last executing test programs: 10.640495627s ago: executing program 1 (id=2647): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000000000000200010009800000010040", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.80993897s ago: executing program 2 (id=2649): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000000000020001000980000001004000", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.437618206s ago: executing program 1 (id=2650): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$loop(0x0, 0x10, 0x4a003) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYRES8], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808fbc1000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) write(r5, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 9.436889835s ago: executing program 3 (id=2651): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$loop(0x0, 0x10, 0x4a003) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYRES8], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808fbc1000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) write(r5, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.547159279s ago: executing program 2 (id=2653): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$loop(0x0, 0x10, 0x4a003) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYRES8], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808fbc1000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) write(r5, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7.20989712s ago: executing program 3 (id=2654): r0 = socket$kcm(0xa, 0xd, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004503"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0xe4, 0x0, 0xfeffffff, 0xffffffff, 0x304, 0x304, 0x304, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 7.084613811s ago: executing program 1 (id=2655): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$eJzs3c9vVF0ZAOD3Tjttv34DBWWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMXY+6dSzu0HVqk7dDO8yR37j3nXuY9Z4ZzztzDDCeAnnUuItYiYiAi7kfESJ6f5FvcbG3pda9fPZlef/VkOolm8+4/kux8mhdtfyb1af6cQxHxg+9G/DjZHrexsjo/Va1WFvP06FJtYbSxsnp5rpDnTEyOT45dv3JtYt/qerb2m5ffmbv9w9/99ksv/rj2zZ+mxSr97ER2rr0e+6lV9WKU2vL6I+L2QQTrkv787w9HT9raPhMR57P2PxJ92bsJABxnzeZINEfa0wDAcZfe/5ciKZTzuYBSFArlcmsO70wMF6r1xtKlkfryw5nI5rBORbHwYK5aGcvnCk9FMUnT49nxZnpiS/pKRJyOiJ8PfpKly9P16kw3P/gAQA/7dMv4/+/B1vgPABxzQ+95va8IAMDR977jPwBw9Bn/AaD3vMf4b+ofAI4J9/8A0HuM/wDQe3Yd/58eTjkAgEPx/Tt30q25nv//1zOPVpa/VXp0eabSmC/XlqfL0/XFhfJsvT5brZSnm83dnq9ary+MX91INlZW79Xqyw+X7s3VpmYr9yrFA64PALC702ef/zmJiLUbn2RbtK3lYKyG463Q7QIAXdPX7QIAXeP3PNC79nCPbxoAjrkdluh9S8evCD2z+CscVRc/b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP/BB//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaqUbUmhnK0FvpY+FsrliBMRcSqKyYO5amUsIk5GxJ8Gi4NperzbhQYAPlDhb0m+/tfFkQulrWcHkv8MZvuI+Mkv7/7i8dTS0uJ4mv/PjfylZ3n+xEA3KgAAtLu5Pas1Tuf7thv516+eTL/ZDrOIL2+1FhdN467nW+tMf/Rn+6EoRsTwv5I83ZJ+Xunbh/hrTyPic5v1f9wWoZTNgbRWPt0aP4194gDib77+W+MX3opfyM6l+2L2Wnx2H8oCveb5rVY/mbe9tInl7a8Q57L9zu1/KOuhPtyb/m99W/9X2Oj/+rbFT7I2f24j/e6SvLz6++9ty2yOtM49jfhC/07xk434SYf+98Ie6/iXL375fKdzzV9FXIyd47fUsm52dKm2MNpYWb08V5uarcxWHk5MTI5Pjl2/cm1iNJujbj3+YacYf79x6WSn+Gn9hzvEH9ql/l/bY/1//d/7P/rKO+J/46s7v/9n3hE/HRO/vsf4U8M3Oy7fncaf6VD/3d7/S3uM/+KvqzN7vBQAOASNldX5qWq1srjLQfpZc7drHBzNg1iL+AiKkR8MxEdRjJ4/6HbPBBy0zUbf7ZIAAAAAAAAAAAAAAACdNFZW5wfjYH9O1O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHz9LwAA//9Jt84K") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) 6.760386276s ago: executing program 0 (id=2656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.782834441s ago: executing program 3 (id=2657): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000000000000200", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.652679433s ago: executing program 0 (id=2658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 5.632840803s ago: executing program 0 (id=2659): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000000000000200010009800000010040", @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r6, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.617404444s ago: executing program 2 (id=2660): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000000000000200010009800000010040", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.524636291s ago: executing program 0 (id=2661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xea5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8020, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0xc810, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r7, 0x0, 0x22) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r8 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r8}) 4.424611612s ago: executing program 1 (id=2662): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$loop(0x0, 0x10, 0x4a003) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYRES8], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808fbc1000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) write(r5, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.685436993s ago: executing program 3 (id=2663): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$loop(0x0, 0x10, 0x4a003) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYRES8], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808fbc1000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609", @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) write(r4, &(0x7f0000000040), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.472661247s ago: executing program 2 (id=2664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, 0x0, 0x0, 0xea5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8020, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/47, 0xf000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0xc810, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r7, 0x0, 0x22) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340)) r8 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r8}) 2.511326891s ago: executing program 0 (id=2665): r0 = socket$kcm(0xa, 0xd, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004503"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0xe4, 0x0, 0xfeffffff, 0xffffffff, 0x304, 0x304, 0x304, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 2.487834441s ago: executing program 1 (id=2666): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f000000cb40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) getdents64(r0, 0x0, 0x22) 1.376240088s ago: executing program 3 (id=2667): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3, 0x205, 0xb, 0xfffffffffffffffe, 0xfffffff0, 0xa}) 771.416347ms ago: executing program 2 (id=2668): creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0xff, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) 411.370923ms ago: executing program 0 (id=2669): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$gfs2(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x125b0, &(0x7f0000037080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 276.604315ms ago: executing program 2 (id=2670): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000000000000200010009800000010040", @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r6, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 276.149245ms ago: executing program 3 (id=2671): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000000000000200", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=2672): openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x141140, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): t=003f, bcdDevice= 0.00 [ 1099.287648][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.322149][ T5754] usb 4-1: config 0 descriptor?? [ 1099.671758][ T8434] usb 3-1: Using ep0 maxpacket: 8 [ 1099.730294][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1921'. [ 1100.606275][T12456] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1100.871801][T12456] usb 2-1: Using ep0 maxpacket: 8 [ 1100.888474][T12456] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 1100.899766][T12456] usb 2-1: config 0 has no interface number 0 [ 1100.920015][T12456] usb 2-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1100.929561][T12456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.941112][T12456] usb 2-1: Product: syz [ 1100.946919][T12456] usb 2-1: Manufacturer: syz [ 1100.961608][T12456] usb 2-1: SerialNumber: syz [ 1100.989320][T12456] usb 2-1: config 0 descriptor?? [ 1100.994359][ T5754] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 1100.994389][ T5754] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 1100.994413][ T5754] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 1100.994437][ T5754] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 1101.024791][T12456] option 2-1:0.211: GSM modem (1-port) converter detected [ 1101.030804][ T5754] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 1101.041128][ T8434] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1101.049450][ T8434] usb 3-1: config 0 has no interface number 0 [ 1101.059873][ T8434] usb 3-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1101.168141][ T8434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.176608][ T5754] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.07 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0 [ 1101.187848][ T8434] usb 3-1: Product: syz [ 1101.217092][ T8434] usb 3-1: Manufacturer: syz [ 1101.222170][ T5754] usb 4-1: USB disconnect, device number 28 [ 1101.231240][ T8434] usb 3-1: SerialNumber: syz [ 1101.257501][ T8434] usb 3-1: config 0 descriptor?? [ 1101.269318][ T8434] usb 3-1: can't set config #0, error -71 [ 1101.287885][ T8434] usb 3-1: USB disconnect, device number 34 [ 1101.336349][T14401] fido_id[14401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1102.621864][ T5754] usb 2-1: USB disconnect, device number 32 [ 1102.654354][ T5754] option 2-1:0.211: device disconnected [ 1103.633008][T14415] loop2: detected capacity change from 0 to 4096 [ 1104.208526][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1932'. [ 1104.501502][ T5819] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1104.701417][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 1104.802148][ T5819] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 1104.821468][ T5819] usb 2-1: config 0 has no interface number 0 [ 1104.842074][ T5819] usb 2-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1104.851153][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.860974][ T5819] usb 2-1: Product: syz [ 1104.866029][ T5819] usb 2-1: Manufacturer: syz [ 1104.870755][ T5819] usb 2-1: SerialNumber: syz [ 1104.892275][ T5819] usb 2-1: config 0 descriptor?? [ 1104.909876][ T5819] option 2-1:0.211: GSM modem (1-port) converter detected [ 1105.108518][T12456] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1105.291831][T12456] usb 1-1: Using ep0 maxpacket: 16 [ 1105.326732][T12456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.368596][T12456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.417826][T12456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1105.776372][T12456] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1105.786853][T12456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.232141][T12456] usb 1-1: config 0 descriptor?? [ 1106.562881][T14449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1936'. [ 1106.921262][ T8434] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1107.092996][ T5754] usb 2-1: USB disconnect, device number 33 [ 1107.149814][ T5754] option 2-1:0.211: device disconnected [ 1107.151572][T12456] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 1107.178215][T12456] microsoft 0003:045E:07DA.0005: parse failed [ 1107.189722][T12456] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 1107.251400][ T8434] usb 3-1: Using ep0 maxpacket: 8 [ 1107.253364][ T8434] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1107.253393][ T8434] usb 3-1: config 0 has no interface number 0 [ 1107.255764][ T8434] usb 3-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1107.255790][ T8434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.255809][ T8434] usb 3-1: Product: syz [ 1107.255824][ T8434] usb 3-1: Manufacturer: syz [ 1107.255838][ T8434] usb 3-1: SerialNumber: syz [ 1107.258740][ T8434] usb 3-1: config 0 descriptor?? [ 1107.272750][ T8434] option 3-1:0.211: GSM modem (1-port) converter detected [ 1107.399060][T12456] usb 1-1: USB disconnect, device number 32 [ 1107.545679][T14458] loop3: detected capacity change from 0 to 512 [ 1107.555218][T14458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1107.574289][T14458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1107.582577][T14458] System zones: 1-12 [ 1107.588229][T14458] EXT4-fs (loop3): 1 truncate cleaned up [ 1107.595563][T14458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.453019][T14481] loop1: detected capacity change from 0 to 512 [ 1109.696758][T14481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1109.756491][T14481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1109.764682][T14481] System zones: 1-12 [ 1109.767884][ T8435] usb 3-1: USB disconnect, device number 35 [ 1109.774696][T14481] EXT4-fs (loop1): 1 truncate cleaned up [ 1109.775738][ T8435] option 3-1:0.211: device disconnected [ 1109.781549][T14481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.018068][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.071885][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.636844][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1946'. [ 1111.963586][T14509] loop2: detected capacity change from 0 to 512 [ 1112.518185][ T5819] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1112.615414][T14509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1112.684537][T14509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1112.692650][T14509] System zones: 1-12 [ 1112.704077][T14509] EXT4-fs (loop2): 1 truncate cleaned up [ 1112.710884][T14509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.858960][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 1112.928653][ T5819] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 1113.106339][ T5819] usb 2-1: config 0 has no interface number 0 [ 1113.118515][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.130094][ T5819] usb 2-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1113.249221][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.267109][ T5819] usb 2-1: Product: syz [ 1113.272256][ T5819] usb 2-1: Manufacturer: syz [ 1113.276874][ T5819] usb 2-1: SerialNumber: syz [ 1113.286041][ T5819] usb 2-1: config 0 descriptor?? [ 1113.294155][ T5819] option 2-1:0.211: GSM modem (1-port) converter detected [ 1113.344022][ T8434] usb 2-1: USB disconnect, device number 34 [ 1113.351083][ T8434] option 2-1:0.211: device disconnected [ 1114.534879][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1951'. [ 1115.081637][ T8438] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1115.276372][T14535] loop1: detected capacity change from 0 to 512 [ 