][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 706.511961][ T25] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 706.522446][T15225] loop2: detected capacity change from 0 to 32768 [ 706.529179][T15208] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 706.537995][ T25] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 706.548973][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 706.558485][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 706.568898][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 706.579690][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 706.600411][ T25] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 706.609913][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.644666][ T25] usb 1-1: config 0 descriptor?? [ 706.837069][ T8109] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 706.863968][T15208] BTRFS warning (device loop1): couldn't read tree root [ 706.886442][T15208] BTRFS warning (device loop1): try to load backup roots slot 1 [ 706.895693][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 706.919515][T15208] BTRFS warning (device loop1): couldn't read tree root [ 706.926591][ T25] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 706.937522][T15208] BTRFS warning (device loop1): try to load backup roots slot 2 [ 706.943884][ T25] usb 1-1: USB disconnect, device number 44 [ 706.954747][ T8153] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 706.991515][ T25] usblp0: removed [ 706.995317][T15208] BTRFS warning (device loop1): couldn't read tree root [ 707.004990][T15208] BTRFS warning (device loop1): try to load backup roots slot 3 [ 707.093681][T15208] BTRFS error (device loop1): open_ctree failed [ 707.276318][T12124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.625987][ T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 707.775258][T15283] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 707.790714][ T5142] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 707.815903][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 707.824581][ T25] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 707.842233][ T25] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 707.860324][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 707.880031][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.892658][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.914206][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 707.927726][ T25] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 707.968807][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.988047][ T5142] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 708.001498][ T5142] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 708.010732][ T25] usb 1-1: config 0 descriptor?? [ 708.025909][ T5142] usb 2-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 708.075164][ T5142] usb 2-1: config 0 has no interface number 0 [ 708.086184][ T5142] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 708.102288][ T5142] usb 2-1: New USB device found, idVendor=19d2, idProduct=1566, bcdDevice=c0.d9 [ 708.112248][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.129277][ T5142] usb 2-1: config 0 descriptor?? [ 708.139613][ T5142] option 2-1:0.151: GSM modem (1-port) converter detected [ 708.483434][T15292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.525283][T15292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.044443][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.073850][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.161293][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.188458][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.264048][ T58] usb 2-1: USB disconnect, device number 26 [ 709.277241][ T58] option 2-1:0.151: device disconnected [ 709.288856][T15302] loop3: detected capacity change from 0 to 2048 [ 709.292828][T15300] loop2: detected capacity change from 0 to 32768 [ 709.303595][T15300] btrfs: Deprecated parameter 'usebackuproot' [ 709.317811][T15300] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 709.353803][T15302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.829322][ T25] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 709.844428][ T25] usb 1-1: USB disconnect, device number 45 [ 709.857615][ T25] usblp0: removed [ 710.477629][T12124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.563834][ T5148] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 711.760665][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 711.781961][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 711.802086][ T5148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 711.830975][ T5148] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 711.857024][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.901813][ T5148] usb 2-1: config 0 descriptor?? [ 712.203844][T15344] loop3: detected capacity change from 0 to 32768 [ 712.221888][T15344] btrfs: Deprecated parameter 'usebackuproot' [ 712.276829][T15344] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 712.326742][T15344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2394 (15344) [ 712.363791][ T5148] usbhid 