last executing test programs: 6.742446587s ago: executing program 3 (id=798): r0 = syz_open_dev$vcsn(0x0, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mprotect(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x3) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24044840, 0x0, 0x0) memfd_create(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.115160749s ago: executing program 3 (id=806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r3}, 0x10) close(r2) 6.114996809s ago: executing program 0 (id=807): read$snddsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) r2 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0xc08e) close(0x3) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 6.0093058s ago: executing program 3 (id=808): socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='bdev\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x209d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xffffffffffffffcb}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x71f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f00000001c0)) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 5.97858451s ago: executing program 1 (id=809): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x829effb3e0eabb6, &(0x7f0000000840)) 5.739185811s ago: executing program 1 (id=810): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="aba732e9970a72a4", 0x8}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) 5.591726612s ago: executing program 1 (id=812): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 5.365811373s ago: executing program 4 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3}, {0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0xe83, 0x40, 0x2000000, 0x0, 0x2004cb], 0xeeef0000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.071087564s ago: executing program 4 (id=814): socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='cdg\x00', 0x4) 4.883231636s ago: executing program 0 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}}, 0x40014) 4.723163666s ago: executing program 0 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 4.662680297s ago: executing program 0 (id=819): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @broadcast}) r0 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") flock(r0, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x80100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000100)={{}, 0x1}) fcntl$lock(r3, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7, @void, @value}, 0x94) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) pwrite64(r1, &(0x7f0000005680)="a9a7", 0x2, 0x600000fff) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@norecovery}, {@grpquota}, {@auto_da_alloc}, {@user_xattr}, {@noquota}, {@barrier}, {@delalloc}, {@nolazytime}, {@errors_continue}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) 3.603362942s ago: executing program 0 (id=821): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./bus\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x10fff9) 3.319189763s ago: executing program 2 (id=823): r0 = socket(0x11, 0xa, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x140}, 0x40) 3.263620964s ago: executing program 3 (id=824): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, &(0x7f0000001440)=[{&(0x7f0000000000)="9f", 0x1}], 0x1, 0x19, 0x0) 3.262881954s ago: executing program 2 (id=825): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 3.116800035s ago: executing program 2 (id=826): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) process_vm_writev(0x0, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x400000, 0x5, 0x800, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) process_vm_readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/237, 0xed}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/177, 0xb1}], 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r9], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.603163267s ago: executing program 1 (id=827): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000480)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000180)={0x30}, 0x30) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x24, 0x0, 0x0) 2.576723327s ago: executing program 4 (id=828): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x2000000}, 0x8000) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 2.530097827s ago: executing program 1 (id=829): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{}], 0x1, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xffffffde) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000016e807528770a79544998c6f7ae5283300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.430293787s ago: executing program 4 (id=830): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4000, &(0x7f0000000000)={'trans=tcp,', {}, 0x2c, {[{@version_9p2000}]}}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000ce8cce93804500009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001240)="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", 0xfff}, {&(0x7f0000002240)="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", 0x665}], 0x2}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.206969749s ago: executing program 3 (id=831): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @broadcast}) r0 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") flock(r0, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x80100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000100)={{}, 0x1}) fcntl$lock(r3, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7, @void, @value}, 0x94) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) pwrite64(r1, &(0x7f0000005680)="a9a7", 0x2, 0x600000fff) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@norecovery}, {@grpquota}, {@auto_da_alloc}, {@user_xattr}, {@noquota}, {@barrier}, {@delalloc}, {@nolazytime}, {@errors_continue}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) 1.488878993s ago: executing program 4 (id=832): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000a00)=""/87, 0x57, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000840)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x7e, 0x3231564e, 0x3, [0x2], [0x57fa, 0xfffffffc], [], [0x400000000000001]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pidfd_getfd(r6, r3, 0x0) syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x1ff4, 0x2000, 0xfffffffc, 0x0, 0x0, r6}, &(0x7f0000000140), &(0x7f0000000280)) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xfffffffb}, &(0x7f0000000300)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010067656e65766500002400028004000600050009000100000014000700fc01000000000000000000000000000020daebe010a234274cf9bf704f3cd3997d12e7a7ef7c74994897bcc9d9983d47985cabf94bb58a4708395ca455f310e55ed374623167b82284f23f4bd962fac2af135d9990d9390b20c445d189e79b9e7b4e13e1127a762a7c955d3c62fc74ae3e8de8af874b7b44ef730f9f0172e7352821dfc6f8dac55e1816746b8db1f36ac3a521870aecbe2c3744fd44afc8"], 0x54}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r9, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @multicast1}, {0x306, @broadcast}, 0xffffff7d, {0x2, 0x0, @broadcast}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r7}, &(0x7f0000000400)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 822.532315ms ago: executing program 3 (id=833): epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x10, 0x3, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000100000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r5, &(0x7f00000001c0)=""/68, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001100000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) socket$packet(0x11, 0x3, 0x300) 603.231567ms ago: executing program 2 (id=834): socket$inet6_udplite(0xa, 0x2, 0x88) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) 315.302258ms ago: executing program 2 (id=835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/27, 0x1b}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040050) 216.168939ms ago: executing program 4 (id=836): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 127.136039ms ago: executing program 2 (id=837): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4000001) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)}, 0x1, 0x0, 0x0, 0x4040014}, 0x4040048) r2 = socket$inet(0x2, 0xa, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = gettid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000340)=ANY=[]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3800006, 0x30, r0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r9 = socket(0x22, 0x2, 0x3) setsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000000140)=0xfffffffe, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x12, "c29bc5bdc4eaa3ecb4fb9f7547b30f4c5333"}, &(0x7f0000000100)=0x1a) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='affs\x00', 0x90c804, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00') 44.10973ms ago: executing program 0 (id=838): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setreuid(0x0, 0xee01) fchown(r0, 0x0, 0x0) 0s ago: executing program 1 (id=839): sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0xf) execveat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x800) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) io_submit(0x0, 0x0, 0x0) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) r2 = io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x402c840}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ace activated: batadv_slave_0 [ 51.929662][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.940170][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.950133][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.965343][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.975498][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.986391][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.997125][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.008957][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.016889][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.025732][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.034570][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.043404][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.053168][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.063793][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.074495][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.084547][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.095194][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.106256][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.124336][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.133034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.147781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.148868][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.164499][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.173455][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.189576][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.202903][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.213633][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.223937][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.234583][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.245639][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.259365][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.270534][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.281207][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.291850][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.301878][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.312316][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.322139][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.333797][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.345075][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.353404][ T4179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.363987][ T4179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.373515][ T4179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.382376][ T4179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.396884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.426721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.436446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.447981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.457782][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.473817][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.484463][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.493839][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.512349][ T4247] loop3: detected capacity change from 0 to 1024 [ 52.518523][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 52.526985][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 52.535090][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.547007][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.557044][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.569220][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.579074][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.589600][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.598438][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 52.600213][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.605668][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 52.615784][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.617074][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.632334][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 52.679752][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.691544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.707053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.711787][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.720329][ T4180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.757349][ T4180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.767433][ T4180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.782080][ T4180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.901201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.425838][ T4254] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 53.515921][ T144] hfsplus: b-tree write err: -5, ino 4 [ 53.579760][ T425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.595937][ T425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.630231][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.641530][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.650613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.662105][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.674309][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.686316][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.696169][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.704210][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.728665][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.749796][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.757931][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.775688][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.822858][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.900179][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.917607][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.975714][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.431002][ T4278] dccp_close: ABORT with 40 bytes unread [ 54.538109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 54.548209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 54.609382][ T4217] Bluetooth: hci0: command 0x0419 tx timeout [ 54.615477][ T4217] Bluetooth: hci1: command 0x0419 tx timeout [ 54.688636][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 54.694946][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 54.725972][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 55.313852][ T4273] loop2: detected capacity change from 0 to 40427 [ 55.739250][ T4273] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.784970][ T4212] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.876860][ T4292] process 'syz.3.13' launched './file1' with NULL argv: empty string added [ 55.913906][ T4273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.038231][ T4212] usb 1-1: Using ep0 maxpacket: 32 [ 56.065530][ T4273] attempt to access beyond end of device [ 56.065530][ T4273] loop2: rw=2049, want=45104, limit=40427 [ 56.168439][ T4212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.259371][ T4298] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 56.266050][ T4298] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.296402][ T4298] vhci_hcd vhci_hcd.0: Device attached [ 56.318129][ T4301] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 56.324642][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.354252][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 56.376258][ T4298] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 56.382772][ T4298] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.390626][ T4211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 56.402566][ T4212] usb 1-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=c0.3b [ 56.421746][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.440972][ T4301] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 56.447571][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.457385][ T4298] vhci_hcd vhci_hcd.0: Device attached [ 56.465885][ T4212] usb 1-1: Product: syz [ 56.475991][ T4212] usb 1-1: Manufacturer: syz [ 56.480678][ T4212] usb 1-1: SerialNumber: syz [ 56.495901][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 56.511931][ T4217] vhci_hcd: vhci_device speed not set [ 56.515729][ T4212] usb 1-1: config 0 descriptor?? [ 56.539750][ T4302] vhci_hcd: connection closed [ 56.540768][ T4304] vhci_hcd: connection closed [ 56.545495][ T4299] vhci_hcd: connection closed [ 56.550692][ T4287] vhci_hcd: stop threads [ 56.563648][ T4306] vhci_hcd: connection closed [ 56.570505][ T4287] vhci_hcd: release socket [ 56.575494][ T4212] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 56.588635][ T4217] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 56.604379][ T4287] vhci_hcd: disconnect device [ 56.617651][ T4300] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 56.617989][ T4287] vhci_hcd: stop threads [ 56.638502][ T4287] vhci_hcd: release socket [ 56.712206][ T4287] vhci_hcd: disconnect device [ 56.750755][ T4310] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 56.750755][ T4310] program syz.1.16 not setting count and/or reply_len properly [ 56.798632][ T4211] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 56.816477][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.867697][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 56.889729][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 56.898555][ T4287] vhci_hcd: stop threads [ 56.898569][ T4287] vhci_hcd: release socket [ 56.898624][ T4287] vhci_hcd: disconnect device [ 56.905028][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 56.952684][ T4287] vhci_hcd: stop threads [ 56.957771][ T4287] vhci_hcd: release socket [ 56.960631][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 56.962667][ T4211] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 56.978785][ T4287] vhci_hcd: disconnect device [ 57.017319][ T4211] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 57.019718][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.034738][ T4211] usb 4-1: Manufacturer: syz [ 57.076910][ T4211] usb 4-1: config 0 descriptor?? [ 57.089073][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.180303][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.189502][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.198627][ T4212] gspca_sn9c20x: Write register 1000 failed -110 [ 57.199074][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.205383][ T4212] gspca_sn9c20x: Device initialization failed [ 57.214811][ T4312] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17'. [ 57.360322][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.373367][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.381752][ T4212] gspca_sn9c20x: probe of 1-1:0.0 failed with error -110 [ 57.390728][ T4211] rc_core: IR keymap rc-hauppauge not found [ 57.391093][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.404083][ T4211] Registered IR keymap rc-empty [ 57.416041][ T4312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 57.428461][ T4211] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 57.441893][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.444507][ T4211] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 57.459665][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.476008][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.493998][ T4316] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 57.509500][ T4211] usb 4-1: USB disconnect, device number 2 [ 57.653612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 58.129808][ T4312] syz.2.17 (4312) used greatest stack depth: 19128 bytes left [ 58.373271][ T4333] tmpfs: Unknown parameter 'usrquota' [ 58.387029][ T4212] usb 1-1: USB disconnect, device number 2 [ 61.161749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 61.171019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 61.180040][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 61.189226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 61.198299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 61.220981][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 61.291009][ T4214] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 61.390643][ T4342] loop1: detected capacity change from 0 to 64 [ 61.504588][ T4214] Bluetooth: hci4: Injecting HCI hardware error event [ 61.512228][ T4174] Bluetooth: hci4: hardware error 0x00 [ 61.718238][ T4217] vhci_hcd: vhci_device speed not set [ 61.743831][ T4342] UBIFS error (pid: 4342): cannot open "./file1", error -22 [ 62.310123][ T4348] loop0: detected capacity change from 0 to 512 [ 62.964148][ T4348] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.25: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 63.025987][ T4371] loop4: detected capacity change from 0 to 16 [ 63.033116][ T4348] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.25: Bad quota inode: 3, type: 0 [ 63.050100][ T4348] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 63.077812][ T4348] EXT4-fs (loop0): mount failed [ 63.079863][ T4371] erofs: (device loop4): mounted with root inode @ nid 36. [ 63.295212][ T4379] loop2: detected capacity change from 0 to 256 [ 63.681666][ T4381] erofs: (device loop4): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 63.686160][ T4379] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 63.907950][ T4214] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.509008][ T4214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.521345][ T4394] overlayfs: overlapping lowerdir path [ 65.033477][ T4214] usb 2-1: config 0 has no interfaces? [ 65.046289][ T4214] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.058438][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.069872][ T4214] usb 2-1: config 0 descriptor?? [ 65.568701][ T4407] loop3: detected capacity change from 0 to 64 [ 65.759929][ T4407] overlayfs: upper fs needs to support d_type. [ 65.769658][ T4407] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.777003][ T4407] overlayfs: failed to set xattr on upper [ 65.782782][ T4407] overlayfs: ...falling back to index=off,metacopy=off. [ 65.791783][ T4407] overlayfs: failed to resolve './file0': -2 [ 65.918903][ T4408] binder: 4374:4408 ioctl 4018620d 0 returned -22 [ 66.258888][ T4412] tipc: Started in network mode [ 66.263931][ T4412] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 66.316985][ T4412] tipc: Enabling of bearer rejected, failed to enable media [ 66.509255][ T4395] loop4: detected capacity change from 0 to 32768 [ 66.942649][ T4433] loop4: detected capacity change from 0 to 256 [ 67.003790][ T4433] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 67.259407][ T4439] overlayfs: overlapping lowerdir path [ 67.336238][ T4211] usb 2-1: USB disconnect, device number 2 [ 68.012461][ T4447] overlayfs: failed to resolve './file0': -2 [ 68.337535][ T4252] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.460920][ T4455] loop1: detected capacity change from 0 to 64 [ 69.175069][ T4252] usb 5-1: Using ep0 maxpacket: 32 [ 69.294908][ T4466] loop3: detected capacity change from 0 to 256 [ 69.308509][ T4252] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 69.319514][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.764684][ T4252] usb 5-1: config 0 descriptor?? [ 69.819856][ T4252] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 69.827609][ T4466] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 69.878083][ T4214] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.084727][ T4489] overlayfs: failed to resolve './file0': -2 [ 70.113141][ T4486] overlayfs: overlapping lowerdir path [ 70.288536][ T4214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.315774][ T4214] usb 3-1: config 0 has no interfaces? [ 70.372504][ T4214] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.438565][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.524738][ T4214] usb 3-1: config 0 descriptor?? [ 70.886477][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.022935][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.029520][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.062805][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.071456][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.079140][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.086515][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.093128][ T4252] usb 5-1: USB disconnect, device number 2 [ 71.094311][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.107302][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.114944][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.123356][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.131875][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.140518][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.147971][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.157206][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.187262][ T4502] loop1: detected capacity change from 0 to 64 [ 71.204263][ T4501] binder: 4470:4501 ioctl 4018620d 0 returned -22 [ 71.225355][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.346034][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.483555][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.589984][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.709522][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.741056][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.754101][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.769378][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.784913][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.812630][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.835102][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.843984][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.851729][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.859498][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.866952][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.870520][ T4512] loop4: detected capacity change from 0 to 128 [ 71.874956][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.888518][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.895896][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.903480][ T4214] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 71.920075][ T4214] hid-generic 0000:0000:0003.0001: hidraw0: HID v3.91 Device [syz1] on syz0 [ 72.077426][ T4522] loop1: detected capacity change from 0 to 256 [ 72.104044][ T4524] loop0: detected capacity change from 0 to 8 [ 72.130557][ T4528] overlayfs: failed to resolve './file0': -2 [ 72.141124][ T4522] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 72.284575][ T4532] loop0: detected capacity change from 0 to 512 [ 72.342140][ T4532] ======================================================= [ 72.342140][ T4532] WARNING: The mand mount option has been deprecated and [ 72.342140][ T4532] and is ignored by this kernel. Remove the mand [ 72.342140][ T4532] option from the mount to silence this warning. [ 72.342140][ T4532] ======================================================= [ 72.415025][ T4532] EXT4-fs (loop0): inline encryption not supported [ 72.516066][ T4217] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.530283][ T4214] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.553725][ T4532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.87: bg 0: block 248: padding at end of block bitmap is not set [ 72.679674][ T4211] usb 3-1: USB disconnect, device number 2 [ 72.841593][ T4532] Quota error (device loop0): write_blk: dquota write failed [ 72.935068][ T4532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 72.946334][ T4217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.946372][ T4214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.967795][ T4217] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 73.081768][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.199880][ T4532] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.87: Failed to acquire dquot type 1 [ 73.255101][ T4532] EXT4-fs (loop0): 1 truncate cleaned up [ 73.264910][ T4532] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,inlinecrypt,usrjquota=,,errors=continue. Quota mode: writeback. [ 73.268689][ T4214] usb 4-1: config 0 has no interfaces? [ 73.279216][ T4532] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.297361][ T4217] usb 5-1: config 0 descriptor?? [ 73.319435][ T4214] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.329372][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.345509][ T4214] usb 4-1: config 0 descriptor?? [ 73.412365][ T4217] pwc: Askey VC010 type 2 USB webcam