last executing test programs: 9.288535224s ago: executing program 1 (id=766): r0 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x931b, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8.98061752s ago: executing program 1 (id=771): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001300)=""/4118, 0x1016, 0x0) 8.685678038s ago: executing program 1 (id=774): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) vmsplice(r3, &(0x7f0000001c00)=[{0x0}], 0x1, 0x1) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) 7.094481977s ago: executing program 4 (id=780): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554020100000000000000"], 0x1508}}, 0x0) writev(r1, &(0x7f0000000040), 0x2) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x5, 0xe, 0x0, &(0x7f0000000100)="4655ac45b1ba52fd850ae2b70000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000700)}}, 0x40) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) 6.871451809s ago: executing program 4 (id=782): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c", 0x4b}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.747059827s ago: executing program 4 (id=784): ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r2 = userfaultfd(0x801) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 6.708995497s ago: executing program 3 (id=785): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0xfb, 0xfffffffd, 0xfffffffb, 0x7d, 0x1c, "2af01c3d00400d35731d0500"}) 6.552134877s ago: executing program 4 (id=787): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308001a0000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 5.7123319s ago: executing program 3 (id=788): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) 5.581415159s ago: executing program 2 (id=791): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.031611326s ago: executing program 0 (id=792): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554020100000000000000"], 0x1508}}, 0x0) writev(r1, &(0x7f0000000040), 0x2) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x5, 0xe, 0x0, &(0x7f0000000100)="4655ac45b1ba52fd850ae2b70000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000700)}}, 0x40) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) 4.870065307s ago: executing program 1 (id=793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 4.868577358s ago: executing program 2 (id=794): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c", 0x4b}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.801788757s ago: executing program 3 (id=795): r0 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x931b, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x4008000}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4.756911476s ago: executing program 0 (id=796): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_rx_ntuple={0x35, {0x5, @tcp_ip4_spec={@broadcast, @private=0xa010100, 0x4e22, 0x4e23, 0x2}, @tcp_ip4_spec={@local, @local, 0x4e20, 0x4e23, 0x48}, 0x3800, 0x564e, 0xe, 0x4, 0xffffffffffffffff}}}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 4.594039221s ago: executing program 2 (id=797): ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r2 = userfaultfd(0x801) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 4.546381236s ago: executing program 0 (id=798): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) 4.414820862s ago: executing program 3 (id=799): listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x0, 0xfd2, 0x7}, {0x6, 0x24, 0x1a, 0x41, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x24, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x0, 0xfc}}}}}}}]}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x14, 0x10, 0x7, 0x10, 0x10, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 4.28918153s ago: executing program 2 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, r2, 0xffffff58}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) 4.141746199s ago: executing program 0 (id=801): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xd8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r0, &(0x7f0000000280)="f0", 0x1, 0x44044883, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) 3.337207719s ago: executing program 2 (id=802): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0xfffffffffffffffe) ioprio_set$pid(0x1, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x8640, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000009c0)={'TPROXY\x00'}, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000480)=""/222, 0xde}], 0x5, 0x0, 0x9) 3.328000657s ago: executing program 4 (id=803): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80, 0xa7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 3.315086726s ago: executing program 1 (id=804): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) vmsplice(r3, &(0x7f0000001c00)=[{0x0}], 0x1, 0x1) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write$cgroup_type(r4, &(0x7f0000000180), 0x9) 3.250447841s ago: executing program 0 (id=805): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[], 0x0) 1.085293036s ago: executing program 2 (id=806): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file1\x00', 0x100080a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) chown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 1.084912083s ago: executing program 3 (id=807): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c", 0x4b}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 162.318643ms ago: executing program 1 (id=808): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_rx_ntuple={0x35, {0x5, @tcp_ip4_spec={@broadcast, @private=0xa010100, 0x4e22, 0x4e23, 0x2}, @tcp_ip4_spec={@local, @local, 0x4e20, 0x4e23, 0x48}, 0x3800, 0x564e, 0xe, 0x4, 0xffffffffffffffff}}}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 68.241551ms ago: executing program 0 (id=809): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000040), 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x5, 0xe, 0x0, &(0x7f0000000100)="4655ac45b1ba52fd850ae2b70000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000700)}}, 0x40) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) 25.729858ms ago: executing program 4 (id=810): r0 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x931b, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x4008000}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=811): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, 0x0, 0x0, &(0x7f00008ae000/0x2000)=nil, 0x2000, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000340)="c2", 0x1, 0x7a}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) kernel console output (not intermixed with test programs): the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.811748][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.881387][ T5828] team0: Port device team_slave_0 added [ 87.889554][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.896982][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.923146][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.941166][ T5822] hsr_slave_0: entered promiscuous mode [ 87.948373][ T5822] hsr_slave_1: entered promiscuous mode [ 87.959416][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.966591][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.993422][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.016324][ T5828] team0: Port device team_slave_1 added [ 88.072943][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.080236][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.106803][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.160386][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.168951][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.194980][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.213811][ T5830] hsr_slave_0: entered promiscuous mode [ 88.220884][ T5830] hsr_slave_1: entered promiscuous mode [ 88.227637][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 88.233427][ T5830] Cannot create hsr debugfs directory [ 88.269953][ T5817] hsr_slave_0: entered promiscuous mode [ 88.277121][ T5817] hsr_slave_1: entered promiscuous mode [ 88.283911][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 88.289851][ T5817] Cannot create hsr debugfs directory [ 88.307148][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.314138][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.340559][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.577121][ T5820] hsr_slave_0: entered promiscuous mode [ 88.583939][ T5820] hsr_slave_1: entered promiscuous mode [ 88.590943][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 88.596727][ T5820] Cannot create hsr debugfs directory [ 88.626241][ T5828] hsr_slave_0: entered promiscuous mode [ 88.633119][ T5828] hsr_slave_1: entered promiscuous mode [ 88.640089][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 88.646166][ T5828] Cannot create hsr debugfs directory [ 89.198173][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.222339][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.233636][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.254380][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.318460][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.331617][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.344769][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.356406][ T5829] Bluetooth: hci0: command tx timeout [ 89.367801][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.436691][ T5819] Bluetooth: hci4: command tx timeout [ 89.442212][ T5829] Bluetooth: hci1: command tx timeout [ 89.490738][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.516956][ T5829] Bluetooth: hci2: command tx timeout [ 89.522405][ T5829] Bluetooth: hci3: command tx timeout [ 89.533335][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.547589][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.560687][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.673761][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.685230][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.697607][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.709678][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.842427][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.886590][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.911796][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.938418][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.945245][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.976630][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.001348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.008602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.039506][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.046916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.073825][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.170575][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.210118][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.217265][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.248206][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.262472][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.269710][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.323123][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.402477][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.460441][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.467772][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.484660][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.533200][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.540555][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.551864][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.559284][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.624563][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.656323][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.663810][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.754800][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.799457][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.833212][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.840535][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.954519][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.962006][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.161529][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.293286][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.313010][ T5822] veth0_vlan: entered promiscuous mode [ 91.370481][ T5822] veth1_vlan: entered promiscuous mode [ 91.435823][ T5829] Bluetooth: hci0: command tx timeout [ 91.496699][ T5830] veth0_vlan: entered promiscuous mode [ 91.515995][ T5829] Bluetooth: hci1: command tx timeout [ 91.516006][ T5819] Bluetooth: hci4: command tx timeout [ 91.568550][ T5830] veth1_vlan: entered promiscuous mode [ 91.600328][ T5829] Bluetooth: hci3: command tx timeout [ 91.600656][ T5819] Bluetooth: hci2: command tx timeout [ 91.664758][ T5817] veth0_vlan: entered promiscuous mode [ 91.688027][ T5822] veth0_macvtap: entered promiscuous mode [ 91.708399][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.722503][ T5822] veth1_macvtap: entered promiscuous mode [ 91.751753][ T5817] veth1_vlan: entered promiscuous mode [ 91.786624][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.861415][ T5830] veth0_macvtap: entered promiscuous mode [ 91.887254][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.939792][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.956474][ T5830] veth1_macvtap: entered promiscuous mode [ 92.028113][ T1106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.046047][ T1106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.054787][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.098051][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.140769][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.152276][ T5817] veth0_macvtap: entered promiscuous mode [ 92.162357][ T24] cfg80211: failed to load regulatory.db [ 92.210247][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.229956][ T5817] veth1_macvtap: entered promiscuous mode [ 92.245242][ T5828] veth0_vlan: entered promiscuous mode [ 92.261817][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.275751][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.302854][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.352214][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.362340][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.371850][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.392635][ T5828] veth1_vlan: entered promiscuous mode [ 92.411203][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.471597][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.522294][ T5820] veth0_vlan: entered promiscuous mode [ 92.539863][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.550232][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.570890][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.594814][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.603926][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618244][ T5820] veth1_vlan: entered promiscuous mode [ 92.655780][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.680385][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.697009][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.712420][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.777601][ T5828] veth0_macvtap: entered promiscuous mode [ 92.823108][ T5828] veth1_macvtap: entered promiscuous mode [ 92.901499][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.924462][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.983085][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.075810][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.100714][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.145356][ T5820] veth0_macvtap: entered promiscuous mode [ 93.188873][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.337035][ T5946] loop1: detected capacity change from 0 to 1024 [ 93.516272][ T5819] Bluetooth: hci0: command tx timeout [ 93.595607][ T5819] Bluetooth: hci1: command tx timeout [ 93.608708][ T5819] Bluetooth: hci4: command tx timeout [ 93.676129][ T5819] Bluetooth: hci3: command tx timeout [ 93.805246][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.821699][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.851059][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.861938][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882816][ T5820] veth1_macvtap: entered promiscuous mode [ 93.982851][ T35] hfsplus: b-tree write err: -5, ino 4 [ 94.000653][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.025802][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.090562][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.134772][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.492630][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.505102][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591255][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.618022][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.776310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.785084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.033585][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.071742][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.211406][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.239662][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.337614][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.368310][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.449773][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.471545][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.566321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.686307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.784549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.793251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.802846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.836975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.845612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.903125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.071207][ T5966] loop4: detected capacity change from 0 to 2048 [ 96.235822][ T5966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.887191][ T5987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.333389][ T5998] loop1: detected capacity change from 0 to 128 [ 97.365202][ T5998] ======================================================= [ 97.365202][ T5998] WARNING: The mand mount option has been deprecated and [ 97.365202][ T5998] and is ignored by this kernel. Remove the mand [ 97.365202][ T5998] option from the mount to silence this warning. [ 97.365202][ T5998] ======================================================= [ 98.136956][ T6007] syz.1.21: attempt to access beyond end of device [ 98.136956][ T6007] loop1: rw=8423425, sector=102, nr_sectors = 32 limit=128 [ 98.684267][ T6024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.682959][ T6072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.686446][ T6073] loop2: detected capacity change from 0 to 256 [ 99.732519][ T6073] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 100.105074][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 101.234696][ T6107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.332584][ T6112] loop2: detected capacity change from 0 to 256 [ 101.359436][ T6112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 102.010198][ T6123] loop2: detected capacity change from 0 to 512 [ 102.065576][ T6123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.199580][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.950223][ T6123] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.194725][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.872756][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.049506][ T6184] fuse: Unknown parameter '0xffffffffffffffff' [ 105.142052][ T6182] loop3: detected capacity change from 0 to 512 [ 105.233666][ T6187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.243991][ T6182] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.333404][ T6182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.457643][ T6182] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.905593][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.845746][ T6221] fuse: Unknown parameter '0xffffffffffffffff' [ 107.087751][ T6228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.605849][ T6238] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 107.615222][ T6238] cramfs: wrong magic [ 107.725732][ T6239] loop2: detected capacity change from 0 to 512 [ 107.977402][ T6239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.475311][ T6239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.576003][ T6239] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.077315][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.198307][ T6261] fuse: Unknown parameter '0xffffffffffffffff' [ 110.451880][ T6284] loop1: detected capacity change from 0 to 32768 [ 110.477730][ T6284] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.125 (6284) [ 110.515572][ T6284] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.526180][ T6284] BTRFS info (device loop1): using sha256 checksum algorithm [ 110.586369][ T6290] loop2: detected capacity change from 0 to 512 [ 110.747245][ T6290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.597602][ T6290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.614446][ T6284] BTRFS info (device loop1): rebuilding free space tree [ 111.645544][ T6290] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.647980][ T6284] BTRFS info (device loop1): disabling free space tree [ 111.662760][ T6284] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.673757][ T6284] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.701505][ T6284] BTRFS info (device loop1): setting nodatasum [ 111.712198][ T6284] BTRFS info (device loop1): setting nodatacow [ 111.719517][ T6284] BTRFS info (device loop1): turning off barriers [ 111.725952][ T6284] BTRFS info (device loop1): force clearing of disk cache [ 112.633024][ T6316] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.085252][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.177999][ T5822] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.371110][ T6328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.878339][ T6345] loop3: detected capacity