1115.295897][T14535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1115.333392][T14535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1115.341540][T14535] System zones: 1-12 [ 1115.346007][T14535] EXT4-fs (loop1): 1 truncate cleaned up [ 1115.352923][T14535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.411537][ T8438] usb 3-1: Using ep0 maxpacket: 8 [ 1115.449214][T14538] loop3: detected capacity change from 0 to 512 [ 1115.465028][ T8438] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1115.485522][ T8438] usb 3-1: config 0 has no interface number 0 [ 1115.532700][T14538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1115.577266][T14538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1115.585778][T14538] System zones: 1-12 [ 1115.594683][T14538] EXT4-fs (loop3): 1 truncate cleaned up [ 1115.605886][T14538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.676505][ T8438] usb 3-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1115.852979][ T8438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.969915][ T8438] usb 3-1: Product: syz [ 1115.983616][ T8438] usb 3-1: Manufacturer: syz [ 1116.041480][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.047811][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.068236][ T8438] usb 3-1: SerialNumber: syz [ 1116.107406][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.123355][ T8438] usb 3-1: config 0 descriptor?? [ 1116.162664][ T8438] option 3-1:0.211: GSM modem (1-port) converter detected [ 1117.453282][ T5818] usb 3-1: USB disconnect, device number 36 [ 1117.460440][ T5818] option 3-1:0.211: device disconnected [ 1117.712211][T14554] netlink: 'syz.2.1958': attribute type 10 has an invalid length. [ 1117.720068][T14554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1958'. [ 1117.732248][T14554] bridge0: port 3(dummy0) entered blocking state [ 1117.739684][T14554] bridge0: port 3(dummy0) entered disabled state [ 1117.746688][T14554] dummy0: entered allmulticast mode [ 1117.753293][T14554] dummy0: entered promiscuous mode [ 1117.758820][T14554] bridge0: port 3(dummy0) entered blocking state [ 1117.765225][T14554] bridge0: port 3(dummy0) entered forwarding state [ 1118.457625][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1961'. [ 1119.429567][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.551603][ T5754] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1120.270437][ T5754] usb 4-1: Using ep0 maxpacket: 8 [ 1120.342322][ T5754] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 1120.441295][ T5754] usb 4-1: config 0 has no interface number 0 [ 1120.460151][ T5754] usb 4-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1120.469956][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.483863][ T5754] usb 4-1: Product: syz [ 1120.608134][ T5754] usb 4-1: Manufacturer: syz [ 1120.629416][ T5754] usb 4-1: SerialNumber: syz [ 1120.655533][ T5754] usb 4-1: config 0 descriptor?? [ 1120.691041][ T5754] option 4-1:0.211: GSM modem (1-port) converter detected [ 1121.650278][T14593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1121.689023][T14593] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1121.877015][T14593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1121.973545][ T5818] usb 4-1: USB disconnect, device number 29 [ 1122.056277][T14593] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1122.087722][ T5818] option 4-1:0.211: device disconnected [ 1122.444740][T14597] loop2: detected capacity change from 0 to 512 [ 1122.507003][T14599] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1122.533832][T14599] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1122.539924][T14599] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1122.539924][T14599] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1122.558830][T14599] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1122.570240][T14599] CUSE: DEVNAME unspecified [ 1122.678034][T14597] EXT4-fs (loop2): 1 orphan inode deleted [ 1122.701664][ T78] __quota_error: 6 callbacks suppressed [ 1122.701678][ T78] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1122.722713][T14597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.735713][T14597] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.747770][ T78] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1 [ 1123.026607][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.716580][T10367] Bluetooth: hci0: command 0x0406 tx timeout [ 1124.041323][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1125.872616][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1126.111262][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1126.912525][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1978'. [ 1127.851274][T14641] tipc: Started in network mode [ 1127.856967][T14641] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 1127.890744][T14641] tipc: Enabling of bearer rejected, failed to enable media [ 1128.396736][ T8434] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1129.461324][ T8434] usb 3-1: Using ep0 maxpacket: 8 [ 1129.470910][ T8434] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 1130.401860][ T8434] usb 3-1: config 0 has no interface number 0 [ 1131.786620][ T8434] usb 3-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1131.802180][ T8434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.811297][ T8434] usb 3-1: Product: syz [ 1131.815486][ T8434] usb 3-1: Manufacturer: syz [ 1131.820089][ T8434] usb 3-1: SerialNumber: syz [ 1131.834497][ T8434] usb 3-1: config 0 descriptor?? [ 1131.839990][ T8434] usb 3-1: can't set config #0, error -71 [ 1131.854296][ T8434] usb 3-1: USB disconnect, device number 37 [ 1132.408972][T14672] Illegal XDP return value 32768 on prog (id 397) dev N/A, expect packet loss! [ 1133.278798][T14679] loop1: detected capacity change from 0 to 2048 [ 1133.316683][T14679] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1133.360065][T14679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.467571][T14679] EXT4-fs error (device loop1): empty_inline_dir:1849: inode #12: block 9: comm syz.1.1989: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 1133.546536][T14679] EXT4-fs (loop1): Remounting filesystem read-only [ 1133.564989][T14679] EXT4-fs warning (device loop1): empty_inline_dir:1856: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 1134.601087][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.417471][T14703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1135.533489][T14683] loop2: detected capacity change from 0 to 32768 [ 1135.739452][T14683] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1135.791776][T12456] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1136.041472][T12456] usb 4-1: Using ep0 maxpacket: 8 [ 1136.076391][T12456] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 1136.185378][T12456] usb 4-1: config 0 has no interface number 0 [ 1136.303106][T12456] usb 4-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1136.388720][T12456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.397030][T12456] usb 4-1: Product: syz [ 1136.402571][T12456] usb 4-1: Manufacturer: syz [ 1136.407179][T12456] usb 4-1: SerialNumber: syz [ 1136.510041][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 1136.604428][T12456] usb 4-1: config 0 descriptor?? [ 1136.614742][T12456] option 4-1:0.211: GSM modem (1-port) converter detected [ 1138.841656][ T8434] usb 4-1: USB disconnect, device number 30 [ 1138.848710][ T8434] option 4-1:0.211: device disconnected [ 1142.831305][T12456] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1143.481447][T12456] usb 2-1: Using ep0 maxpacket: 8 [ 1143.488779][T12456] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1143.507561][T12456] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1143.516778][T12456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.525714][T12456] usb 2-1: Product: syz [ 1143.530883][T12456] usb 2-1: Manufacturer: syz [ 1143.535929][T12456] usb 2-1: SerialNumber: syz [ 1143.548327][T12456] usb 2-1: config 0 descriptor?? [ 1143.571454][T12456] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1143.579715][T12456] usb 2-1: setting power ON [ 1143.590309][T12456] dvb-usb: bulk message failed: -22 (2/0) [ 1143.603118][T12456] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1143.616785][T12456] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1143.627122][T12456] usb 2-1: media controller created [ 1143.844574][T12456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.876423][T14746] dvb-usb: bulk message failed: -22 (3/0) [ 1143.892078][T14746] cxusb: i2c wr: len=79 is too big! [ 1143.892078][T14746] [ 1143.939857][T12456] usb 2-1: selecting invalid altsetting 6 [ 1144.026183][T12456] usb 2-1: digital interface selection failed (-22) [ 1144.035371][T12456] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1144.376142][T12456] usb 2-1: setting power OFF [ 1144.411835][T12456] dvb-usb: bulk message failed: -22 (2/0) [ 1144.451794][T12456] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1144.599593][T12456] (NULL device *): no alternate interface [ 1144.630862][T14773] loop3: detected capacity change from 0 to 512 [ 1145.112169][T14773] EXT4-fs: Ignoring removed nobh option [ 1145.138885][T12456] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1145.170992][T12456] usb 2-1: USB disconnect, device number 35 [ 1145.187668][T14773] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.2014: corrupted inode contents [ 1145.208187][T14773] EXT4-fs (loop3): Remounting filesystem read-only [ 1145.252817][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1145.274134][T14773] Quota error (device loop3): write_blk: dquota write failed [ 1145.297625][T14773] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 1145.330552][T14773] EXT4-fs (loop3): 1 truncate cleaned up [ 1145.342257][T14773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.376187][T14773] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.480539][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.631840][T14764] Bluetooth: hci0: command 0x0406 tx timeout [ 1145.749004][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1146.779138][T14795] loop3: detected capacity change from 0 to 512 [ 1147.356379][T14795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1147.432856][T14795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1147.441039][T14795] System zones: 1-12 [ 1147.446114][T14795] EXT4-fs (loop3): 1 truncate cleaned up [ 1147.459184][T14795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.707219][T14798] loop1: detected capacity change from 0 to 2048 [ 1147.737330][T14798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1147.794881][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.475569][T14809] loop3: detected capacity change from 0 to 512 [ 1148.554051][T14809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1148.576922][T14809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1148.585170][T14809] System zones: 1-12 [ 1148.594003][T14809] EXT4-fs (loop3): 1 truncate cleaned up [ 1148.601018][T14809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.878652][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.314984][T14827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1150.323805][T14827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1150.345333][ T8434] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1150.370027][ T5818] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1150.545667][ T8434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.557036][ T8434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.568713][ T8434] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1150.578469][ T8434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.642997][ T5818] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1150.668208][ T5818] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1150.689126][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1150.697029][ T8434] usb 2-1: config 0 descriptor?? [ 1150.728616][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1150.755513][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1151.015690][ T5818] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1151.024896][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1151.167417][ T5818] usb 4-1: Product: syz [ 1151.173639][ T5818] usb 4-1: Manufacturer: syz [ 1151.377156][ T5818] cdc_wdm 4-1:1.0: skipping garbage [ 1151.448880][ T5818] cdc_wdm 4-1:1.0: skipping garbage [ 1151.579000][ T5818] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1151.590350][ T5818] cdc_wdm 4-1:1.0: Unknown control protocol [ 1151.688024][ T8434] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71 [ 1151.712004][ T8434] usb 2-1: USB disconnect, device number 36 [ 1151.825308][ T5818] usb 4-1: USB disconnect, device number 31 [ 1151.829639][T14842] loop2: detected capacity change from 0 to 2048 [ 1151.850257][T14842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1151.885190][T14842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.946754][T14842] EXT4-fs error (device loop2): empty_inline_dir:1849: inode #12: block 9: comm syz.2.2031: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 1151.987337][T14842] EXT4-fs (loop2): Remounting filesystem read-only [ 1151.994653][T14842] EXT4-fs warning (device loop2): empty_inline_dir:1856: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 1152.046492][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.513028][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2036'. [ 1153.524610][T14866] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1153.533429][T14866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1154.918383][ T8434] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1155.634613][T14885] loop1: detected capacity change from 0 to 1024 [ 1155.707112][ T8434] usb 1-1: Using ep0 maxpacket: 8 [ 1155.723490][ T8434] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 1155.737184][ T8434] usb 1-1: config 0 has no interface number 0 [ 1155.748288][ T8434] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1155.777990][ T8434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.793376][T14885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.811240][ T8434] usb 1-1: Product: syz [ 1155.854491][T14885] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.783139][T14844] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1157.161224][ T8434] usb 1-1: Manufacturer: syz [ 1157.165890][ T8434] usb 1-1: SerialNumber: syz [ 1157.182298][ T8434] usb 1-1: config 0 descriptor?? [ 1157.187750][ T8434] usb 1-1: can't set config #0, error -71 [ 1157.212731][ T8434] usb 1-1: USB disconnect, device number 33 [ 1157.380887][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.983333][T14908] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1157.992209][T14908] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1158.174098][T14905] loop2: detected capacity change from 0 to 512 [ 1158.279610][T14905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1158.362177][T14905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1158.370294][T14905] System zones: 1-12 [ 1158.402034][T14905] EXT4-fs (loop2): 1 truncate cleaned up [ 1158.408862][T14905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.802444][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.630593][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2052'. [ 1160.931358][ T8434] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1161.105736][ T27] audit: type=1326 audit(2000000919.