detected. [ 73.532130][ T4559] loop2: detected capacity change from 0 to 128 [ 73.632582][ T4217] pwc: send_video_command error -71 [ 73.638416][ T4217] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 73.645945][ T4217] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 73.649181][ T4559] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.654398][ T4217] usb 5-1: USB disconnect, device number 3 [ 73.675124][ T4559] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.868422][ T4214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.148169][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 74.449124][ T4214] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.466351][ T4569] input: syz1 as /devices/virtual/input/input6 [ 74.473474][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.482728][ T4214] usb 2-1: Product: syz [ 74.495996][ T4214] usb 2-1: Manufacturer: syz [ 74.500966][ T4214] usb 2-1: SerialNumber: syz [ 74.501698][ T4569] overlayfs: missing 'lowerdir' [ 74.511114][ T4252] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.514643][ T4214] usb 2-1: config 0 descriptor?? [ 74.534838][ T4569] __nla_validate_parse: 48 callbacks suppressed [ 74.534848][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 74.721901][ T4574] loop2: detected capacity change from 0 to 1024 [ 74.768224][ T4214] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 74.821792][ T144] hfsplus: b-tree write err: -5, ino 4 [ 74.893383][ T4252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.904130][ T4252] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 74.915524][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.940092][ T4252] usb 5-1: config 0 descriptor?? [ 75.113493][ T4252] pwc: Askey VC010 type 2 USB webcam detected. [ 75.148142][ T4252] pwc: send_video_command error -71 [ 75.153377][ T4252] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 75.161407][ T4252] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 75.326205][ T4589] loop0: detected capacity change from 0 to 64 [ 76.572220][ T4591] loop4: detected capacity change from 0 to 64 [ 76.618524][ T4214] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 76.705116][ T4588] sched: RT throttling activated [ 77.043479][ T1347] cfg80211: failed to load regulatory.db [ 77.050759][ T4252] usb 5-1: USB disconnect, device number 4 [ 77.078315][ T4586] overlayfs: upper fs needs to support d_type. [ 77.085824][ T4586] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 77.094457][ T4586] overlayfs: failed to set xattr on upper [ 77.095643][ T1107] usb 2-1: USB disconnect, device number 3 [ 77.100256][ T4586] overlayfs: ...falling back to index=off,metacopy=off. [ 77.100393][ T4586] overlayfs: failed to resolve './file0': -2 [ 77.396956][ T4601] loop3: detected capacity change from 0 to 1024 [ 77.408366][ T4214] usb 4-1: USB disconnect, device number 3 [ 77.563062][ T4601] hfsplus: unable to parse mount options [ 77.712752][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.746906][ T4615] loop4: detected capacity change from 0 to 128 [ 77.881264][ T4615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.903016][ T4621] loop0: detected capacity change from 0 to 2048 [ 77.923299][ T4615] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.078215][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.088942][ T1107] usb 2-1: config 0 has no interfaces? [ 78.094453][ T1107] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.101680][ T4621] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,nolazytime,stripe=0x0000000000000020,. Quota mode: none. [ 78.104176][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.126655][ T4211] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.136133][ T1107] usb 2-1: config 0 descriptor?? [ 78.172517][ T4621] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.245972][ T4621] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.115: bg 0: block 345: padding at end of block bitmap is not set [ 78.270625][ T4621] EXT4-fs (loop0): Remounting filesystem read-only [ 78.277256][ T4621] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 78.297422][ T4621] EXT4-fs (loop0): Remounting filesystem read-only [ 78.378170][ T4211] usb 3-1: Using ep0 maxpacket: 8 [ 78.422375][ T4633] overlayfs: failed to resolve './file0': -2 [ 78.727448][ T4641] loop4: detected capacity change from 0 to 64 [ 78.754407][ T4642] binder: 4593:4642 ioctl 4018620d 0 returned -22 [ 78.808466][ T4211] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.867162][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.997369][ T4211] usb 3-1: Product: syz [ 79.068318][ T4211] usb 3-1: Manufacturer: syz [ 79.136244][ T4211] usb 3-1: SerialNumber: syz [ 79.233147][ T4211] usb 3-1: config 0 descriptor?? [ 79.367475][ T4636] overlayfs: upper fs needs to support d_type. [ 79.374090][ T4636] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.381108][ T4636] overlayfs: failed to set xattr on upper [ 79.386817][ T4636] overlayfs: ...falling back to index=off,metacopy=off. [ 79.394052][ T4636] overlayfs: failed to resolve './file0': -2 [ 79.598540][ T4211] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 79.945258][ T4662] loop3: detected capacity change from 0 to 128 [ 80.060424][ T4668] overlayfs: failed to resolve './file0': -2 [ 80.117450][ T4662] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.127521][ T4662] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 80.143968][ T4662] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.174800][ T4252] usb 2-1: USB disconnect, device number 4 [ 80.309742][ T4684] loop1: detected capacity change from 0 to 8 [ 80.669539][ T26] audit: type=1800 audit(1731913333.766:2): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.134" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 80.721462][ T4695] loop0: detected capacity change from 0 to 64 [ 80.782704][ T4686] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 81.248203][ T4695] overlayfs: upper fs needs to support d_type. [ 81.256051][ T4695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.263097][ T4695] overlayfs: failed to set xattr on upper [ 81.268873][ T4695] overlayfs: ...falling back to index=off,metacopy=off. [ 81.276262][ T4695] overlayfs: failed to resolve './file0': -2 [ 81.313566][ T4703] device batadv_slave_1 entered promiscuous mode [ 81.347100][ T4702] device batadv_slave_1 left promiscuous mode [ 81.426487][ T4705] loop1: detected capacity change from 0 to 256 [ 81.709280][ T4711] overlayfs: overlapping lowerdir path [ 82.118599][ T4211] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 82.234041][ T4211] usb 3-1: USB disconnect, device number 3 [ 82.464871][ T4720] overlayfs: failed to resolve './file0': -2 [ 82.473320][ T4723] loop3: detected capacity change from 0 to 256 [ 82.585740][ T4723] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 82.961772][ T4252] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.089192][ T4746] loop2: detected capacity change from 0 to 64 [ 83.358420][ T4252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.443888][ T4252] usb 1-1: config 0 has no interfaces? [ 83.616349][ T4252] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.738329][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.812254][ T4252] usb 1-1: config 0 descriptor?? [ 84.025639][ T4757] overlayfs: overlapping lowerdir path [ 84.397053][ T4761] loop2: detected capacity change from 0 to 64 [ 85.202138][ T4774] loop4: detected capacity change from 0 to 256 [ 85.209930][ T4773] binder: 4724:4773 ioctl 4018620d 0 returned -22 [ 85.247566][ T4773] binder: 4724:4773 ioctl 4018620d 0 returned -22 [ 85.281305][ T4774] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 85.372596][ T4782] loop3: detected capacity change from 0 to 1024 [ 85.526216][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.547693][ T4782] hfsplus: found bad thread record in catalog [ 85.561510][ T4782] hfsplus: catalog searching failed [ 85.688583][ T4317] hfsplus: found bad thread record in catalog [ 85.695605][ T4317] hfsplus: found bad thread record in catalog [ 85.768105][ T1107] usb 2-1: Using ep0 maxpacket: 8 [ 85.929350][ T4792] loop2: detected capacity change from 0 to 64 [ 85.987277][ T4793] overlayfs: overlapping lowerdir path [ 86.389442][ T4212] usb 1-1: USB disconnect, device number 3 [ 87.171668][ T4812] loop3: detected capacity change from 0 to 256 [ 87.243186][ T4817] loop4: detected capacity change from 0 to 64 [ 87.318353][ T1107] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.353372][ T4812] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 87.416597][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.510506][ T1107] usb 2-1: Product: syz [ 87.545786][ T1107] usb 2-1: Manufacturer: syz [ 87.623460][ T1107] usb 2-1: SerialNumber: syz [ 87.869765][ T1107] usb 2-1: config 0 descriptor?? [ 88.191931][ T1107] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 88.222089][ T4823] overlayfs: overlapping lowerdir path [ 88.229329][ T1107] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 88.268177][ T4828] loop0: detected capacity change from 0 to 512 [ 88.426567][ T1107] usb 2-1: USB disconnect, device number 5 [ 88.677020][ T4828] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.853809][ T4828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.919874][ T4833] loop3: detected capacity change from 0 to 2048 [ 88.963224][ T4828] EXT4-fs (loop0): 1 orphan inode deleted [ 88.972259][ T4828] EXT4-fs (loop0): 1 truncate cleaned up [ 88.977979][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,block_validity,quota,. Quota mode: writeback. [ 89.057124][ T4833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.087937][ T4828] EXT4-fs error (device loop0): empty_inline_dir:1855: inode #12: block 7: comm syz.0.180: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 89.131394][ T4828] EXT4-fs (loop0): Remounting filesystem read-only [ 89.169288][ T4828] EXT4-fs warning (device loop0): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 89.227779][ T4843] loop2: detected capacity change from 0 to 64 [ 89.858183][ T1107] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.177672][ T4864] loop0: detected capacity change from 0 to 64 [ 90.298338][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.490638][ T1107] usb 2-1: config 0 has no interfaces? [ 90.589084][ T1107] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.949669][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.026065][ T1107] usb 2-1: config 0 descriptor?? [ 91.249285][ T4878] overlayfs: overlapping lowerdir path [ 91.667573][ T4886] binder: 4835:4886 ioctl 4018620d 0 returned -22 [ 91.988286][ T4217] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.243159][ T4901] loop3: detected capacity change from 0 to 2048 [ 92.288736][ T4902] loop2: detected capacity change from 0 to 64 [ 92.453357][ T4902] overlayfs: upper fs needs to support d_type. [ 92.461345][ T4902] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.468400][ T4902] overlayfs: failed to set xattr on upper [ 92.474636][ T4902] overlayfs: ...falling back to index=off,metacopy=off. [ 92.482619][ T4902] overlayfs: failed to resolve './file0': -2 [ 92.668514][ T4901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.845924][ T4217] usb 5-1: Using ep0 maxpacket: 8 [ 92.923738][ T1347] usb 2-1: USB disconnect, device number 6 [ 93.158375][ T4217] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 93.190185][ T4217] usb 5-1: can't read configurations, error -71 [ 93.226956][ T4915] loop0: detected capacity change from 0 to 64 [ 93.337687][ T4912] loop1: detected capacity change from 0 to 128 [ 94.076434][ T26] audit: type=1800 audit(1731913347.236:3): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.208" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 94.391142][ T4932] overlayfs: overlapping lowerdir path [ 95.022679][ T4944] loop1: detected capacity change from 0 to 256 [ 95.250764][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.266974][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.275952][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.300132][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.340767][ T4951] loop2: detected capacity change from 0 to 64 [ 95.411855][ T4951] overlayfs: failed to resolve './file1': -2 [ 95.511303][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.638760][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.779021][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 95.956740][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.014634][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.024136][ T4944] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.038038][ T26] audit: type=1800 audit(1731913349.196:4): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.216" name="file1" dev="loop1" ino=1048591 res=0 errno=0 [ 96.042562][ T4944] syz.1.216 (4944) used greatest stack depth: 18800 bytes left [ 96.158085][ T4214] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.165631][ T1107] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.518160][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 96.587365][ T4964] loop1: detected capacity change from 0 to 64 [ 96.638357][ T4214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.714222][ T4214] usb 4-1: config 0 has no interfaces? [ 96.785944][ T4214] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.808860][ T1107] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.824379][ T4965] loop2: detected capacity change from 0 to 512 [ 96.850544][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.898583][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.931788][ T1107] usb 5-1: Product: syz [ 96.936184][ T1107] usb 5-1: Manufacturer: syz [ 96.978899][ T1107] usb 5-1: SerialNumber: syz [ 97.009761][ T4214] usb 4-1: config 0 descriptor?? [ 97.065044][ T1107] usb 5-1: config 0 descriptor?? [ 97.234675][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback. [ 97.268147][ T4965] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.388174][ T1107] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.605196][ T4978] binder: 4946:4978 ioctl 4018620d 0 returned -22 [ 97.889395][ T4985] overlayfs: overlapping lowerdir path [ 98.717069][ T4217] usb 4-1: USB disconnect, device number 4 [ 98.795703][ T4992] loop1: detected capacity change from 0 to 256 [ 98.888114][ T4993] loop2: detected capacity change from 0 to 64 [ 99.036009][ T4993] overlayfs: failed to resolve './file1': -2 [ 99.190083][ T4992] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 99.841510][ T5001] loop3: detected capacity change from 0 to 256 [ 99.875250][ T5003] loop2: detected capacity change from 0 to 512 [ 99.915940][ T5001] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 99.935263][ T26] audit: type=1800 audit(1731913353.096:5): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.231" name="file2" dev="loop1" ino=1048592 res=0 errno=0 [ 99.950805][ T5003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.005799][ T5001] attempt to access beyond end of device [ 100.005799][ T5001] loop3: rw=524288, want=408, limit=256 [ 100.036290][ T4992] exFAT-fs (loop1): hint_cluster is invalid (17) [ 100.050600][ T5003] EXT4-fs (loop2): 1 truncate cleaned up [ 100.057572][ T5001] attempt to access beyond end of device [ 100.057572][ T5001] loop3: rw=524288, want=664, limit=256 [ 100.075582][ T5003] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,nodelalloc,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 100.097819][ T4992] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 100.106717][ T5001] attempt to access beyond end of device [ 100.106717][ T5001] loop3: rw=0, want=288, limit=256 [ 100.123371][ T4992] exFAT-fs (loop1): Filesystem has been set read-only [ 100.148337][ T26] audit: type=1800 audit(1731913353.316:6): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.235" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 100.169994][ T5006] exFAT-fs (loop1): error, broken FAT chain. [ 100.176092][ T5006] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805b8b0160 iblock : 24, err : -5) [ 100.197451][ T26] audit: type=1800 audit(1731913353.356:7): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 100.247442][ T5003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.234: bg 0: block 504: padding at end of block bitmap is not set [ 100.262406][ T1107] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 100.293490][ T1107] usb 5-1: USB disconnect, device number 7 [ 100.594678][ T5016] loop4: detected capacity change from 0 to 64 [ 101.002027][ T5017] loop1: detected capacity change from 0 to 1024 [ 101.252672][ T5017] attempt to access beyond end of device [ 101.252672][ T5017] loop1: rw=0, want=5780, limit=1024 [ 101.288860][ T5017] Buffer I/O error on dev loop1, logical block 2889, async page read [ 101.297065][ T5017] attempt to access beyond end of device [ 101.297065][ T5017] loop1: rw=0, want=5780, limit=1024 [ 101.307905][ T5017] Buffer I/O error on dev loop1, logical block 2889, async page read [ 101.316626][ T26] audit: type=1800 audit(1731913354.476:8): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.238" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 101.348618][ T5017] attempt to access beyond end of device [ 101.348618][ T5017] loop1: rw=0, want=5780, limit=1024 [ 101.404788][ T5017] attempt to access beyond end of device [ 101.404788][ T5017] loop1: rw=0, want=5780, limit=1024 [ 101.430443][ T5017] Buffer I/O error on dev loop1, logical block 2889, async page read [ 101.467213][ T26] audit: type=1800 audit(1731913354.626:9): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.238" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 101.764151][ T5030] overlayfs: overlapping lowerdir path [ 102.028246][ T4217] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.328144][ T4217] usb 5-1: Using ep0 maxpacket: 8 [ 102.614052][ T4217] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.638411][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.673402][ T4217] usb 5-1: Product: syz [ 102.677580][ T4217] usb 5-1: Manufacturer: syz [ 102.698096][ T4217] usb 5-1: SerialNumber: syz [ 102.723430][ T4217] usb 5-1: config 0 descriptor?? [ 102.737708][ T4252] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.038258][ T4217] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.111080][ T5059] loop3: detected capacity change from 0 to 64 [ 103.248446][ T4252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.306824][ T4252] usb 2-1: config 0 has no interfaces? [ 103.388311][ T4252] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.491031][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.728848][ T4252] usb 2-1: config 0 descriptor?? [ 104.096935][ T5075] overlayfs: overlapping lowerdir path [ 104.364594][ T5078] binder: 5031:5078 ioctl 4018620d 0 returned -22 [ 104.804189][ T5082] loop3: detected capacity change from 0 to 512 [ 104.872336][ T5082] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.924637][ T5082] EXT4-fs (loop3): 1 truncate cleaned up [ 104.932374][ T5082] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,grpid,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 104.985186][ T5082] EXT4-fs error (device loop3): ext4_nfs_get_inode:1434: inode #11: comm syz.3.259: iget: bad extra_isize 46 (inode size 256) [ 105.019993][ T5082] EXT4-fs (loop3): Remounting filesystem read-only [ 105.079562][ T5089] loop0: detected capacity change from 0 to 512 [ 105.118169][ T5089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.159774][ T5089] EXT4-fs (loop0): 1 truncate cleaned up [ 105.177795][ T5089] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 106.694351][ T1107] usb 2-1: USB disconnect, device number 7 [ 106.944747][ T5103] loop3: detected capacity change from 0 to 64 [ 106.972494][ T5105] overlayfs: failed to resolve './file0': -2 [ 107.168170][ T4217] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 107.185433][ T4217] usb 5-1: USB disconnect, device number 8 [ 107.295251][ T5109] loop4: detected capacity change from 0 to 1024 [ 107.308156][ T5111] loop1: detected capacity change from 0 to 512 [ 107.356091][ T5111] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.366735][ T5111] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 107.395560][ T5111] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 107.527587][ T5111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 107.552578][ T5111] System zones: 0-2, 18-18, 34-34 [ 107.800184][ T5122] overlayfs: overlapping lowerdir path [ 108.320088][ T5111] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 108.340972][ T4260] hfsplus: b-tree write err: -5, ino 4 [ 108.374804][ T5111] EXT4-fs (loop1): 1 truncate cleaned up [ 108.385175][ T5111] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.798209][ T4252] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.988149][ T1347] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.130507][ T5152] overlayfs: failed to resolve './file0': -2 [ 110.149540][ T5154] loop1: detected capacity change from 0 to 64 [ 110.780656][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 110.794089][ T5157] loop4: detected capacity change from 0 to 256 [ 110.870949][ T5157] FAT-fs (loop4): Directory bread(block 64) failed [ 110.877658][ T5157] FAT-fs (loop4): Directory bread(block 65) failed [ 110.884943][ T5157] FAT-fs (loop4): Directory bread(block 66) failed [ 110.892098][ T5157] FAT-fs (loop4): Directory bread(block 67) failed [ 110.899048][ T5157] FAT-fs (loop4): Directory bread(block 68) failed [ 110.906332][ T5157] FAT-fs (loop4): Directory bread(block 69) failed [ 110.913042][ T5157] FAT-fs (loop4): Directory bread(block 70) failed [ 110.921731][ T5157] FAT-fs (loop4): Directory bread(block 71) failed [ 110.929092][ T5157] FAT-fs (loop4): Directory bread(block 72) failed [ 110.935616][ T5157] FAT-fs (loop4): Directory bread(block 73) failed [ 111.008831][ T5157] attempt to access beyond end of device [ 111.008831][ T5157] loop4: rw=2049, want=1228, limit=256 [ 111.078651][ T1347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.089265][ T1347] usb 4-1: config 0 has no interfaces? [ 111.098081][ T1347] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.110929][ T1347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.126568][ T1347] usb 4-1: config 0 descriptor?? [ 111.281756][ T4252] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.294955][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.303337][ T4252] usb 1-1: Product: syz [ 111.307508][ T4252] usb 1-1: Manufacturer: syz [ 111.312847][ T4252] usb 1-1: SerialNumber: syz [ 111.322042][ T4252] usb 1-1: config 0 descriptor?? [ 111.345943][ T5166] overlayfs: overlapping lowerdir path [ 111.755762][ T5168] binder: 5139:5168 ioctl 4018620d 0 returned -22 [ 112.108298][ T4252] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 112.115569][ T4252] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 112.140467][ T4252] usb 1-1: USB disconnect, device number 4 [ 112.152153][ T5180] loop4: detected capacity change from 0 to 512 [ 112.174955][ T5183] capability: warning: `syz.2.288' uses deprecated v2 capabilities in a way that may be insecure [ 112.364452][ T5180] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.385043][ T5180] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.581593][ T5180] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 112.677829][ T5202] overlayfs: failed to resolve './file0': -2 [ 113.684358][ T5180] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 113.701916][ T5155] usb 4-1: USB disconnect, device number 5 [ 114.135616][ T5204] loop0: detected capacity change from 0 to 64 [ 114.532177][ T5180] EXT4-fs (loop4): This should not happen!! Data will be lost [ 114.532177][ T5180] [ 114.555891][ T5180] EXT4-fs (loop4): Total free blocks count 0 [ 114.578262][ T5180] EXT4-fs (loop4): Free/Dirty block details [ 114.611964][ T5180] EXT4-fs (loop4): free_blocks=65280 [ 114.617441][ T5180] EXT4-fs (loop4): dirty_blocks=33 [ 114.653234][ T5208] loop1: detected capacity change from 0 to 256 [ 114.660006][ T5180] EXT4-fs (loop4): Block reservation details [ 114.666060][ T5180] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 114.688762][ T5208] exfat: Bad value for 'uid' [ 114.898088][ T1107] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.050478][ T5220] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 115.067158][ T5217] overlayfs: overlapping lowerdir path [ 115.138188][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 115.418899][ T1107] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 115.419053][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.419267][ T1107] usb 4-1: Product: syz [ 115.419425][ T1107] usb 4-1: Manufacturer: syz [ 115.419503][ T1107] usb 4-1: SerialNumber: syz [ 115.434871][ T1107] usb 4-1: config 0 descriptor?? [ 115.698160][ T1107] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 115.834012][ T5229] loop4: detected capacity change from 0 to 256 [ 116.385385][ T5257] loop1: detected capacity change from 0 to 8 [ 116.646536][ T5262] loop4: detected capacity change from 0 to 128 [ 117.064378][ T5262] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.208921][ T5262] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.529550][ T5309] loop1: detected capacity change from 0 to 512 [ 117.654504][ T5314] loop0: detected capacity change from 0 to 16 [ 117.661747][ T5309] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.682045][ T5309] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.317: bad orphan inode 17 [ 117.694191][ T5312] overlayfs: overlapping lowerdir path [ 117.990199][ T5309] EXT4-fs (loop1): Remounting filesystem read-only [ 118.007002][ T5309] ext4_test_bit(bit=16, block=4) = 0 [ 118.021097][ T5309] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000006,data_err=ignore,noquota,quota,. Quota mode: writeback. [ 118.081527][ T5314] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.138145][ T1107] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 118.159896][ T1107] usb 4-1: USB disconnect, device number 6 [ 118.180802][ T5323] loop2: detected capacity change from 0 to 128 [ 118.256174][ T5323] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 118.400547][ T5331] loop1: detected capacity change from 0 to 164 [ 118.447075][ T5323] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 118.868292][ T5339] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 118.932105][ T5331] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.498414][ T5353] loop0: detected capacity change from 0 to 64 [ 119.699116][ T5353] overlayfs: upper fs needs to support d_type. [ 119.706987][ T5353] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.714028][ T5353] overlayfs: failed to set xattr on upper [ 119.719920][ T5353] overlayfs: ...falling back to index=off,metacopy=off. [ 119.727313][ T5353] overlayfs: failed to resolve './file0': -2 [ 120.257274][ T26] audit: type=1804 audit(1731913373.416:10): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.322" name="/newroot/57/file0/bus" dev="loop2" ino=115 res=1 errno=0 [ 120.287543][ T5355] overlayfs: overlapping lowerdir path [ 120.445331][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 120.784855][ T5373] loop0: detected capacity change from 0 to 8192 [ 121.797206][ T5385] loop3: detected capacity change from 0 to 1024 [ 121.905458][ T5392] loop0: detected capacity change from 0 to 256 [ 121.967563][ T5394] loop4: detected capacity change from 0 to 64 [ 122.081401][ T5394] overlayfs: upper fs needs to support d_type. [ 122.089285][ T5394] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.096288][ T5394] overlayfs: failed to set xattr on upper [ 122.102116][ T5394] overlayfs: ...falling back to index=off,metacopy=off. [ 122.109519][ T5394] overlayfs: failed to resolve './file0': -2 [ 122.131627][ T5392] exfat: Deprecated parameter 'namecase' [ 122.331864][ T5392] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 122.775889][ T5404] loop4: detected capacity change from 0 to 1024 [ 122.830161][ T5406] loop2: detected capacity change from 0 to 512 [ 122.859143][ T5412] loop3: detected capacity change from 0 to 16 [ 122.888181][ T5410] overlayfs: overlapping lowerdir path [ 123.004054][ T5412] erofs: (device loop3): mounted with root inode @ nid 36. [ 123.078833][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.127089][ T5406] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.334386][ T5406] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.551506][ T5426] loop0: detected capacity change from 0 to 64 [ 124.905051][ T5454] loop0: detected capacity change from 0 to 64 [ 125.147677][ T5450] overlayfs: overlapping lowerdir path [ 125.236458][ T5454] overlayfs: upper fs needs to support d_type. [ 125.248401][ T5454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.255531][ T5454] overlayfs: failed to set xattr on upper [ 125.261279][ T5454] overlayfs: ...falling back to index=off,metacopy=off. [ 125.268984][ T5454] overlayfs: failed to resolve './file0': -2 [ 126.754264][ T5480] loop1: detected capacity change from 0 to 64 [ 127.297918][ T5486] loop3: detected capacity change from 0 to 128 [ 127.377756][ T5483] loop0: detected capacity change from 0 to 1024 [ 127.523788][ T5483] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.531032][ T5486] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 127.548346][ T5483] EXT4-fs (loop0): Ignoring removed orlov option [ 127.565190][ T5486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2002c018, mo2=0002] [ 127.595658][ T5486] System zones: 1-3, 19-19, 35-36 [ 127.602762][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 127.656086][ T5486] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,debug,,errors=continue. Quota mode: none. [ 127.699262][ T5155] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.723715][ T5486] ext2 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.955591][ T5483] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 128.005727][ T5503] overlayfs: overlapping lowerdir path [ 128.866218][ T26] audit: type=1326 audit(1731913382.026:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5519 