change from 0 to 512 [ 113.936057][ T6345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.984589][ T6345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.073682][ T6345] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.222543][ T6354] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 115.715651][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.837211][ T6366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.007189][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.236612][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 116.250197][ T5896] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 116.265391][ T5896] usb 5-1: config 0 has no interface number 0 [ 116.282003][ T5896] usb 5-1: config 0 interface 12 has no altsetting 0 [ 116.335850][ T5896] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 116.345816][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.366654][ T5896] usb 5-1: Product: syz [ 116.370867][ T5896] usb 5-1: Manufacturer: syz [ 116.408779][ T5896] usb 5-1: SerialNumber: syz [ 116.423114][ T6377] loop0: detected capacity change from 0 to 512 [ 116.448407][ T5896] usb 5-1: config 0 descriptor?? [ 116.521641][ T6377] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.156: inode has both inline data and extents flags [ 116.576535][ T6377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.585492][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 116.601456][ C1] EXT4-fs (loop0): initial error at time 1770407044: ext4_orphan_get:1391: inode 15 [ 116.610932][ C1] EXT4-fs (loop0): last error at time 1770407044: ext4_orphan_get:1391: inode 15 [ 116.632041][ T6377] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.156: couldn't read orphan inode 15 (err -117) [ 116.644594][ T6377] loop0: lost filesystem error report for type 5 error -117 [ 116.668032][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.061453][ T6388] loop1: detected capacity change from 0 to 512 [ 117.389929][ T6388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.489665][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.565604][ T6388] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.601087][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.650632][ T6395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.812243][ T6398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.252025][ T6400] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 119.344816][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.453777][ T5896] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 119.645535][ T5896] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 119.978205][ T5896] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 120.078046][ T5896] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 120.137857][ T5896] usb 5-1: USB disconnect, device number 2 [ 120.750845][ T6436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.871514][ T6438] loop0: detected capacity change from 0 to 512 [ 120.893673][ T6438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.947287][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.997020][ T6438] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.284424][ T6444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.838490][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.656132][ T6451] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 122.725500][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.895510][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 122.928309][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 122.995776][ T24] usb 5-1: config 0 has no interface number 0 [ 123.012186][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 123.063163][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 123.073978][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.142501][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 123.941709][ T24] usb 5-1: Product: syz [ 124.119796][ T24] usb 5-1: Manufacturer: syz [ 124.136332][ T24] usb 5-1: SerialNumber: syz [ 124.217577][ T24] usb 5-1: config 0 descriptor?? [ 124.338845][ T6470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.564817][ T6476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.904987][ T6482] loop0: detected capacity change from 0 to 512 [ 124.954302][ T6482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.969478][ T6479] loop3: detected capacity change from 0 to 40427 [ 124.999388][ T6479] F2FS-fs (loop3): invalid crc value [ 125.042983][ T6482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.090490][ T6479] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 125.103515][ T6479] F2FS-fs (loop3): Start checkpoint disabled! [ 125.113478][ T6482] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.144995][ T6479] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 125.159869][ T6479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.934542][ T6265] kworker/u8:8: attempt to access beyond end of device [ 125.934542][ T6265] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.006757][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.006789][ T6265] Tainted: [L]=SOFTLOCKUP [ 126.006797][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.006809][ T6265] Workqueue: writeback wb_workfn (flush-7:3) [ 126.006840][ T6265] Call Trace: [ 126.006848][ T6265] [ 126.006857][ T6265] dump_stack_lvl+0xe8/0x150 [ 126.006885][ T6265] f2fs_handle_critical_error+0x37c/0x540 [ 126.006917][ T6265] f2fs_write_end_io+0xcdb/0xff0 [ 126.006962][ T6265] __submit_merged_bio+0x256/0x700 [ 126.006989][ T6265] __submit_merged_write_cond+0x3c3/0x4e0 [ 126.007016][ T6265] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 126.007049][ T6265] f2fs_write_data_pages+0x2975/0x35e0 [ 126.007073][ T6265] ? unwind_next_frame+0xa5/0x23c0 [ 126.007099][ T6265] ? lock_release+0x4b/0x3d0 [ 126.007148][ T6265] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.007172][ T6265] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 126.007211][ T6265] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 126.007280][ T6265] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.007302][ T6265] do_writepages+0x32e/0x550 [ 126.007322][ T6265] ? reacquire_held_locks+0x104/0x190 [ 126.007338][ T6265] ? writeback_sb_inodes+0x43d/0x19a0 [ 126.007361][ T6265] __writeback_single_inode+0x133/0x11a0 [ 126.007386][ T6265] ? do_raw_spin_unlock+0xf5/0x210 [ 126.007410][ T6265] writeback_sb_inodes+0x944/0x19a0 [ 126.007448][ T6265] ? do_raw_spin_unlock+0xf5/0x210 [ 126.007464][ T6265] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 126.007477][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.007518][ T6265] ? rcu_is_watching+0x15/0xb0 [ 126.007553][ T6265] wb_writeback+0x456/0xb70 [ 126.007584][ T6265] ? queue_io+0x241/0x4a0 [ 126.007616][ T6265] ? __pfx_wb_writeback+0x10/0x10 [ 126.007634][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.007671][ T6265] wb_workfn+0x414/0xf50 [ 126.007695][ T6265] ? look_up_lock_class+0x57/0x110 [ 126.007733][ T6265] ? __pfx_wb_workfn+0x10/0x10 [ 126.007757][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.007779][ T6265] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.007824][ T6265] ? process_one_work+0x87c/0x1650 [ 126.007847][ T6265] process_one_work+0x949/0x1650 [ 126.007897][ T6265] ? __pfx_process_one_work+0x10/0x10 [ 126.007919][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.007958][ T6265] worker_thread+0xb46/0x1140 [ 126.008021][ T6265] kthread+0x388/0x470 [ 126.008041][ T6265] ? __pfx_worker_thread+0x10/0x10 [ 126.008064][ T6265] ? __pfx_kthread+0x10/0x10 [ 126.008085][ T6265] ret_from_fork+0x51e/0xb90 [ 126.008115][ T6265] ? __pfx_ret_from_fork+0x10/0x10 [ 126.008139][ T6265] ? __switch_to+0xc7d/0x1450 [ 126.008166][ T6265] ? __pfx_kthread+0x10/0x10 [ 126.008187][ T6265] ret_from_fork_asm+0x1a/0x30 [ 126.008234][ T6265] [ 126.009117][ T6265] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 126.409201][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 126.548948][ T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 126.710099][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.942629][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 126.988287][ T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 127.160108][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.358823][ T6501] loop2: detected capacity change from 0 to 40427 [ 127.389516][ T24] usb 5-1: USB disconnect, device number 3 [ 127.474474][ T6501] F2FS-fs (loop2): Image doesn't support compression [ 127.481458][ T6501] F2FS-fs (loop2): build fault injection rate: 690 [ 127.488007][ T6501] F2FS-fs (loop2): build fault injection type: 0x2 [ 127.511364][ T6501] F2FS-fs (loop2): invalid crc value [ 127.628181][ T6501] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 127.680578][ T6501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.324426][ T6517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.333898][ T6518] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.207048][ T6520] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 129.286357][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.461505][ T5825] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 129.476374][ T5825] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 129.527246][ T5825] usb 5-1: config 0 has no interface number 0 [ 129.614562][ T5825] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 129.664324][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.739692][ T5825] usb 5-1: Product: syz [ 129.757145][ T5825] usb 5-1: Manufacturer: syz [ 129.781502][ T5825] usb 5-1: SerialNumber: syz [ 129.962462][ T5825] usb 5-1: config 0 descriptor?? [ 130.507751][ T6532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.540299][ T6533] loop1: detected capacity change from 0 to 512 [ 130.886986][ T6533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.965673][ T5825] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 130.972929][ T5825] uvcvideo 5-1:0.64: No valid video chain found. [ 131.051498][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 131.255581][ T5825] usb 5-1: USB disconnect, device number 4 [ 131.382648][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.745579][ T6533] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.925864][ T29] audit: type=1804 audit(1770407060.336:2): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.209" name="bus" dev="ramfs" ino=10393 res=1 errno=0 [ 132.307434][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.363297][ T6551] loop2: detected capacity change from 0 to 512 [ 132.412780][ T6551] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.210: inode has both inline data and extents flags [ 132.426580][ T6551] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.436230][ T6551] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.210: couldn't read orphan inode 15 (err -117) [ 132.445489][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 132.445526][ C0] EXT4-fs (loop2): initial error at time 1770407060: ext4_orphan_get:1391: inode 15 [ 132.445559][ C0] EXT4-fs (loop2): last error at time 1770407060: ext4_orphan_get:1391: inode 15 [ 132.488940][ T6551] loop2: lost filesystem error report for type 5 error -117 [ 132.616746][ T6551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.122381][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.172013][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.273183][ T6562] loop0: detected capacity change from 0 to 8 [ 133.678846][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.713546][ T6562] SQUASHFS error: lzo decompression failed, data probably corrupt [ 133.733201][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.765531][ T6562] SQUASHFS error: Failed to read block 0x91: -5 [ 133.771876][ T6562] SQUASHFS error: Unable to read metadata cache entry [8f] [ 133.814335][ T6562] SQUASHFS error: Unable to read inode 0x11f [ 133.915769][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 133.923941][ T5903] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 133.957165][ T5903] usb 4-1: config 0 has no interface number 0 [ 133.969606][ T5903] usb 4-1: config 0 interface 12 has no altsetting 0 [ 133.991791][ T5903] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 134.877078][ T6571] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 134.888546][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.898141][ T5903] usb 4-1: Product: syz [ 134.902441][ T5903] usb 4-1: Manufacturer: syz [ 134.910375][ T5903] usb 4-1: SerialNumber: syz [ 134.921864][ T5903] usb 4-1: config 0 descriptor?? [ 135.083966][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 135.748946][ T6588] loop0: detected capacity change from 0 to 512 [ 135.788728][ T6588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.887747][ T6588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.920921][ T6588] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.946129][ T6597] loop2: detected capacity change from 0 to 512 [ 135.985700][ T6597] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.026362][ T6597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 136.034883][ T6597] System zones: 1-12 [ 136.040127][ T6597] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.225: corrupted in-inode xattr: e_value size too large [ 136.056980][ T6597] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.064388][ T6597] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.225: couldn't read orphan inode 15 (err -117) [ 136.074796][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 136.074823][ C1] EXT4-fs (loop2): initial error at time 1770407064: ext4_iget_extra_inode:5025: inode 15 [ 136.074856][ C1] EXT4-fs (loop2): last error at time 1770407064: ext4_iget_extra_inode:5025: inode 15 [ 136.125583][ T6597] loop2: lost filesystem error report for type 5 error -117 [ 136.128316][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.272594][ T29] audit: type=1800 audit(1770407064.686:3): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.225" name=02 dev="loop2" ino=19 res=0 errno=0 [ 136.494557][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.518766][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.849985][ T5903] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 136.857821][ T5903] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 136.882848][ T5903] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 136.915594][ T5903] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 136.986723][ T5903] usb 4-1: USB disconnect, device number 2 [ 137.295564][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.348870][ T6615] Zero length message leads to an empty skb [ 137.985471][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 138.008689][ T5873] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 138.017876][ T5873] usb 1-1: config 0 has no interface number 0 [ 138.024067][ T5873] usb 1-1: config 0 interface 12 has no altsetting 0 [ 138.081545][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 138.474571][ T5873] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 138.655454][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.755459][ T5873] usb 1-1: Product: syz [ 138.759867][ T5873] usb 1-1: Manufacturer: syz [ 138.815519][ T5873] usb 1-1: SerialNumber: syz [ 138.845717][ T5873] usb 1-1: config 0 descriptor?? [ 138.872412][ T6634] loop1: detected capacity change from 0 to 64 [ 140.135631][ T6631] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 140.252600][ T6635] loop2: detected capacity change from 0 to 512 [ 140.279489][ T6635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.294811][ T5873] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 140.325913][ T5873] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 140.366388][ T5873] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 140.387672][ T5873] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 140.389974][ T6635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.445908][ T6635] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.491376][ T5873] usb 1-1: USB disconnect, device number 2 [ 140.526384][ T6645] loop1: detected capacity change from 0 to 512 [ 140.584612][ T6645] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.241: inode has both inline data and extents flags [ 140.625714][ T6645] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.626108][ T6645] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.241: couldn't read orphan inode 15 (err -117) [ 140.636130][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 140.636156][ C0] EXT4-fs (loop1): initial error at time 1770407069: ext4_orphan_get:1391: inode 15 [ 140.636192][ C0] EXT4-fs (loop1): last error at time 1770407069: ext4_orphan_get:1391: inode 15 [ 140.676287][ T6645] loop1: lost filesystem error report for type 5 error -117 [ 140.679031][ T6645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.948028][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.638662][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.836911][ T5960] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.031981][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 142.074481][ T5960] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 142.076102][ T6665] fuse: Unknown parameter '0x0000000000000003' [ 142.104294][ T5960] usb 1-1: config 0 has no interface number 0 [ 142.140774][ T5960] usb 1-1: config 0 interface 12 has no altsetting 0 [ 142.180445][ T5960] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 142.195476][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.225747][ T5960] usb 1-1: Product: syz [ 142.725628][ T5960] usb 1-1: Manufacturer: syz [ 142.730675][ T5960] usb 1-1: SerialNumber: syz [ 142.816415][ T5960] usb 1-1: config 0 descriptor?? [ 143.193664][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 145.303697][ T5960] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 145.321710][ T5960] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 145.331717][ T5960] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 145.365549][ T5960] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 145.415832][ T5960] usb 1-1: USB disconnect, device number 3 [ 146.496576][ T6684] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 146.703593][ T6690] loop2: detected capacity change from 0 to 512 [ 146.745525][ T6690] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.255: inode has both inline data and extents flags [ 146.806810][ T6690] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.807111][ T6690] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.255: couldn't read orphan inode 15 (err -117) [ 146.816741][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 146.816760][ C0] EXT4-fs (loop2): initial error at time 1770407075: ext4_orphan_get:1391: inode 15 [ 146.816787][ C0] EXT4-fs (loop2): last error at time 1770407075: ext4_orphan_get:1391: inode 15 [ 146.865620][ T6690] loop2: lost filesystem error report for type 5 error -117 [ 146.872948][ T6690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.742068][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.912114][ T6702] fuse: Unknown parameter '0x0000000000000003' [ 148.105646][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.286829][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 148.328560][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.389068][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.457540][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.506306][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.535534][ T24] usb 3-1: Product: syz [ 148.542109][ T24] usb 3-1: Manufacturer: syz [ 148.559704][ T6705] loop1: detected capacity change from 0 to 512 [ 148.587177][ T24] usb 3-1: SerialNumber: syz [ 148.670133][ T6705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.749717][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.773771][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 148.823703][ T24] usb 3-1: 0:2 : does not exist [ 148.852250][ T6705] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.900344][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 149.070319][ T24] usb 3-1: USB disconnect, device number 2 [ 149.214748][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.464332][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.659046][ T6721] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.910011][ T6725] netlink: 'syz.3.265': attribute type 4 has an invalid length. [ 154.905754][ T6741] loop1: detected capacity change from 0 to 32768 [ 154.912926][ T6741] xfs: Deprecated parameter 'attr2' [ 154.918315][ T6741] XFS: attr2 mount option is deprecated. [ 155.070480][ T6741] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.116669][ T6752] fuse: Unknown parameter '0x0000000000000003' [ 155.140498][ T6741] XFS (loop1): Ending clean mount [ 155.150754][ T6741] XFS (loop1): Quotacheck needed: Please wait. [ 155.694241][ T6741] XFS (loop1): Quotacheck: Done. [ 155.855995][ T5822] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.935308][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 156.008802][ T6759] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.276'. [ 156.032678][ T6759] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.276'. [ 156.096412][ T6762] warning: `syz.0.