last executing test programs: 4m9.726311159s ago: executing program 4 (id=19): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1d, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 4m9.030909911s ago: executing program 4 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300030e0000000000000000000000030005000000000002004e20ac1e0101000000000000000002000100000000000000000b0000006002000900000000000000000000000000030006000000000002004e230a01010200000000000000000200130082"], 0x70}}, 0x0) 4m8.665692718s ago: executing program 4 (id=24): openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xa5, 0x358, &(0x7f0000000480)="$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") syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000080)='./file1\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x2012024, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m6.733023752s ago: executing program 4 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() openat$dir(0xffffffffffffff9c, 0x0, 0x300, 0xf5ff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvfrom(r3, &(0x7f0000000300)=""/183, 0xb7, 0x1, &(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x80) 4m6.161628055s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x4e20, 0x14, 0x4e21, 0x0, 0x2, 0x80, 0xc0, 0x32, r4}, {0x4, 0x5, 0x8, 0xffffffffffffffff, 0x3, 0x1, 0x8, 0x2}, {0x8001, 0x2, 0xfffffffffffff2b5, 0x5}, 0x9, 0x6e6bb9, 0x3, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3506, 0x3, 0x3, 0xe4, 0x5, 0x49374274, 0x5}}, 0xe8) 4m4.721642202s ago: executing program 4 (id=38): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xad, 0x1, 0x1}]}}}], 0x18}}], 0x1, 0x20004000) 3m49.427028951s ago: executing program 32 (id=38): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xad, 0x1, 0x1}]}}}], 0x18}}], 0x1, 0x20004000) 1m36.546683189s ago: executing program 0 (id=619): close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9}}}, 0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) syz_emit_vhci(0x0, 0x7) 1m36.041636437s ago: executing program 0 (id=622): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x4000004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) 1m35.948348533s ago: executing program 0 (id=623): r0 = socket(0x200000100000011, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) 1m35.86292948s ago: executing program 0 (id=624): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xc3, 0x28000, 0xe21c, 0x200000, 0xfd, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 1m35.435521571s ago: executing program 0 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x4, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m35.260334205s ago: executing program 0 (id=628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 1m20.191165367s ago: executing program 33 (id=628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 22.083579975s ago: executing program 6 (id=873): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x130, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0x4) 17.605706119s ago: executing program 6 (id=886): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 15.944046412s ago: executing program 2 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = syz_open_procfs$userns(0x0, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000240)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 15.833842331s ago: executing program 1 (id=889): userfaultfd(0x801) syz_io_uring_setup(0x48ba, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) 15.598834838s ago: executing program 3 (id=891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14.317895634s ago: executing program 1 (id=893): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x301000, 0x1000}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 14.194247853s ago: executing program 3 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/234, 0xea, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r7, 0xf, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000280), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x14, 0x0, 0x4000, @void, @value, @void, @void, r8}, 0x20) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) 13.939169052s ago: executing program 6 (id=896): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) open(&(0x7f0000000040)='./file0\x00', 0x88140, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) syz_emit_ethernet(0xffffffffffffff73, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 12.566406514s ago: executing program 2 (id=898): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x103) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000001100)=r2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/68, &(0x7f0000000880)=""/72, 0x8080000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12.395007367s ago: executing program 3 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents(r4, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}], 0x1, 0x8008801) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x480c0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) unshare(0x42000000) 12.309926683s ago: executing program 1 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 11.037236528s ago: executing program 1 (id=901): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc0000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000001ac0)) 10.102000718s ago: executing program 5 (id=902): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 10.062088351s ago: executing program 6 (id=903): r0 = open(0x0, 0x40c5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x800000, &(0x7f0000001d40)=ANY=[@ANYBLOB="757466382c6572616f72733d636f6e74696e050000000000000021a33d70296173653d312c757466382c6769643d3809a2ec1b97aad7a502cb49bfa30d70d2f20900000047254384ce332390eaab10be59010b6f530352083008bed4504c8a92815a1a96c67e9c1a800655c2112352607e8fa82b85a3fe3cbc3740edc8688029064812316dbf6f78803f4b6de9b78babce01dd8f63699dd2aa8684c706c7bb9709e04ff1ef83b3f676c30b4b7d6141882425e9b872aae68016a0f021edf360d30bb745b12fbdfa76c784f5e75e2dbd377c00dcf186a50301b59c614c6c6666b91eb4433cc99c773d0de0f3b80e74b737b0890fc081b306c6b334198f19c2ad2f6cf1e06916b40af7eaddaa6431e6b4943e51a06bd7d121ab260989cd2d78630f190266dd33e6236841b555715a6978bfeddef6739a33d96135e98507e24ab41667e1110626a6ee9f3f37f98e339979b2c30adb1c944314ee", @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES16, @ANYRES32=0x0, @ANYRESOCT], 0x1, 0x1503, &(0x7f0000000580)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x1}, 0x6) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000862678d00cd2d0c19db50cbd72690674faa7575aea107c05ed0f309f99f1f1f034b6ab3195ee4f1b6daac8607f5422523ad70fdf968ec8e4f944919e369698", @ANYRESHEX=0x0]) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 7.427771067s ago: executing program 3 (id=904): userfaultfd(0x801) syz_io_uring_setup(0x48ba, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) 5.791906079s ago: executing program 2 (id=905): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x4}, 0x32}]}, 0x1b, 0x4f5, &(0x7f0000000340)="$eJzs3V1rHGsdAPD/TLJtk6YmRS9qwVpsJSna3aSxbfCiVhG9Kqj12hqTTQjZZEN20zahaIofQBBRQRC88kbwAwjSjyBCQe9FRRFtPRe9OKd72Le+JLvJ9nSz25P8fjCZ55mX/P/PLjszz8wwE8CRdT4iLkTE80qlcikiRhvT08Zws1rZri/39MmDueqQRKVy+79JRFKfVl1k4pX/ebK+SpyIiO98M+IHye64pc2t5dlCIb/eqOfKK2u50ubW5aWV2cX8Yn51enrq2sz1maszk11p50hE3Pj6P3/+k99+48Yfv3jvb3f+PfHDpDE94mU7uq3e9Ezts2gajIj1gwjWBzcb7cn0OxEAADrSPM7/XERcitEYqB3NAQAAAIdJ5Ssj8X4SUQEAAAAOrbR2D2ySZhv3AYxEmmaz9Xt4PxXDaaFYKn9hobixOl+/V3YsMunCUiE/2bhXeCwySbU+VSu/rF/ZUZ+OiNMR8bPRoVo9O1cszPf75AcAAAAcESd39P/fG633/wEAAIBDZqzfCQAAAAAHTv8fAAAADj/9fwAAADjUvnXrVnWoNN9/PX93c2O5ePfyfL60nF3ZmMvOFdfXsovF4mLtmX0r+/2/QrG49qVY3bifK+dL5Vxpc+vOSnFjtXxn6bVXYAMAAAA9dPqzj/6aRMT2l4dqQ9WxficF9MTgmyz8j4PLA+i9gX4nAPTNrv3/Gx0QAB9nmX4nAPRdEhG/3mN+25t3/nQw+QAAAN03/unW1/+Tfc8NbKc9ShE4IM7/wdH1Ea//D3c7D6D3XO6HoysTA9F5R37oQHMB+iPZZ/7bX/+vVN4oIQAAoOtGakOSZiNq5wFGIk2z2YhTtdcCZJKFpUJ+MiI+ERF/Gc0cr9anamsm+/YZAAAAAAAAAAAAAAAAAAAAAAAAAIC6SiWJCgAAAHCoRaT/Shrv/xofvTiy8/zAseTZaG0cEfd+dfsX92fL5fWp6vT/vZhe/mVj+pV+nMEAAAAAdmr205v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopqdPHsw1h17G/c9XI2KsVfzBOFEbn4hMRAz/P4nBV9ZLImKgC/G3H0bE177XIn5STSvGGlm0ij/UrfhnWrV/7/hpRJzsQnw4yh5Vtz83W/3+0jhfG+/8/R1/se5gF+K33/6lL7Z/A222P6c6jHH28e9zbeM/jDg72Hr704yftIl/ocP43//u1la7eZXfRIy33P8kr8XKlVfWcqXNrctLK7OL+cX86vT01LWZ6zNXZyZzC0uFfONvyxg//cwfnu/V/uE28cf2af/FDtv/weP7Tz5ZL2ZaxZ+40Pr7P9MmftrY932+Ua7OH2+Wt+vlV5373Z/P7dX++Tbt3+/7n+iw/Ze+/eO/d7goANADpc2t5dlCIb9+pAtv9WlUD4s6WzhthHkXmqyQXy/96N1I450sNH8Tz/qyXQIAALpvdx8YAAAAAAAAAAAAAAAAAAAA6LXuPDOs+UzsvZ+u17RdH+16FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQD99GAAA//+GWc+t") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.685692287s ago: executing program 1 (id=906): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.068449013s ago: executing program 5 (id=907): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setrlimit(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000780)=""/4096, 0x1000, 0x0) 5.009875957s ago: executing program 6 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xffffffdfffffffff, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x4, 0x300000000000, 0x9, 0x8001, 0x9, 0x0, 0x3, 0x0, 0xe}) 2.992887667s ago: executing program 5 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/234, 0xea, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r7, 0xf, 0x1, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000280), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x14, 0x0, 0x4000, @void, @value, @void, @void, r8}, 0x20) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) 2.921579353s ago: executing program 6 (id=910): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x301000, 0x1000}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.739431196s ago: executing program 2 (id=911): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.67893546s ago: executing program 3 (id=912): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000380)) capset(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) 1.395927876s ago: executing program 3 (id=913): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x130, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0x4) 1.326538861s ago: executing program 2 (id=914): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1.097653159s ago: executing program 1 (id=915): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000040)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") syz_usb_connect(0x0, 0x3d, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b0001000000000904000002010351000905031300000000000725"], 0x0) 495.261633ms ago: executing program 2 (id=916): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc0000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000001ac0)) 360.238703ms ago: executing program 5 (id=917): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r0, 0x4) 69.604065ms ago: executing program 5 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=919): syz_emit_ethernet(0xe, &(0x7f0000000140)={@random="3e74de376e36", @empty, @val, {@generic={0x8100}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000040)="60d80bf5", 0x4}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="7e296b318a056c8c7812dd6cc2b4af6b9427fdec1a2daf13bdaeedb99dfa8980640dc3c4c8eef31b642e296387922afe18fc6c3cb5d00b41932130951461e8c43f065d70d3", 0x45}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) ftruncate(0xffffffffffffffff, 0x79c8) kernel console output (not intermixed with test programs): 2066843068, lost async page write [ 175.984927][ T5629] syz.2.315: attempt to access beyond end of device [ 175.984927][ T5629] loop2: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 176.005305][ T5629] Buffer I/O error on dev loop2, logical block 13466417, lost async page write [ 176.041955][ T126] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 176.169970][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.262609][ T5629] syz.2.315: attempt to access beyond end of device [ 176.262609][ T5629] loop2: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 177.077924][ T5629] Buffer I/O error on dev loop2, logical block 209285, lost async page write [ 177.145538][ T4292] usb 2-1: USB disconnect, device number 8 [ 177.588935][ T4261] sysv_free_block: trying to free block not in datazone [ 177.693765][ T4261] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 179.132141][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 179.204804][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 179.232364][ T4325] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.251600][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.267148][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.300442][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.303595][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.319930][ T5724] loop1: detected capacity change from 0 to 512 [ 179.334189][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.343924][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.351840][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.363778][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.370253][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.407096][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.415881][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.421991][ T5724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.425161][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.442649][ T5722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.443032][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.462318][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 179.472368][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.480159][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.489933][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.497739][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.505555][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.513351][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.521153][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.522996][ T4325] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 179.529996][ T5724] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.549281][ T4296] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 179.595818][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.602589][ T4296] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.638072][ T4325] usb 3-1: config 0 descriptor?? [ 179.689110][ T4325] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 179.854096][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 180.013501][ T5741] loop5: detected capacity change from 0 to 2048 [ 180.102486][ T5744] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.148700][ T5741] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 180.175273][ T4325] gspca_vc032x: reg_w err -71 [ 180.180166][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.215963][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.244723][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.244895][ T5741] Remounting filesystem read-only [ 