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.1.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28938e929 code=0x7ffc0000 [ 1161.129877][ T27] audit: type=1326 audit(2000000919.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.1.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28938e929 code=0x7ffc0000 [ 1161.154338][ T27] audit: type=1326 audit(2000000919.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.1.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd28938e929 code=0x7ffc0000 [ 1161.375327][ T8434] usb 1-1: Using ep0 maxpacket: 8 [ 1161.380537][ T27] audit: type=1326 audit(2000000919.490:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.1.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28938e929 code=0x7ffc0000 [ 1161.403600][ T27] audit: type=1326 audit(2000000919.490:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.1.2057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28938e929 code=0x7ffc0000 [ 1161.411947][ T8434] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 1162.634219][ T8434] usb 1-1: config 0 has no interface number 0 [ 1162.650283][ T8434] usb 1-1: New USB device found, idVendor=12d1, idProduct=6ce6, bcdDevice=af.a8 [ 1162.659621][ T8434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.669174][ T8434] usb 1-1: Product: syz [ 1162.751820][T14960] overlayfs: missing 'lowerdir' [ 1163.072725][ T8434] usb 1-1: Manufacturer: syz [ 1163.077355][ T8434] usb 1-1: SerialNumber: syz [ 1163.178430][ T8434] usb 1-1: config 0 descriptor?? [ 1163.351081][T14965] loop2: detected capacity change from 0 to 512 [ 1163.880062][T14965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1163.913641][T14965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1163.921758][T14965] System zones: 1-12 [ 1163.927465][ T8434] usb 1-1: can't set config #0, error -71 [ 1163.945957][T14965] EXT4-fs (loop2): 1 truncate cleaned up [ 1163.953002][T14965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1163.990245][ T8434] usb 1-1: USB disconnect, device number 34 [ 1164.206112][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.310974][T15005] overlayfs: missing 'lowerdir' [ 1170.948394][T15038] loop2: detected capacity change from 0 to 512 [ 1171.597713][T15038] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1171.641404][T15038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1171.649448][T15038] System zones: 1-12 [ 1171.660965][T15038] EXT4-fs (loop2): 1 truncate cleaned up [ 1171.667869][T15038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.119325][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.249047][T15061] loop1: detected capacity change from 0 to 32768 [ 1175.508512][T15061] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1176.471584][T15061] XFS (loop1): Ending clean mount [ 1176.538704][T15061] XFS (loop1): Quotacheck needed: Please wait. [ 1176.807339][T15061] XFS (loop1): Quotacheck: Done. [ 1177.275714][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1177.437028][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.448382][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.923102][T12456] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1179.511336][T12456] usb 4-1: Using ep0 maxpacket: 8 [ 1179.519750][T12456] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1179.532408][T12456] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1179.546941][T12456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.564809][T12456] usb 4-1: Product: syz [ 1179.574450][T12456] usb 4-1: Manufacturer: syz [ 1179.693358][T12456] usb 4-1: SerialNumber: syz [ 1179.723899][T12456] usb 4-1: config 0 descriptor?? [ 1179.745591][T12456] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1179.760095][T12456] usb 4-1: setting power ON [ 1179.765039][T12456] dvb-usb: bulk message failed: -22 (2/0) [ 1179.853634][T12456] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1179.870943][T12456] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1179.882221][T12456] usb 4-1: media controller created [ 1180.017415][T15108] dvb-usb: bulk message failed: -22 (3/0) [ 1180.077062][T15108] cxusb: i2c wr: len=79 is too big! [ 1180.077062][T15108] [ 1180.324807][T12456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.408340][T12456] usb 4-1: selecting invalid altsetting 6 [ 1180.428508][T12456] usb 4-1: digital interface selection failed (-22) [ 1180.438527][T12456] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1180.449461][T12456] usb 4-1: setting power OFF [ 1180.454384][T12456] dvb-usb: bulk message failed: -22 (2/0) [ 1180.460545][T12456] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1180.471759][T12456] (NULL device *): no alternate interface [ 1180.517371][T12456] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1180.595993][T12456] usb 4-1: USB disconnect, device number 32 [ 1180.787395][T15140] loop2: detected capacity change from 0 to 512 [ 1180.890224][T15140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1180.968928][T15140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1180.978035][T15140] System zones: 1-12 [ 1180.996852][T15140] EXT4-fs (loop2): 1 truncate cleaned up [ 1181.013629][T15140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.372639][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.002434][T15153] overlayfs: missing 'workdir' [ 1182.084195][T15155] loop3: detected capacity change from 0 to 512 [ 1182.116337][T15155] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2102: iget: bad i_size value: 38620345925642 [ 1182.130826][T15155] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2102: couldn't read orphan inode 15 (err -117) [ 1182.146171][T15155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.237733][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.971438][T15172] loop1: detected capacity change from 0 to 512 [ 1183.016422][T15169] loop3: detected capacity change from 0 to 512 [ 1183.257136][T15172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1183.257322][T15169] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1183.281619][T15169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1183.289610][T15169] System zones: 1-12 [ 1183.294331][T15169] EXT4-fs (loop3): 1 truncate cleaned up [ 1183.300603][T15169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.320377][T15172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1183.328395][T15172] System zones: 1-12 [ 1183.332857][T15172] EXT4-fs (loop1): 1 truncate cleaned up [ 1183.339136][T15172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1183.352006][ T8439] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1183.551220][ T8439] usb 3-1: Using ep0 maxpacket: 8 [ 1184.205332][ T8439] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1184.215590][ T8439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.216610][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.223714][ T8439] usb 3-1: Product: syz [ 1184.236904][ T8439] usb 3-1: Manufacturer: syz [ 1184.242363][ T8439] usb 3-1: SerialNumber: syz [ 1184.249757][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.300744][ T8439] usb 3-1: config 0 descriptor?? [ 1184.326224][ T8439] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1184.361884][ T8439] usb 3-1: setting power ON [ 1184.366439][ T8439] dvb-usb: bulk message failed: -22 (2/0) [ 1184.366537][T15178] loop3: detected capacity change from 0 to 1024 [ 1184.383346][ T8439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1184.406186][ T8439] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1184.428920][ T8439] usb 3-1: media controller created [ 1184.477035][ T8439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.528929][T15160] dvb-usb: bulk message failed: -22 (3/0) [ 1184.550386][T15160] dvb-usb: bulk message failed: -22 (4/0) [ 1184.730867][ T8439] usb 3-1: selecting invalid altsetting 6 [ 1184.755173][ T8439] usb 3-1: digital interface selection failed (-22) [ 1184.918302][T15190] loop1: detected capacity change from 0 to 512 [ 1184.951771][T15190] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1185.015698][T15190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1185.024801][T15190] System zones: 1-12 [ 1185.035700][T15190] EXT4-fs (loop1): 1 truncate cleaned up [ 1185.053686][T15190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.214295][ T8439] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1185.331498][ T8439] usb 3-1: setting power OFF [ 1185.347668][ T8439] dvb-usb: bulk message failed: -22 (2/0) [ 1185.354181][ T8439] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1185.363566][ T8439] (NULL device *): no alternate interface [ 1185.403115][ T8439] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1185.456948][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.498296][ T8439] usb 3-1: USB disconnect, device number 38 [ 1185.976336][ T8438] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1186.117546][T15203] overlayfs: missing 'workdir' [ 1186.630994][T15197] loop2: detected capacity change from 0 to 32768 [ 1186.691813][T15197] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1186.781112][T15197] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1186.834628][ T8438] usb 4-1: Using ep0 maxpacket: 32 [ 1186.879379][ T8438] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1186.953736][ T8438] usb 4-1: config 0 has no interface number 0 [ 1187.014821][ T8438] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1187.099100][ T8438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.185276][ T8438] usb 4-1: Product: syz [ 1187.233031][ T8438] usb 4-1: Manufacturer: syz [ 1187.278165][ T8438] usb 4-1: SerialNumber: syz [ 1187.368167][ T8438] usb 4-1: config 0 descriptor?? [ 1187.514898][ T8438] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1187.584334][T15197] syz.2.2113 (15197) used greatest stack depth: 19016 bytes left [ 1187.613829][ T8438] usb 4-1: selecting invalid altsetting 1 [ 1187.671867][ T8438] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1187.703726][ T8438] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1187.728402][ T8438] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1187.747782][ T8438] usb 4-1: media controller created [ 1187.776739][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 1187.786562][ T8438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1187.878622][T15218] loop1: detected capacity change from 0 to 1024 [ 1187.898908][T15218] EXT4-fs: inline encryption not supported [ 1187.908134][T15218] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1187.946015][ T8438] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1187.962825][T15218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.974959][ T8438] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1187.977801][ T8438] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1188.239663][ T8438] usb 4-1: USB disconnect, device number 33 [ 1189.128240][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.349153][T15242] loop3: detected capacity change from 0 to 256 [ 1190.356612][T15242] exfat: Deprecated parameter 'utf8' [ 1190.370691][T15242] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x509db19e, utbl_chksum : 0xe619d30d) [ 1190.600567][T15246] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2126'. [ 1190.620779][ T8438] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1191.307238][T15238] loop1: detected capacity change from 0 to 40427 [ 1191.315445][T15238] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (0, 24) [ 1191.327287][T15238] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1191.336202][ T8438] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1191.351517][ T8438] usb 1-1: config 0 has no interface number 0 [ 1191.375416][ T8438] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 1191.460467][ T8438] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1191.569489][T15238] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 2 [ 1191.591568][ T8438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.685380][T15238] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1191.738118][ T8438] usb 1-1: config 0 descriptor?? [ 1191.765634][T15236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1191.805396][ T8438] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input18 [ 1191.987288][ C1] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1192.385949][T15267] loop1: detected capacity change from 0 to 512 [ 1192.415526][T15267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1192.454681][T15267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1192.463719][T15267] System zones: 1-12 [ 1192.488384][T15267] EXT4-fs (loop1): 1 truncate cleaned up [ 1192.505387][T15267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.953584][T12456] usb 1-1: USB disconnect, device number 35 [ 1193.167771][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.446022][T15278] loop2: detected capacity change from 0 to 512 [ 1193.518625][T15278] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1193.588254][T15278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1193.597378][T15278] System zones: 1-12 [ 1193.613030][T15278] EXT4-fs (loop2): 1 truncate cleaned up [ 1193.630305][T15278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.053235][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.056042][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 1195.078832][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 1195.089135][T15291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 1196.356161][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2139'. [ 1197.909219][T15328] loop1: detected capacity change from 0 to 64 [ 1198.001325][T12456] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1198.046732][T15332] loop2: detected capacity change from 0 to 256 [ 1198.060385][T15332] exfat: Deprecated parameter 'utf8' [ 1198.075786][T15332] exfat: Deprecated parameter 'utf8' [ 1198.081109][T15332] exfat: Deprecated parameter 'utf8' [ 1198.192500][T15332] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1198.216481][T12456] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.279484][T12456] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1198.342060][T12456] usb 4-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.00 [ 1198.380490][T12456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.509143][T12456] usb 4-1: config 0 descriptor?? [ 1199.161798][T12456] hid-generic 0003:0EEF:7207.0007: unknown main item tag 0x1 [ 1199.175216][T12456] hid-generic 0003:0EEF:7207.0007: hidraw0: USB HID v0.00 Device [HID 0eef:7207] on usb-dummy_hcd.3-1/input0 [ 1199.398713][ T8438] usb 4-1: USB disconnect, device number 34 [ 