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.893512][ T6793] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 161.015563][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 161.330430][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 161.692170][ T5825] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.760524][ T5825] usb 2-1: config 0 has no interface number 0 [ 161.810928][ T5825] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.916851][ T5825] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 162.039756][ T5825] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.104944][ T5825] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.232661][ T5825] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.337956][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.797667][ T5825] usb 2-1: config 0 descriptor?? [ 162.803033][ T5873] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.811121][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 162.819273][ T5825] usb 2-1: can't set config #0, error -32 [ 162.831574][ T6797] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.867709][ T5825] usb 2-1: USB disconnect, device number 2 [ 162.915240][ T6797] block device autoloading is deprecated and will be removed. [ 162.927175][ T6796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.951521][ T6796] block device autoloading is deprecated and will be removed. [ 162.964024][ T6798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.005655][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 163.014247][ T5873] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.025555][ T6798] block device autoloading is deprecated and will be removed. [ 163.045462][ T5873] usb 1-1: config 0 has no interface number 0 [ 163.051993][ T5873] usb 1-1: config 0 interface 12 has no altsetting 0 [ 163.087211][ T5873] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.107431][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.130311][ T5873] usb 1-1: Product: syz [ 163.134561][ T5873] usb 1-1: Manufacturer: syz [ 163.148292][ T5873] usb 1-1: SerialNumber: syz [ 163.178711][ T5873] usb 1-1: config 0 descriptor?? [ 163.339806][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 164.226757][ T6819] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.608810][ T6829] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 166.545836][ T5873] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 58 failed: -71 [ 166.564084][ T5873] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 166.581898][ T5873] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 166.595561][ T5873] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 166.775565][ T5873] usb 1-1: USB disconnect, device number 4 [ 166.912246][ T6841] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 166.971061][ T6841] cramfs: wrong magic [ 167.708512][ T6844] loop2: detected capacity change from 0 to 40427 [ 167.741548][ T6844] F2FS-fs (loop2): invalid crc value [ 167.820941][ T6844] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 167.832390][ T6844] F2FS-fs (loop2): Start checkpoint disabled! [ 167.844542][ T6844] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 167.855092][ T6844] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 168.750263][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 173.061526][ T6875] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 174.947572][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 176.019526][ T6888] loop1: detected capacity change from 0 to 40427 [ 176.046748][ T6888] F2FS-fs (loop1): invalid crc value [ 176.148438][ T6888] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 176.161594][ T6888] F2FS-fs (loop1): Start checkpoint disabled! [ 176.171936][ T6888] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 176.181409][ T6888] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 176.527585][ T6894] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.321'. [ 176.588221][ T6894] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.321'. [ 176.727321][ T1158] kworker/u8:7: attempt to access beyond end of device [ 176.727321][ T1158] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.781498][ T1158] CPU: 0 UID: 0 PID: 1158 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.781533][ T1158] Tainted: [L]=SOFTLOCKUP [ 176.781540][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.781552][ T1158] Workqueue: writeback wb_workfn (flush-7:1) [ 176.781584][ T1158] Call Trace: [ 176.781592][ T1158] [ 176.781601][ T1158] dump_stack_lvl+0xe8/0x150 [ 176.781632][ T1158] f2fs_handle_critical_error+0x37c/0x540 [ 176.781666][ T1158] f2fs_write_end_io+0xcdb/0xff0 [ 176.781714][ T1158] __submit_merged_bio+0x256/0x700 [ 176.781745][ T1158] __submit_merged_write_cond+0x3c3/0x4e0 [ 176.781780][ T1158] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 176.781832][ T1158] f2fs_write_data_pages+0x2975/0x35e0 [ 176.781901][ T1158] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.781945][ T1158] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 176.782026][ T1158] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 176.782101][ T1158] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.782128][ T1158] do_writepages+0x32e/0x550 [ 176.782164][ T1158] ? reacquire_held_locks+0x104/0x190 [ 176.782191][ T1158] ? writeback_sb_inodes+0x43d/0x19a0 [ 176.782223][ T1158] __writeback_single_inode+0x133/0x11a0 [ 176.782249][ T1158] ? do_raw_spin_unlock+0xf5/0x210 [ 176.782276][ T1158] writeback_sb_inodes+0x944/0x19a0 [ 176.782319][ T1158] ? do_raw_spin_unlock+0xf5/0x210 [ 176.782346][ T1158] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 176.782376][ T1158] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.782448][ T1158] ? rcu_is_watching+0x15/0xb0 [ 176.782487][ T1158] wb_writeback+0x456/0xb70 [ 176.782516][ T1158] ? queue_io+0x241/0x4a0 [ 176.782550][ T1158] ? __pfx_wb_writeback+0x10/0x10 [ 176.782572][ T1158] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.782611][ T1158] wb_workfn+0x414/0xf50 [ 176.782634][ T1158] ? look_up_lock_class+0x57/0x110 [ 176.782675][ T1158] ? __pfx_wb_workfn+0x10/0x10 [ 176.782700][ T1158] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.782723][ T1158] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 176.782769][ T1158] ? process_one_work+0x87c/0x1650 [ 176.782793][ T1158] process_one_work+0x949/0x1650 [ 176.782841][ T1158] ? __pfx_process_one_work+0x10/0x10 [ 176.782863][ T1158] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.782903][ T1158] worker_thread+0xb46/0x1140 [ 176.782960][ T1158] kthread+0x388/0x470 [ 176.782981][ T1158] ? __pfx_worker_thread+0x10/0x10 [ 176.783004][ T1158] ? __pfx_kthread+0x10/0x10 [ 176.783026][ T1158] ret_from_fork+0x51e/0xb90 [ 176.783056][ T1158] ? __pfx_ret_from_fork+0x10/0x10 [ 176.783079][ T1158] ? __switch_to+0xc7d/0x1450 [ 176.783106][ T1158] ? __pfx_kthread+0x10/0x10 [ 176.783126][ T1158] ret_from_fork_asm+0x1a/0x30 [ 176.783174][ T1158] [ 178.372577][ T1158] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 178.468936][ T6907] loop3: detected capacity change from 0 to 1024 [ 178.779712][ T6909] fuse: Unknown parameter '0x0000000000000003' [ 179.024487][ T6911] loop0: detected capacity change from 0 to 512 [ 179.093527][ T6911] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.327: inode has both inline data and extents flags [ 179.157732][ T6911] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.163324][ T6911] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.327: couldn't read orphan inode 15 (err -117) [ 179.172692][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 179.172720][ C0] EXT4-fs (loop0): initial error at time 1770407107: ext4_orphan_get:1391: inode 15 [ 179.172755][ C0] EXT4-fs (loop0): last error at time 1770407107: ext4_orphan_get:1391: inode 15 [ 179.286488][ T6911] loop0: lost filesystem error report for type 5 error -117 [ 179.320100][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.036187][ T6925] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 180.151441][ T6925] cramfs: wrong magic [ 180.630316][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.035502][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.120566][ T6931] loop2: detected capacity change from 0 to 40427 [ 181.131057][ T6931] F2FS-fs (loop2): invalid crc value [ 181.209892][ T6931] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 181.220173][ T6931] F2FS-fs (loop2): Start checkpoint disabled! [ 181.229179][ T6931] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 181.239170][ T6931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 181.272833][ T6265] kworker/u8:8: attempt to access beyond end of device [ 181.272833][ T6265] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.332234][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.332266][ T6265] Tainted: [L]=SOFTLOCKUP [ 181.332273][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 181.332284][ T6265] Workqueue: writeback wb_workfn (flush-7:2) [ 181.332318][ T6265] Call Trace: [ 181.332326][ T6265] [ 181.332334][ T6265] dump_stack_lvl+0xe8/0x150 [ 181.332398][ T6265] f2fs_handle_critical_error+0x37c/0x540 [ 181.332431][ T6265] f2fs_write_end_io+0xcdb/0xff0 [ 181.332477][ T6265] __submit_merged_bio+0x256/0x700 [ 181.332510][ T6265] __submit_merged_write_cond+0x3c3/0x4e0 [ 181.332544][ T6265] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 181.332594][ T6265] f2fs_write_data_pages+0x2975/0x35e0 [ 181.332662][ T6265] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.332737][ T6265] ? __lock_acquire+0x6b5/0x2cf0 [ 181.332814][ T6265] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.332843][ T6265] do_writepages+0x32e/0x550 [ 181.332878][ T6265] ? reacquire_held_locks+0x104/0x190 [ 181.332904][ T6265] ? writeback_sb_inodes+0x43d/0x19a0 [ 181.332936][ T6265] __writeback_single_inode+0x133/0x11a0 [ 181.332963][ T6265] ? do_raw_spin_unlock+0xf5/0x210 [ 181.332987][ T6265] writeback_sb_inodes+0x944/0x19a0 [ 181.333040][ T6265] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 181.333062][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.333124][ T6265] ? rcu_is_watching+0x15/0xb0 [ 181.333160][ T6265] wb_writeback+0x456/0xb70 [ 181.333188][ T6265] ? queue_io+0x241/0x4a0 [ 181.333221][ T6265] ? __pfx_wb_writeback+0x10/0x10 [ 181.333242][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.333280][ T6265] wb_workfn+0x414/0xf50 [ 181.333304][ T6265] ? look_up_lock_class+0x57/0x110 [ 181.333343][ T6265] ? __pfx_wb_workfn+0x10/0x10 [ 181.333394][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.333418][ T6265] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.333462][ T6265] ? process_one_work+0x87c/0x1650 [ 181.333485][ T6265] process_one_work+0x949/0x1650 [ 181.333533][ T6265] ? __pfx_process_one_work+0x10/0x10 [ 181.333555][ T6265] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.333594][ T6265] worker_thread+0xb46/0x1140 [ 181.333648][ T6265] kthread+0x388/0x470 [ 181.333669][ T6265] ? __pfx_worker_thread+0x10/0x10 [ 181.333701][ T6265] ? __pfx_kthread+0x10/0x10 [ 181.333722][ T6265] ret_from_fork+0x51e/0xb90 [ 181.333751][ T6265] ? __pfx_ret_from_fork+0x10/0x10 [ 181.333775][ T6265] ? __switch_to+0xc7d/0x1450 [ 181.333802][ T6265] ? __pfx_kthread+0x10/0x10 [ 181.333822][ T6265] ret_from_fork_asm+0x1a/0x30 [ 181.333870][ T6265] [ 181.602324][ T6265] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 181.882167][ T6948] fuse: Unknown parameter '0x0000000000000003' [ 184.160723][ T6961] loop0: detected capacity change from 0 to 128 [ 184.310199][ T29] audit: type=1800 audit(1770407112.726:4): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.340" name="bus" dev="loop0" ino=1048606 res=0 errno=0 [ 184.684162][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.215203][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.300529][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.384758][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.451838][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.483409][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.508961][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.691492][ T6976] loop2: detected capacity change from 0 to 40427 [ 185.728079][ T6978] loop1: detected capacity change from 0 to 8 [ 185.740368][ T6976] F2FS-fs (loop2): invalid crc value [ 185.818136][ T6976] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 185.826278][ T9] usb 4-1: config 