180.250038][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.250053][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.250063][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.250074][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.362536][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.382311][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.408589][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.442396][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.469892][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.510504][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.521680][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.555213][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.560562][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.587551][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.603723][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 180.630517][ T4325] gspca_vc032x: Unknown sensor... [ 180.640442][ T4325] vc032x: probe of 3-1:0.0 failed with error -22 [ 180.672193][ T4325] usb 3-1: USB disconnect, device number 7 [ 182.113878][ T5775] netlink: 76 bytes leftover after parsing attributes in process `syz.2.350'. [ 182.125579][ T5779] loop1: detected capacity change from 0 to 512 [ 182.274521][ T5779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 182.292149][ T5779] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.502682][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 182.938673][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 183.332448][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.525544][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 183.537921][ T14] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.594684][ T14] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.702664][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.716870][ T5831] loop2: detected capacity change from 0 to 512 [ 183.742382][ T14] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 183.765180][ T14] usb 1-1: Product: syz [ 183.769409][ T14] usb 1-1: Manufacturer: syz [ 183.854272][ T14] hub 1-1:4.0: USB hub found [ 183.868078][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 183.890725][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 183.919508][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 183.924352][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 183.950028][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 183.970350][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 183.978135][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 183.986553][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 183.994345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 183.994374][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.010348][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.018179][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.026039][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.034977][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.043168][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.043295][ T5831] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.051384][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.068207][ T14] hub 1-1:4.0: 2 ports detected [ 184.069319][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.082313][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.090994][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.101117][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.109215][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.118360][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.126118][ T4330] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 184.144574][ T4330] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.345905][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 184.482503][ T4292] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.676809][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.700491][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.728983][ T4292] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 184.762312][ T2119] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.777588][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.806398][ T4292] usb 2-1: config 0 descriptor?? [ 184.957159][ T2119] usb 3-1: Using ep0 maxpacket: 32 [ 184.966400][ T2119] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.006826][ T2119] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 185.037085][ T2119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.060576][ T2119] usb 3-1: Product: syz [ 185.073558][ T2119] usb 3-1: Manufacturer: syz [ 185.086619][ T2119] usb 3-1: SerialNumber: syz [ 185.113373][ T2119] usb 3-1: config 0 descriptor?? [ 185.135479][ T2119] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 185.234673][ T4292] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 185.257984][ T4292] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 185.301546][ T14] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 185.313027][ T14] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 185.434535][ T4292] cp2112 0003:10C4:EA90.000A: error requesting version [ 185.455171][ T4292] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 185.478597][ T4292] usb 2-1: USB disconnect, device number 9 [ 186.033173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 186.078653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 186.082432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 186.161672][ T5886] loop1: detected capacity change from 0 to 512 [ 186.262980][ T5886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.283001][ T4292] usb 1-1: USB disconnect, device number 8 [ 186.294705][ T5886] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.339075][ T26] audit: type=1326 audit(1739530937.590:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24fb8cde9 code=0x7ffc0000 [ 186.452413][ T26] audit: type=1326 audit(1739530937.620:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24fb8cde9 code=0x7ffc0000 [ 186.609470][ T26] audit: type=1326 audit(1739530937.620:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fa24fb8cde9 code=0x7ffc0000 [ 186.647430][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 186.731984][ T26] audit: type=1326 audit(1739530937.620:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24fb8cde9 code=0x7ffc0000 [ 186.753959][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 186.771546][ T5904] loop3: detected capacity change from 0 to 128 [ 186.790002][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 186.814022][ T26] audit: type=1326 audit(1739530937.620:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24fb8cde9 code=0x7ffc0000 [ 186.825218][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 186.851673][ T5904] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 186.899136][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 186.933325][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 186.941291][ T4259] sysv_free_block: trying to free block not in datazone [ 186.956055][ T5910] loop0: detected capacity change from 0 to 1024 [ 186.968511][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 186.980265][ T4259] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 186.980718][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 186.995654][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.006192][ T2119] gspca_sunplus: reg_r err -71 [ 187.011583][ T2119] sunplus: probe of 3-1:0.0 failed with error -71 [ 187.040137][ T2119] usb 3-1: USB disconnect, device number 8 [ 187.048002][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.059371][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.068954][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.083195][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.137825][ T4644] hfsplus: b-tree write err: -5, ino 4 [ 187.147103][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.171342][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.193271][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.201137][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.210028][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.219027][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.227293][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.240199][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.248958][ T4330] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 187.259068][ T4330] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 187.605244][ T5921] loop3: detected capacity change from 0 to 4096 [ 187.926351][ T26] audit: type=1800 audit(1739530939.180:19): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.393" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 188.219596][ T5938] tipc: Started in network mode [ 188.242329][ T5938] tipc: Node identity 9e32fc2f393, cluster identity 4711 [ 188.252880][ T5938] tipc: Enabled bearer , priority 0 [ 188.485654][ T5938] device syzkaller0 entered promiscuous mode [ 188.504268][ T5938] tipc: Resetting bearer [ 188.540321][ T5937] tipc: Resetting bearer [ 189.333831][ T4330] tipc: Node number set to 2801990703 [ 189.335801][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.406'. [ 189.509092][ T5956] loop2: detected capacity change from 0 to 512 [ 189.569999][ T5956] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 191.074102][ T4330] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 191.506332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 191.515396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 191.542237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.550577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 192.034619][ T4330] usb 6-1: Using ep0 maxpacket: 8 [ 192.146574][ T4330] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 192.170145][ T4330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.194203][ T4330] usb 6-1: config 0 descriptor?? [ 192.608258][ T4330] usb 6-1: Found UVC 0.00 device (2833:0201) [ 192.617258][ T4330] usb 6-1: No valid video chain found. [ 193.681847][ T6000] loop2: detected capacity change from 0 to 512 [ 193.726910][ T6000] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.768129][ T6000] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.908826][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 194.017862][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.025183][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.074106][ T6009] loop1: detected capacity change from 0 to 2048 [ 194.116752][ T6009] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 194.170314][ T6009] syz.1.425: attempt to access beyond end of device [ 194.170314][ T6009] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 194.186176][ T6013] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.249855][ T6009] syz.1.425: attempt to access beyond end of device [ 194.249855][ T6009] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 194.296087][ T6009] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 194.311708][ T6009] NILFS (loop1): error -5 reading inode: ino=12 [ 196.636816][ T4249] Bluetooth: hci0: command 0x0406 tx timeout [ 196.642986][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 196.642995][ T4254] Bluetooth: hci4: command 0x0406 tx timeout [ 197.032335][ T4330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.218251][ T5937] tipc: Disabling bearer [ 197.234705][ T4330] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 197.262334][ T4330] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.292277][ T4330] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.318355][ T4330] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.352148][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.376097][ T4296] usb 6-1: USB disconnect, device number 5 [ 197.395145][ T4330] usb 2-1: invalid MIDI out EP 0 [ 197.460115][ T4330] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 197.582454][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.086464][ T14] usb 2-1: USB disconnect, device number 10 [ 198.458801][ T6048] loop0: detected capacity change from 0 to 512 [ 198.579039][ T6048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 198.592436][ T6048] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.683174][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 199.594234][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 199.814316][ T6069] loop3: detected capacity change from 0 to 2048 [ 200.118341][ T6069] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.723775][ T6069] syz.3.443: attempt to access beyond end of device [ 200.723775][ T6069] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 200.740075][ T6081] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.852288][ T4330] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.904615][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 201.192275][ T4330] usb 3-1: Using ep0 maxpacket: 16 [ 201.210650][ T4330] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 201.232603][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.295547][ T4330] usb 3-1: Product: syz [ 201.316314][ T4330] usb 3-1: Manufacturer: syz [ 201.429495][ T4330] usb 3-1: SerialNumber: syz [ 201.660777][ T4330] usb 3-1: config 0 descriptor?? [ 201.781006][ T4330] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 201.802917][ T6095] loop0: detected capacity change from 0 to 512 [ 201.944283][ T4330] pwc: Warning: more than 1 configuration available. [ 201.979002][ T4330] pwc: Failed to set LED on/off time (-71) [ 202.030229][ T6095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 202.054562][ T4330] pwc: send_video_command error -71 [ 202.062785][ T6095] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.082307][ T4330] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 202.111483][ T4330] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 202.174793][ T4330] usb 3-1: USB disconnect, device number 9 [ 202.308641][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 204.089923][ T6128] loop0: detected capacity change from 0 to 512 [ 204.157928][ T6128] EXT4-fs: Ignoring removed i_version option [ 204.243693][ T4249] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 204.285734][ T6131] loop1: detected capacity change from 0 to 512 [ 204.286637][ T6128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.386275][ T6131] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.459: casefold flag without casefold feature [ 204.410809][ T6128] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.452521][ T6146] loop2: detected capacity change from 0 to 512 [ 204.493577][ T6146] EXT4-fs (loop2): orphan cleanup on readonly fs [ 204.499974][ T6146] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 204.520913][ T6131] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.459: couldn't read orphan inode 15 (err -117) [ 204.621148][ T6131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.631888][ T6146] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 204.684862][ T6146] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.465: attempt to clear invalid blocks 2 len 1 [ 204.802652][ T6146] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.465: invalid indirect mapped block 1819239214 (level 0) [ 204.824095][ T6146] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.465: invalid indirect mapped block 1819239214 (level 1) [ 204.840970][ T6146] EXT4-fs (loop2): 1 truncate cleaned up [ 204.847835][ T6146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 205.566662][ T6146] EXT4-fs error (device loop2): __ext4_remount:6611: comm syz.2.465: Abort forced by user [ 205.598405][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 205.623771][ T6146] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 205.749972][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 205.875977][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 205.952437][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.162359][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 206.175383][ T7] usb 4-1: config 41 has an invalid interface number: 88 but max is 1 [ 206.223660][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 206.232717][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 206.242030][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 206.251133][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 206.532397][ T7] usb 4-1: config 41 has an invalid interface number: 232 but max is 1 [ 206.566161][ T7] usb 4-1: config 41 contains an unexpected descriptor of type 0x1, skipping [ 206.593662][ T7] usb 4-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 206.627865][ T7] usb 4-1: config 41 has no interface number 0 [ 206.692330][ T7] usb 4-1: config 41 has no interface number 1 [ 206.702861][ T7] usb 4-1: config 41 interface 88 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 206.734575][ T7] usb 4-1: config 41 interface 88 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 206.757827][ T6172] loop0: detected capacity change from 0 to 128 [ 206.764751][ T7] usb 4-1: config 41 interface 232 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 206.788476][ T6172] ufs: You didn't specify the type of your ufs filesystem [ 206.788476][ T6172] [ 206.788476][ T6172] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 206.788476][ T6172] [ 206.788476][ T6172] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 206.831550][ T7] usb 4-1: config 41 interface 232 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 206.862291][ T7] usb 4-1: config 41 interface 232 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 206.891999][ T7] usb 4-1: config 41 interface 232 altsetting 14 bulk endpoint 0x8 has invalid maxpacket 32 [ 206.904229][ T7] usb 4-1: config 41 interface 232 altsetting 14 has an invalid endpoint with address 0x0, skipping [ 206.928351][ T7] usb 4-1: config 41 interface 232 altsetting 14 endpoint 0x1 has invalid maxpacket 999, setting to 64 [ 206.948232][ T6172] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 206.960301][ T7] usb 4-1: config 41 interface 232 altsetting 14 has an invalid endpoint with address 0xE9, skipping [ 207.020158][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 207.699810][ T7] usb 4-1: config 41 interface 232 altsetting 14 endpoint 0x6 has an invalid bInterval 129, changing to 7 [ 207.711304][ T7] usb 4-1: config 41 interface 232 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 207.722247][ T7] usb 4-1: config 41 interface 88 has no altsetting 0 [ 207.729044][ T7] usb 4-1: config 41 interface 232 has no altsetting 0 [ 207.755956][ T7] usb 4-1: New USB device found, idVendor=0b3c, idProduct=c003, bcdDevice=f4.b6 [ 207.778503][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.800470][ T7] usb 4-1: Product: syz [ 207.824535][ T7] usb 4-1: Manufacturer: syz [ 207.829180][ T7] usb 4-1: SerialNumber: syz [ 208.076083][ T7] option 4-1:41.88: GSM modem (1-port) converter detected [ 208.109818][ T7] option 4-1:41.232: GSM modem (1-port) converter detected [ 208.128406][ T7] usb 4-1: USB disconnect, device number 8 [ 208.139974][ T7] option 4-1:41.88: device disconnected [ 208.156505][ T7] option 4-1:41.232: device disconnected [ 208.320086][ T5350] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 208.492519][ T4330] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 208.522554][ T5350] usb 3-1: Using ep0 maxpacket: 32 [ 208.550947][ T5350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.705083][ T5350] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.746612][ T4330] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 208.848378][ T4330] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.930540][ T5350] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 209.142023][ T4330] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.156117][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.164819][ T5350] usb 3-1: Product: syz [ 209.169104][ T4330] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.178560][ T5350] usb 3-1: Manufacturer: syz [ 209.184441][ T5350] usb 3-1: SerialNumber: syz [ 209.189963][ T4330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.199308][ T5350] usb 3-1: config 0 descriptor?? [ 209.226290][ T4330] usb 6-1: invalid MIDI out EP 0 [ 209.295762][ T4330] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 209.317013][ T6203] loop0: detected capacity change from 0 to 512 [ 209.339153][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.403561][ T6203] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.485: casefold flag without casefold feature [ 209.428708][ T6203] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.485: couldn't read orphan inode 15 (err -117) [ 209.462423][ T126] usb 6-1: USB disconnect, device number 6 [ 209.471549][ T6203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 209.552487][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.748031][ T7] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 210.137573][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.159395][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 210.168422][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 210.177447][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 210.186405][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 210.222400][ T7] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.235515][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.245010][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.270425][ T7] usb 4-1: invalid MIDI out EP 0 [ 210.317111][ T7] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 210.404359][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.433650][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 211.297777][ T126] usb 3-1: USB disconnect, device number 10 [ 211.363997][ T7] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 211.472725][ T4292] usb 4-1: USB disconnect, device number 9 [ 211.647101][ T7] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 211.686354][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 211.721927][ T7] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 211.743416][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.780345][ T6231] netlink: 'syz.0.494': attribute type 126 has an invalid length. [ 211.790660][ T7] usb 6-1: Product: syz [ 211.803111][ T7] usb 6-1: Manufacturer: syz [ 211.807764][ T7] usb 6-1: SerialNumber: syz [ 211.836204][ T7] usb 6-1: config 0 descriptor?? [ 212.033173][ T6240] loop1: detected capacity change from 0 to 512 [ 212.056156][ T6217] netlink: 284 bytes leftover after parsing attributes in process `syz.5.488'. [ 212.120578][ T7] usb 6-1: USB disconnect, device number 7 [ 212.123088][ T6244] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 212.160387][ T6240] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.497: casefold flag without casefold feature [ 212.177623][ T6244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.232835][ T6240] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.497: couldn't read orphan inode 15 (err -117) [ 212.247135][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 212.289523][ T6247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.313164][ T6248] loop3: detected capacity change from 0 to 2048 [ 212.320495][ T6248] EXT4-fs: Ignoring removed i_version option [ 212.347846][ T6247] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 212.367329][ T6247] bond1: (slave ipip0): Error -95 calling set_mac_address [ 212.491613][ T6248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 212.815009][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 212.824133][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 212.833259][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.497'. [ 212.842232][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.497'. [ 213.490597][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 213.966124][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 214.041083][ T6263] loop2: detected capacity change from 0 to 128 [ 214.072832][ T6265] loop1: detected capacity change from 0 to 128 [ 214.097313][ T6263] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 214.142842][ T6263] sysv_free_block: trying to free block not in datazone [ 214.162829][ T6263] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 214.211896][ T6267] netlink: 'syz.3.506': attribute type 126 has an invalid length. [ 214.461376][ T6279] loop1: detected capacity change from 0 to 64 [ 214.498042][ T6279] hfs: request for non-existent node 131072 in B*Tree [ 214.511891][ T6279] hfs: request for non-existent node 131072 in B*Tree [ 214.532258][ T4330] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 214.552287][ T4329] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.608752][ T4292] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.689953][ T4249] Bluetooth: Wrong link type (-71) [ 214.743865][ T4330] usb 6-1: Using ep0 maxpacket: 16 [ 214.746476][ T6284] loop2: detected capacity change from 0 to 4096 [ 214.770595][ T4329] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.782530][ T4330] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 214.807970][ T4292] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 214.809927][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.819225][ T4292] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.827061][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.845826][ T4292] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.845936][ T6285] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.859965][ T4292] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.875703][ T4329] usb 1-1: Product: syz [ 214.890641][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.893697][ T4330] usb 6-1: Product: syz [ 214.909411][ T4329] usb 1-1: Manufacturer: syz [ 214.916773][ T4329] usb 1-1: SerialNumber: syz [ 214.925969][ T4330] usb 6-1: Manufacturer: syz [ 214.930595][ T4330] usb 6-1: SerialNumber: syz [ 214.941636][ T4329] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.960428][ T4330] usb 6-1: config 0 descriptor?? [ 215.026504][ T4329] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.036876][ T4330] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 215.080661][ T26] audit: type=1800 audit(1739530966.330:20): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.514" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 215.107372][ T4292] usb 4-1: invalid MIDI out EP 0 [ 215.712163][ T7] usb 1-1: USB disconnect, device number 9 [ 215.738580][ T26] audit: type=1800 audit(1739530966.990:21): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.507" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 215.835904][ T4330] pwc: Warning: more than 1 configuration available. [ 215.848083][ T4330] pwc: Failed to set LED on/off time (-71) [ 215.862004][ T4330] pwc: send_video_command error -71 [ 215.872835][ T4330] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 215.889860][ T4330] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 215.914718][ T4292] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 215.949849][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.968276][ T4330] usb 6-1: USB disconnect, device number 8 [ 216.092383][ T4329] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 216.109739][ T4329] ath9k_htc: Failed to initialize the device [ 216.116653][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 216.182150][ T4292] usb 4-1: USB disconnect, device number 10 [ 216.292336][ T5350] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 216.390137][ T6306] netlink: 'syz.0.520': attribute type 126 has an invalid length. [ 216.463050][ T6309] loop0: detected capacity change from 0 to 64 [ 216.516586][ T5350] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.532277][ T5350] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.535340][ T6309] overlayfs: unrecognized mount option "/" or missing value [ 216.564040][ T5350] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.610355][ T5350] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.640064][ T5350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.676590][ T6313] loop5: detected capacity change from 0 to 128 [ 216.676949][ T5350] usb 2-1: invalid MIDI out EP 0 [ 216.724141][ T6313] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 216.753990][ T6313] sysv_free_block: trying to free block not in datazone [ 216.793474][ T5350] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 216.816967][ T6313] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 216.841946][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.879555][ T6319] loop3: detected capacity change from 0 to 64 [ 216.948849][ T5350] usb 2-1: USB disconnect, device number 11 [ 216.985353][ T6321] team0: Unable to change to the same mode the team is in [ 217.151841][ T6323] can0: slcan on ttyS3. [ 217.664640][ T6325] can0 (unregistered): slcan off ttyS3. [ 218.493466][ T4249] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 218.502430][ T4249] Bluetooth: hci4: Injecting HCI hardware error event [ 218.511727][ T4258] Bluetooth: hci4: hardware error 0x00 [ 218.552339][ T4331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.569049][ T6343] loop5: detected capacity change from 0 to 4096 [ 218.595205][ T6343] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 218.625173][ T6353] loop1: detected capacity change from 0 to 64 [ 218.672279][ T6353] overlayfs: unrecognized mount option "/" or missing value [ 218.742502][ T4331] usb 1-1: Using ep0 maxpacket: 32 [ 218.752957][ T4331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.798082][ T6343] ntfs3: loop5: Failed to load $Extend. [ 218.803830][ T4331] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.848728][ T4331] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 218.882899][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.894449][ T4331] usb 1-1: Product: syz [ 218.903424][ T4331] usb 1-1: Manufacturer: syz [ 218.913562][ T4331] usb 1-1: SerialNumber: syz [ 218.934176][ T4331] usb 1-1: config 0 descriptor?? [ 218.992266][ T5350] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 219.147745][ T6364] loop5: detected capacity change from 0 to 128 [ 219.174038][ T6364] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 219.181637][ T6364] sysv_free_block: trying to free block not in datazone [ 219.203733][ T5350] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 219.222428][ T5350] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.234000][ T6364] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 219.247129][ T5350] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.276797][ T5350] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.312353][ T4331] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 219.330400][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.369022][ T5350] usb 3-1: invalid MIDI out EP 0 [ 219.427716][ T5350] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 219.480947][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.503967][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 219.509424][ T6368] team0: No ports can be present during mode change [ 219.511889][ T4331] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 219.526287][ T4331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.572251][ T4331] usb 2-1: config 0 has no interface number 0 [ 219.598285][ T4331] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 219.615452][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.640616][ T4331] usb 2-1: Product: syz [ 219.654389][ T4331] usb 2-1: Manufacturer: syz [ 219.668556][ T4331] usb 2-1: SerialNumber: syz [ 219.672643][ T6372] loop3: detected capacity change from 0 to 128 [ 219.682145][ T6372] ufs: You didn't specify the type of your ufs filesystem [ 219.682145][ T6372] [ 219.682145][ T6372] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 219.682145][ T6372] [ 219.682145][ T6372] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 219.695266][ T4331] usb 2-1: config 0 descriptor?? [ 219.746269][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 219.760266][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 219.789137][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 219.800486][ T6372] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 219.832789][ T6375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.851842][ T4331] usb 3-1: USB disconnect, device number 11 [ 219.871748][ T6375] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.980265][ T5350] usb 2-1: USB disconnect, device number 12 [ 220.014428][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.043825][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.051195][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.094124][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.111296][ T6375] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.380959][ T6390] loop3: detected capacity change from 0 to 4096 [ 220.732538][ T4258] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 221.350367][ T4296] usb 1-1: USB disconnect, device number 10 [ 221.402942][ T6400] loop1: detected capacity change from 0 to 64 [ 221.431306][ T26] audit: type=1326 audit(1739530972.680:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330b8cde9 code=0x7ffc0000 [ 221.454478][ T6397] tipc: Started in network mode [ 221.459377][ T6397] tipc: Node identity 6, cluster identity 4711 [ 221.496840][ T6400] overlayfs: unrecognized mount option "/" or missing value [ 221.515946][ T6397] tipc: Node number set to 6 [ 221.523068][ T26] audit: type=1326 audit(1739530972.690:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f2330b8cde9 code=0x7ffc0000 [ 221.623582][ T26] audit: type=1326 audit(1739530972.690:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2330b8cde9 code=0x7ffc0000 [ 221.759216][ T6410] loop5: detected capacity change from 0 to 128 [ 221.770345][ T6410] ufs: You didn't specify the type of your ufs filesystem [ 221.770345][ T6410] [ 221.770345][ T6410] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 221.770345][ T6410] [ 221.770345][ T6410] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 221.821462][ T6411] loop3: detected capacity change from 0 to 128 [ 221.875192][ T6417] team0: No ports can be present during mode change [ 221.900649][ T6410] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 221.919683][ T6411] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 221.943218][ T6411] sysv_free_block: trying to free block not in datazone [ 221.981177][ T6411] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 222.214180][ T6423] netlink: 'syz.1.555': attribute type 21 has an invalid length. [ 222.272752][ T2119] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.303920][ T6425] loop3: detected capacity change from 0 to 512 [ 222.311047][ T6425] EXT4-fs: Ignoring removed orlov option [ 222.339643][ T6425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.403478][ T6425] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.556: casefold flag without casefold feature [ 222.422962][ T6425] EXT4-fs (loop3): Remounting filesystem read-only [ 222.439815][ T6425] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.556: couldn't read orphan inode 15 (err -117) [ 222.479245][ T2119] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 222.505094][ T6425] EXT4-fs (loop3): Remounting filesystem read-only [ 222.513491][ T2119] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.525057][ T6425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.572956][ T2119] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.622128][ T2119] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.644620][ T2119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.689790][ T2119] usb 1-1: invalid MIDI out EP 0 [ 222.707362][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 222.827373][ T2119] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 222.838085][ T6437] netlink: 'syz.1.561': attribute type 126 has an invalid length. [ 222.927384][ T6439] loop3: detected capacity change from 0 to 64 [ 222.948329][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.246379][ T7] usb 1-1: USB disconnect, device number 11 [ 223.340089][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 223.375561][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 223.562433][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 223.571318][ T14] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 223.580592][ T6456] loop3: detected capacity change from 0 to 2048 [ 223.598559][ T14] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 223.607755][ T14] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 223.617238][ T14] usb 2-1: config 250 has no interface number 0 [ 223.624089][ T14] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 223.637567][ T14] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 223.648553][ T6458] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.648630][ T14] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.674804][ T14] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 223.686634][ T14] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 223.714721][ T14] usb 2-1: config 250 interface 228 has no altsetting 0 [ 223.725642][ T26] audit: type=1800 audit(1739530974.980:25): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.568" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 223.746126][ T26] audit: type=1800 audit(1739530974.980:26): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.568" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 223.755646][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 223.783992][ T5350] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.784233][ T14] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 223.816027][ T6456] NILFS error (device loop3): nilfs_sufile_mark_dirty: active segment 3 is erroneous [ 223.822307][ T14] usb 2-1: Product: syz [ 223.836576][ T14] usb 2-1: SerialNumber: syz [ 223.841921][ T6456] Remounting filesystem read-only [ 223.852251][ T4296] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 223.868384][ T14] hub 2-1:250.228: bad descriptor, ignoring hub [ 223.889653][ T14] hub: probe of 2-1:250.228 failed with error -5 [ 223.935560][ T4259] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 223.944903][ T4259] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 223.951626][ T4259] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 223.959282][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.968889][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.974460][ T5350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.978044][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.994329][ T5350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.999220][ T4259] NILFS (loop3): discard dirty page: offset=0, ino=16 [ 224.014547][ T5350] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 224.015135][ T4259] NILFS (loop3): discard dirty block: blocknr=23, size=1024 [ 224.024438][ T5350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.037874][ T4259] NILFS (loop3): discard dirty block: blocknr=24, size=1024 [ 224.046345][ T4259] NILFS (loop3): discard dirty block: blocknr=25, size=1024 [ 224.054211][ T4259] NILFS (loop3): discard dirty block: blocknr=26, size=1024 [ 224.061603][ T4259] NILFS (loop3): discard dirty page: offset=4096, ino=16 [ 224.070089][ T4296] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 224.078236][ T4259] NILFS (loop3): discard dirty block: blocknr=27, size=1024 [ 224.085050][ T5350] usb 6-1: config 0 descriptor?? [ 224.087680][ T14] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 224.100543][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.104533][ T4259] NILFS (loop3): discard dirty block: blocknr=28, size=1024 [ 224.127462][ T4259] NILFS (loop3): discard dirty block: blocknr=29, size=1024 [ 224.130395][ T4296] usb 3-1: config 0 descriptor?? [ 224.148850][ T4259] NILFS (loop3): discard dirty block: blocknr=30, size=1024 [ 224.156440][ T4259] NILFS (loop3): discard dirty page: offset=8192, ino=16 [ 224.163818][ T4259] NILFS (loop3): discard dirty block: blocknr=31, size=1024 [ 224.171135][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.188738][ T14] usb 2-1: USB disconnect, device number 13 [ 224.195414][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.205726][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.216286][ T14] usblp0: removed [ 224.230426][ T4259] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 224.238182][ T4259] NILFS (loop3): discard dirty block: blocknr=3, size=1024 [ 224.245537][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.255364][ T4259] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 224.262784][ T4259] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 224.270182][ T4259] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 224.278410][ T4259] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 224.285836][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.294887][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.304062][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.312991][ T4259] NILFS (loop3): discard dirty page: offset=268697600, ino=6 [ 224.326674][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.336244][ T4259] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 224.343594][ T4259] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 224.350888][ T4259] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 224.360153][ T4259] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 224.366992][ T4259] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 224.374561][ T4259] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 224.382580][ T4259] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 224.389894][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.399200][ T4259] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 224.406399][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.415493][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.425179][ T4259] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 224.433856][ T4259] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.530209][ T5350] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 224.547459][ T5350] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 224.608163][ T6466] netlink: 'syz.0.573': attribute type 126 has an invalid length. [ 224.711748][ T6468] loop1: detected capacity change from 0 to 64 [ 224.729623][ T5350] cp2112 0003:10C4:EA90.000C: error requesting version [ 224.731687][ T6470] sock: sock_timestamping_bind_phc: sock not bind to device [ 224.745108][ T5350] cp2112: probe of 0003:10C4:EA90.000C failed with error -71 [ 224.776966][ T5350] usb 6-1: USB disconnect, device number 9 [ 224.822369][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.022321][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 225.039218][ T14] usb 4-1: config 252 interface 0 has no altsetting 0 [ 225.059631][ T14] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=38.f0 [ 225.069125][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 225.078119][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.086226][ T14] usb 4-1: Product: syz [ 225.090399][ T14] usb 4-1: Manufacturer: syz [ 225.102270][ T14] usb 4-1: SerialNumber: syz [ 225.115796][ T14] kalmia: probe of 4-1:252.0 failed with error -22 [ 225.132974][ T14] option 4-1:252.0: GSM modem (1-port) converter detected [ 225.182393][ T4292] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 225.200236][ T6478] batman_adv: batadv0: Adding interface: dummy0 [ 225.206607][ T6478] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.232534][ T6478] batman_adv: batadv0: Interface activated: dummy0 [ 225.321067][ T5350] usb 4-1: USB disconnect, device number 11 [ 225.331532][ T5350] option 4-1:252.0: device disconnected [ 225.370142][ T4292] usb 1-1: Using ep0 maxpacket: 32 [ 225.377027][ T4292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.402045][ T4292] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 225.416814][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.432251][ T4292] usb 1-1: Product: syz [ 225.439375][ T4292] usb 1-1: Manufacturer: syz [ 225.446653][ T4292] usb 1-1: SerialNumber: syz [ 225.469411][ T4292] usb 1-1: config 0 descriptor?? [ 225.493856][ T4292] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 225.509350][ T6485] loop1: detected capacity change from 0 to 1024 [ 225.777360][ T4296] pegasus 3-1:0.0: setup Pegasus II specific registers [ 225.925043][ T4296] pegasus 3-1:0.0: can't locate MII phy, using default [ 225.981183][ T4296] pegasus 3-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, a2:01:37:92:08:d9 [ 226.674027][ T4296] usb 3-1: USB disconnect, device number 12 [ 226.777420][ T6491] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 226.794704][ T4292] gspca_sunplus: reg_r err -32 [ 226.989793][ T6499] loop2: detected capacity change from 0 to 64 [ 227.319135][ T6508] batman_adv: batadv0: Adding interface: dummy0 [ 227.358329][ T6508] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.442680][ T6508] batman_adv: batadv0: Interface activated: dummy0 [ 227.617522][ T6521] loop2: detected capacity change from 0 to 2048 [ 227.644871][ T6521] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.705880][ T6521] syz.2.592: attempt to access beyond end of device [ 227.705880][ T6521] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 227.732664][ T6523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.932629][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 228.091958][ T6521] syz.2.592: attempt to access beyond end of device [ 228.091958][ T6521] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 228.139791][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.290569][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.512704][ T4292] sunplus: probe of 1-1:0.0 failed with error -32 [ 228.550121][ T14] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 228.559657][ T6521] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 228.616711][ T6521] NILFS (loop2): error -5 reading inode: ino=12 [ 228.623726][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.634258][ T4292] usb 1-1: USB disconnect, device number 12 [ 228.744396][ T14] usb 4-1: config 0 descriptor?? [ 229.764175][ T6554] loop0: detected capacity change from 0 to 64 [ 229.860271][ T14] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 229.871603][ T14] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 230.066066][ T14] cp2112 0003:10C4:EA90.000D: error requesting version [ 230.088818][ T14] cp2112: probe of 0003:10C4:EA90.000D failed with error -71 [ 230.157489][ T14] usb 4-1: USB disconnect, device number 12 [ 230.609364][ T4331] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.829356][ T4331] usb 3-1: Using ep0 maxpacket: 32 [ 230.839320][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.899796][ T6593] loop1: detected capacity change from 0 to 64 [ 230.936364][ T4331] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 230.971710][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.982989][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.173151][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 231.199387][ T14] usb 1-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 231.256864][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.301649][ T14] usb 1-1: Product: syz [ 231.309718][ T14] usb 1-1: Manufacturer: syz [ 231.316097][ T14] usb 1-1: SerialNumber: syz [ 231.488520][ T14] usb 1-1: config 0 descriptor?? [ 231.542411][ T14] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 231.762977][ T4331] usb 3-1: Product: syz [ 231.768652][ T4331] usb 3-1: Manufacturer: syz [ 231.773586][ T4331] usb 3-1: SerialNumber: syz [ 231.788673][ T4331] usb 3-1: config 0 descriptor?? [ 231.817086][ T4331] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 232.093256][ T4296] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.133070][ T5350] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 232.296037][ T4296] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 232.313252][ T5350] usb 2-1: Using ep0 maxpacket: 32 [ 232.322171][ T5350] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 232.362429][ T4296] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.378258][ T5350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.387446][ T4296] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.403225][ T4296] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.413525][ T5350] usb 2-1: config 0 descriptor?? [ 232.419786][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.430293][ T5350] gspca_main: sunplus-2.14.0 probing 041e:400b [ 232.456320][ T4296] usb 4-1: invalid MIDI out EP 0 [ 232.543570][ T14] usb 1-1: USB disconnect, device number 13 [ 232.552324][ T4296] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 232.598257][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.661302][ T4292] usb 4-1: USB disconnect, device number 13 [ 232.893388][ T4330] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 233.039818][ T4331] gspca_sunplus: reg_r err -32 [ 233.083331][ T4330] usb 6-1: Using ep0 maxpacket: 32 [ 233.100938][ T4330] usb 6-1: config 2 has an invalid interface number: 157 but max is 0 [ 233.119727][ T4330] usb 6-1: config 2 has no interface number 0 [ 233.136188][ T4330] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 233.146318][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.154824][ T4330] usb 6-1: Product: syz [ 233.159199][ T4330] usb 6-1: Manufacturer: syz [ 233.165174][ T4330] usb 6-1: SerialNumber: syz [ 233.197411][ T4330] imon 6-1:2.157: unable to register, err -19 [ 233.281305][ T6616] mmap: syz.3.620 (6616): VmData 175878144 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 233.392768][ T4330] usb 6-1: USB disconnect, device number 10 [ 233.733380][ T4296] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 233.956443][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.983534][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.994273][ T4296] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 234.004821][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.018287][ T4296] usb 4-1: config 0 descriptor?? [ 234.038613][ T5350] gspca_sunplus: reg_w_riv err -71 [ 234.045756][ T5350] sunplus: probe of 2-1:0.0 failed with error -71 [ 234.065189][ T5350] usb 2-1: USB disconnect, device number 14 [ 234.440714][ T4296] usbhid 4-1:0.0: can't add hid device: -71 [ 234.453525][ T4296] usbhid: probe of 4-1:0.0 failed with error -71 [ 234.489140][ T4296] usb 4-1: USB disconnect, device number 14 [ 234.660984][ T6638] loop1: detected capacity change from 0 to 128 [ 234.681673][ T6638] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 234.727616][ T6638] syz.1.629: attempt to access beyond end of device [ 234.727616][ T6638] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 234.747018][ T6638] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 234.760257][ T6638] syz.1.629: attempt to access beyond end of device [ 234.760257][ T6638] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 234.781212][ T6638] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 234.790731][ T4331] sunplus: probe of 3-1:0.0 failed with error -32 [ 234.803287][ T6638] syz.1.629: attempt to access beyond end of device [ 234.803287][ T6638] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 234.846094][ T4331] usb 3-1: USB disconnect, device number 13 [ 234.863785][ T6638] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 234.911628][ T6638] syz.1.629: attempt to access beyond end of device [ 234.911628][ T6638] loop1: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 234.927369][ T6638] Buffer I/O error on dev loop1, logical block 1157, lost async page write [ 234.940602][ T6638] syz.1.629: attempt to access beyond end of device [ 234.940602][ T6638] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 234.990310][ T6638] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 235.028442][ T6638] syz.1.629: attempt to access beyond end of device [ 235.028442][ T6638] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 235.062784][ T6638] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 235.082047][ T6638] syz.1.629: attempt to access beyond end of device [ 235.082047][ T6638] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 235.109533][ T6638] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 235.127381][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 235.127465][ T6638] syz.1.629: attempt to access beyond end of device [ 235.127465][ T6638] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 235.178679][ T6638] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 235.270625][ T4248] sysv_free_block: trying to free block not in datazone [ 235.300110][ T4248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 235.441659][ T6649] loop1: detected capacity change from 0 to 1024 [ 235.474452][ T6649] EXT4-fs: Ignoring removed orlov option [ 235.493494][ T6649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.533746][ T4296] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 235.545849][ T6649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 235.593830][ T6649] process 'syz.1.633' launched './file0/file0' with NULL argv: empty string added [ 235.665032][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 235.747622][ T4296] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 235.763381][ T4296] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.776130][ T4296] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.789337][ T4331] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.806413][ T4296] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.816640][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.845444][ T4296] usb 6-1: invalid MIDI out EP 0 [ 235.930660][ T4296] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 235.945382][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.023807][ T4331] usb 3-1: Using ep0 maxpacket: 32 [ 236.032278][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.057059][ T4331] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 236.066561][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.074770][ T4331] usb 3-1: Product: syz [ 236.075663][ T14] usb 6-1: USB disconnect, device number 11 [ 236.079251][ T4331] usb 3-1: Manufacturer: syz [ 236.089868][ T4331] usb 3-1: SerialNumber: syz [ 236.122623][ T4331] usb 3-1: config 0 descriptor?? [ 236.136433][ T4331] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 236.775634][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 236.941357][ T6675] loop5: detected capacity change from 0 to 128 [ 236.990855][ T6675] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 237.029292][ T6675] syz.5.644: attempt to access beyond end of device [ 237.029292][ T6675] loop5: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 237.047239][ T6667] loop3: detected capacity change from 0 to 32768 [ 237.071177][ T6675] Buffer I/O error on dev loop5, logical block 2066843070, lost async page write [ 237.083863][ T6675] syz.5.644: attempt to access beyond end of device [ 237.083863][ T6675] loop5: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 237.112815][ T6675] Buffer I/O error on dev loop5, logical block 8767744, lost async page write [ 237.131386][ T6680] loop1: detected capacity change from 0 to 256 [ 237.171203][ T6667] XFS (loop3): Mounting V5 Filesystem [ 237.192121][ T4665] sysv_free_block: trying to free block not in datazone [ 237.205471][ T4665] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 237.305307][ T6667] XFS (loop3): Ending clean mount [ 237.340405][ T4331] gspca_sunplus: reg_r err -32 [ 237.508665][ T6667] xfs: Unknown parameter '18446744073709551615@LqE: 艞t}0$' [ 237.569274][ T4259] XFS (loop3): Unmounting Filesystem [ 237.756436][ T26] audit: type=1326 audit(1739531245.010:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.5.647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3de778cde9 code=0x0 [ 238.879668][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 238.953932][ T4331] sunplus: probe of 3-1:0.0 failed with error -32 [ 238.985247][ T4331] usb 3-1: USB disconnect, device number 14 [ 239.419531][ T6715] loop3: detected capacity change from 0 to 128 [ 239.452047][ T6715] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 239.559831][ T4259] sysv_free_block: trying to free block not in datazone [ 239.568826][ T4259] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 239.789384][ T6719] loop5: detected capacity change from 0 to 256 [ 239.852962][ T6719] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 239.950189][ T6721] device bond0 entered promiscuous mode [ 239.950212][ T6721] device bond_slave_0 entered promiscuous mode [ 239.950363][ T6721] device bond_slave_1 entered promiscuous mode [ 239.953291][ T6723] loop2: detected capacity change from 0 to 1024 [ 240.039104][ T6724] device lo entered promiscuous mode [ 240.414306][ T4331] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.614356][ T4331] usb 4-1: Using ep0 maxpacket: 32 [ 240.626822][ T4331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.660514][ T4331] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 240.676356][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.692188][ T4331] usb 4-1: Product: syz [ 240.697509][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 240.710860][ T4331] usb 4-1: Manufacturer: syz [ 240.720052][ T4331] usb 4-1: SerialNumber: syz [ 240.735905][ T4331] usb 4-1: config 0 descriptor?? [ 240.754754][ T4331] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 240.990636][ T6737] loop1: detected capacity change from 0 to 64 [ 241.146280][ T4296] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 241.344619][ T4296] usb 3-1: Using ep0 maxpacket: 32 [ 241.360489][ T4296] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.394170][ T4296] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.426340][ T4296] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 241.442945][ T4296] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 241.452266][ T4296] usb 3-1: Product: syz [ 241.459981][ T4296] usb 3-1: Manufacturer: syz [ 241.488279][ T4296] hub 3-1:4.0: USB hub found [ 241.682166][ T4296] hub 3-1:4.0: 2 ports detected [ 241.971550][ T4296] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 241.981235][ T4331] gspca_sunplus: reg_r err -32 [ 241.988724][ T4296] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 242.025305][ T4296] usb 3-1: USB disconnect, device number 15 [ 242.209822][ T6754] lo speed is unknown, defaulting to 1000 [ 242.215905][ T6754] lo speed is unknown, defaulting to 1000 [ 242.222454][ T6754] lo speed is unknown, defaulting to 1000 [ 242.233502][ T6754] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 242.251902][ T6754] lo speed is unknown, defaulting to 1000 [ 242.265399][ T6754] lo speed is unknown, defaulting to 1000 [ 242.272142][ T6754] lo speed is unknown, defaulting to 1000 [ 242.286050][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.313102][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 242.352601][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 242.386109][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 242.405630][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 242.431539][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 242.447232][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 242.455453][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.675'. [ 242.464347][ T6754] lo speed is unknown, defaulting to 1000 [ 242.473595][ T6754] lo speed is unknown, defaulting to 1000 [ 242.598316][ T6760] loop2: detected capacity change from 0 to 256 [ 243.744673][ T4331] sunplus: probe of 4-1:0.0 failed with error -32 [ 243.762054][ T4331] usb 4-1: USB disconnect, device number 15 [ 244.846817][ T6788] loop3: detected capacity change from 0 to 128 [ 244.903814][ T6788] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 244.953423][ T6788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.023189][ T26] audit: type=1800 audit(1739531252.270:28): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.686" name="file2" dev="loop3" ino=105 res=0 errno=0 [ 245.178340][ T6794] loop1: detected capacity change from 0 to 64 [ 246.555940][ T6817] siw: device registration error -23 [ 247.086739][ T4331] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 247.431147][ T4331] usb 3-1: Using ep0 maxpacket: 8 [ 247.441819][ T4331] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping [ 247.486786][ T4331] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 247.525937][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.564696][ T4331] usb 3-1: Product: syz [ 247.580723][ T4331] usb 3-1: Manufacturer: syz [ 247.604886][ T4331] usb 3-1: SerialNumber: syz [ 247.635611][ T4331] usb 3-1: config 0 descriptor?? [ 247.684341][ T4331] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 248.970842][ T4292] usb 3-1: USB disconnect, device number 16 [ 249.134649][ T6835] loop3: detected capacity change from 0 to 64 [ 249.670685][ T6844] siw: device registration error -23 [ 249.805315][ T3638] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 250.125387][ T3638] usb 4-1: Using ep0 maxpacket: 32 [ 250.154954][ T3638] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 250.234667][ T3638] usb 4-1: config 0 has no interface number 0 [ 250.363193][ T3638] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 250.545225][ T3638] usb 4-1: config 0 interface 183 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.850299][ T3638] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 251.012211][ T3638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.192873][ T3638] usb 4-1: Product: syz [ 251.291108][ T3638] usb 4-1: Manufacturer: syz [ 251.421593][ T3638] usb 4-1: SerialNumber: syz [ 251.626782][ T3638] usb 4-1: config 0 descriptor?? [ 251.745055][ T6842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 251.786133][ T4249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.815531][ T4249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.825863][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.833725][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.848571][ T3638] net1080: probe of 4-1:0.183 failed with error -22 [ 251.948219][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.958561][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.189209][ T6851] virt_wifi0 speed is unknown, defaulting to 1000 [ 253.231888][ T6851] lo speed is unknown, defaulting to 1000 [ 253.336216][ T4292] usb 4-1: USB disconnect, device number 16 [ 253.491942][ T5021] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.903060][ T6862] loop3: detected capacity change from 0 to 64 [ 254.016657][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 254.228637][ T5021] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.437095][ T5021] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.607963][ T5021] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.833347][ T6851] chnl_net:caif_netlink_parms(): no params data found [ 254.884859][ T6870] loop2: detected capacity change from 0 to 128 [ 255.006150][ T6870] ufs: You didn't specify the type of your ufs filesystem [ 255.006150][ T6870] [ 255.006150][ T6870] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 255.006150][ T6870] [ 255.006150][ T6870] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 255.375906][ T6870] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 255.428259][ T5021] tipc: Left network mode [ 255.434081][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.485975][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.517454][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.523846][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.542781][ T6851] device bridge_slave_0 entered promiscuous mode [ 255.564413][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.605121][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.648706][ T6851] device bridge_slave_1 entered promiscuous mode [ 255.692407][ T4331] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.890775][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.908039][ T4331] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 255.948755][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.959230][ T4331] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.981083][ T4331] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.014232][ T4331] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.034163][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.047514][ T6890] loop2: detected capacity change from 0 to 256 [ 256.096099][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 256.106859][ T4331] usb 4-1: invalid MIDI out EP 0 [ 256.158665][ T4331] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 256.331767][ T3638] usb 4-1: USB disconnect, device number 17 [ 256.345505][ T6612] udevd[6612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.635707][ T6851] team0: Port device team_slave_0 added [ 257.108161][ T6851] team0: Port device team_slave_1 added [ 257.315997][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.323226][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.429930][ T6904] loop1: detected capacity change from 0 to 1024 [ 257.517847][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.626340][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.653836][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.798116][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.826158][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 257.878731][ T6909] loop3: detected capacity change from 0 to 64 [ 258.016731][ T7] usb 2-1: device descriptor read/64, error -71 [ 258.222467][ T6851] device hsr_slave_0 entered promiscuous mode [ 258.257048][ T6851] device hsr_slave_1 entered promiscuous mode [ 258.276000][ T6851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.288353][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.321577][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 258.334729][ T6851] Cannot create hsr debugfs directory [ 258.414995][ T6911] loop3: detected capacity change from 0 to 128 [ 258.443555][ T6911] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 258.456360][ T7] usb 2-1: device descriptor read/64, error -71 [ 258.539731][ T4259] sysv_free_block: trying to free block not in datazone [ 258.544162][ T6917] fuse: Bad value for 'fd' [ 258.558991][ T6915] loop2: detected capacity change from 0 to 512 [ 258.576591][ T7] usb usb2-port1: attempt power cycle [ 258.581051][ T4259] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 258.595842][ T6915] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.636176][ T6915] EXT4-fs (loop2): orphan cleanup on readonly fs [ 258.645038][ T6915] EXT4-fs error (device loop2): ext4_quota_enable:6982: comm syz.2.729: Bad quota inum: 64, type: 0 [ 258.680274][ T6915] EXT4-fs (loop2): Remounting filesystem read-only [ 258.690474][ T6915] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 258.706578][ T6915] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 258.713331][ T6915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.853676][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.733'. [ 258.882694][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.733'. [ 258.998948][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.135269][ T6929] binder_alloc: 6914: binder_alloc_buf, no vma [ 259.865886][ T7] usb 2-1: device descriptor read/8, error -71 [ 259.887453][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 260.137592][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 260.173645][ T6851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.207380][ T7] usb 2-1: device descriptor read/8, error -71 [ 260.326488][ T126] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 260.334893][ T7] usb usb2-port1: unable to enumerate USB device [ 260.347008][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 260.362531][ T6851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.449245][ T6851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.500847][ T6954] loop3: detected capacity change from 0 to 256 [ 260.536919][ T126] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 260.569211][ T126] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.605007][ T6954] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 260.605562][ T126] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.664426][ T6958] loop1: detected capacity change from 0 to 128 [ 260.677618][ T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.701045][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.706135][ T6958] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 260.728856][ T126] usb 3-1: invalid MIDI out EP 0 [ 260.843620][ T5021] device hsr_slave_0 left promiscuous mode [ 260.901971][ T126] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 260.972307][ T126] usb 3-1: USB disconnect, device number 17 [ 261.434822][ T4963] udevd[4963]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.652998][ T4248] sysv_free_block: trying to free block not in datazone [ 261.677999][ T5021] device hsr_slave_1 left promiscuous mode [ 261.713381][ T4248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 261.837309][ T5021] device veth1_macvtap left promiscuous mode [ 261.843426][ T5021] device veth0_macvtap left promiscuous mode [ 261.856776][ T5021] device veth1_vlan left promiscuous mode [ 261.862820][ T5021] device veth0_vlan left promiscuous mode [ 261.887543][ T26] audit: type=1326 audit(1739531269.137:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.002453][ T26] audit: type=1326 audit(1739531269.177:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.116438][ T26] audit: type=1326 audit(1739531269.177:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.227569][ T6972] loop3: detected capacity change from 0 to 128 [ 262.234748][ T6972] ufs: You didn't specify the type of your ufs filesystem [ 262.234748][ T6972] [ 262.234748][ T6972] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 262.234748][ T6972] [ 262.234748][ T6972] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 262.269591][ T26] audit: type=1326 audit(1739531269.177:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.326344][ T6975] loop1: detected capacity change from 0 to 512 [ 262.339303][ T26] audit: type=1326 audit(1739531269.177:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.374508][ T26] audit: type=1326 audit(1739531269.187:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.425839][ T6972] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 262.440484][ T26] audit: type=1326 audit(1739531269.237:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.465835][ T26] audit: type=1326 audit(1739531269.237:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.489017][ T26] audit: type=1326 audit(1739531269.237:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.534763][ T26] audit: type=1326 audit(1739531269.237:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef118cde9 code=0x7ffc0000 [ 262.558549][ T6975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 262.568068][ T6975] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.686796][ T4262] Bluetooth: hci5: command 0x0406 tx timeout [ 263.509689][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 264.484746][ T6995] loop3: detected capacity change from 0 to 256 [ 264.584317][ T6995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 265.815522][ T7011] overlayfs: failed to clone upperpath [ 267.772571][ T7026] loop3: detected capacity change from 0 to 128 [ 267.784426][ T7026] ufs: You didn't specify the type of your ufs filesystem [ 267.784426][ T7026] [ 267.784426][ T7026] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 267.784426][ T7026] [ 267.784426][ T7026] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 267.838006][ T7026] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 268.728054][ T7035] siw: device registration error -23 [ 269.655771][ T7044] loop1: detected capacity change from 0 to 128 [ 269.687742][ T7044] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 269.781893][ T4248] sysv_free_block: trying to free block not in datazone [ 269.792624][ T4248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 269.944647][ T5021] bond0 (unregistering): Released all slaves [ 270.048517][ T6851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.087785][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 270.096603][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 270.526798][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.567766][ T126] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 270.608140][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.635742][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.657559][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.690546][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.710582][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.736883][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.744637][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.747795][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 270.799515][ T126] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 270.818611][ T126] usb 4-1: config 0 has no interface number 0 [ 270.827953][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.836415][ T126] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 270.846773][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.848212][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.885535][ T126] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.923189][ T126] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.933757][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.940892][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.961560][ T126] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 270.971073][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.987710][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.998968][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.027338][ T126] usb 4-1: Product: syz [ 271.034916][ T126] usb 4-1: Manufacturer: syz [ 271.072749][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.087795][ T126] usb 4-1: SerialNumber: syz [ 271.101623][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.122080][ T126] usb 4-1: config 0 descriptor?? [ 271.128593][ T7053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.159970][ T126] net1080: probe of 4-1:0.183 failed with error -22 [ 271.171881][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.208355][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.233878][ T6851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.269907][ T6851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.425754][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.454438][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.510779][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.740329][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.806898][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.876352][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.247619][ T7084] loop1: detected capacity change from 0 to 256 [ 272.333508][ T7084] FAT-fs (loop1): Directory bread(block 64) failed [ 272.348618][ T7084] FAT-fs (loop1): Directory bread(block 65) failed [ 272.355308][ T7084] FAT-fs (loop1): Directory bread(block 66) failed [ 272.388385][ T7084] FAT-fs (loop1): Directory bread(block 67) failed [ 272.396403][ T7084] FAT-fs (loop1): Directory bread(block 68) failed [ 272.411623][ T7084] FAT-fs (loop1): Directory bread(block 69) failed [ 272.447011][ T7084] FAT-fs (loop1): Directory bread(block 70) failed [ 272.495996][ T7084] FAT-fs (loop1): Directory bread(block 71) failed [ 272.593385][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.609077][ T7084] FAT-fs (loop1): Directory bread(block 72) failed [ 272.621726][ T7084] FAT-fs (loop1): Directory bread(block 73) failed [ 272.633191][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.683481][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.608332][ T126] usb 4-1: USB disconnect, device number 18 [ 273.724258][ T7105] loop3: detected capacity change from 0 to 128 [ 273.759799][ T7105] ufs: You didn't specify the type of your ufs filesystem [ 273.759799][ T7105] [ 273.759799][ T7105] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 273.759799][ T7105] [ 273.759799][ T7105] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 273.836488][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.779'. [ 273.886900][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 273.905789][ T7105] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 274.485843][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.496049][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.701627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.923127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.340720][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.358867][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.368100][ T6851] device veth0_vlan entered promiscuous mode [ 275.388527][ T6851] device veth1_vlan entered promiscuous mode [ 275.413123][ T6851] device veth0_macvtap entered promiscuous mode [ 275.423141][ T6851] device veth1_macvtap entered promiscuous mode [ 275.475055][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.491991][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.503659][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.514384][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.524537][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.535431][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.558317][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.619313][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.684337][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.728988][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.737541][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.753683][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.776628][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.977067][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.164798][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.416769][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.445580][ T7099] loop1: detected capacity change from 0 to 32768 [ 276.513746][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.582003][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.598427][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.628561][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.668431][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.708378][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.738660][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.768479][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.804071][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.832344][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.847066][ T7151] devpts: called with bogus options [ 276.856691][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.880637][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.889141][ T4357] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.971983][ T6851] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.992398][ T6851] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.029515][ T6851] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.038290][ T6851] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.268505][ T126] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 277.279181][ T4922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.304485][ T4922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.345273][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.397846][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.421051][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.468624][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 277.478010][ T126] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 277.497980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.505342][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.506047][ T126] usb 3-1: config 0 has no interface number 0 [ 277.574956][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 277.613681][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.640717][ T126] usb 3-1: Product: syz [ 277.668367][ T126] usb 3-1: Manufacturer: syz [ 277.684242][ T126] usb 3-1: SerialNumber: syz [ 277.703324][ T126] usb 3-1: config 0 descriptor?? [ 277.936947][ T126] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 277.954271][ T126] usb 3-1: No valid video chain found. [ 278.966491][ T7151] Cannot find add_set index 0 as target [ 279.002847][ T22] usb 3-1: USB disconnect, device number 18 [ 279.311812][ T7188] loop6: detected capacity change from 0 to 512 [ 279.617675][ T7188] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 279.627252][ T7188] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.749869][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 279.749912][ T26] audit: type=1800 audit(1739531286.965:40): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.797" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 280.549787][ T7198] loop2: detected capacity change from 0 to 128 [ 280.743607][ T7200] loop3: detected capacity change from 0 to 256 [ 281.840899][ T7198] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 281.857764][ T7198] sysv_free_block: trying to free block not in datazone [ 282.825560][ T7198] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 283.974483][ T6851] EXT4-fs (loop6): unmounting filesystem. [ 284.327370][ T7213] loop6: detected capacity change from 0 to 128 [ 284.408969][ T7213] ufs: You didn't specify the type of your ufs filesystem [ 284.408969][ T7213] [ 284.408969][ T7213] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 284.408969][ T7213] [ 284.408969][ T7213] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 284.827773][ T7213] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 285.174344][ T7217] device wg2 entered promiscuous mode [ 286.936418][ T4329] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 287.068113][ T7240] overlayfs: failed to clone upperpath [ 287.189763][ T4329] usb 3-1: Using ep0 maxpacket: 32 [ 287.563219][ T4329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.588279][ T4329] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 287.668196][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.717496][ T4329] usb 3-1: Product: syz [ 287.738755][ T4329] usb 3-1: Manufacturer: syz [ 287.758338][ T4329] usb 3-1: SerialNumber: syz [ 287.802616][ T4329] usb 3-1: config 0 descriptor?? [ 287.820864][ T4329] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 289.199774][ T7255] loop1: detected capacity change from 0 to 128 [ 289.341792][ T7255] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 289.527050][ T4329] gspca_sunplus: reg_w_1 err -71 [ 289.610456][ T4248] sysv_free_block: trying to free block not in datazone [ 289.681165][ T4248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 290.775373][ T7277] loop1: detected capacity change from 0 to 128 [ 290.793476][ T7277] ufs: You didn't specify the type of your ufs filesystem [ 290.793476][ T7277] [ 290.793476][ T7277] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 290.793476][ T7277] [ 290.793476][ T7277] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 290.984660][ T7277] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 292.370570][ T4329] sunplus: probe of 3-1:0.0 failed with error -71 [ 292.886322][ T4329] usb 3-1: USB disconnect, device number 19 [ 292.909615][ T7307] loop3: detected capacity change from 0 to 1024 [ 293.240532][ T4325] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 293.248546][ T22] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 293.440422][ T4325] usb 2-1: Using ep0 maxpacket: 32 [ 293.447559][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.452594][ T22] usb 4-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 293.485672][ T4325] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 293.505498][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.515986][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.536126][ T4325] usb 2-1: Product: syz [ 293.540372][ T22] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 293.540399][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.542156][ T22] usb 4-1: config 0 descriptor?? [ 293.569946][ T4325] usb 2-1: Manufacturer: syz [ 293.588655][ T4325] usb 2-1: SerialNumber: syz [ 293.615930][ T4325] usb 2-1: config 0 descriptor?? [ 293.679943][ T4325] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 293.697540][ T7323] loop2: detected capacity change from 0 to 128 [ 293.723204][ T7323] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 293.834198][ T126] usb 4-1: USB disconnect, device number 19 [ 293.901966][ T4261] sysv_free_block: trying to free block not in datazone [ 293.929527][ T4261] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 294.044584][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 294.341298][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 294.386675][ T7337] loop2: detected capacity change from 0 to 2048 [ 294.445103][ T7337] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.488587][ T4325] gspca_sunplus: reg_r err -32 [ 294.541499][ T7337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 294.762116][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.780503][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.790306][ T22] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 294.806801][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.818129][ T22] usb 7-1: config 0 descriptor?? [ 295.264419][ T22] usbhid 7-1:0.0: can't add hid device: -71 [ 295.276468][ T22] usbhid: probe of 7-1:0.0 failed with error -71 [ 295.303813][ T22] usb 7-1: USB disconnect, device number 2 [ 295.970643][ T4325] sunplus: probe of 2-1:0.0 failed with error -32 [ 296.052319][ T4331] usb 2-1: USB disconnect, device number 19 [ 296.304762][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 298.020566][ T7385] loop2: detected capacity change from 0 to 40427 [ 298.887231][ T7385] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 298.923781][ T7385] F2FS-fs (loop2): invalid crc value [ 299.049004][ T7385] F2FS-fs (loop2): Found nat_bits in checkpoint [ 299.199619][ T7385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 300.111399][ T4261] bio_check_eod: 14 callbacks suppressed [ 300.111420][ T4261] syz-executor: attempt to access beyond end of device [ 300.111420][ T4261] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.873387][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.843'. [ 302.211366][ T7405] loop1: detected capacity change from 0 to 512 [ 302.268771][ T7405] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.300674][ T7405] EXT4-fs (loop1): orphan cleanup on readonly fs [ 302.309614][ T7405] EXT4-fs error (device loop1): ext4_quota_enable:6982: comm syz.1.849: Bad quota inum: 64, type: 0 [ 302.331683][ T7405] EXT4-fs (loop1): Remounting filesystem read-only [ 302.338232][ T7405] EXT4-fs warning (device loop1): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 302.411370][ T7405] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 302.440381][ T3638] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 302.451612][ T7405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.767878][ T3638] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.817878][ T3638] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.944596][ T3638] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.349077][ T3638] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.388788][ T3638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.433627][ T3638] usb 3-1: invalid MIDI out EP 0 [ 303.611144][ T3638] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 303.723932][ T4963] udevd[4963]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.752538][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 304.120450][ T22] usb 3-1: USB disconnect, device number 20 [ 304.136034][ T7439] loop6: detected capacity change from 0 to 512 [ 304.199934][ T7439] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.209954][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.858'. [ 304.257546][ T7439] EXT4-fs (loop6): orphan cleanup on readonly fs [ 304.298498][ T7439] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.857: Bad quota inum: 64, type: 0 [ 304.382391][ T7439] EXT4-fs (loop6): Remounting filesystem read-only [ 304.389059][ T7439] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 304.441634][ T7439] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 304.461823][ T7439] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 304.656080][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 304.728428][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 304.861483][ T7460] binder_alloc: 7438: binder_alloc_buf, no vma [ 305.367810][ T7464] loop1: detected capacity change from 0 to 1024 [ 305.395506][ T6851] EXT4-fs (loop6): unmounting filesystem. [ 305.681762][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 305.731865][ T4297] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 305.870157][ T7478] loop6: detected capacity change from 0 to 256 [ 305.882240][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.898706][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.933921][ T4297] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 305.941665][ T22] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 305.951461][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 305.978391][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58978, setting to 1024 [ 306.000595][ T7478] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 306.002396][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.025493][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.035251][ T22] usb 4-1: config 0 descriptor?? [ 306.081704][ T4297] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 306.100882][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.137313][ T4297] usb 2-1: config 0 descriptor?? [ 306.158076][ T7464] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.174586][ T4297] gspca_main: spca561-2.14.0 probing abcd:cdee [ 306.397101][ T4297] spca561: probe of 2-1:0.0 failed with error -22 [ 306.407635][ T4297] usb 2-1: MIDIStreaming interface descriptor not found [ 307.084720][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 307.090752][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 307.206929][ T22] usb 4-1: USB disconnect, device number 20 [ 307.273824][ T4297] usb 2-1: USB disconnect, device number 20 [ 307.428934][ T7487] netlink: 16 bytes leftover after parsing attributes in process `syz.6.870'. [ 307.678818][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.902327][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 307.911176][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 307.999567][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 308.172086][ T3638] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 308.179854][ T22] usb 7-1: device descriptor read/64, error -71 [ 308.362078][ T3638] usb 2-1: Using ep0 maxpacket: 32 [ 308.369669][ T3638] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.406472][ T3638] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 308.432166][ T3638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.450262][ T3638] usb 2-1: Product: syz [ 308.460264][ T3638] usb 2-1: Manufacturer: syz [ 308.465442][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 308.478644][ T3638] usb 2-1: SerialNumber: syz [ 308.499708][ T3638] usb 2-1: config 0 descriptor?? [ 308.515598][ T3638] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 308.632026][ T22] usb 7-1: device descriptor read/64, error -71 [ 308.763362][ T22] usb usb7-port1: attempt power cycle [ 309.238072][ T22] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 309.293060][ T22] usb 7-1: device descriptor read/8, error -71 [ 309.318106][ T3638] gspca_sunplus: reg_r err -32 [ 309.323285][ T4296] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 309.680697][ T4296] usb 4-1: Using ep0 maxpacket: 16 [ 309.689156][ T4296] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.702625][ T4296] usb 4-1: config 0 has no interface number 0 [ 309.708794][ T4296] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.720048][ T4296] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.730175][ T4296] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 309.739464][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.752868][ T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 309.794014][ T22] usb 7-1: device descriptor read/8, error -71 [ 309.961802][ T22] usb usb7-port1: unable to enumerate USB device [ 310.005766][ T4296] usb 4-1: config 0 descriptor?? [ 310.721387][ T7550] loop2: detected capacity change from 0 to 512 [ 310.753346][ T7550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.853170][ T7550] EXT4-fs (loop2): orphan cleanup on readonly fs [ 310.876481][ T7550] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 310.886773][ T7550] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 310.896318][ T7550] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.883: Failed to acquire dquot type 1 [ 310.938912][ T7550] EXT4-fs (loop2): 1 truncate cleaned up [ 310.946394][ T7550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.124371][ T7550] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.136921][ T7550] lo speed is unknown, defaulting to 1000 [ 312.283517][ T4296] uclogic 0003:28BD:0071.000E: pen parameters not found [ 312.291766][ T4296] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 312.598096][ T4329] usb 4-1: USB disconnect, device number 21 [ 312.725796][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'. [ 313.720200][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 314.302943][ T3638] sunplus: probe of 2-1:0.0 failed with error -32 [ 314.318750][ T3638] usb 2-1: USB disconnect, device number 21 [ 314.334781][ T7578] syz.2.888[7578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.335269][ T7578] syz.2.888[7578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.953541][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.971977][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.395274][ T4331] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 317.581867][ T7610] loop3: detected capacity change from 0 to 512 [ 317.690162][ T7610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.804971][ T7610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 317.820281][ T7610] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 317.830192][ T7610] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 317.839752][ T7610] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.899: Failed to acquire dquot type 1 [ 317.857324][ T7610] EXT4-fs (loop3): 1 truncate cleaned up [ 317.867073][ T7610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.008122][ T7610] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.020410][ T7610] lo speed is unknown, defaulting to 1000 [ 318.623113][ T4331] usb 3-1: Using ep0 maxpacket: 32 [ 318.824984][ T4331] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 319.650764][ T4331] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 319.670688][ T4331] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 319.679935][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.690769][ T4331] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.700794][ T4331] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 319.943229][ T4331] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 321.057748][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.5.902'. [ 321.996887][ T7626] loop6: detected capacity change from 0 to 256 [ 322.006691][ T7626] exfat: Deprecated parameter 'utf8' [ 322.012201][ T7626] exfat: Unknown parameter 'eraors' [ 322.448251][ T7626] loop6: detected capacity change from 0 to 2048 [ 322.517556][ T7626] Alternate GPT is invalid, using primary GPT. [ 322.524734][ T7626] loop6: p1 p2 p3 [ 323.189690][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.488879][ T4331] usb 3-1: config 0 descriptor?? [ 323.778176][ T4331] usb 3-1: can't set config #0, error -71 [ 323.857280][ T4331] usb 3-1: USB disconnect, device number 21 [ 324.341660][ T7632] loop2: detected capacity change from 0 to 512 [ 324.393040][ T7632] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 324.453744][ T4325] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 324.456754][ T7632] EXT4-fs (loop2): orphan cleanup on readonly fs [ 324.478915][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 324.693943][ T7632] EXT4-fs error (device loop2): ext4_quota_enable:6982: comm syz.2.905: Bad quota inum: 64, type: 0 [ 324.763782][ T7632] EXT4-fs (loop2): Remounting filesystem read-only [ 324.791967][ T7632] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 324.824550][ T4357] I/O error, dev loop6, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.824636][ T6851] __loop_clr_fd: partition scan of loop6 failed (rc=-16) [ 324.843024][ T6612] I/O error, dev loop6, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.843975][ T4326] I/O error, dev loop6, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.883965][ T4357] I/O error, dev loop6, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.892935][ T6612] I/O error, dev loop6, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.921987][ T7632] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 324.944105][ T4326] I/O error, dev loop6, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.954099][ T4357] buffer_io_error: 14 callbacks suppressed [ 324.954113][ T4357] Buffer I/O error on dev loop6p1, logical block 8, async page read [ 324.972488][ T7632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 325.038163][ T6612] Buffer I/O error on dev loop6p2, logical block 8, async page read [ 325.068583][ T4326] Buffer I/O error on dev loop6p3, logical block 8, async page read [ 325.095560][ T4357] I/O error, dev loop6, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.487320][ T4326] I/O error, dev loop6, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.634121][ T6612] I/O error, dev loop6, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.673955][ T4357] Buffer I/O error on dev loop6p1, logical block 9, async page read [ 326.682095][ T4357] I/O error, dev loop6, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.734967][ T4326] Buffer I/O error on dev loop6p3, logical block 9, async page read [ 326.753561][ T6612] Buffer I/O error on dev loop6p2, logical block 9, async page read [ 326.826926][ T4326] Buffer I/O error on dev loop6p3, logical block 10, async page read [ 326.842519][ T6612] Buffer I/O error on dev loop6p2, logical block 10, async page read [ 326.881372][ T4357] Buffer I/O error on dev loop6p1, logical block 10, async page read [ 326.907216][ T4326] Buffer I/O error on dev loop6p3, logical block 11, async page read [ 327.044899][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 327.172866][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 327.178755][ T6612] udevd[6612]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 327.321928][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 327.449022][ T6612] udevd[6612]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 327.449629][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 328.163404][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 329.364501][ T4297] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 329.390735][ T7681] loop1: detected capacity change from 0 to 1024 [ 329.554421][ T4297] usb 4-1: device descriptor read/64, error -71 [ 329.674424][ T7] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 329.755843][ T4331] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 434.764229][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 434.771268][ C0] (detected by 0, t=10502 jiffies, g=30545, q=55 ncpus=2) [ 434.778474][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294980618-4294970116), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 434.791867][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g30545 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 434.803086][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 434.813057][ C0] rcu: RCU grace-period kthread stack dump: [ 434.818959][ C0] task:rcu_preempt state:R running task stack:27064 pid:16 ppid:2 flags:0x00004000 [ 434.829786][ C0] Call Trace: [ 434.833078][ C0] [ 434.836037][ C0] __schedule+0x143f/0x4570 [ 434.840582][ C0] ? _raw_spin_unlock+0x40/0x40 [ 434.845475][ C0] ? __mod_timer+0x956/0xee0 [ 434.850096][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 434.856011][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 434.861416][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 434.867356][ C0] ? _raw_spin_unlock+0x40/0x40 [ 434.872237][ C0] schedule+0xbf/0x180 [ 434.876348][ C0] schedule_timeout+0x1b9/0x300 [ 434.881235][ C0] ? console_conditional_schedule+0x40/0x40 [ 434.887163][ C0] ? update_process_times+0x1b0/0x1b0 [ 434.892572][ C0] ? prepare_to_swait_event+0x329/0x350 [ 434.898148][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 434.903034][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 434.908284][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 434.913070][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 434.918998][ C0] ? finish_swait+0xcf/0x1e0 [ 434.923612][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 434.928229][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 434.933357][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 434.939280][ C0] ? __kthread_parkme+0x168/0x1c0 [ 434.944340][ C0] kthread+0x28d/0x320 [ 434.948425][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 434.953558][ C0] ? kthread_blkcg+0xd0/0xd0 [ 434.958155][ C0] ret_from_fork+0x1f/0x30 [ 434.962597][ C0] [ 434.965613][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 434.971945][ C0] Sending NMI from CPU 0 to CPUs 1: [ 434.977171][ C1] NMI backtrace for cpu 1 [ 434.977187][ C1] CPU: 1 PID: 4336 Comm: kworker/u4:7 Not tainted 6.1.128-syzkaller #0 [ 434.977204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 434.977217][ C1] Workqueue: bat_events batadv_nc_worker [ 434.977240][ C1] RIP: 0010:lock_release+0x5d8/0xa20 [ 434.977266][ C1] Code: 8b 64 24 08 4c 8b 6c 24 20 4c 8d b4 24 90 00 00 00 48 c7 c7 a0 2e 0c 8b e8 15 e2 45 09 b8 ff ff ff ff 65 0f c1 05 f8 ac 97 7e <83> f8 01 0f 85 94 00 00 00 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 [ 434.977279][ C1] RSP: 0018:ffffc900001e0b80 EFLAGS: 00000057 [ 434.977292][ C1] RAX: 0000000000000001 RBX: ffff88807d622890 RCX: ffffc900001e0c03 [ 434.977305][ C1] RDX: 0000000000000002 RSI: ffffffff8b0c2ea0 RDI: ffffffff8b5f6d00 [ 434.977316][ C1] RBP: ffffc900001e0cb0 R08: dffffc0000000000 R09: fffffbfff1d41196 [ 434.977329][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200003c17c [ 434.977340][ C1] R13: 0000000000000046 R14: ffffc900001e0c10 R15: dffffc0000000000 [ 434.977352][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 434.977366][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.977377][ C1] CR2: 00007f3de84d56c0 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 434.977392][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 434.977412][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 434.977422][ C1] Call Trace: [ 434.977427][ C1] [ 434.977433][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 434.977464][ C1] ? read_lock_is_recursive+0x10/0x10 [ 434.977498][ C1] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 434.977530][ C1] ? nmi_handle+0x25/0x440 [ 434.977571][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 434.977593][ C1] ? nmi_handle+0x12e/0x440 [ 434.977624][ C1] ? nmi_handle+0x25/0x440 [ 434.977656][ C1] ? lock_release+0x5d8/0xa20 [ 434.977686][ C1] ? default_do_nmi+0x62/0x150 [ 434.977718][ C1] ? exc_nmi+0xa8/0x100 [ 434.977748][ C1] ? end_repeat_nmi+0x16/0x31 [ 434.977779][ C1] ? lock_release+0x5d8/0xa20 [ 434.977810][ C1] ? lock_release+0x5d8/0xa20 [ 434.977842][ C1] ? lock_release+0x5d8/0xa20 [ 434.977872][ C1] [ 434.977879][ C1] [ 434.977890][ C1] ? advance_sched+0x6d0/0x970 [ 434.977922][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 434.977953][ C1] ? netif_get_num_default_rss_queues+0x410/0x410 [ 434.977981][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 434.977999][ C1] ? advance_sched+0x6d0/0x970 [ 434.978019][ C1] ? advance_sched+0x6d0/0x970 [ 434.978042][ C1] advance_sched+0x800/0x970 [ 434.978069][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 434.978091][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 434.978119][ C1] ? hrtimer_interrupt+0x980/0x980 [ 434.978138][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 434.978164][ C1] hrtimer_interrupt+0x392/0x980 [ 434.978194][ C1] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 434.978220][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 434.978236][ C1] [ 434.978240][ C1] [ 434.978245][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 434.978262][ C1] RIP: 0010:lock_release+0x637/0xa20 [ 434.978284][ C1] Code: 3c 3b 00 74 08 4c 89 f7 e8 76 1d 77 00 f6 84 24 91 00 00 00 02 75 6f 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 434.978297][ C1] RSP: 0018:ffffc900044d7ac0 EFLAGS: 00000206 [ 434.978310][ C1] RAX: 0000000000000001 RBX: 1ffff9200089af6a RCX: ffffc900044d7b03 [ 434.978320][ C1] RDX: 0000000000000002 RSI: ffffffff8b0c2ea0 RDI: ffffffff8b5f6d00 [ 434.978331][ C1] RBP: ffffc900044d7be8 R08: dffffc0000000000 R09: fffffbfff1d41196 [ 434.978342][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200089af64 [ 434.978353][ C1] R13: 0000000000000246 R14: ffffc900044d7b50 R15: dffffc0000000000 [ 434.978392][ C1] ? batadv_nc_worker+0xc7/0x610 [ 434.978413][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 434.978439][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 434.978467][ C1] ? batadv_nc_worker+0xc7/0x610 [ 434.978505][ C1] batadv_nc_worker+0x28c/0x610 [ 434.978526][ C1] ? batadv_nc_worker+0xc7/0x610 [ 434.978548][ C1] ? process_one_work+0x806/0x1260 [ 434.978568][ C1] process_one_work+0x917/0x1260 [ 434.978595][ C1] ? worker_detach_from_pool+0x260/0x260 [ 434.978618][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 434.978642][ C1] ? kthread_data+0x4e/0xc0 [ 434.978669][ C1] ? wq_worker_running+0x97/0x190 [ 434.978686][ C1] worker_thread+0xa47/0x1200 [ 434.978719][ C1] kthread+0x28d/0x320 [ 434.978733][ C1] ? worker_clr_flags+0x190/0x190 [ 434.978752][ C1] ? kthread_blkcg+0xd0/0xd0 [ 434.978769][ C1] ret_from_fork+0x1f/0x30 [ 434.978798][ C1]