2-1:0.0: can't add hid device: -71 [ 712.507084][ T5148] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 712.508585][T15344] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 712.531574][ T5148] usb 2-1: USB disconnect, device number 27 [ 713.270709][T15355] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 713.395539][T15344] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 713.585003][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 713.650736][T15372] veth0_macvtap: left promiscuous mode [ 713.711473][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 713.762989][T15384] loop4: detected capacity change from 0 to 512 [ 713.772255][T15344] BTRFS warning (device loop3): couldn't read tree root [ 713.797227][T15384] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.2403: corrupted in-inode xattr: bad e_name length [ 713.802980][T15344] BTRFS warning (device loop3): try to load backup roots slot 1 [ 713.838151][T15384] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2403: couldn't read orphan inode 15 (err -117) [ 713.848394][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 713.897607][T15384] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000060000 r/w without journal. Quota mode: writeback. [ 713.931606][T15344] BTRFS warning (device loop3): couldn't read tree root [ 713.957915][T15344] BTRFS warning (device loop3): try to load backup roots slot 2 [ 713.978996][T13333] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 713.998001][T15344] BTRFS warning (device loop3): couldn't read tree root [ 714.016567][T15344] BTRFS warning (device loop3): try to load backup roots slot 3 [ 714.206112][ T5093] Bluetooth: hci2: command 0x0406 tx timeout [ 714.271957][T15344] BTRFS info (device loop3): rebuilding free space tree [ 714.322682][T15344] BTRFS info (device loop3): disabling free space tree [ 714.350249][T15344] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 714.405944][T15344] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 714.521611][T12124] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 715.474563][T15417] loop1: detected capacity change from 0 to 1024 [ 715.537815][T15417] hfsplus: request for non-existent node -709361664 in B*Tree [ 715.555968][T15417] hfsplus: request for non-existent node -709361664 in B*Tree [ 715.565412][T15417] hfsplus: b-tree write err: -5, ino 8 [ 715.723714][ T5185] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 715.745625][ T5185] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 715.754485][T15417] fuse: Unknown parameter 'user_id00000000000000000000' [ 715.775263][ T5185] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 715.796833][T15417] IPv6: NLM_F_REPLACE set, but no existing node found! [ 715.832829][T15424] netlink: 'syz.0.2418': attribute type 72 has an invalid length. [ 716.017294][T15432] loop1: detected capacity change from 0 to 512 [ 716.076841][T15432] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 716.092128][T15432] EXT4-fs (loop1): 1 truncate cleaned up [ 716.099777][T15432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.143568][T15432] EXT4-fs error (device loop1): __ext4_remount:6505: comm syz.1.2420: Abort forced by user [ 716.161003][T15432] EXT4-fs (loop1): Remounting filesystem read-only [ 716.172924][T15432] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 716.239931][T12312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.275953][ T5148] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 716.667738][ T5148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 716.677671][ T5148] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 716.686950][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.409904][ T5148] usb 1-1: config 0 descriptor?? [ 717.426214][T13983] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000060000. [ 717.480320][T15451] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 717.480343][T15451] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 717.480359][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.3.2428 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 717.480396][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 717.480410][T15451] RIP: 0010:dev_map_redirect+0x65/0x6a0 [ 717.480435][T15451] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 83 b3 3d 00 4c 8b 2b 4d 8d 7d 38 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 0f 85 6e 04 00 00 41 8b 2f 89 ee 83 e6 02 31 ff [ 717.480452][T15451] RSP: 0018:ffffc9000860f088 EFLAGS: 00010202 [ 717.480470][T15451] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000040000 [ 717.480483][T15451] RDX: ffffc90008e8f000 RSI: 00000000000004b7 RDI: 00000000000004b8 [ 717.480496][T15451] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 717.480509][T15451] R10: 0000000000000004 R11: ffff88801f593c00 R12: 000000000860f0d8 [ 717.480522][T15451] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000038 [ 717.480534][T15451] FS: 00007fd257a956c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 717.480551][T15451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.480564][T15451] CR2: 00007fc9fcb03f64 CR3: 00000000123d2000 CR4: 00000000003506f0 [ 717.480580][T15451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 717.480591][T15451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 717.480603][T15451] Call Trace: [ 717.480611][T15451] [ 717.480618][T15451] ? __die_body+0x88/0xe0 [ 717.480645][T15451] ? die_addr+0x108/0x140 [ 717.480671][T15451] ? exc_general_protection+0x3dd/0x5d0 [ 717.480704][T15451] ? asm_exc_general_protection+0x26/0x30 [ 717.480728][T15451] ? bpf_ringbuf_query+0x4f/0x150 [ 717.480752][T15451] ? dev_map_redirect+0x65/0x6a0 [ 717.480772][T15451] ? dev_map_redirect+0x28/0x6a0 [ 717.480792][T15451] bpf_prog_ec9efaa32d58ce69+0x56/0x5a [ 717.480807][T15451] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 717.480843][T15451] do_xdp_generic+0x673/0xb90 [ 717.480866][T15451] ? __pfx_validate_chain+0x10/0x10 [ 717.480894][T15451] ? __pfx_do_xdp_generic+0x10/0x10 [ 717.480923][T15451] __netif_receive_skb_core+0x1be6/0x4570 [ 717.480947][T15451] ? mark_lock+0x9a/0x360 [ 717.480980][T15451] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 717.481006][T15451] ? mark_lock+0x9a/0x360 [ 717.481029][T15451] ? __lock_acquire+0x1359/0x2000 [ 717.481062][T15451] __netif_receive_skb+0x12f/0x650 [ 717.481088][T15451] ? __pfx_lock_acquire+0x10/0x10 [ 717.481107][T15451] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 717.481129][T15451] ? __pfx___netif_receive_skb+0x10/0x10 [ 717.481151][T15451] ? __kasan_slab_alloc+0x66/0x80 [ 717.481172][T15451] ? read_tsc+0x9/0x20 [ 717.481191][T15451] ? timekeeping_get_ns+0x2c0/0x420 [ 717.481214][T15451] ? netif_receive_skb+0x131/0x890 [ 717.481236][T15451] ? netif_receive_skb+0x131/0x890 [ 717.481258][T15451] netif_receive_skb+0x1e8/0x890 [ 717.481289][T15451] ? tun_rx_batched+0x160/0x8f0 [ 717.481308][T15451] ? __pfx_netif_receive_skb+0x10/0x10 [ 717.481337][T15451] ? tun_rx_batched+0x160/0x8f0 [ 717.481355][T15451] tun_rx_batched+0x1b7/0x8f0 [ 717.481373][T15451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 717.481397][T15451] ? __pfx_lock_acquire+0x10/0x10 [ 717.481418][T15451] ? __pfx_tun_rx_batched+0x10/0x10 [ 717.481442][T15451] tun_get_user+0x2f3b/0x4560 [ 717.481460][T15451] ? tun_get_user+0x2a35/0x4560 [ 717.481485][T15451] ? __pfx_tun_get_user+0x10/0x10 [ 717.481505][T15451] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 717.481522][T15451] ? tun_get+0x1e/0x2f0 [ 717.481546][T15451] ? tun_get+0x1e/0x2f0 [ 717.481561][T15451] ? tun_get+0x27d/0x2f0 [ 717.481577][T15451] tun_chr_write_iter+0x113/0x1f0 [ 717.481595][T15451] vfs_write+0xa72/0xc90 [ 717.481612][T15451] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 717.481629][T15451] ? __pfx_vfs_write+0x10/0x10 [ 717.481642][T15451] ? do_futex+0x33b/0x560 [ 717.481672][T15451] ksys_write+0x1a0/0x2c0 [ 717.481690][T15451] ? __pfx_ksys_write+0x10/0x10 [ 717.481708][T15451] ? do_syscall_64+0x100/0x230 [ 717.481724][T15451] ? do_syscall_64+0xb6/0x230 [ 717.481740][T15451] do_syscall_64+0xf3/0x230 [ 717.481754][T15451] ? clear_bhb_loop+0x35/0x90 [ 717.481776][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.481796][T15451] RIP: 0033:0x7fd256d7475f [ 717.481811][T15451] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 717.481825][T15451] RSP: 002b:00007fd257a95010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 717.481843][T15451] RAX: ffffffffffffffda RBX: 00007fd256f03f60 RCX: 00007fd256d7475f [ 717.481856][T15451] RDX: 000000000000002a RSI: 0000000020000440 RDI: 00000000000000c8 [ 717.481868][T15451] RBP: 00007fd256de4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 717.481880][T15451] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000000 [ 717.481890][T15451] R13: 000000000000000b R14: 00007fd256f03f60 R15: 00007ffd18cddd88 [ 717.481909][T15451] [ 717.481915][T15451] Modules linked in: [ 717.481948][T15451] ---[ end trace 0000000000000000 ]--- [ 717.988576][T15451] RIP: 0010:dev_map_redirect+0x65/0x6a0 [ 717.994113][T15451] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 83 b3 3d 00 4c 8b 2b 4d 8d 7d 38 4c 89 fb 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 03 84 c0 0f 85 6e 04 00 00 41 8b 2f 89 ee 83 e6 02 31 ff [ 718.013729][T15451] RSP: 0018:ffffc9000860f088 EFLAGS: 00010202 [ 718.019814][T15451] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000040000 [ 718.027815][T15451] RDX: ffffc90008e8f000 RSI: 00000000000004b7 RDI: 00000000000004b8 [ 718.035815][T15451] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 718.043785][T15451] R10: 0000000000000004 R11: ffff88801f593c00 R12: 000000000860f0d8 [ 718.051786][T15451] R13: 0000000000000000 R14: 0000000000000008 R15: 0000000000000038 [ 718.059775][T15451] FS: 00007fd257a956c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 718.068721][T15451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.075306][T15451] CR2: 00007fc9fcb03f64 CR3: 00000000123d2000 CR4: 00000000003506f0 [ 718.083298][T15451] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 718.091286][T15451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 718.099278][T15451] Kernel panic - not syncing: Fatal exception in interrupt [ 718.106676][T15451] Kernel Offset: disabled [ 718.110986][T15451] Rebooting in 86400 seconds..