0 descriptor?? [ 185.834232][ T6976] F2FS-fs (loop2): Start checkpoint disabled! [ 185.860114][ T6976] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 185.870039][ T6976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 186.071558][ T1106] kworker/u8:6: attempt to access beyond end of device [ 186.071558][ T1106] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.115535][ T1106] CPU: 1 UID: 0 PID: 1106 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.115568][ T1106] Tainted: [L]=SOFTLOCKUP [ 186.115575][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 186.115586][ T1106] Workqueue: writeback wb_workfn (flush-7:2) [ 186.115615][ T1106] Call Trace: [ 186.115623][ T1106] [ 186.115631][ T1106] dump_stack_lvl+0xe8/0x150 [ 186.115661][ T1106] f2fs_handle_critical_error+0x37c/0x540 [ 186.115695][ T1106] f2fs_write_end_io+0xcdb/0xff0 [ 186.115743][ T1106] __submit_merged_bio+0x256/0x700 [ 186.115776][ T1106] __submit_merged_write_cond+0x3c3/0x4e0 [ 186.115808][ T1106] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 186.115860][ T1106] f2fs_write_data_pages+0x2975/0x35e0 [ 186.115927][ T1106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 186.115968][ T1106] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 186.116035][ T1106] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 186.116104][ T1106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 186.116133][ T1106] do_writepages+0x32e/0x550 [ 186.116166][ T1106] ? reacquire_held_locks+0x104/0x190 [ 186.116194][ T1106] ? writeback_sb_inodes+0x43d/0x19a0 [ 186.116224][ T1106] __writeback_single_inode+0x133/0x11a0 [ 186.116251][ T1106] ? do_raw_spin_unlock+0xf5/0x210 [ 186.116275][ T1106] writeback_sb_inodes+0x944/0x19a0 [ 186.116307][ T1106] ? ret_from_fork_asm+0x1a/0x30 [ 186.116346][ T1106] ? __lock_acquire+0x6b5/0x2cf0 [ 186.116379][ T1106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 186.116401][ T1106] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.116463][ T1106] ? rcu_is_watching+0x15/0xb0 [ 186.116501][ T1106] wb_writeback+0x456/0xb70 [ 186.116528][ T1106] ? queue_io+0x241/0x4a0 [ 186.116561][ T1106] ? __pfx_wb_writeback+0x10/0x10 [ 186.116581][ T1106] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.116619][ T1106] wb_workfn+0x414/0xf50 [ 186.116643][ T1106] ? look_up_lock_class+0x57/0x110 [ 186.116766][ T1106] ? __pfx_wb_workfn+0x10/0x10 [ 186.116804][ T1106] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.116829][ T1106] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.116871][ T1106] ? process_one_work+0x87c/0x1650 [ 186.116894][ T1106] process_one_work+0x949/0x1650 [ 186.116941][ T1106] ? __pfx_process_one_work+0x10/0x10 [ 186.116964][ T1106] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.117002][ T1106] worker_thread+0xb46/0x1140 [ 186.117036][ T1106] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 186.117074][ T1106] kthread+0x388/0x470 [ 186.117096][ T1106] ? __pfx_worker_thread+0x10/0x10 [ 186.117165][ T1106] ? __pfx_kthread+0x10/0x10 [ 186.117193][ T1106] ret_from_fork+0x51e/0xb90 [ 186.117223][ T1106] ? __pfx_ret_from_fork+0x10/0x10 [ 186.117247][ T1106] ? __switch_to+0xc7d/0x1450 [ 186.117273][ T1106] ? __pfx_kthread+0x10/0x10 [ 186.117296][ T1106] ret_from_fork_asm+0x1a/0x30 [ 186.117344][ T1106] [ 186.400889][ T1106] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 187.773032][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 187.865551][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 187.881793][ T9] usb 4-1: USB disconnect, device number 3 [ 188.240563][ T6996] loop1: detected capacity change from 0 to 128 [ 188.311633][ T29] audit: type=1800 audit(1770407116.706:5): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.352" name="bus" dev="loop1" ino=1048607 res=0 errno=0 [ 188.342253][ T6998] loop3: detected capacity change from 0 to 512 [ 188.350825][ T6990] fido_id[6990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 188.391176][ T6998] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.351: inode has both inline data and extents flags [ 188.434484][ T6998] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.435430][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 188.451237][ C1] EXT4-fs (loop3): initial error at time 1770407116: ext4_orphan_get:1391: inode 15 [ 188.456222][ T6998] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.351: couldn't read orphan inode 15 (err -117) [ 188.460808][ C1] EXT4-fs (loop3): last error at time 1770407116: ext4_orphan_get:1391: inode 15 [ 188.515586][ T6998] loop3: lost filesystem error report for type 5 error -117 [ 188.546300][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.378460][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.227108][ T7020] fuse: Unknown parameter '0x0000000000000003' [ 190.975559][ T5960] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 191.312327][ T7029] loop1: detected capacity change from 0 to 40427 [ 191.323496][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 191.412743][ T7029] F2FS-fs (loop1): invalid crc value [ 191.421106][ T5960] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 191.493710][ T7029] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 191.504183][ T7029] F2FS-fs (loop1): Start checkpoint disabled! [ 191.512119][ T5960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.531109][ T7029] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 191.539674][ T7029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 191.577292][ T5960] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.587479][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.599408][ T5960] usb 4-1: SerialNumber: syz [ 191.603913][ T1099] kworker/u8:5: attempt to access beyond end of device [ 191.603913][ T1099] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.652820][ T1099] CPU: 1 UID: 0 PID: 1099 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.652854][ T1099] Tainted: [L]=SOFTLOCKUP [ 191.652861][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.652873][ T1099] Workqueue: writeback wb_workfn (flush-7:1) [ 191.652904][ T1099] Call Trace: [ 191.652912][ T1099] [ 191.652920][ T1099] dump_stack_lvl+0xe8/0x150 [ 191.652952][ T1099] f2fs_handle_critical_error+0x37c/0x540 [ 191.652987][ T1099] f2fs_write_end_io+0xcdb/0xff0 [ 191.653049][ T1099] __submit_merged_bio+0x256/0x700 [ 191.653083][ T1099] __submit_merged_write_cond+0x3c3/0x4e0 [ 191.653119][ T1099] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 191.653173][ T1099] f2fs_write_data_pages+0x2975/0x35e0 [ 191.653243][ T1099] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.653323][ T1099] ? __lock_acquire+0x6b5/0x2cf0 [ 191.653380][ T1099] ? unwind_next_frame+0xa5/0x23c0 [ 191.653435][ T1099] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.653463][ T1099] do_writepages+0x32e/0x550 [ 191.653498][ T1099] ? reacquire_held_locks+0x104/0x190 [ 191.653525][ T1099] ? writeback_sb_inodes+0x43d/0x19a0 [ 191.653558][ T1099] __writeback_single_inode+0x133/0x11a0 [ 191.653586][ T1099] ? do_raw_spin_unlock+0xf5/0x210 [ 191.653611][ T1099] writeback_sb_inodes+0x944/0x19a0 [ 191.653667][ T1099] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.653690][ T1099] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.653763][ T1099] ? rcu_is_watching+0x15/0xb0 [ 191.653801][ T1099] wb_writeback+0x456/0xb70 [ 191.653830][ T1099] ? queue_io+0x241/0x4a0 [ 191.653864][ T1099] ? __pfx_wb_writeback+0x10/0x10 [ 191.653885][ T1099] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.653923][ T1099] wb_workfn+0x414/0xf50 [ 191.653947][ T1099] ? look_up_lock_class+0x57/0x110 [ 191.653990][ T1099] ? __pfx_wb_workfn+0x10/0x10 [ 191.654024][ T1099] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.654047][ T1099] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 191.654096][ T1099] ? process_one_work+0x87c/0x1650 [ 191.654120][ T1099] process_one_work+0x949/0x1650 [ 191.654172][ T1099] ? __pfx_process_one_work+0x10/0x10 [ 191.654192][ T1099] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.654235][ T1099] worker_thread+0xb46/0x1140 [ 191.654293][ T1099] kthread+0x388/0x470 [ 191.654313][ T1099] ? __pfx_worker_thread+0x10/0x10 [ 191.654335][ T1099] ? __pfx_kthread+0x10/0x10 [ 191.654357][ T1099] ret_from_fork+0x51e/0xb90 [ 191.654386][ T1099] ? __pfx_ret_from_fork+0x10/0x10 [ 191.654410][ T1099] ? __switch_to+0xc7d/0x1450 [ 191.654437][ T1099] ? __pfx_kthread+0x10/0x10 [ 191.654457][ T1099] ret_from_fork_asm+0x1a/0x30 [ 191.654506][ T1099] [ 191.846077][ T5960] usb 4-1: 0:2 : does not exist [ 191.861029][ T1099] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 192.077593][ T7035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.190177][ T5960] usb 4-1: USB disconnect, device number 4 [ 192.332064][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.688136][ T7045] loop2: detected capacity change from 0 to 512 [ 192.835480][ T7045] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.367: inode has both inline data and extents flags [ 192.861755][ T7045] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.864457][ T7045] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.367: couldn't read orphan inode 15 (err -117) [ 192.873740][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 192.873756][ C1] EXT4-fs (loop2): initial error at time 1770407121: ext4_orphan_get:1391: inode 15 [ 192.873776][ C1] EXT4-fs (loop2): last error at time 1770407121: ext4_orphan_get:1391: inode 15 [ 192.977077][ T7045] loop2: lost filesystem error report for type 5 error -117 [ 192.981652][ T7045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.498578][ T5960] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 194.142041][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.165564][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 194.465680][ T5960] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 194.505513][ T5960] usb 4-1: config 0 has no interface number 0 [ 194.511762][ T5960] usb 4-1: config 0 interface 12 has no altsetting 0 [ 194.569775][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.576942][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.996118][ T7056] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 195.014089][ T5960] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 195.047127][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.057188][ T5960] usb 4-1: Product: syz [ 195.062074][ T5960] usb 4-1: Manufacturer: syz [ 195.096794][ T5960] usb 4-1: SerialNumber: syz [ 195.271519][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 196.848526][ T5960] usb 4-1: config 0 descriptor?? [ 196.945945][ T5960] usb 4-1: can't set config #0, error -71 [ 197.022664][ T5960] usb 4-1: USB disconnect, device number 5 [ 197.414948][ T7091] loop0: detected capacity change from 0 to 512 [ 197.859906][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.976366][ T7091] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.381: inode has both inline data and extents flags [ 198.030447][ T7091] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.035896][ T7091] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.381: couldn't read orphan inode 15 (err -117) [ 198.045459][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 198.045483][ C1] EXT4-fs (loop0): initial error at time 1770407126: ext4_orphan_get:1391: inode 15 [ 198.045516][ C1] EXT4-fs (loop0): last error at time 1770407126: ext4_orphan_get:1391: inode 15 [ 198.111733][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 198.142170][ T5825] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 198.207981][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.300604][ T7091] loop0: lost filesystem error report for type 5 error -117 [ 198.320485][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.447602][ T7091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.142311][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.153968][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.166028][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.177939][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.189746][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.202498][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.214674][ T5825] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 199.226409][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 199.234819][ T5825] usb 4-1: SerialNumber: syz [ 199.243538][ T5825] usb 4-1: config 0 descriptor?? [ 199.256633][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 199.893709][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.893740][ T5825] usb 4-1: USB disconnect, device number 6 [ 199.906064][ T5173] bcm5974 4-1:0.0: could not read from device [ 200.224554][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 200.240643][ T5960] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 200.335520][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.408912][ T7111] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 201.695513][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 201.728663][ T5960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.739278][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 201.775535][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.798926][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 201.809183][ T7116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.819571][ T5960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.847598][ T9] usb 5-1: config 0 has no interface number 0 [ 201.853849][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 201.861401][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.888988][ T5960] usb 2-1: Product: syz [ 201.893217][ T5960] usb 2-1: Manufacturer: syz [ 201.906535][ T5960] usb 2-1: SerialNumber: syz [ 201.912439][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 201.925483][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.945472][ T9] usb 5-1: Product: syz [ 201.949709][ T9] usb 5-1: Manufacturer: syz [ 201.978310][ T9] usb 5-1: SerialNumber: syz [ 202.014658][ T9] usb 5-1: config 0 descriptor?? [ 202.221375][ T5960] usb 2-1: 0:2 : does not exist [ 202.241511][ T5960] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 202.471161][ T5960] usb 2-1: USB disconnect, device number 3 [ 203.367595][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 203.423169][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 203.460917][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.468293][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 203.672581][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 203.721896][ T9] usb 5-1: USB disconnect, device number 5 [ 203.834884][ T7137] fuse: Unknown parameter '0x0000000000000003' [ 204.776506][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 204.964173][ T7151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.059098][ T7148] ALSA: mixer_oss: invalid OSS volume 'DAGITAL1' [ 206.677378][ T5960] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 207.135478][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 207.154769][ T5960] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 207.213333][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.256938][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.289052][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.317356][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.366819][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.386897][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.417727][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.436914][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.467306][ T5960] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 207.485518][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 207.519442][ T5960] usb 3-1: SerialNumber: syz [ 207.566758][ T5960] usb 3-1: config 0 descriptor?? [ 207.600099][ T5960] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 207.675525][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.725047][ T7166] fuse: Unknown parameter '0x0000000000000003' [ 207.849155][ T5173] bcm5974 3-1:0.0: could not read from device [ 207.902203][ T5960] usb 3-1: USB disconnect, device number 3 [ 207.906035][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 207.917708][ T5173] bcm5974 3-1:0.0: could not read from device [ 207.962632][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.983302][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.038759][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.075445][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.106923][ T5873] usb 5-1: Product: syz [ 208.122755][ T5873] usb 5-1: Manufacturer: syz [ 208.137713][ T5873] usb 5-1: SerialNumber: syz [ 208.149048][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 208.566357][ T7173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.599622][ T5873] usb 5-1: 0:2 : does not exist [ 208.726076][ T5873] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 209.105834][ T7176] macvlan2: entered promiscuous mode [ 209.111292][ T7176] macvlan2: entered allmulticast mode [ 209.161689][ T7176] bond1: entered allmulticast mode [ 209.446734][ T7176] bond1: entered promiscuous mode [ 209.657871][ T7176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.699867][ T5873] usb 5-1: USB disconnect, device number 6 [ 209.723769][ T7176] team0: Port device macvlan2 added [ 210.619183][ T7191] ALSA: mixer_oss: invalid OSS volume '' [ 211.760290][ T7201] fuse: Unknown parameter '0x0000000000000003' [ 211.999602][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 212.005786][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.011830][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.017989][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 212.018404][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 212.570607][ T5896] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.745671][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 212.766535][ T5896] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 212.784040][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.908909][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.921040][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.932950][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.954778][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.969807][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.986097][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.998978][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.013874][ T5896] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 213.024940][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 213.033654][ T5896] usb 5-1: SerialNumber: syz [ 213.060155][ T5896] usb 5-1: config 0 descriptor?? [ 213.089026][ T5896] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 213.329414][ T5173] bcm5974 5-1:0.0: could not read from device [ 213.342655][ T5173] bcm5974 5-1:0.0: could not read from device [ 213.402502][ T5173] bcm5974 5-1:0.0: could not read from device [ 213.417412][ T5896] usb 5-1: USB disconnect, device number 7 [ 214.120164][ T7228] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 214.134761][ T7228] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 214.246026][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 214.322187][ T7232] fuse: Unknown parameter '0x0000000000000003' [ 214.477292][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 214.662073][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.810903][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.932746][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.954520][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.056610][ T5896] usb 1-1: Product: syz [ 215.086081][ T5896] usb 1-1: Manufacturer: syz [ 215.090748][ T5896] usb 1-1: SerialNumber: syz [ 215.441489][ T5896] usb 1-1: 0:2 : does not exist [ 215.693194][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 215.796848][ T5896] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 216.045477][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 216.167954][ T5903] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 216.310159][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.351902][ T5896] usb 1-1: USB disconnect, device number 5 [ 216.356474][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.416178][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.438078][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.469126][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.479188][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.548128][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.560921][ T7255] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.440'. [ 216.576594][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.592249][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.606306][ T7255] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.440'. [ 216.630316][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 216.675730][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 216.695490][ T5903] usb 5-1: SerialNumber: syz [ 216.713633][ T5903] usb 5-1: config 0 descriptor?? [ 216.751753][ T5903] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 216.804237][ T7263] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 216.869214][ T7265] netlink: 'syz.3.443': attribute type 4 has an invalid length. [ 216.972212][ T5173] bcm5974 5-1:0.0: could not read from device [ 216.974869][ T5903] usb 5-1: USB disconnect, device number 8 [ 217.026049][ T6499] bcm5974 5-1:0.0: could not read from device [ 217.279221][ T7273] fuse: Unknown parameter '0x0000000000000003' [ 217.542462][ T7271] loop0: detected capacity change from 0 to 65536 [ 217.596576][ T7271] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 217.686162][ T7271] XFS (loop0): Ending clean mount [ 217.697598][ T7271] XFS (loop0): Quotacheck needed: Please wait. [ 217.762724][ T7271] XFS (loop0): Quotacheck: Done. [ 217.830632][ T5830] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 217.977970][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 218.375483][ T5903] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.582083][ T5903] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 218.610238][ T5903] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 218.635479][ T5903] usb 5-1: config 0 has no interface number 0 [ 218.660469][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 