comm="syz.2.390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b23103719 code=0x0 [ 128.898222][ T5155] usb 5-1: config 0 has an invalid interface number: 40 but max is 0 [ 128.906308][ T5155] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.917030][ T5155] usb 5-1: config 0 has no interface number 0 [ 128.924166][ T5155] usb 5-1: config 0 interface 40 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 128.935086][ T5155] usb 5-1: config 0 interface 40 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 128.946034][ T5155] usb 5-1: config 0 interface 40 altsetting 0 endpoint 0x7 has invalid maxpacket 959, setting to 64 [ 128.957102][ T5155] usb 5-1: config 0 interface 40 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 128.977666][ T5526] loop2: detected capacity change from 0 to 1024 [ 128.984963][ T5155] usb 5-1: config 0 interface 40 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 128.996487][ T5155] usb 5-1: config 0 interface 40 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 129.018058][ T5155] usb 5-1: config 0 interface 40 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 16 [ 129.033266][ T5526] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.134653][ T5526] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,discard,barrier=0x0000000000000002,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 129.217822][ T5526] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 129.301527][ T5535] loop1: detected capacity change from 0 to 64 [ 129.309992][ T5155] usb 5-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=be.d4 [ 129.356187][ T5155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.537849][ T5155] usb 5-1: Product: syz [ 129.614962][ T5155] usb 5-1: Manufacturer: syz [ 129.791368][ T5155] usb 5-1: SerialNumber: syz [ 129.982094][ T5155] usb 5-1: config 0 descriptor?? [ 130.023119][ T5155] keyspan 5-1:0.40: Keyspan 1 port adapter converter detected [ 130.043629][ T5155] keyspan 5-1:0.40: found no endpoint descriptor for endpoint 87 [ 130.064054][ T5155] keyspan 5-1:0.40: unsupported endpoint type 0 [ 130.081244][ T5155] keyspan 5-1:0.40: found no endpoint descriptor for endpoint 81 [ 130.235315][ T5550] loop1: detected capacity change from 0 to 1024 [ 130.257339][ T5155] keyspan 5-1:0.40: found no endpoint descriptor for endpoint 1 [ 130.265445][ T5155] keyspan 5-1:0.40: found no endpoint descriptor for endpoint 2 [ 130.273359][ T5155] keyspan 5-1:0.40: found no endpoint descriptor for endpoint 85 [ 130.281374][ T5155] keyspan 5-1:0.40: found no endpoint descriptor for endpoint 5 [ 130.292658][ T5155] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 130.305131][ T5155] usb 5-1: USB disconnect, device number 9 [ 130.589781][ T5550] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 130.862943][ T5550] hfsplus: failed to load root directory [ 130.881360][ T5155] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 130.978488][ T5155] keyspan 5-1:0.40: device disconnected [ 131.008447][ T5557] loop2: detected capacity change from 0 to 256 [ 131.026295][ T5557] exfat: Deprecated parameter 'codepage' [ 131.032717][ T5557] exfat: Bad value for 'codepage' [ 131.160620][ T5557] loop2: detected capacity change from 0 to 1024 [ 131.285094][ T4287] hfsplus: b-tree write err: -5, ino 4 [ 131.545009][ T5577] loop0: detected capacity change from 0 to 64 [ 131.738448][ T1347] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.198346][ T1347] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.218121][ T1347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.309558][ T1347] usb 5-1: config 0 descriptor?? [ 132.369199][ T1347] cp210x 5-1:0.0: cp210x converter detected [ 132.415161][ T5588] loop2: detected capacity change from 0 to 1024 [ 132.440484][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.446810][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.648662][ T1347] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 135.665965][ T1347] cp210x 5-1:0.0: querying part number failed [ 135.681160][ T5603] capability: warning: `syz.3.418' uses 32-bit capabilities (legacy support in use) [ 135.853258][ T1347] usb 5-1: cp210x converter now attached to ttyUSB0 [ 135.869228][ T1347] usb 5-1: USB disconnect, device number 10 [ 135.888232][ T1347] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.896379][ T1347] cp210x 5-1:0.0: device disconnected [ 135.966965][ T5612] loop4: detected capacity change from 0 to 512 [ 136.257012][ T5628] loop2: detected capacity change from 0 to 64 [ 136.406973][ T5626] loop3: detected capacity change from 0 to 512 [ 136.637051][ T5626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.918246][ T5626] EXT4-fs (loop3): 1 truncate cleaned up [ 136.934745][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,nouid32,,errors=continue. Quota mode: none. [ 136.957723][ T5612] loop4: detected capacity change from 0 to 1024 [ 137.007721][ T5626] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.426: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 137.079683][ T5612] EXT4-fs (loop4): Ignoring removed nobh option [ 137.111391][ T5612] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 137.111391][ T5612] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 137.111391][ T5612] [ 137.137829][ T5634] loop2: detected capacity change from 0 to 512 [ 137.162536][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,barrier=0x000000000000624a,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,nouser_xattr,,errors=continue. Quota mode: none. [ 137.850514][ T5634] EXT4-fs (loop2): 1 orphan inode deleted [ 137.856275][ T5634] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 137.880030][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.902815][ T5642] loop3: detected capacity change from 0 to 128 [ 137.923781][ T5634] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.991540][ T5646] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.061440][ T5642] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 138.142192][ T5647] overlayfs: overlapping lowerdir path [ 138.912925][ T5655] loop1: detected capacity change from 0 to 512 [ 139.130787][ T5655] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.220491][ T5655] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.306890][ T5667] loop3: detected capacity change from 0 to 2048 [ 139.399336][ T5667] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,abort,data_err=abort,min_batch_time=0x0000000000000800,,errors=continue. Quota mode: none. [ 139.499360][ T5667] EXT4-fs (loop3): shut down requested (1) [ 139.525703][ T5678] loop1: detected capacity change from 0 to 512 [ 139.541539][ T5678] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 139.610972][ T5678] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,bsddf,norecovery,usrjquota=./file1,,errors=continue. Quota mode: writeback. [ 139.663994][ T5682] loop3: detected capacity change from 0 to 16 [ 139.695531][ T5678] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.707687][ T5682] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.738641][ T5682] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 139.749227][ T5682] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 139.805163][ T5678] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 139.880416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 141.140413][ T5701] loop4: detected capacity change from 0 to 64 [ 141.298917][ T5701] overlayfs: upper fs needs to support d_type. [ 141.306980][ T5701] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.314076][ T5701] overlayfs: failed to set xattr on upper [ 141.319839][ T5701] overlayfs: ...falling back to index=off,metacopy=off. [ 141.327310][ T5701] overlayfs: failed to resolve './file0': -2 [ 142.004048][ T5725] loop1: detected capacity change from 0 to 128 [ 142.087590][ T5725] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 142.106554][ T5725] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 142.116491][ T5725] FAT-fs (loop1): Filesystem has been set read-only [ 142.148298][ T5733] loop0: detected capacity change from 0 to 512 [ 142.190837][ T5733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.229066][ T1324] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.239747][ T5733] EXT4-fs (loop0): 1 truncate cleaned up [ 142.245391][ T5733] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.258193][ T1347] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 142.275647][ T5733] syz.0.459 (pid 5733) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 142.598880][ T5743] loop1: detected capacity change from 0 to 64 [ 142.756285][ T5743] overlayfs: upper fs needs to support d_type. [ 142.764206][ T5743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.771248][ T5743] overlayfs: failed to set xattr on upper [ 142.776999][ T5743] overlayfs: ...falling back to index=off,metacopy=off. [ 142.784422][ T5743] overlayfs: failed to resolve './file0': -2 [ 142.819200][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.868463][ T1347] usb 3-1: config 0 has no interfaces? [ 142.949063][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.068687][ T1347] usb 3-1: New USB device found, idVendor=1199, idProduct=6820, bcdDevice=32.c3 [ 143.128954][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.153757][ T1324] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 143.198185][ T1347] usb 3-1: Product: syz [ 143.202351][ T1347] usb 3-1: Manufacturer: syz [ 143.217534][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.283398][ T1347] usb 3-1: SerialNumber: syz [ 143.299809][ T1324] usb 5-1: config 0 descriptor?? [ 143.309851][ T5749] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 143.315613][ T1347] usb 3-1: config 0 descriptor?? [ 143.485598][ T5759] loop0: detected capacity change from 0 to 128 [ 143.611451][ T5759] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.622260][ T5759] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.647949][ T5759] fscrypt (loop0, inode 12): Unsupported encryption flags (0x8b) [ 143.695092][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 143.705738][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 143.801757][ T1324] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x6 [ 143.828149][ T1324] logitech-djreceiver 0003:046D:C534.0002: unbalanced collection at end of report description [ 143.876591][ T1324] logitech-djreceiver 0003:046D:C534.0002: logi_dj_probe: parse failed [ 143.929638][ T1324] logitech-djreceiver: probe of 0003:046D:C534.0002 failed with error -22 [ 144.091170][ T1347] usb 5-1: USB disconnect, device number 11 [ 144.849711][ T5790] loop1: detected capacity change from 0 to 64 [ 145.487895][ T21] usb 3-1: USB disconnect, device number 4 [ 145.619579][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 145.643768][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 145.677975][ T5795] netlink: 'syz.2.479': attribute type 12 has an invalid length. [ 145.699672][ T5795] netlink: 'syz.2.479': attribute type 29 has an invalid length. [ 145.732433][ T5795] netlink: 148 bytes leftover after parsing attributes in process `syz.2.479'. [ 145.752916][ T5795] netlink: 59 bytes leftover after parsing attributes in process `syz.2.479'. [ 146.421427][ T5830] loop3: detected capacity change from 0 to 64 [ 147.438723][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'. [ 147.538441][ T26] audit: type=1326 audit(1731913400.799:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 147.591827][ T26] audit: type=1326 audit(1731913400.799:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 147.620812][ T26] audit: type=1326 audit(1731913400.829:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 147.653395][ T5847] 9pnet_virtio: no channels available for device syz [ 147.734855][ T26] audit: type=1326 audit(1731913400.829:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 147.869984][ T26] audit: type=1326 audit(1731913400.829:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 147.970648][ T5849] loop2: detected capacity change from 0 to 1024 [ 147.975459][ T26] audit: type=1326 audit(1731913400.829:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 148.066961][ T26] audit: type=1326 audit(1731913400.829:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 148.112260][ T26] audit: type=1326 audit(1731913400.829:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 148.274453][ T5840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.372027][ T5853] loop0: detected capacity change from 0 to 64 [ 149.038207][ T5852] overlayfs: upper fs needs to support d_type. [ 149.045049][ T5852] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.052051][ T5852] overlayfs: failed to set xattr on upper [ 149.058191][ T5852] overlayfs: ...falling back to index=off,metacopy=off. [ 149.058637][ T4317] hfsplus: b-tree write err: -5, ino 4 [ 149.065208][ T5852] overlayfs: failed to resolve './file0': -2 [ 149.089443][ T26] audit: type=1326 audit(1731913400.840:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 149.149552][ T26] audit: type=1326 audit(1731913400.840:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.3.