1200.157287][T15346] fido_id[15346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1200.831556][ T8438] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1201.031351][ T8438] usb 2-1: Using ep0 maxpacket: 32 [ 1201.048068][ T8438] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.067252][ T8438] usb 2-1: config 0 has no interface number 0 [ 1201.099480][ T8438] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1201.122585][ T8438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.130635][ T8438] usb 2-1: Product: syz [ 1201.135204][ T8438] usb 2-1: Manufacturer: syz [ 1201.139824][ T8438] usb 2-1: SerialNumber: syz [ 1201.165622][ T8438] usb 2-1: config 0 descriptor?? [ 1201.184551][ T8438] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1201.193828][ T8438] usb 2-1: selecting invalid altsetting 1 [ 1201.199578][ T8438] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1201.212662][ T8438] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1201.224503][ T8438] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1201.233676][ T8438] usb 2-1: media controller created [ 1201.257246][ T8438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1202.410379][ T8438] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1202.420677][ T8438] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1202.431307][ T8438] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1203.323779][ T8438] usb 2-1: USB disconnect, device number 37 [ 1203.428682][T15390] loop1: detected capacity change from 0 to 512 [ 1203.479235][T15390] EXT4-fs (loop1): 1 orphan inode deleted [ 1203.502659][ T42] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1203.514251][T15390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.551418][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 1 [ 1203.589481][T15390] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.650181][T15390] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2159: iget: bad i_size value: 360287970189639690 [ 1203.806999][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.357230][T15406] loop2: detected capacity change from 0 to 512 [ 1204.439495][T15406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1204.471918][T15406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1204.480000][T15406] System zones: 1-12 [ 1204.484663][T15406] EXT4-fs (loop2): 1 truncate cleaned up [ 1204.491613][T15406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.877796][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.196767][T15425] loop1: detected capacity change from 0 to 1024 [ 1206.247839][T15427] loop3: detected capacity change from 0 to 512 [ 1206.263087][T15427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.269985][T15425] hfsplus: bad catalog entry type [ 1206.340019][T15427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1206.456999][T15427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.487289][T15427] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.534698][ T27] audit: type=1800 audit(2000000964.910:9): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2167" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1206.601602][ T27] audit: type=1800 audit(2000000964.940:10): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2167" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1206.647263][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.816861][T15438] loop3: detected capacity change from 0 to 512 [ 1206.883270][T15438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1206.947634][T15438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.993349][T15438] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1208.097754][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.687258][T15449] loop2: detected capacity change from 0 to 1024 [ 1208.921190][T15453] overlayfs: missing 'workdir' [ 1210.312861][T15465] loop3: detected capacity change from 0 to 512 [ 1210.553335][T15465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1210.565118][T15465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1210.573113][T15465] System zones: 1-12 [ 1210.577557][T15465] EXT4-fs (loop3): 1 truncate cleaned up [ 1210.583945][T15465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.184832][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.767839][T15495] loop2: detected capacity change from 0 to 512 [ 1212.883077][T15495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1213.264205][T15495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1213.273266][T15495] System zones: 1-12 [ 1213.340303][T15495] EXT4-fs (loop2): 1 truncate cleaned up [ 1213.348248][T15495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.600118][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.444017][T15537] overlayfs: missing 'workdir' [ 1219.541780][T12456] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1219.781417][T12456] usb 3-1: Using ep0 maxpacket: 16 [ 1219.872136][T12456] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.939758][T12456] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.022167][T12456] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1220.064147][T12456] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1220.138050][T12456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.290294][T12456] usb 3-1: config 0 descriptor?? [ 1220.375488][T15552] loop1: detected capacity change from 0 to 8192 [ 1220.419522][T15552] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1220.471227][T15552] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1220.481053][T15552] REISERFS (device loop1): using ordered data mode [ 1220.541247][T15552] reiserfs: using flush barriers [ 1220.564030][T15552] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1220.587402][T15552] REISERFS (device loop1): checking transaction log (loop1) [ 1220.610569][T15552] REISERFS (device loop1): Using r5 hash to sort names [ 1220.626711][T15552] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1220.645437][T15552] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1220.730870][T12456] kye 0003:0458:0138.0008: unknown main item tag 0x4 [ 1220.756614][T12456] kye 0003:0458:0138.0008: unexpected long global item [ 1220.781833][T12456] kye 0003:0458:0138.0008: parse failed [ 1220.782767][T15552] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1220.801213][T12456] kye: probe of 0003:0458:0138.0008 failed with error -22 [ 1220.934304][T12456] usb 3-1: USB disconnect, device number 39 [ 1222.203169][T15569] loop2: detected capacity change from 0 to 128 [ 1222.233564][T15569] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1226.121416][T12456] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1227.421308][T12456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.432261][T12456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.451271][T12456] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1227.460337][T12456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.782366][T12456] usb 4-1: config 0 descriptor?? [ 1228.303388][T12456] hid-led 0003:1D34:000A.0009: unknown main item tag 0x2 [ 1228.521888][T12456] hid-led 0003:1D34:000A.0009: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1228.601841][T12456] hid-led 0003:1D34:000A.0009: Dream Cheeky Webmail Notifier initialized [ 1229.857946][T12456] usb 4-1: USB disconnect, device number 35 [ 1231.757702][T15628] loop1: detected capacity change from 0 to 32768 [ 1232.335885][T15628] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1233.082662][T15628] XFS (loop1): Ending clean mount [ 1233.133987][ T5764] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1233.282317][ T27] audit: type=1326 audit(2000000991.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2878e929 code=0x7ffc0000 [ 1233.313616][T15659] loop2: detected capacity change from 0 to 2048 [ 1233.366359][ T27] audit: type=1326 audit(2000000991.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2878e929 code=0x7ffc0000 [ 1233.453248][T15659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.456547][ T27] audit: type=1326 audit(2000000991.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcb2878e929 code=0x7ffc0000 [ 1233.753412][ T27] audit: type=1326 audit(2000000991.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2878e929 code=0x7ffc0000 [ 1234.152806][ T27] audit: type=1326 audit(2000000991.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2878e929 code=0x7ffc0000 [ 1234.175320][ T27] audit: type=1326 audit(2000000991.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb2878e929 code=0x7ffc0000 [ 1234.197735][ T27] audit: type=1326 audit(2000000991.640:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb2878e963 code=0x7ffc0000 [ 1234.219918][ T27] audit: type=1326 audit(2000000991.650:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb2878d3df code=0x7ffc0000 [ 1234.242935][ T27] audit: type=1326 audit(2000000991.700:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcb2878e9b7 code=0x7ffc0000 [ 1234.263773][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.265398][ T27] audit: type=1326 audit(2000000991.700:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.2.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb2878d290 code=0x7ffc0000 [ 1236.101265][T12456] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1236.301430][T12456] usb 1-1: Using ep0 maxpacket: 8 [ 1236.436259][T15688] loop1: detected capacity change from 0 to 512 [ 1236.462573][T15688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1236.529859][T15688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1236.538721][T15688] System zones: 1-12 [ 1236.557478][T15688] EXT4-fs (loop1): 1 truncate cleaned up [ 1236.573815][T15688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.887114][T12456] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.912540][T12456] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.023835][T12456] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1237.033885][T12456] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.045122][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.047656][T12456] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.066194][T12456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.308663][T12456] usb 1-1: GET_CAPABILITIES returned 0 [ 1237.318378][T12456] usbtmc 1-1:16.0: can't read capabilities [ 1238.180460][T12456] usb 1-1: USB disconnect, device number 36 [ 1238.554435][ T8438] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1238.882056][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.888586][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.463982][ T8438] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1239.969330][T15719] loop1: detected capacity change from 0 to 512 [ 1240.684485][T15719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1240.929644][T15719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1240.937868][T15719] System zones: 1-12 [ 1241.051596][T15719] EXT4-fs (loop1): 1 truncate cleaned up [ 1241.058561][T15719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.330429][ T8438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1241.371590][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.411211][ T8438] usb 4-1: string descriptor 0 read error: -71 [ 1241.417664][ T8438] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1241.429479][ T8438] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1241.505071][ T8438] usb 4-1: config 0 descriptor?? [ 1241.523173][ T8438] usb 4-1: can't set config #0, error -71 [ 1241.544224][ T8438] usb 4-1: USB disconnect, device number 36 [ 1241.589777][T15726] bridge0: port 3(syz_tun) entered blocking state [ 1241.621948][T15726] bridge0: port 3(syz_tun) entered disabled state [ 1241.628958][T15726] syz_tun: entered allmulticast mode [ 1243.129373][T15750] loop3: detected capacity change from 0 to 4096 [ 1243.252224][ T8438] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1243.279051][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 1243.279064][ T27] audit: type=1800 audit(2000001001.660:36): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2252" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 1243.491874][ T8438] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1243.502747][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1243.517014][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1243.595713][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1243.688250][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1243.767414][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1243.898847][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.327717][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1244.371423][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1244.427352][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.536957][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1244.563271][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1244.582456][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.629312][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1244.671335][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1244.687252][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.703929][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1244.713079][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1244.749553][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.780447][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1244.807640][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1244.879616][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.931563][ T8438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1244.968603][ T8438] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1245.032211][ T8438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1245.091578][ T8438] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1245.151557][ T8438] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1245.208842][ T8438] usb 2-1: Product: syz [ 1245.231064][ T8438] usb 2-1: Manufacturer: syz [ 1245.256026][ T8438] usb 2-1: SerialNumber: syz [ 1245.349769][ T8438] usb 2-1: config 0 descriptor?? [ 1245.596900][ T8438] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1245.686184][ T8438] usb 2-1: USB disconnect, device number 38 [ 1245.724465][ T8438] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1247.010597][T15781] loop3: detected capacity change from 0 to 512 [ 1247.039181][T15781] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1247.100625][T15781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1247.109609][T15781] System zones: 1-12 [ 1247.217764][T15781] EXT4-fs (loop3): 1 truncate cleaned up [ 1247.234735][T15781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.552355][ T5811] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1247.679372][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.771199][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 1248.599509][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1248.653425][ T5811] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1248.670189][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.716571][ T5811] usb 3-1: config 0 descriptor?? [ 1249.002489][T15805] loop1: detected capacity change from 0 to 512 [ 1249.013651][T15805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1249.030763][T15805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1249.039018][T15805] System zones: 1-12 [ 1249.045394][T15805] EXT4-fs (loop1): 1 truncate cleaned up [ 1249.052245][T15805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.176180][ T5811] hid (null): invalid report_size 41201 [ 1249.183154][ T5811] hid (null): unknown global tag 0xe [ 1249.192084][ T5811] hid (null): unknown global tag 0xe [ 1249.192632][T12137] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1249.197825][ T5811] hid (null): bogus close delimiter [ 1249.379182][ T8438] usb 3-1: USB disconnect, device number 40 [ 1249.391354][T12137] usb 1-1: Using ep0 maxpacket: 32 [ 1249.411515][T12137] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.426405][T12137] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.443758][T12137] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1249.454027][T12137] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1249.463951][T12137] usb 1-1: Product: syz [ 1249.468129][T12137] usb 1-1: Manufacturer: syz [ 1249.486947][T12137] hub 1-1:4.0: USB hub found [ 1249.700029][T12137] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1249.752575][T12137] usb 1-1: USB disconnect, device number 37 [ 1249.937243][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.397948][T15828] loop3: detected capacity change from 0 to 512 [ 1250.969842][T15828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1251.015536][T15828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1251.023810][T15828] System zones: 1-12 [ 1251.072164][T15828] EXT4-fs (loop3): 1 truncate cleaned up [ 1251.079032][T15828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.170134][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.445554][T15843] loop1: detected capacity change from 0 to 512 [ 1252.485428][T15843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1252.546145][T15843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1252.555267][T15843] System zones: 1-12 [ 1252.575375][T15843] EXT4-fs (loop1): 1 truncate cleaned up [ 1252.591809][T15843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.619743][ T8438] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1252.992433][ T8438] usb 3-1: Using ep0 maxpacket: 32 [ 1253.010880][ T8438] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1253.153847][ T8438] usb 3-1: config 0 has no interface number 0 [ 1253.166207][ T8438] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1253.175052][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.179593][ T8438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.193252][ T8438] usb 3-1: Product: syz [ 1253.197505][ T8438] usb 3-1: Manufacturer: syz [ 1253.203109][ T8438] usb 3-1: SerialNumber: syz [ 1253.222088][ T8438] usb 3-1: config 0 descriptor?? [ 1253.234458][ T8438] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1253.261187][ T8438] usb 3-1: selecting invalid altsetting 1 [ 1253.266956][ T8438] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1253.312341][ T8438] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1253.334847][ T8438] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1253.354332][ T8438] usb 3-1: media controller created [ 1253.430274][ T8438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1253.945057][T15855] loop1: detected capacity change from 0 to 32768 [ 1253.965858][T15855] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2284 (15855) [ 1254.032651][T15855] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1254.069865][T15855] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1254.248115][T15855] BTRFS info (device loop1): using free space tree [ 1254.561686][T15841] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1254.614134][ T8438] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1254.651270][ T8438] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1254.669629][T15855] BTRFS info (device loop1): enabling ssd optimizations [ 1254.690077][ T8438] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1254.707723][T15855] BTRFS info (device loop1): auto enabling async discard [ 1254.834522][ T8438] usb 3-1: USB disconnect, device number 41 [ 1255.747633][ T5764] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1255.900699][T15880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2289'. [ 1255.953012][T15880] ip6tnl1: entered promiscuous mode [ 1256.451038][ T5755] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop1 scanned by udevd (5755) [ 1257.429914][T15901] bridge0: port 3(syz_tun) entered blocking state [ 1257.445740][T15901] bridge0: port 3(syz_tun) entered disabled state [ 1257.463098][T15901] syz_tun: entered allmulticast mode [ 1257.486559][T15901] syz_tun: entered promiscuous mode [ 1257.845760][T15901] bridge0: port 3(syz_tun) entered blocking state [ 1257.853804][T15901] bridge0: port 3(syz_tun) entered forwarding state [ 1258.539505][T15912] loop2: detected capacity change from 0 to 512 [ 1258.736517][T15912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1258.788452][T15912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1258.797838][T15912] System zones: 1-12 [ 1258.819659][T15912] EXT4-fs (loop2): 1 truncate cleaned up [ 1258.836621][T15912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.162043][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.055666][T15927] loop1: detected capacity change from 0 to 512 [ 1260.070775][T15927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1260.135991][T15927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1260.144080][T15927] System zones: 1-12 [ 1260.240686][T15927] EXT4-fs (loop1): 1 truncate cleaned up [ 1260.247112][T15927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1260.266381][ T5818] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1261.016066][ T5818] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 1261.024504][ T5818] usb 3-1: config 0 has no interface number 0 [ 1261.030739][ T5818] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1261.042428][ T5818] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1261.053931][ T5818] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1261.177813][ T5818] usb 3-1: config 0 interface 227 has no altsetting 0 [ 1261.203568][ T5818] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 1261.221402][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.240636][ T5818] usb 3-1: Product: syz [ 1261.255269][ T5818] usb 3-1: Manufacturer: syz [ 1261.259911][ T5818] usb 3-1: SerialNumber: syz [ 1261.284437][ T5818] usb 3-1: config 0 descriptor?? [ 1261.290725][T15923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1261.314080][ T5818] usbtouchscreen: probe of 3-1:0.227 failed with error -90 [ 1261.562089][ T8434] usb 3-1: USB disconnect, device number 42 [ 1262.486141][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.449037][T15983] loop1: detected capacity change from 0 to 512 [ 1265.457083][T15983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1265.827303][T15990] loop3: detected capacity change from 0 to 512 [ 1265.841206][T15991] loop2: detected capacity change from 0 to 512 [ 1265.938890][T15990] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1265.938890][T15991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1265.969232][T15990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1265.977365][T15990] System zones: 1-12 [ 1265.984451][T15990] EXT4-fs (loop3): 1 truncate cleaned up [ 1265.991454][T15990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.023869][T15991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1266.032086][T15991] System zones: 1-12 [ 1266.051774][T15991] EXT4-fs (loop2): 1 truncate cleaned up [ 1266.058624][T15991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.085313][T15983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1266.095033][T15983] System zones: 1-12 [ 1266.099852][T15983] EXT4-fs (loop1): 1 truncate cleaned up [ 1266.108392][T15983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.375650][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.396339][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.837406][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.207596][T16031] loop3: detected capacity change from 0 to 512 [ 1269.266539][T16031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1269.332856][T16031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1269.341324][T16031] System zones: 1-12 [ 1269.356793][T16031] EXT4-fs (loop3): 1 truncate cleaned up [ 1269.372331][T16031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.923360][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.066952][T16084] loop3: detected capacity change from 0 to 512 [ 1273.210567][T16084] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1273.262921][T16084] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1273.271671][T16084] System zones: 1-12 [ 1273.290411][T16084] EXT4-fs (loop3): 1 truncate cleaned up [ 1273.308609][T16084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.645306][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.828379][T16092] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1274.238949][T16100] loop2: detected capacity change from 0 to 512 [ 1274.804250][T16100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1274.894219][T16100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1274.902554][T16100] System zones: 1-12 [ 1274.914312][T16100] EXT4-fs (loop2): 1 truncate cleaned up [ 1274.964824][T16100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.203643][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.861493][ T8434] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1279.164207][ T8434] usb 4-1: Using ep0 maxpacket: 16 [ 1279.252786][ T8434] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1279.260858][ T8434] usb 4-1: config 0 has no interface number 0 [ 1279.267878][ T8434] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.281334][ T8434] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1279.388843][ T8434] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1279.472803][ T8434] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1279.504786][ T8434] usb 4-1: Product: syz [ 1279.509053][ T8434] usb 4-1: SerialNumber: syz [ 1279.757649][ T8434] usb 4-1: config 0 descriptor?? [ 1279.804637][ T8434] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1279.819422][ T8434] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 1280.024610][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1280.451541][ T5811] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1280.596550][T16163] loop1: detected capacity change from 0 to 32768 [ 1280.617136][T16163] [ 1280.617136][T16163] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.617136][T16163] [ 1280.661236][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 1280.670590][ T5811] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1280.696329][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.710900][ T5811] usb 3-1: Product: syz [ 1280.715666][ T5811] usb 3-1: Manufacturer: syz [ 1280.720368][ T5811] usb 3-1: SerialNumber: syz [ 1280.738555][ T5811] usb 3-1: config 0 descriptor?? [ 1280.773867][ T5811] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1280.799238][T16175] [ 1280.799238][T16175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.799238][T16175] [ 1280.828960][T16175] [ 1280.828960][T16175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.828960][T16175] [ 1280.842267][T16175] [ 1280.842267][T16175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.842267][T16175] [ 1280.853855][T16175] [ 1280.853855][T16175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.853855][T16175] [ 1280.864826][T16175] [ 1280.864826][T16175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.864826][T16175] [ 1280.889005][ T112] [ 1280.889005][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1280.889005][ T112] [ 1281.175779][ T1088] [ 1281.175779][ T1088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.175779][ T1088] [ 1281.187438][ T1088] [ 1281.187438][ T1088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.187438][ T1088] [ 1281.199244][ T1088] [ 1281.199244][ T1088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.199244][ T1088] [ 1281.210964][ T5764] [ 1281.210964][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.210964][ T5764] [ 1281.224847][ T113] [ 1281.224847][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.224847][ T113] [ 1281.235728][ T5764] [ 1281.235728][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.235728][ T5764] [ 1281.518480][ T8435] usb 4-1: USB disconnect, device number 37 [ 1281.544829][ T8435] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1281.623200][ T5811] gspca_stk1135: reg_w 0x5 err -71 [ 1281.643984][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1281.674282][ T5811] gspca_stk1135: Sensor write failed [ 1281.679620][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1281.692287][ T5811] gspca_stk1135: Sensor write failed [ 1281.697697][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1281.704713][ T5811] gspca_stk1135: Sensor read failed [ 1281.709945][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1281.731173][ T5811] gspca_stk1135: Sensor read failed [ 1281.736419][ T5811] gspca_stk1135: Detected sensor type unknown (0x0) [ 1283.970939][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1283.977431][ T5811] gspca_stk1135: Sensor read failed [ 1283.982950][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1283.989302][ T5811] gspca_stk1135: Sensor read failed [ 1283.994860][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.001263][ T5811] gspca_stk1135: Sensor write failed [ 1284.016319][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.022776][ T5811] gspca_stk1135: Sensor write failed [ 1284.028154][ T5811] stk1135: probe of 3-1:0.0 failed with error -71 [ 1284.037310][ T5811] usb 3-1: USB disconnect, device number 43 [ 1285.411599][T16205] loop3: detected capacity change from 0 to 512 [ 1285.637880][T16205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1285.778316][T16207] loop1: detected capacity change from 0 to 512 [ 1286.297312][T16207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1286.313065][T16205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1286.321543][T16205] System zones: 1-12 [ 1286.331991][T16205] EXT4-fs (loop3): 1 truncate cleaned up [ 1286.338819][T16205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.355134][T16207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1286.363629][T16207] System zones: 1-12 [ 1286.368247][T16207] EXT4-fs (loop1): 1 truncate cleaned up [ 1286.375613][T16207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.097055][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.106856][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.245079][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.272820][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.488337][T16235] loop2: detected capacity change from 0 to 512 [ 1288.511823][T16235] EXT4-fs: Ignoring removed i_version option [ 1288.541922][T16226] loop3: detected capacity change from 0 to 32768 [ 1288.542413][T16235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1288.633169][T16235] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1288.664472][T16226] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1288.689834][T16235] EXT4-fs (loop2): 1 truncate cleaned up [ 1288.724770][T16235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1289.038820][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.048694][T16226] syz.3.2368 (16226) used greatest stack depth: 18992 bytes left [ 1291.093954][ T5762] ocfs2: Unmounting device (7,3) on (node local) [ 1295.552966][T16301] loop3: detected capacity change from 0 to 512 [ 1295.615532][T16301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1295.672314][T16301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1295.681500][T16301] System zones: 1-12 [ 1295.712559][T16301] EXT4-fs (loop3): 1 truncate cleaned up [ 1295.729531][T16301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.234696][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.443189][T16308] loop1: detected capacity change from 0 to 512 [ 1296.467506][T16308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1296.581603][T16308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1296.590682][T16308] System zones: 1-12 [ 1296.610722][T16308] EXT4-fs (loop1): 1 truncate cleaned up [ 1296.626838][T16308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.980279][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.477904][T16323] loop1: detected capacity change from 0 to 128 [ 1298.490465][T16323] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1300.351591][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.357922][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.262575][T16351] loop2: detected capacity change from 0 to 512 [ 1301.843632][T16351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1301.862479][T16351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1301.870472][T16351] System zones: 1-12 [ 1301.894556][T16351] EXT4-fs (loop2): 1 truncate cleaned up [ 1301.923355][T16351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1302.071359][T12456] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1302.207533][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.301170][T12456] usb 1-1: Using ep0 maxpacket: 8 [ 1302.311178][T12456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.331161][T12456] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1302.351590][T12456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.372402][T12456] usb 1-1: config 0 descriptor?? [ 1302.774742][T16373] loop2: detected capacity change from 0 to 512 [ 1302.789526][T16373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1302.811614][T16373] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1302.820127][T16373] System zones: 1-12 [ 1302.827825][T16373] EXT4-fs (loop2): 1 truncate cleaned up [ 1302.839963][T16373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.313145][T12456] hid-multitouch 0003:0EEF:72C4.000B: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 1303.422895][T12456] usb 1-1: USB disconnect, device number 38 [ 1303.457342][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.589002][T16378] fido_id[16378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1304.787110][ T8438] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1304.971198][ T8438] usb 4-1: Using ep0 maxpacket: 8 [ 1304.984281][ T8438] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1305.002716][ T8438] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1305.022263][ T8438] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1305.051196][ T8438] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1305.069291][ T8438] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.091686][ T8438] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1305.100825][ T8438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.211209][ T8435] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1305.333288][ T8438] usb 4-1: GET_CAPABILITIES returned 0 [ 1305.339518][ T8438] usbtmc 4-1:16.0: can't read capabilities [ 1305.415788][ T8435] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1305.812955][T12137] usb 4-1: USB disconnect, device number 38 [ 1306.243318][ T8435] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1306.260232][ T8435] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1306.270042][ T8435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1306.282331][ T8435] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1306.312987][ T8435] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1306.322477][ T8435] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1306.330806][ T8435] usb 1-1: Product: syz [ 1306.342774][ T8435] usb 1-1: Manufacturer: syz [ 1306.367225][ T8435] cdc_wdm 1-1:1.0: skipping garbage [ 1306.378517][ T8435] cdc_wdm 1-1:1.0: skipping garbage [ 1306.387677][ T8435] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1306.393703][ T8435] cdc_wdm 1-1:1.0: Unknown control protocol [ 1307.057222][T16412] loop2: detected capacity change from 0 to 512 [ 1307.141554][T16410] loop1: detected capacity change from 0 to 512 [ 1307.153387][T16412] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1307.153457][T16410] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1307.166833][T16412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1307.181295][T16412] System zones: 1-12 [ 1307.189417][T16412] EXT4-fs (loop2): 1 truncate cleaned up [ 1307.198660][T16410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1307.200991][T16412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.206882][T16410] System zones: 1-12 [ 1307.224923][T16410] EXT4-fs (loop1): 1 truncate cleaned up [ 1307.234723][T16410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.498502][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.554070][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.901230][ T8438] usb 1-1: USB disconnect, device number 39 [ 1308.227791][T16431] loop1: detected capacity change from 0 to 512 [ 1308.257895][T16427] overlayfs: overlapping lowerdir path [ 1308.305453][T16431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1308.324195][T16431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1308.333428][T16431] System zones: 1-12 [ 1308.339423][T16431] EXT4-fs (loop1): 1 truncate cleaned up [ 1308.350333][T16431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1308.637634][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.241786][T16460] loop3: detected capacity change from 0 to 512 [ 1309.344534][T16460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1309.692833][T16460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1309.700853][T16460] System zones: 1-12 [ 1309.751649][T16460] EXT4-fs (loop3): 1 truncate cleaned up [ 1309.757948][T16460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1310.020967][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.121689][T16466] loop1: detected capacity change from 0 to 128 [ 1310.166075][T16466] hpfs: bad mount options. [ 1311.777368][T16485] loop1: detected capacity change from 0 to 512 [ 1311.798991][T16486] overlayfs: overlapping lowerdir path [ 1311.864526][T16485] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1311.884613][T16485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1311.892711][T16485] System zones: 1-12 [ 1311.897136][T16485] EXT4-fs (loop1): 1 truncate cleaned up [ 1311.904067][T16485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1311.959675][T16468] loop3: detected capacity change from 0 to 32768 [ 1311.971527][T16468] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2426 (16468) [ 1312.003164][T16468] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1312.174752][T16468] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1312.184590][T16468] BTRFS info (device loop3): turning on sync discard [ 1312.192214][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.193348][T16468] BTRFS info (device loop3): doing ref verification [ 1312.247588][T16468] BTRFS info (device loop3): disabling tree log [ 1312.272200][T16468] BTRFS info (device loop3): enabling ssd optimizations [ 1312.279190][T16468] BTRFS info (device loop3): using spread ssd allocation scheme [ 1312.311282][T12137] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1312.317276][T16468] BTRFS info (device loop3): not using ssd optimizations [ 1312.343098][T16468] BTRFS info (device loop3): not using spread ssd allocation scheme [ 1312.406938][T16468] BTRFS info (device loop3): using free space tree [ 1313.280634][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1313.281473][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1313.291627][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1313.303036][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1313.330150][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1313.382704][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1313.501547][T12137] usb 3-1: Using ep0 maxpacket: 8 [ 1313.511479][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1313.538808][T12137] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1313.560716][T12137] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1313.571819][T12137] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1313.582227][T12137] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1313.592548][T12137] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.606729][T12137] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1313.613358][T16468] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1313.616483][T12137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.687863][T16468] BTRFS error (device loop3): open_ctree failed: -12 [ 1313.863611][T12137] usb 3-1: GET_CAPABILITIES returned 0 [ 1313.880558][T12137] usbtmc 3-1:16.0: can't read capabilities [ 1314.699346][T12137] usb 3-1: USB disconnect, device number 44 [ 1315.034911][T16525] loop1: detected capacity change from 0 to 512 [ 1315.563624][T16525] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1315.597073][T16525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1315.605312][T16525] System zones: 1-12 [ 1315.620750][T16525] EXT4-fs (loop1): 1 truncate cleaned up [ 1315.627764][T16525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1316.465099][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.056561][T16548] overlayfs: overlapping lowerdir path [ 1320.554748][T16583] loop3: detected capacity change from 0 to 512 [ 1321.257009][T16583] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1321.747488][T16583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1321.756297][T16583] System zones: 1-12 [ 1321.762134][T16583] EXT4-fs (loop3): 1 truncate cleaned up [ 1321.768429][T16583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1322.027768][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.388760][T16605] overlayfs: overlapping lowerdir path [ 1327.212734][ T5818] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1327.281754][T12456] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1327.401274][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 1327.427662][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1327.441908][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1327.465147][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1327.488663][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1327.499242][T12456] usb 4-1: Using ep0 maxpacket: 8 [ 1327.528212][T12456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1327.550314][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1327.573405][T12456] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1327.591410][ T5818] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1327.616026][T12456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.632038][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.650863][T12456] usb 4-1: config 0 descriptor?? [ 1327.657000][ T5818] usb 1-1: config 0 descriptor?? [ 1327.687460][ T50] Bluetooth: hci4: urb ffff888031703800 submission failed (90) [ 1327.929868][ T8435] usb 1-1: USB disconnect, device number 40 [ 1327.937288][T12456] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1328.148764][T16649] overlayfs: overlapping lowerdir path [ 1328.938124][ T8435] usb 4-1: USB disconnect, device number 39 [ 1333.946552][T16684] loop2: detected capacity change from 0 to 512 [ 1333.993232][T16684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1334.037724][T16684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1334.045834][T16684] System zones: 1-12 [ 1334.061305][T16684] EXT4-fs (loop2): 1 truncate cleaned up [ 1334.068137][T16684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.407463][T16688] tap0: tun_chr_ioctl cmd 1074025675 [ 1334.427399][T16688] tap0: persist disabled [ 1334.593754][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.244379][T16703] overlayfs: overlapping lowerdir path [ 1337.629421][T16720] tun0: tun_chr_ioctl cmd 2147767521 [ 1337.949062][ T8438] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1338.184671][T16735] loop1: detected capacity change from 0 to 512 [ 1339.005878][T16735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1339.019741][ T8438] usb 1-1: Using ep0 maxpacket: 32 [ 1339.092242][T16735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1339.100316][T16735] System zones: 1-12 [ 1339.137682][T16735] EXT4-fs (loop1): 1 truncate cleaned up [ 1339.145046][T16735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1339.184328][ T8438] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1339.229194][ T8438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.243978][ T8438] usb 1-1: config 0 descriptor?? [ 1339.449560][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.584992][ T8438] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1339.602512][ T8438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1339.637988][ T8438] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1339.651900][ T8438] usb 1-1: media controller created [ 1339.674282][ T8438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1341.391222][ T8438] az6027: usb out operation failed. (-71) [ 1341.397539][ T8438] az6027: usb out operation failed. (-71) [ 1341.403402][ T8438] stb0899_attach: Driver disabled by Kconfig [ 1341.409395][ T8438] az6027: no front-end attached [ 1341.409395][ T8438] [ 1341.418303][ T8438] az6027: usb out operation failed. (-71) [ 1341.424352][ T8438] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1341.437798][ T8438] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 1341.452260][ T8438] dvb-usb: schedule remote query interval to 400 msecs. [ 1341.459229][ T8438] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1341.471487][ T8438] usb 1-1: USB disconnect, device number 41 [ 1341.628606][ T8438] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1341.893707][T16767] loop1: detected capacity change from 0 to 512 [ 1342.027101][T16767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1342.434814][T16767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1342.443074][T16767] System zones: 1-12 [ 1342.448614][T16767] EXT4-fs (loop1): 1 truncate cleaned up [ 1342.454931][T16767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.726117][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.270562][T16804] loop2: detected capacity change from 0 to 512 [ 1346.841334][T16804] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1346.883755][T16804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1346.891779][T16804] System zones: 1-12 [ 1346.915242][T16804] EXT4-fs (loop2): 1 truncate cleaned up [ 1346.922845][T16804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.694932][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.657874][T12456] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1349.056037][T12456] usb 3-1: Using ep0 maxpacket: 8 [ 1349.064374][T12456] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1349.075765][T12456] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1349.085905][T12456] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1349.600020][T12456] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1349.613217][T12456] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1349.622365][T12456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.671601][ T5819] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1349.873939][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 1349.989093][ T5819] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1350.008403][T12456] usb 3-1: GET_CAPABILITIES returned 0 [ 1350.029377][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1350.047274][T12456] usbtmc 3-1:16.0: can't read capabilities [ 1350.067863][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1350.790758][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1350.801316][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1350.820432][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1350.829801][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.859270][ T5754] usb 3-1: USB disconnect, device number 45 [ 1351.309652][ T5819] usb 4-1: GET_CAPABILITIES returned 0 [ 1351.333394][ T5819] usbtmc 4-1:16.0: can't read capabilities [ 1352.295138][T16821] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 1352.332087][ T8438] usb 4-1: USB disconnect, device number 40 [ 1356.885228][T16890] loop3: detected capacity change from 0 to 512 [ 1357.469167][T16890] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1357.553210][T16890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1357.561349][T16890] System zones: 1-12 [ 1357.593047][T16890] EXT4-fs (loop3): 1 truncate cleaned up [ 1357.600423][T16890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.602355][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.465146][T16916] loop1: detected capacity change from 0 to 512 [ 1360.506400][T16916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1360.527385][T16916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1360.535538][T16916] System zones: 1-12 [ 1360.544766][T16916] EXT4-fs (loop1): 1 truncate cleaned up [ 1360.551740][T16916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.009058][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.743811][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.750196][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.852665][T16940] loop1: detected capacity change from 0 to 512 [ 1363.860011][T16940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1363.899840][T16940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1363.907951][T16940] System zones: 1-12 [ 1364.614136][T16940] EXT4-fs (loop1): 1 truncate cleaned up [ 1364.620995][T16940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.937154][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.485256][T16958] loop2: detected capacity change from 0 to 512 [ 1365.641377][T16956] loop3: detected capacity change from 0 to 512 [ 1365.695984][T16958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1365.695984][T16956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1365.800476][T16958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1365.808666][T16958] System zones: 1-12 [ 1365.812974][T16958] EXT4-fs (loop2): 1 truncate cleaned up [ 1365.819290][T16958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.852819][T16956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1365.861115][T16956] System zones: 1-12 [ 1365.866403][T16956] EXT4-fs (loop3): 1 truncate cleaned up [ 1365.873709][T16956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.255009][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.362400][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.154886][T17013] loop3: detected capacity change from 0 to 512 [ 1374.201222][T17013] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1374.218408][T17013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1374.226586][T17013] System zones: 1-12 [ 1374.234577][T17013] EXT4-fs (loop3): 1 truncate cleaned up [ 1374.242054][T17013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.559053][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.320567][T17030] loop2: detected capacity change from 0 to 512 [ 1375.350636][T17030] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1375.495230][T17030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1375.503468][T17030] System zones: 1-12 [ 1375.508328][T17030] EXT4-fs (loop2): 1 truncate cleaned up [ 1375.517238][T17030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.650432][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.976405][T17051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2555'. [ 1383.230038][T17077] loop3: detected capacity change from 0 to 512 [ 1384.272445][T17077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1384.294168][T17077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1384.302531][T17077] System zones: 1-12 [ 1384.321517][T17077] EXT4-fs (loop3): 1 truncate cleaned up [ 1384.328362][T17077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.583862][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.582986][T17099] loop3: detected capacity change from 0 to 512 [ 1387.010961][T17099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1387.474009][T17099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1387.609273][T17099] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.705395][T17112] overlayfs: overlapping lowerdir path [ 1388.662506][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1391.758183][T17132] loop1: detected capacity change from 0 to 512 [ 1391.769301][T17132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1392.468961][T17132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1392.477021][T17132] System zones: 1-12 [ 1392.483640][T17132] EXT4-fs (loop1): 1 truncate cleaned up [ 1392.490537][T17132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1392.705422][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.029679][T17166] overlayfs: overlapping lowerdir path [ 1401.742320][T17222] overlayfs: overlapping lowerdir path [ 1402.023790][T12456] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1402.752534][T12456] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1402.771236][T12456] usb 2-1: config 0 has no interface number 0 [ 1402.791186][T12456] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1402.814076][T12456] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1402.835324][T12456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.850472][T12456] usb 2-1: Product: syz [ 1402.855110][T12456] usb 2-1: Manufacturer: syz [ 1402.859857][T12456] usb 2-1: SerialNumber: syz [ 1402.878448][T12456] usb 2-1: config 0 descriptor?? [ 1402.933428][T12456] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1403.815605][T17212] loop1: detected capacity change from 0 to 64 [ 1403.867776][T12456] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1404.051278][T12456] usb 2-1: USB disconnect, device number 39 [ 1404.191209][ T5818] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1404.431180][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 1404.454942][ T5818] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1404.473173][ T5818] usb 4-1: config 0 has no interface number 0 [ 1404.510354][ T5818] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1404.622423][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.630694][ T5818] usb 4-1: Product: syz [ 1404.637197][ T5818] usb 4-1: Manufacturer: syz [ 1404.643116][ T5818] usb 4-1: SerialNumber: syz [ 1404.654508][ T5818] usb 4-1: config 0 descriptor?? [ 1404.663879][ T5818] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1405.687415][ T5818] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1405.728392][ T5818] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1405.901797][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1405.927838][ T5818] usb 4-1: USB disconnect, device number 41 [ 1405.992848][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1406.053795][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1406.084067][ T5818] quatech2 4-1:0.51: device disconnected [ 1406.378762][T17260] overlayfs: overlapping lowerdir path [ 1407.401374][T17270] loop2: detected capacity change from 0 to 512 [ 1407.604630][T17273] overlayfs: overlapping lowerdir path [ 1407.646105][T17270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1407.860987][T17270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1407.869409][T17270] System zones: 1-12 [ 1407.874479][T17270] EXT4-fs (loop2): 1 truncate cleaned up [ 1407.881418][T17270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1408.030040][T17280] loop3: detected capacity change from 0 to 512 [ 1408.056240][T17280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1408.078822][T17280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1408.087328][T17280] System zones: 1-12 [ 1408.096174][T17280] EXT4-fs (loop3): 1 truncate cleaned up [ 1408.107169][T17280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1408.480541][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.707769][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.057190][T17292] loop1: detected capacity change from 0 to 512 [ 1409.525278][T17292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1409.571094][T17292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1409.579268][T17292] System zones: 1-12 [ 1409.585796][T17292] EXT4-fs (loop1): 1 truncate cleaned up [ 1409.592698][T17292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1411.215601][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.991265][T17312] overlayfs: overlapping lowerdir path [ 1414.003030][T17334] loop3: detected capacity change from 0 to 512 [ 1415.149069][T17334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1415.167407][T17334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1415.175694][T17334] System zones: 1-12 [ 1415.180669][T17334] EXT4-fs (loop3): 1 truncate cleaned up [ 1415.187598][T17334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1415.301178][T12137] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1415.534673][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.683311][T12137] usb 3-1: Using ep0 maxpacket: 16 [ 1415.829865][T17348] loop1: detected capacity change from 0 to 512 [ 1416.377113][T17348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1416.431456][T17348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1416.439663][T17348] System zones: 1-12 [ 1416.447670][T17348] EXT4-fs (loop1): 1 truncate cleaned up [ 1416.454684][T17348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1416.733563][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.769360][T12137] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1416.825577][T12137] usb 3-1: can't read configurations, error -71 [ 1417.687821][T17358] loop1: detected capacity change from 0 to 8 [ 1417.726440][T17358] SQUASHFS error: xz decompression failed, data probably corrupt [ 1417.751743][T17358] SQUASHFS error: Failed to read block 0x108: -5 [ 1417.760956][T17358] SQUASHFS error: Unable to read metadata cache entry [106] [ 1417.795425][T17358] SQUASHFS error: Unable to read inode 0x0 [ 1418.171275][T12137] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1418.921306][T12137] usb 3-1: Using ep0 maxpacket: 8 [ 1418.941869][T12137] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1418.959810][T12137] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1418.976431][T12137] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1419.187811][T12137] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1419.199869][T12137] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1419.211215][T12137] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1419.230351][T12137] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1419.240603][T12137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.532927][T12137] usb 3-1: usb_control_msg returned -71 [ 1421.538745][T12137] usbtmc 3-1:16.0: can't read capabilities [ 1421.647043][T12137] usb 3-1: USB disconnect, device number 47 [ 1422.297157][T17396] loop3: detected capacity change from 0 to 512 [ 1422.310971][T17397] loop2: detected capacity change from 0 to 512 [ 1422.338617][T17396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1422.362181][T17397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1422.375698][T17397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1422.375711][T17396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1422.375822][T17396] System zones: [ 1422.383793][T17397] System zones: [ 1422.391680][T17396] 1-12 [ 1422.395210][T17397] 1-12 [ 1422.398741][T17396] [ 1422.411731][T17397] EXT4-fs (loop2): 1 truncate cleaned up [ 1422.411731][T17396] EXT4-fs (loop3): 1 truncate cleaned up [ 1422.412853][T17396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.418522][T17397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1423.044594][T17409] loop1: detected capacity change from 0 to 512 [ 1423.139995][T17409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1423.155764][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.164384][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.273802][T17409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1423.281902][T17409] System zones: 1-12 [ 1423.287516][T17409] EXT4-fs (loop1): 1 truncate cleaned up [ 1423.294477][T17409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1423.328297][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.341332][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.548634][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.591335][T12137] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1425.191670][T12137] usb 2-1: Using ep0 maxpacket: 8 [ 1425.278680][T12137] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1425.851196][T12137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.862481][T12137] usb 