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 149.430688][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 149.504087][ T5858] Trying to write to read-only block-device nullb0 [ 149.768699][ T5866] loop4: detected capacity change from 0 to 1024 [ 149.847172][ T5868] loop0: detected capacity change from 0 to 64 [ 151.412838][ T5866] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 151.421009][ T5855] Trying to write to read-only block-device nullb0 [ 151.493949][ T5866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.499336][ T5855] Trying to write to read-only block-device nullb0 [ 151.502295][ T5866] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.503: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.527167][ T5866] EXT4-fs (loop4): 1 orphan inode deleted [ 151.543069][ T5866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.554013][ T5855] Trying to write to read-only block-device nullb0 [ 151.561064][ T5855] Trying to write to read-only block-device nullb0 [ 151.624921][ T5855] Trying to write to read-only block-device nullb0 [ 151.631450][ T5855] Trying to write to read-only block-device nullb0 [ 151.658440][ T5855] Trying to write to read-only block-device nullb0 [ 151.702466][ T5855] Trying to write to read-only block-device nullb0 [ 151.733463][ T5855] Trying to write to read-only block-device nullb0 [ 151.996863][ T5886] overlayfs: overlapping lowerdir path [ 152.950705][ T21] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 153.075010][ T5912] loop1: detected capacity change from 0 to 64 [ 153.155670][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 153.296535][ T5914] Zero length message leads to an empty skb [ 153.390246][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.472616][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.664447][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.729615][ T21] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.773370][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.824557][ T21] usb 5-1: config 0 descriptor?? [ 154.018913][ T5921] tmpfs: Unknown parameter 'usrquota' [ 154.190539][ T5924] loop0: detected capacity change from 0 to 64 [ 155.831598][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 155.840511][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 155.930785][ T5922] overlayfs: upper fs needs to support d_type. [ 155.932466][ T21] usb 5-1: USB disconnect, device number 12 [ 155.937344][ T5922] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.949929][ T5922] overlayfs: failed to set xattr on upper [ 155.955663][ T5922] overlayfs: ...falling back to index=off,metacopy=off. [ 155.962725][ T5922] overlayfs: failed to resolve './file0': -2 [ 156.031577][ T5938] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 156.031577][ T5938] program syz.3.526 not setting count and/or reply_len properly [ 156.581271][ T5933] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 156.618485][ T5933] kvm: pic: single mode not supported [ 156.625564][ T5933] kvm: pic: non byte read [ 156.638783][ T5933] kvm: pic: level sensitive irq not supported [ 156.638885][ T5933] kvm: pic: non byte read [ 156.807291][ T1324] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.846990][ T4252] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.858150][ T4250] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.908670][ T5952] overlayfs: overlapping lowerdir path [ 157.093402][ T4250] usb 3-1: Using ep0 maxpacket: 8 [ 157.093463][ T4252] usb 2-1: Using ep0 maxpacket: 32 [ 157.163162][ T1324] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 157.185555][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.222094][ T4252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.340740][ T1324] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 157.381634][ T1324] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 157.412772][ T4250] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.422774][ T4252] usb 2-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=c0.3b [ 157.459872][ T4250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.474893][ T4252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.503911][ T1324] usb 1-1: Manufacturer: syz [ 157.517693][ T4250] usb 3-1: Product: syz [ 157.522036][ T4252] usb 2-1: Product: syz [ 157.532072][ T4250] usb 3-1: Manufacturer: syz [ 157.536847][ T4252] usb 2-1: Manufacturer: syz [ 157.542412][ T4250] usb 3-1: SerialNumber: syz [ 157.552698][ T1324] usb 1-1: config 0 descriptor?? [ 157.564503][ T4252] usb 2-1: SerialNumber: syz [ 157.608201][ T4250] usb 3-1: config 0 descriptor?? [ 157.615446][ T4252] usb 2-1: config 0 descriptor?? [ 157.656178][ T1324] rc_core: IR keymap rc-hauppauge not found [ 157.664001][ T1324] Registered IR keymap rc-empty [ 157.674564][ T4252] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 157.686276][ T1324] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 157.699974][ T1324] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 157.703465][ T5961] loop3: detected capacity change from 0 to 128 [ 157.808776][ T5961] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 157.845639][ T1324] usb 1-1: USB disconnect, device number 5 [ 157.893073][ T4250] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 158.673209][ T4252] gspca_sn9c20x: Write register 1000 failed -110 [ 158.679567][ T4252] gspca_sn9c20x: Device initialization failed [ 158.713272][ T4252] gspca_sn9c20x: probe of 2-1:0.0 failed with error -110 [ 158.939193][ T1324] usb 2-1: USB disconnect, device number 8 [ 158.959502][ T5976] loop4: detected capacity change from 0 to 64 [ 159.601917][ T5972] overlayfs: upper fs needs to support d_type. [ 159.608640][ T5972] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.615655][ T5972] overlayfs: failed to set xattr on upper [ 159.621397][ T5972] overlayfs: ...falling back to index=off,metacopy=off. [ 159.628434][ T5972] overlayfs: failed to resolve './file0': -2 [ 160.075383][ T5992] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.219098][ T6003] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 161.228712][ T6007] loop4: detected capacity change from 0 to 128 [ 161.252425][ T6003] kvm: pic: non byte read [ 161.280551][ T6003] kvm: pic: level sensitive irq not supported [ 161.280610][ T6003] kvm: pic: non byte read [ 161.307813][ T6003] kvm: pic: level sensitive irq not supported [ 161.307874][ T6003] kvm: pic: non byte read [ 161.348448][ T6007] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 161.443059][ T6003] kvm: pic: level sensitive irq not supported [ 161.443198][ T6003] kvm: pic: non byte read [ 161.630714][ T4250] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 161.713075][ T4250] usb 3-1: USB disconnect, device number 5 [ 162.441055][ T6013] syz.0.549 uses obsolete (PF_INET,SOCK_PACKET) [ 162.718346][ T6013] ucma_write: process 332 (syz.0.549) changed security contexts after opening file descriptor, this is not allowed. [ 162.771788][ T6035] loop4: detected capacity change from 0 to 64 [ 163.231865][ T6035] overlayfs: upper fs needs to support d_type. [ 163.239765][ T6035] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.246821][ T6035] overlayfs: failed to set xattr on upper [ 163.252578][ T6035] overlayfs: ...falling back to index=off,metacopy=off. [ 163.259980][ T6035] overlayfs: failed to resolve './file0': -2 [ 163.496019][ T5155] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.511784][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 163.511796][ T26] audit: type=1326 audit(1731913417.019:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 163.582557][ T26] audit: type=1326 audit(1731913417.069:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 163.641259][ T26] audit: type=1326 audit(1731913417.069:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.3.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457c223719 code=0x7ffc0000 [ 164.123156][ T5155] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.133465][ T5155] usb 3-1: config 0 has no interfaces? [ 164.139081][ T5155] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.148253][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.159728][ T5155] usb 3-1: config 0 descriptor?? [ 164.748061][ T6085] binder: 6031:6085 ioctl 4018620d 0 returned -22 [ 165.778377][ T5939] usb 3-1: USB disconnect, device number 6 [ 165.920652][ T4250] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 166.097561][ T6096] loop0: detected capacity change from 0 to 128 [ 166.142777][ T4212] Bluetooth: hci3: command 0x0405 tx timeout [ 166.166498][ T6096] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 166.180894][ T4250] usb 5-1: Using ep0 maxpacket: 8 [ 166.218992][ T6104] ./file0: Can't open blockdev [ 166.337266][ T6104] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 166.546729][ T4174] Bluetooth: Wrong link type (-22) [ 166.578085][ T4250] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.588095][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.596097][ T4250] usb 5-1: Product: syz [ 166.600648][ T4250] usb 5-1: Manufacturer: syz [ 166.609528][ T4250] usb 5-1: SerialNumber: syz [ 166.757467][ T4250] usb 5-1: config 0 descriptor?? [ 166.899152][ T6125] 9pnet_virtio: no channels available for device syz [ 167.361787][ T425] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 167.524061][ T4250] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.544532][ T6127] 9pnet_virtio: no channels available for device syz [ 167.884277][ T6147] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 167.951395][ T6149] loop3: detected capacity change from 0 to 64 [ 168.539840][ T4212] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.607492][ T6156] loop0: detected capacity change from 0 to 128 [ 168.611032][ T6154] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.623016][ T6154] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.631770][ T6154] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.640491][ T6154] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.650541][ T6154] device vxlan0 entered promiscuous mode [ 168.660577][ T6156] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 168.667698][ T6154] batman_adv: batadv0: Adding interface: vxlan0 [ 168.682083][ T6154] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.708371][ T6154] batman_adv: batadv0: Interface activated: vxlan0 [ 169.028393][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.578'. [ 169.031759][ T4212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.049145][ T4212] usb 2-1: config 0 has no interfaces? [ 169.055149][ T4212] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.064806][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.090953][ T4212] usb 2-1: config 0 descriptor?? [ 169.958179][ T6170] 9pnet_virtio: no channels available for device syz [ 170.305456][ T4252] Bluetooth: hci0: command 0x0406 tx timeout [ 170.311555][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 170.501234][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 170.593366][ T5291] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 170.731628][ T4250] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 170.750261][ T4250] usb 5-1: USB disconnect, device number 13 [ 170.766050][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 170.797660][ T6186] binder: 6136:6186 ioctl 4018620d 0 returned -22 [ 170.809397][ T6185] device bridge_slave_1 left promiscuous mode [ 170.833446][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.957544][ T26] audit: type=1326 audit(1731913424.521:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65c1f7719 code=0x7ffc0000 [ 170.979618][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.050739][ T26] audit: type=1326 audit(1731913424.571:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa65c1f7719 code=0x7ffc0000 [ 171.119555][ T4250] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 171.203745][ T26] audit: type=1326 audit(1731913424.571:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65c1f7719 code=0x7ffc0000 [ 171.841788][ T5155] usb 2-1: USB disconnect, device number 9 [ 172.228107][ T6205] loop2: detected capacity change from 0 to 64 [ 172.243821][ T4250] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.262599][ T4250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.290755][ T6205] overlayfs: upper fs needs to support d_type. [ 172.297352][ T6205] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 172.304354][ T6205] overlayfs: failed to set xattr on upper [ 172.310068][ T6205] overlayfs: ...falling back to index=off,metacopy=off. [ 172.317137][ T6205] overlayfs: failed to resolve './file0': -2 [ 172.363017][ T4250] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.372050][ T4250] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.405887][ T4250] usb 5-1: Manufacturer: syz [ 172.415259][ T4250] usb 5-1: config 0 descriptor?? [ 172.457186][ T6211] loop1: detected capacity change from 0 to 512 [ 172.463689][ T5939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.534171][ T4250] rc_core: IR keymap rc-hauppauge not found [ 172.541596][ T4250] Registered IR keymap rc-empty [ 172.560108][ T4250] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 172.614547][ T4250] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 172.703260][ T4250] usb 5-1: USB disconnect, device number 14 [ 172.732761][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 172.813107][ T6211] loop1: detected capacity change from 0 to 1024 [ 172.942150][ T6211] EXT4-fs (loop1): Ignoring removed nobh option [ 172.970113][ T6211] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 172.970113][ T6211] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 172.970113][ T6211] [ 173.199026][ T5939] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 173.216934][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.230109][ T6211] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,barrier=0x000000000000624a,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,nouser_xattr,,errors=continue. Quota mode: none. [ 173.253236][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.714115][ T5939] usb 1-1: Product: syz [ 174.014709][ T5939] usb 1-1: Manufacturer: syz [ 174.026496][ T5939] usb 1-1: SerialNumber: syz [ 174.087119][ T5939] usb 1-1: config 0 descriptor?? [ 174.351222][ T5939] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.047894][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 175.140290][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 175.226849][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.648908][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'. [ 176.368687][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.913161][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 176.931663][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.082888][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 177.097106][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 177.125909][ T23] usb 2-1: Manufacturer: syz [ 177.133273][ T23] usb 2-1: config 0 descriptor?? [ 177.184601][ T5939] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 177.278578][ T6280] 9pnet_virtio: no channels available for device syz [ 177.426493][ T5939] usb 1-1: USB disconnect, device number 6 [ 177.858984][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.869164][ T13] usb 4-1: config 0 has no interfaces? [ 177.874700][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.958347][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.010633][ T13] usb 4-1: config 0 descriptor?? [ 178.029408][ T13] usb 4-1: can't set config #0, error -71 [ 178.056173][ T13] usb 4-1: USB disconnect, device number 7 [ 178.168811][ T23] rc_core: IR keymap rc-hauppauge not found [ 178.174726][ T23] Registered IR keymap rc-empty [ 178.189308][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 179.244166][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 179.772541][ T23] usb 2-1: USB disconnect, device number 10 [ 179.812448][ T6299] loop1: detected capacity change from 0 to 128 [ 179.852448][ T6301] overlayfs: workdir and upperdir must be separate subtrees [ 179.937197][ T6299] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 180.058075][ T6303] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.066870][ T6303] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.075732][ T6303] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.084490][ T6303] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.152637][ T6303] device vxlan0 entered promiscuous mode [ 180.161977][ T6303] team0: Device vxlan0 is up. Set it down before adding it as a team port [ 180.207018][ T6303] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.216390][ T6303] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.225302][ T6303] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.234211][ T6303] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.181717][ T5291] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 181.429428][ T6320] fuse: Unknown parameter '0x0000000000000005' [ 181.476905][ T6320] ERROR: device name not specified. [ 181.578763][ T5155] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.608886][ T26] audit: type=1326 audit(1731913435.223:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 181.630931][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.648162][ T4250] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.804227][ T26] audit: type=1326 audit(1731913435.243:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 181.871676][ T26] audit: type=1326 audit(1731913435.253:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 181.894138][ T5155] usb 5-1: Using ep0 maxpacket: 8 [ 181.931702][ T26] audit: type=1326 audit(1731913435.253:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.017242][ T4250] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.100284][ T26] audit: type=1326 audit(1731913435.253:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.126256][ T26] audit: type=1326 audit(1731913435.253:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.148148][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.154843][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.163399][ T26] audit: type=1326 audit(1731913435.253:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.189643][ T26] audit: type=1326 audit(1731913435.253:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.189654][ T4250] usb 3-1: config 0 has no interfaces? [ 182.189685][ T4250] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.211691][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.214000][ T26] audit: type=1326 audit(1731913435.253:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.256879][ T26] audit: type=1326 audit(1731913435.253:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3674e719 code=0x7ffc0000 [ 182.278938][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.286024][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.333825][ T4250] usb 3-1: config 0 descriptor?? [ 182.346437][ T5155] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.360511][ T5155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.382046][ T5155] usb 5-1: Product: syz [ 182.391905][ T5155] usb 5-1: Manufacturer: syz [ 182.396764][ T5155] usb 5-1: SerialNumber: syz [ 182.410310][ T5155] usb 5-1: config 0 descriptor?? [ 182.560019][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 182.577883][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.675523][ T5155] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.684069][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 182.698824][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 182.720774][ T23] usb 2-1: Manufacturer: syz [ 182.736141][ T23] usb 2-1: config 0 descriptor?? [ 182.886754][ T23] rc_core: IR keymap rc-hauppauge not found [ 182.892755][ T23] Registered IR keymap rc-empty [ 182.907689][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 182.920224][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 182.951837][ T6341] binder: 6316:6341 ioctl 4018620d 0 returned -22 [ 182.994818][ T23] usb 2-1: USB disconnect, device number 11 [ 183.272746][ T6343] loop3: detected capacity change from 0 to 128 [ 183.381777][ T6343] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 183.871570][ T6353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.880390][ T6353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.889209][ T6353] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.898065][ T6353] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.912616][ T6353] device vxlan0 entered promiscuous mode [ 183.919763][ T6353] team0: Device vxlan0 is up. Set it down before adding it as a team port [ 183.935490][ T6353] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.944587][ T6353] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.953587][ T6353] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.962516][ T6353] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.170502][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 184.341457][ T1107] usb 3-1: USB disconnect, device number 7 [ 184.843540][ T5155] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 184.856057][ T5155] usb 5-1: USB disconnect, device number 15 [ 185.224306][ T1107] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 185.736926][ T1107] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 186.332679][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.496927][ T1107] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 186.551176][ T1107] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 186.593887][ T1107] usb 2-1: Manufacturer: syz [ 186.612893][ T1107] usb 2-1: config 0 descriptor?? [ 186.746965][ T1107] rc_core: IR keymap rc-hauppauge not found [ 186.753020][ T1107] Registered IR keymap rc-empty [ 186.761715][ T1107] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 186.791203][ T1107] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 186.846132][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.010777][ T1107] usb 2-1: USB disconnect, device number 12 [ 187.125144][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.148072][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.165424][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.423291][ T6410] infiniband syz0: set active [ 187.428291][ T6410] infiniband syz0: added ip_vti0 [ 187.441322][ T6410] infiniband syz0: Couldn't open port 1 [ 187.524112][ T6410] RDS/IB: syz0: added [ 187.528620][ T6410] smc: adding ib device syz0 with port count 1 [ 187.534979][ T6410] smc: ib device syz0 port 1 has pnetid [ 187.544055][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.603798][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.664196][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.723454][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.783977][ T6410] ip_vti0 speed is unknown, defaulting to 1000 [ 187.897545][ T5155] ip_vti0 speed is unknown, defaulting to 1000 [ 187.921298][ T5939] ip_vti0 speed is unknown, defaulting to 1000 [ 187.966075][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.986262][ T13] usb 4-1: config 0 has no interfaces? [ 187.998627][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.008050][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.048497][ T13] usb 4-1: config 0 descriptor?? [ 188.635742][ T6424] binder: 6396:6424 ioctl 4018620d 0 returned -22 [ 189.751651][ T1107] usb 4-1: USB disconnect, device number 8 [ 189.903024][ T5155] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.928163][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 189.943092][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 190.227261][ T6453] ip_vti0 speed is unknown, defaulting to 1000 [ 190.469923][ T5155] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.532773][ T5155] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.725597][ T5155] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.937753][ T5155] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.998277][ T5155] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 191.070745][ T6459] netlink: 76 bytes leftover after parsing attributes in process `syz.1.671'. [ 191.199484][ T5155] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.248739][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.288571][ T5155] usb 1-1: Product: syz [ 191.292741][ T5155] usb 1-1: Manufacturer: syz [ 191.728776][ T5155] cdc_wdm 1-1:1.0: skipping garbage [ 191.734491][ T5155] cdc_wdm 1-1:1.0: skipping garbage [ 191.801808][ T5155] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 191.907461][ T5155] cdc_wdm 1-1:1.0: Unknown control protocol [ 192.165339][ T5155] usb 1-1: USB disconnect, device number 7 [ 192.716631][ T4215] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 192.724463][ T5155] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 192.752969][ T6488] binder: 6487:6488 ioctl c0306201 0 returned -14 [ 193.141134][ T4215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.151432][ T5155] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.176529][ T5155] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.189580][ T4215] usb 5-1: config 0 has no interfaces? [ 193.201818][ T4215] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.218978][ T5155] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.234460][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.247274][ T5155] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 193.266916][ T4215] usb 5-1: config 0 descriptor?? [ 193.315858][ T5155] usb 1-1: string descriptor 0 read error: -71 [ 193.324396][ T5155] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.347283][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.357601][ T6501] loop0: detected capacity change from 0 to 512 [ 193.387593][ T5155] usb 1-1: can't set config #1, error -71 [ 193.395991][ T5155] usb 1-1: USB disconnect, device number 8 [ 193.408616][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.414954][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.561032][ T6501] loop0: detected capacity change from 0 to 1024 [ 193.604626][ T6501] EXT4-fs (loop0): Ignoring removed nobh option [ 193.616953][ T6501] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 193.616953][ T6501] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 193.616953][ T6501] [ 193.875279][ T6511] binder: 6471:6511 ioctl 4018620d 0 returned -22 [ 193.882617][ T6501] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,barrier=0x000000000000624a,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,nouser_xattr,,errors=continue. Quota mode: none. [ 195.783885][ T4215] usb 5-1: USB disconnect, device number 16 [ 195.982899][ T4250] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.178030][ T6558] loop4: detected capacity change from 0 to 512 [ 197.181662][ T4250] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 197.229510][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.278117][ T6558] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.301260][ T6558] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.309026][ T6570] tmpfs: Unknown parameter 'usrquota' [ 197.331442][ T4250] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 197.354839][ T4250] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 197.416330][ T4250] usb 1-1: Manufacturer: syz [ 197.467016][ T4176] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 197.497845][ T4250] usb 1-1: config 0 descriptor?? [ 197.620966][ T4252] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.641312][ T4250] rc_core: IR keymap rc-hauppauge not found [ 197.649099][ T4250] Registered IR keymap rc-empty [ 197.689665][ T4250] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 197.753995][ T4250] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 197.780789][ T4212] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 197.820176][ T4250] usb 1-1: USB disconnect, device number 9 [ 197.980699][ T4252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.021189][ T4252] usb 3-1: config 0 has no interfaces? [ 198.047241][ T4252] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.079098][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.096417][ T4252] usb 3-1: config 0 descriptor?? [ 198.160588][ T4212] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.186795][ T4212] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.215560][ T4212] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.233663][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.414276][ T6572] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 199.198502][ T13] usb 3-1: USB disconnect, device number 8 [ 200.336289][ T6611] loop2: detected capacity change from 0 to 512 [ 200.439482][ T6611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.597886][ T6611] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.657606][ T4214] usb 2-1: USB disconnect, device number 13 [ 202.177215][ T4214] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 202.197214][ T5155] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 202.356516][ T6635] trusted_key: encrypted_key: insufficient parameters specified [ 202.636927][ T4214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.661669][ T4214] usb 2-1: config 0 has no interfaces? [ 202.683698][ T4214] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.694503][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.710722][ T4214] usb 2-1: config 0 descriptor?? [ 202.815153][ T5155] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.835109][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.287060][ T5155] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 203.559486][ T5155] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 203.574285][ T5155] usb 3-1: Manufacturer: syz [ 203.583048][ T5155] usb 3-1: config 0 descriptor?? [ 203.846817][ T6657] binder: 6628:6657 ioctl 4018620d 0 returned -22 [ 203.889787][ T5155] rc_core: IR keymap rc-hauppauge not found [ 204.478028][ T5155] Registered IR keymap rc-empty [ 204.493064][ T5155] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 204.618304][ T5155] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 204.652078][ T4214] usb 2-1: USB disconnect, device number 14 [ 204.669204][ T6667] loop3: detected capacity change from 0 to 512 [ 204.679556][ T5155] usb 3-1: USB disconnect, device number 9 [ 206.354974][ T6667] loop3: detected capacity change from 0 to 1024 [ 206.382290][ T6667] EXT4-fs (loop3): Ignoring removed nobh option [ 206.998567][ T6667] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 206.998567][ T6667] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 206.998567][ T6667] [ 207.200228][ T6667] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,barrier=0x000000000000624a,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,nouser_xattr,,errors=continue. Quota mode: none. [ 209.194947][ T4212] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.709696][ T4212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.720947][ T4212] usb 3-1: config 0 has no interfaces? [ 209.727368][ T6750] overlayfs: overlapping lowerdir path [ 209.732981][ T4212] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.742014][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.759172][ T4212] usb 3-1: config 0 descriptor?? [ 210.162822][ T4212] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 210.273133][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 210.360784][ T6771] binder: 6715:6771 ioctl 4018620d 0 returned -22 [ 210.402534][ T4212] usb 5-1: Using ep0 maxpacket: 8 [ 210.682547][ T4212] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.699927][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.712316][ T4212] usb 5-1: Product: syz [ 210.716524][ T4212] usb 5-1: Manufacturer: syz [ 210.731640][ T4212] usb 5-1: SerialNumber: syz [ 210.747106][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.750479][ T4212] usb 5-1: config 0 descriptor?? [ 210.769009][ T23] usb 1-1: config 0 has no interfaces? [ 210.780679][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.795108][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.967957][ T23] usb 1-1: config 0 descriptor?? [ 211.521455][ T4215] usb 3-1: USB disconnect, device number 10 [ 211.713592][ T4214] usb 1-1: USB disconnect, device number 10 [ 211.762753][ T4212] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 212.232810][ T1324] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.482182][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 212.733947][ T6802] overlayfs: overlapping lowerdir path [ 212.784697][ T1324] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.784724][ T1324] usb 3-1: config 0 has no interface number 0 [ 212.784759][ T1324] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.784797][ T1324] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.784820][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.985782][ T1324] usb 3-1: config 0 descriptor?? [ 213.025175][ T1324] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 213.484660][ T6817] loop1: detected capacity change from 0 to 512 [ 213.731414][ T4212] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 213.743107][ T6817] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.779032][ T4212] usb 5-1: USB disconnect, device number 17 [ 213.848631][ T6817] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.379103][ T4215] usb 3-1: USB disconnect, device number 11 [ 214.415361][ T4215] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 214.458424][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 214.986362][ T6862] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 215.029277][ T6862] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 215.394831][ T4250] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 215.498421][ T6867] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.507254][ T6867] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.516026][ T6867] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.524812][ T6867] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.622131][ T6867] device vxlan0 entered promiscuous mode [ 215.647311][ T6867] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.650713][ T4250] usb 5-1: Using ep0 maxpacket: 8 [ 215.656385][ T6867] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.670189][ T6867] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.679153][ T6867] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.960668][ T4250] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.972763][ T4250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.981865][ T4250] usb 5-1: Product: syz [ 216.014988][ T4250] usb 5-1: Manufacturer: syz [ 216.028274][ T4250] usb 5-1: SerialNumber: syz [ 216.053775][ T4250] usb 5-1: config 0 descriptor?? [ 216.320617][ T4250] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.339350][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 216.339364][ T26] audit: type=1326 audit(1731913469.981:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 216.457812][ T6895] loop2: detected capacity change from 0 to 128 [ 216.494923][ T26] audit: type=1326 audit(1731913469.981:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 216.548652][ T26] audit: type=1326 audit(1731913469.991:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 216.576753][ T6895] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 216.587534][ T26] audit: type=1326 audit(1731913469.991:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 216.760305][ T26] audit: type=1326 audit(1731913469.991:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 216.792631][ T26] audit: type=1326 audit(1731913469.991:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 216.984379][ T26] audit: type=1326 audit(1731913469.991:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 217.153925][ T26] audit: type=1326 audit(1731913469.991:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 217.801566][ T26] audit: type=1326 audit(1731913469.991:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 217.837847][ T26] audit: type=1326 audit(1731913469.991:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b23103719 code=0x7ffc0000 [ 217.863587][ T6908] overlayfs: overlapping lowerdir path [ 218.186784][ T6919] loop1: detected capacity change from 0 to 128 [ 218.263294][ T6919] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 218.346439][ T6919] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 218.396294][ T6924] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 218.739824][ T4250] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 218.866343][ T4250] usb 5-1: USB disconnect, device number 18 [ 218.994707][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 219.003924][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.011520][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.022615][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.030337][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.051587][ T5289] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 219.977439][ T6968] 9pnet_virtio: no channels available for device syz [ 222.040703][ T6993] block nbd2: shutting down sockets [ 222.458593][ T7006] loop3: detected capacity change from 0 to 128 [ 223.125399][ T7006] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 223.235324][ T7006] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 223.401876][ T7011] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 223.975991][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 224.597058][ T7025] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.606079][ T7025] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.614861][ T7025] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.623622][ T7025] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.635295][ T7025] device vxlan0 entered promiscuous mode [ 224.667046][ T7025] bridge0: port 3(vxlan0) entered blocking state [ 224.689635][ T7027] [ 224.692091][ T7027] ====================================================== [ 224.699099][ T7027] WARNING: possible circular locking dependency detected [ 224.706109][ T7027] 5.15.173-syzkaller #0 Not tainted [ 224.711298][ T7027] ------------------------------------------------------ [ 224.718309][ T7027] syz.2.837/7027 is trying to acquire lock: [ 224.720280][ T7025] bridge0: port 3(vxlan0) entered disabled state [ 224.724186][ T7027] ffff888077c1cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 224.741533][ T7027] [ 224.741533][ T7027] but task is already holding lock: [ 224.748889][ T7027] ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 224.749689][ T7025] bridge0: port 3(vxlan0) entered blocking state [ 224.758546][ T7027] [ 224.758546][ T7027] which lock already depends on the new lock. [ 224.758546][ T7027] [ 224.758554][ T7027] [ 224.758554][ T7027] the existing dependency chain (in reverse order) is: [ 224.758561][ T7027] [ 224.758561][ T7027] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 224.758589][ T7027] lock_acquire+0x1db/0x4f0 [ 224.758609][ T7027] __mutex_lock_common+0x1da/0x25a0 [ 224.764950][ T7025] bridge0: port 3(vxlan0) entered forwarding state [ 224.775310][ T7027] mutex_lock_nested+0x17/0x20 [ 224.775331][ T7027] rfkill_register+0x30/0x880 [ 224.775348][ T7027] hci_register_dev+0x4dd/0xa50 [ 224.775365][ T7027] vhci_create_device+0x310/0x590 [ 224.830825][ T7027] vhci_write+0x382/0x430 [ 224.835677][ T7027] vfs_write+0xacd/0xe50 [ 224.840438][ T7027] ksys_write+0x1a2/0x2c0 [ 224.845290][ T7027] do_syscall_64+0x3b/0xb0 [ 224.850241][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.856655][ T7027] [ 224.856655][ T7027] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 224.864606][ T7027] lock_acquire+0x1db/0x4f0 [ 224.869635][ T7027] __mutex_lock_common+0x1da/0x25a0 [ 224.875362][ T7027] mutex_lock_nested+0x17/0x20 [ 224.880644][ T7027] vhci_send_frame+0x8a/0xf0 [ 224.885753][ T7027] hci_send_frame+0x1af/0x2f0 [ 224.890947][ T7027] hci_tx_work+0xb2e/0x1a30 [ 224.895972][ T7027] process_one_work+0x8a1/0x10c0 [ 224.901430][ T7027] worker_thread+0xaca/0x1280 [ 224.906626][ T7027] kthread+0x3f6/0x4f0 [ 224.911207][ T7027] ret_from_fork+0x1f/0x30 [ 224.916131][ T7027] [ 224.916131][ T7027] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 224.925326][ T7027] lock_acquire+0x1db/0x4f0 [ 224.930340][ T7027] __flush_work+0xeb/0x1a0 [ 224.935260][ T7027] hci_dev_do_close+0x20a/0x1070 [ 224.940717][ T7027] hci_error_reset+0x106/0x2d0 [ 224.945983][ T7027] process_one_work+0x8a1/0x10c0 [ 224.951422][ T7027] worker_thread+0xaca/0x1280 [ 224.956603][ T7027] kthread+0x3f6/0x4f0 [ 224.961173][ T7027] ret_from_fork+0x1f/0x30 [ 224.966098][ T7027] [ 224.966098][ T7027] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 224.973727][ T7027] lock_acquire+0x1db/0x4f0 [ 224.978734][ T7027] __mutex_lock_common+0x1da/0x25a0 [ 224.984440][ T7027] mutex_lock_nested+0x17/0x20 [ 224.989818][ T7027] bg_scan_update+0xa1/0x4a0 [ 224.994928][ T7027] process_one_work+0x8a1/0x10c0 [ 225.000375][ T7027] worker_thread+0xaca/0x1280 [ 225.005559][ T7027] kthread+0x3f6/0x4f0 [ 225.010135][ T7027] ret_from_fork+0x1f/0x30 [ 225.015060][ T7027] [ 225.015060][ T7027] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 225.024863][ T7027] validate_chain+0x1649/0x5930 [ 225.030228][ T7027] __lock_acquire+0x1295/0x1ff0 [ 225.035585][ T7027] lock_acquire+0x1db/0x4f0 [ 225.040595][ T7027] __flush_work+0xeb/0x1a0 [ 225.045521][ T7027] __cancel_work_timer+0x519/0x6a0 [ 225.051138][ T7027] hci_request_cancel_all+0xcb/0x300 [ 225.056934][ T7027] hci_dev_do_close+0x51/0x1070 [ 225.062295][ T7027] hci_rfkill_set_block+0x114/0x1a0 [ 225.068006][ T7027] rfkill_set_block+0x1e7/0x430 [ 225.073453][ T7027] rfkill_fop_write+0x5b7/0x790 [ 225.078816][ T7027] vfs_write+0x30c/0xe50 [ 225.083569][ T7027] ksys_write+0x1a2/0x2c0 [ 225.088416][ T7027] do_syscall_64+0x3b/0xb0 [ 225.093348][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.099757][ T7027] [ 225.099757][ T7027] other info that might help us debug this: [ 225.099757][ T7027] [ 225.109969][ T7027] Chain exists of: [ 225.109969][ T7027] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 225.109969][ T7027] [ 225.125908][ T7027] Possible unsafe locking scenario: [ 225.125908][ T7027] [ 225.133354][ T7027] CPU0 CPU1 [ 225.138709][ T7027] ---- ---- [ 225.144059][ T7027] lock(rfkill_global_mutex); [ 225.148815][ T7027] lock(&data->open_mutex); [ 225.155916][ T7027] lock(rfkill_global_mutex); [ 225.163186][ T7027] lock((work_completion)(&hdev->bg_scan_update)); [ 225.169762][ T7027] [ 225.169762][ T7027] *** DEADLOCK *** [ 225.169762][ T7027] [ 225.177887][ T7027] 1 lock held by syz.2.837/7027: [ 225.182807][ T7027] #0: ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 225.192892][ T7027] [ 225.192892][ T7027] stack backtrace: [ 225.198763][ T7027] CPU: 1 PID: 7027 Comm: syz.2.837 Not tainted 5.15.173-syzkaller #0 [ 225.206815][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 225.216865][ T7027] Call Trace: [ 225.220138][ T7027] [ 225.223073][ T7027] dump_stack_lvl+0x1e3/0x2d0 [ 225.227749][ T7027] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 225.233378][ T7027] ? print_circular_bug+0x12b/0x1a0 [ 225.238566][ T7027] check_noncircular+0x2f8/0x3b0 [ 225.243496][ T7027] ? add_chain_block+0x850/0x850 [ 225.248432][ T7027] ? lockdep_lock+0x11f/0x2a0 [ 225.253100][ T7027] validate_chain+0x1649/0x5930 [ 225.257947][ T7027] ? reacquire_held_locks+0x660/0x660 [ 225.263307][ T7027] ? mark_lock+0x98/0x340 [ 225.267623][ T7027] ? look_up_lock_class+0x77/0x120 [ 225.272729][ T7027] ? register_lock_class+0x100/0x9a0 [ 225.278002][ T7027] ? mark_lock+0x98/0x340 [ 225.282337][ T7027] ? is_dynamic_key+0x1f0/0x1f0 [ 225.287174][ T7027] ? __lock_acquire+0x1295/0x1ff0 [ 225.292184][ T7027] ? mark_lock+0x98/0x340 [ 225.296501][ T7027] __lock_acquire+0x1295/0x1ff0 [ 225.301342][ T7027] lock_acquire+0x1db/0x4f0 [ 225.305831][ T7027] ? __flush_work+0xcf/0x1a0 [ 225.310413][ T7027] ? rcu_lock_release+0x5/0x20 [ 225.315169][ T7027] ? read_lock_is_recursive+0x10/0x10 [ 225.320526][ T7027] ? start_flush_work+0x776/0x820 [ 225.325537][ T7027] __flush_work+0xeb/0x1a0 [ 225.329936][ T7027] ? __flush_work+0xcf/0x1a0 [ 225.334510][ T7027] ? flush_work+0x20/0x20 [ 225.338828][ T7027] ? print_irqtrace_events+0x210/0x210 [ 225.344267][ T7027] ? lock_timer_base+0x260/0x260 [ 225.349198][ T7027] ? __cancel_work_timer+0x467/0x6a0 [ 225.354468][ T7027] __cancel_work_timer+0x519/0x6a0 [ 225.359566][ T7027] ? cancel_work_sync+0x20/0x20 [ 225.364400][ T7027] ? lockdep_hardirqs_on+0x94/0x130 [ 225.369584][ T7027] ? __cancel_work+0x2ef/0x380 [ 225.374338][ T7027] ? cancel_work+0x20/0x20 [ 225.378735][ T7027] ? print_irqtrace_events+0x210/0x210 [ 225.384191][ T7027] hci_request_cancel_all+0xcb/0x300 [ 225.389461][ T7027] hci_dev_do_close+0x51/0x1070 [ 225.394293][ T7027] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 225.400169][ T7027] ? _raw_spin_unlock+0x40/0x40 [ 225.405006][ T7027] hci_rfkill_set_block+0x114/0x1a0 [ 225.410196][ T7027] ? rcu_lock_release+0x20/0x20 [ 225.415040][ T7027] rfkill_set_block+0x1e7/0x430 [ 225.419884][ T7027] rfkill_fop_write+0x5b7/0x790 [ 225.424723][ T7027] ? rfkill_fop_read+0x470/0x470 [ 225.429644][ T7027] ? fsnotify_perm+0x64/0x590 [ 225.434306][ T7027] ? security_file_permission+0x75/0xa0 [ 225.439836][ T7027] ? rfkill_fop_read+0x470/0x470 [ 225.444756][ T7027] vfs_write+0x30c/0xe50 [ 225.448988][ T7027] ? file_end_write+0x250/0x250 [ 225.453833][ T7027] ? __fget_files+0x413/0x480 [ 225.458503][ T7027] ? __fdget_pos+0x1e9/0x380 [ 225.463075][ T7027] ? ksys_write+0x77/0x2c0 [ 225.467477][ T7027] ksys_write+0x1a2/0x2c0 [ 225.471789][ T7027] ? print_irqtrace_events+0x210/0x210 [ 225.477235][ T7027] ? __ia32_sys_read+0x80/0x80 [ 225.481982][ T7027] ? syscall_enter_from_user_mode+0x2e/0x240 [ 225.487955][ T7027] ? lockdep_hardirqs_on+0x94/0x130 [ 225.493137][ T7027] ? syscall_enter_from_user_mode+0x2e/0x240 [ 225.499103][ T7027] do_syscall_64+0x3b/0xb0 [ 225.503504][ T7027] ? clear_bhb_loop+0x15/0x70 [ 225.508167][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.514046][ T7027] RIP: 0033:0x7f0b23103719 [ 225.518446][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.538047][ T7027] RSP: 002b:00007f0b2157b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.546446][ T7027] RAX: ffffffffffffffda RBX: 00007f0b232baf80 RCX: 00007f0b23103719 [ 225.554405][ T7027] RDX: 0000000000000008 RSI: 0000000020000300 RDI: 000000000000000a [ 225.562361][ T7027] RBP: 00007f0b2317675e R08: 0000000000000000 R09: 0000000000000000 [ 225.570332][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.578292][ T7027] R13: 0000000000000000 R14: 00007f0b232baf80 R15: 00007ffc7ee0ad58 [ 225.586271][ T7027] [ 225.938209][ T1324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 226.298258][ T1324] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 226.308468][ T1324] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 226.317490][ T1324] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.326548][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.572597][ T1324] usb 2-1: USB disconnect, device number 15