2-1: Product: syz [ 1425.880928][T12137] usb 2-1: Manufacturer: syz [ 1425.984761][T12137] usb 2-1: SerialNumber: syz [ 1425.994717][T12137] usb 2-1: config 0 descriptor?? [ 1426.005623][T12137] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1428.062825][T12137] gspca_sq930x: ucbus_write failed -71 [ 1428.099614][T12137] sq930x: probe of 2-1:0.0 failed with error -71 [ 1428.121578][T12137] usb 2-1: USB disconnect, device number 40 [ 1428.212407][ T5778] udevd[5778]: setting owner of /dev/bus/usb/002/040 to uid=0, gid=0 failed: No such file or directory [ 1429.833474][T17457] loop1: detected capacity change from 0 to 512 [ 1429.868292][T17454] loop3: detected capacity change from 0 to 512 [ 1429.957297][T17457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1429.969308][T17454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1430.042675][T17457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1430.050736][T17457] System zones: 1-12 [ 1430.055338][T17454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1430.063585][T17454] System zones: 1-12 [ 1430.067800][T17457] EXT4-fs (loop1): 1 truncate cleaned up [ 1430.074126][T17457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1430.091976][T17454] EXT4-fs (loop3): 1 truncate cleaned up [ 1430.099103][T17454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1430.414862][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.817476][T17465] loop2: detected capacity change from 0 to 512 [ 1430.837877][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.858303][T17465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1431.047809][T17465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1431.056383][T17465] System zones: 1-12 [ 1431.061614][T17465] EXT4-fs (loop2): 1 truncate cleaned up [ 1431.069251][T17465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.589795][T17479] overlayfs: overlapping lowerdir path [ 1432.597574][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.900925][T17491] loop1: detected capacity change from 0 to 512 [ 1434.065463][T17491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.078713][T17491] ext4 filesystem being mounted at /675/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1435.022409][T17508] loop3: detected capacity change from 0 to 512 [ 1435.051994][T17508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1435.324746][T17508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1435.332954][T17508] System zones: 1-12 [ 1435.342596][T17508] EXT4-fs (loop3): 1 truncate cleaned up [ 1435.350362][T17508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.387126][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.528603][T17516] loop2: detected capacity change from 0 to 512 [ 1436.094369][T17516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1436.122671][T17516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1436.130723][T17516] System zones: 1-12 [ 1436.136818][T17516] EXT4-fs (loop2): 1 truncate cleaned up [ 1436.144494][T17516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.170087][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.180938][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.672675][T17538] overlayfs: overlapping lowerdir path [ 1439.251575][T17548] loop3: detected capacity change from 0 to 512 [ 1439.285254][T17548] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 1439.301611][T17548] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.2667: iget: bad i_size value: 12154757448730 [ 1439.362062][T17548] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2667: couldn't read orphan inode 13 (err -117) [ 1439.406579][T17548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.438098][T17542] loop1: detected capacity change from 0 to 32768 [ 1439.494087][T17542] [ 1439.494087][T17542] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1439.494087][T17542] [ 1439.532741][ T5762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.565918][T17542] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 1439.938264][T17562] loop2: detected capacity change from 0 to 512 [ 1440.224449][T17564] loop3: detected capacity change from 0 to 512 [ 1440.338005][T17564] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1440.349145][T17562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1440.357118][ T11] [ 1440.357118][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1440.357118][ T11] [ 1440.370766][ T11] [ 1440.370766][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1440.370766][ T11] [ 1440.376900][T17564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1440.389392][T17564] System zones: 1-12 [ 1440.396368][ T5764] [ 1440.396368][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1440.396368][ T5764] [ 1440.407491][ T5764] [ 1440.407491][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1440.407491][ T5764] [ 1440.418570][T17564] EXT4-fs (loop3): 1 truncate cleaned up [ 1440.420001][T17562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1440.425485][T17564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.447105][T17562] System zones: 1-12 [ 1440.458049][T17562] EXT4-fs (loop2): 1 truncate cleaned up [ 1440.465301][T17562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.494819][ T112] [ 1440.494819][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1440.494819][ T112] [ 1440.533643][ T112] ================================================================== [ 1440.541733][ T112] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 1440.548600][ T112] Write of size 8 at addr ffff888059db2840 by task jfsCommit/112 [ 1440.556321][ T112] [ 1440.558646][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.6.95-syzkaller #0 [ 1440.566452][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1440.576511][ T112] Call Trace: [ 1440.579795][ T112] [ 1440.582733][ T112] dump_stack_lvl+0x16c/0x230 [ 1440.587426][ T112] ? __lock_acquire+0x7c80/0x7c80 [ 1440.592461][ T112] ? show_regs_print_info+0x20/0x20 [ 1440.597671][ T112] ? load_image+0x3b0/0x3b0 [ 1440.602184][ T112] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1440.607578][ T112] ? __virt_addr_valid+0x18c/0x540 [ 1440.612703][ T112] ? __virt_addr_valid+0x469/0x540 [ 1440.617820][ T112] print_report+0xac/0x230 [ 1440.622253][ T112] ? txEnd+0x32d/0x520 [ 1440.626331][ T112] kasan_report+0x117/0x150 [ 1440.630844][ T112] ? txEnd+0x32d/0x520 [ 1440.634923][ T112] kasan_check_range+0x288/0x290 [ 1440.639873][ T112] txEnd+0x32d/0x520 [ 1440.643778][ T112] jfs_lazycommit+0x5a6/0xa60 [ 1440.648472][ T112] ? txFreelock+0x5a0/0x5a0 [ 1440.652985][ T112] ? do_task_dead+0xd0/0xd0 [ 1440.657495][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 1440.662447][ T112] kthread+0x2fa/0x390 [ 1440.666520][ T112] ? txFreelock+0x5a0/0x5a0 [ 1440.671033][ T112] ? kthread_blkcg+0xd0/0xd0 [ 1440.675623][ T112] ret_from_fork+0x48/0x80 [ 1440.680050][ T112] ? kthread_blkcg+0xd0/0xd0 [ 1440.684639][ T112] ret_from_fork_asm+0x11/0x20 [ 1440.689398][ T112] [ 1440.692401][ T112] [ 1440.694707][ T112] Allocated by task 17542: [ 1440.699107][ T112] kasan_set_track+0x4e/0x70 [ 1440.703683][ T112] __kasan_kmalloc+0x8f/0xa0 [ 1440.708259][ T112] lmLogOpen+0x2df/0xfb0 [ 1440.712484][ T112] jfs_mount_rw+0xea/0x670 [ 1440.716887][ T112] jfs_fill_super+0x592/0xac0 [ 1440.721550][ T112] mount_bdev+0x22b/0x2d0 [ 1440.725864][ T112] legacy_get_tree+0xea/0x180 [ 1440.730525][ T112] vfs_get_tree+0x8c/0x280 [ 1440.734924][ T112] do_new_mount+0x24b/0xa40 [ 1440.739410][ T112] __se_sys_mount+0x2da/0x3c0 [ 1440.744071][ T112] do_syscall_64+0x55/0xb0 [ 1440.748472][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.754356][ T112] [ 1440.756661][ T112] Freed by task 5764: [ 1440.760615][ T112] kasan_set_track+0x4e/0x70 [ 1440.765192][ T112] kasan_save_free_info+0x2e/0x50 [ 1440.770204][ T112] ____kasan_slab_free+0x126/0x1e0 [ 1440.775306][ T112] slab_free_freelist_hook+0x130/0x1b0 [ 1440.780746][ T112] __kmem_cache_free+0xba/0x1f0 [ 1440.785575][ T112] lmLogClose+0x297/0x520 [ 1440.789886][ T112] jfs_umount+0x2ef/0x3c0 [ 1440.794210][ T112] jfs_put_super+0x8c/0x190 [ 1440.798718][ T112] generic_shutdown_super+0x134/0x2b0 [ 1440.804084][ T112] kill_block_super+0x44/0x90 [ 1440.808752][ T112] deactivate_locked_super+0x97/0x100 [ 1440.814113][ T112] cleanup_mnt+0x429/0x4c0 [ 1440.818518][ T112] task_work_run+0x1ce/0x250 [ 1440.823096][ T112] exit_to_user_mode_loop+0xe6/0x110 [ 1440.828371][ T112] exit_to_user_mode_prepare+0xb1/0x140 [ 1440.833900][ T112] syscall_exit_to_user_mode+0x1a/0x50 [ 1440.839343][ T112] do_syscall_64+0x61/0xb0 [ 1440.843745][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.849623][ T112] [ 1440.851928][ T112] Last potentially related work creation: [ 1440.857620][ T112] kasan_save_stack+0x3e/0x60 [ 1440.862282][ T112] __kasan_record_aux_stack+0xaf/0xc0 [ 1440.867638][ T112] kvfree_call_rcu+0xee/0x780 [ 1440.872301][ T112] cgroup_migrate_finish+0x1a3/0x370 [ 1440.877569][ T112] cgroup_attach_task+0x5cd/0x830 [ 1440.882573][ T112] cgroup_attach_task_all+0x9a/0xe0 [ 1440.887756][ T112] kvm_vm_worker_thread+0xd2/0x570 [ 1440.892848][ T112] kthread+0x2fa/0x390 [ 1440.896896][ T112] ret_from_fork+0x48/0x80 [ 1440.901295][ T112] ret_from_fork_asm+0x11/0x20 [ 1440.906044][ T112] [ 1440.908347][ T112] Second to last potentially related work creation: [ 1440.914910][ T112] kasan_save_stack+0x3e/0x60 [ 1440.919572][ T112] __kasan_record_aux_stack+0xaf/0xc0 [ 1440.924929][ T112] call_rcu+0x14f/0x920 [ 1440.929068][ T112] sctp_association_free+0x6a1/0x7f0 [ 1440.934334][ T112] sctp_do_sm+0x3e64/0x59a0 [ 1440.938826][ T112] sctp_assoc_bh_rcv+0x3f2/0x630 [ 1440.943744][ T112] sctp_backlog_rcv+0x163/0x3e0 [ 1440.948581][ T112] __release_sock+0x1bd/0x430 [ 1440.953245][ T112] release_sock+0x5f/0x1c0 [ 1440.957643][ T112] sctp_wait_for_connect+0x382/0x680 [ 1440.962909][ T112] __sctp_connect+0xabf/0xd20 [ 1440.967567][ T112] sctp_inet_connect+0x12e/0x1e0 [ 1440.972538][ T112] __sys_connect+0x397/0x420 [ 1440.977109][ T112] __x64_sys_connect+0x7a/0x90 [ 1440.981855][ T112] do_syscall_64+0x55/0xb0 [ 1440.986256][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.992134][ T112] [ 1440.994442][ T112] The buggy address belongs to the object at ffff888059db2800 [ 1440.994442][ T112] which belongs to the cache kmalloc-1k of size 1024 [ 1441.008474][ T112] The buggy address is located 64 bytes inside of [ 1441.008474][ T112] freed 1024-byte region [ffff888059db2800, ffff888059db2c00) [ 1441.022251][ T112] [ 1441.024557][ T112] The buggy address belongs to the physical page: [ 1441.030951][ T112] page:ffffea0001676c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888059db3000 pfn:0x59db0 [ 1441.042387][ T112] head:ffffea0001676c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1441.051299][ T112] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1441.059602][ T112] page_type: 0xffffffff() [ 1441.063914][ T112] raw: 00fff00000000840 ffff888017841dc0 ffffea0000bfd400 dead000000000003 [ 1441.072478][ T112] raw: ffff888059db3000 0000000080100009 00000001ffffffff 0000000000000000 [ 1441.081041][ T112] page dumped because: kasan: bad access detected [ 1441.087448][ T112] page_owner tracks the page as allocated [ 1441.093140][ T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 58, tgid 58 (kworker/u4:4), ts 76004464925, free_ts 75851953152 [ 1441.113434][ T112] post_alloc_hook+0x1cd/0x210 [ 1441.118182][ T112] get_page_from_freelist+0x195c/0x19f0 [ 1441.123713][ T112] __alloc_pages+0x1e3/0x460 [ 1441.128282][ T112] alloc_slab_page+0x5d/0x170 [ 1441.132940][ T112] new_slab+0x87/0x2e0 [ 1441.136991][ T112] ___slab_alloc+0xc6d/0x12f0 [ 1441.141647][ T112] __kmem_cache_alloc_node+0x1a2/0x260 [ 1441.147086][ T112] __kmalloc+0xa4/0x240 [ 1441.151221][ T112] ieee802_11_parse_elems_full+0xb9/0x2080 [ 1441.157014][ T112] ieee80211_inform_bss+0x107/0x1060 [ 1441.162283][ T112] rdev_inform_bss+0x106/0x410 [ 1441.167031][ T112] cfg80211_inform_bss_frame_data+0xb33/0x12b0 [ 1441.173169][ T112] ieee80211_bss_info_update+0x70b/0x930 [ 1441.178785][ T112] ieee80211_ibss_rx_queued_mgmt+0x17c9/0x2ac0 [ 1441.184921][ T112] ieee80211_iface_work+0x717/0xc70 [ 1441.190099][ T112] cfg80211_wiphy_work+0x225/0x260 [ 1441.195202][ T112] page last free stack trace: [ 1441.199857][ T112] free_unref_page_prepare+0x7ce/0x8e0 [ 1441.205309][ T112] free_unref_page+0x32/0x2e0 [ 1441.209976][ T112] skb_release_data+0x49a/0x800 [ 1441.214813][ T112] skb_attempt_defer_free+0x12f/0x530 [ 1441.220170][ T112] tcp_recvmsg_locked+0x1194/0x2300 [ 1441.225358][ T112] tcp_recvmsg+0x216/0x810 [ 1441.229760][ T112] inet_recvmsg+0x130/0x1e0 [ 1441.234246][ T112] __sys_recvfrom+0x30f/0x4a0 [ 1441.238904][ T112] __x64_sys_recvfrom+0xde/0xf0 [ 1441.243739][ T112] do_syscall_64+0x55/0xb0 [ 1441.248145][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.254033][ T112] [ 1441.256343][ T112] Memory state around the buggy address: [ 1441.261980][ T112] ffff888059db2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1441.270023][ T112] ffff888059db2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1441.278066][ T112] >ffff888059db2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1441.286104][ T112] ^ [ 1441.292236][ T112] ffff888059db2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1441.300275][ T112] ffff888059db2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1441.308316][ T112] ================================================================== [ 1441.461496][ T112] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1441.468714][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted 6.6.95-syzkaller #0 [ 1441.476523][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1441.486580][ T112] Call Trace: [ 1441.489856][ T112] [ 1441.492784][ T112] dump_stack_lvl+0x16c/0x230 [ 1441.497474][ T112] ? show_regs_print_info+0x20/0x20 [ 1441.502678][ T112] ? load_image+0x3b0/0x3b0 [ 1441.507193][ T112] panic+0x2c0/0x710 [ 1441.511090][ T112] ? bpf_jit_dump+0xd0/0xd0 [ 1441.515591][ T112] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1441.521474][ T112] ? _raw_spin_unlock+0x40/0x40 [ 1441.526313][ T112] ? print_memory_metadata+0x314/0x400 [ 1441.531760][ T112] ? txEnd+0x32d/0x520 [ 1441.535816][ T112] check_panic_on_warn+0x84/0xa0 [ 1441.540736][ T112] ? txEnd+0x32d/0x520 [ 1441.544786][ T112] end_report+0x6f/0x140 [ 1441.549015][ T112] kasan_report+0x128/0x150 [ 1441.553503][ T112] ? txEnd+0x32d/0x520 [ 1441.557556][ T112] kasan_check_range+0x288/0x290 [ 1441.562481][ T112] txEnd+0x32d/0x520 [ 1441.566362][ T112] jfs_lazycommit+0x5a6/0xa60 [ 1441.571030][ T112] ? txFreelock+0x5a0/0x5a0 [ 1441.575526][ T112] ? do_task_dead+0xd0/0xd0 [ 1441.580011][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 1441.584939][ T112] kthread+0x2fa/0x390 [ 1441.588987][ T112] ? txFreelock+0x5a0/0x5a0 [ 1441.593477][ T112] ? kthread_blkcg+0xd0/0xd0 [ 1441.598050][ T112] ret_from_fork+0x48/0x80 [ 1441.602451][ T112] ? kthread_blkcg+0xd0/0xd0 [ 1441.607023][ T112] ret_from_fork_asm+0x11/0x20 [ 1441.611778][ T112] [ 1441.615006][ T112] Kernel Offset: disabled [ 1441.619314][ T112] Rebooting in 86400 seconds..