218.687896][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.725498][ T5903] usb 5-1: Product: syz [ 218.729951][ T5903] usb 5-1: Manufacturer: syz [ 218.734628][ T5903] usb 5-1: SerialNumber: syz [ 218.766846][ T5903] usb 5-1: config 0 descriptor?? [ 219.435351][ T5903] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 219.466102][ T5903] uvcvideo 5-1:0.64: No valid video chain found. [ 219.622613][ T5903] usb 5-1: USB disconnect, device number 9 [ 221.877539][ T5825] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 222.046362][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 222.070190][ T5825] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 222.203151][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.236120][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.269350][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.300265][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.336803][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.368372][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.388711][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.430266][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.492334][ T5825] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 222.494221][ T7339] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.469'. [ 222.511070][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 222.511165][ T5825] usb 5-1: SerialNumber: syz [ 222.717651][ T7340] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.469'. [ 222.737176][ T5825] usb 5-1: config 0 descriptor?? [ 223.011695][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 223.069365][ T5173] bcm5974 5-1:0.0: could not read from device [ 223.145705][ T5825] usb 5-1: USB disconnect, device number 10 [ 223.398048][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 225.605533][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.632933][ T7374] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.481'. [ 225.647657][ T7374] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.481'. [ 226.195489][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 226.209082][ T5825] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 226.225788][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.235574][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 226.245974][ T5825] usb 2-1: config 1 has no interface number 0 [ 226.263235][ T5825] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 226.293868][ T5825] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.336729][ T5825] usb 2-1: config 1 interface 105 has no altsetting 0 [ 226.381125][ T5825] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 226.406340][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.418549][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 226.425419][ T5825] usb 2-1: Product: syz [ 226.429472][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.429709][ T5825] usb 2-1: Manufacturer: syz [ 226.442563][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.465052][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.474505][ T5825] usb 2-1: SerialNumber: syz [ 226.476678][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.518646][ T5896] usb 5-1: Product: syz [ 226.522979][ T5896] usb 5-1: Manufacturer: syz [ 226.528209][ T5896] usb 5-1: SerialNumber: syz [ 226.575705][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.698147][ T5825] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 226.735485][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 226.742315][ T5889] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 226.761985][ T5896] usb 5-1: 0:2 : does not exist [ 226.771981][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.798657][ T5896] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 226.808518][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.825081][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.837556][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.850994][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.863744][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.892292][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.902278][ T5825] usb 2-1: USB disconnect, device number 4 [ 226.908290][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.923187][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 226.933237][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 226.938636][ T7393] loop3: detected capacity change from 0 to 2048 [ 226.941910][ T5889] usb 3-1: SerialNumber: syz [ 226.991496][ T5889] usb 3-1: config 0 descriptor?? [ 227.013604][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 227.035145][ T5896] usb 5-1: USB disconnect, device number 11 [ 227.040859][ T7394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.084509][ T29] audit: type=1800 audit(1770407155.496:6): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.489" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 227.127803][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.243468][ T7382] input: syz0 as /devices/virtual/input/input14 [ 227.596672][ T7400] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.492'. [ 227.616562][ T7400] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.492'. [ 228.470453][ T7411] loop1: detected capacity change from 0 to 64 [ 228.582537][ T7411] hfs: request for non-existent node -129 in B*Tree [ 228.595643][ T7411] hfs: request for non-existent node -129 in B*Tree [ 230.114120][ T5173] bcm5974 3-1:0.0: could not read from device [ 230.266652][ T5889] usb 3-1: USB disconnect, device number 4 [ 230.298517][ T5173] bcm5974 3-1:0.0: could not read from device [ 230.481699][ T7436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 230.621753][ T7437] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.505'. [ 230.642698][ T7440] netlink: 'syz.4.504': attribute type 4 has an invalid length. [ 230.646416][ T7437] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.505'. [ 230.667606][ T5903] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 230.873330][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 231.058765][ T5903] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 231.324873][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.340148][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.351535][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.363504][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.441572][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.461379][ T7443] NFSD: Failed to start, no listeners configured. [ 231.483325][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.704214][ T7451] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 231.921249][ T5903] usb 2-1: usb_control_msg returned -32 [ 231.941354][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 232.281008][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.325582][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.335672][ T5903] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.345761][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.355242][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.368455][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.377711][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.386936][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.398367][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.407535][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.416658][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.425895][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.439144][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.448396][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.457690][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.468546][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.477770][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.545497][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 232.553219][ T5903] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 232.568046][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.581540][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.599591][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.648018][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.677854][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.691282][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.705206][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.722492][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.740006][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 232.777161][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 232.803253][ T5903] usb 5-1: SerialNumber: syz [ 232.834883][ T5903] usb 5-1: config 0 descriptor?? [ 232.854431][ T5903] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 232.867556][ T7466] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 232.946696][ T7467] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 233.335746][ T7458] input: syz0 as /devices/virtual/input/input16 [ 233.566260][ T5873] usb 2-1: USB disconnect, device number 5 [ 234.182447][ T7486] xt_connbytes: Forcing CT accounting to be enabled [ 234.195885][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 234.364828][ T5896] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 234.395572][ T5896] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 234.425271][ T5896] usb 3-1: config 0 has no interface number 0 [ 234.445900][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 234.446739][ T7490] loop3: detected capacity change from 0 to 512 [ 234.487361][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.506169][ T5896] usb 3-1: Product: syz [ 234.510857][ T5896] usb 3-1: Manufacturer: syz [ 234.535479][ T5896] usb 3-1: SerialNumber: syz [ 234.546862][ T5896] usb 3-1: config 0 descriptor?? [ 234.581696][ T7490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.706112][ T7490] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.010893][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.126620][ T5896] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 235.150883][ T5896] uvcvideo 3-1:0.64: No valid video chain found. [ 235.174655][ T5173] bcm5974 5-1:0.0: could not read from device [ 235.235535][ T5896] usb 3-1: USB disconnect, device number 5 [ 235.245845][ T5903] usb 5-1: USB disconnect, device number 12 [ 235.266964][ T5173] bcm5974 5-1:0.0: could not read from device [ 235.463414][ T7507] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 235.511026][ T7507] netlink: 'syz.3.530': attribute type 4 has an invalid length. [ 235.704757][ T7514] loop3: detected capacity change from 0 to 128 [ 235.754566][ T29] audit: type=1800 audit(1770407164.166:7): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.533" name="bus" dev="loop3" ino=1048608 res=0 errno=0 [ 235.912280][ T7518] loop2: detected capacity change from 0 to 128 [ 236.278081][ T7521] syz.2.534: attempt to access beyond end of device [ 236.278081][ T7521] loop2: rw=8423425, sector=102, nr_sectors = 32 limit=128 [ 236.862029][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.145797][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 237.157170][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 237.185293][ T9] usb 5-1: config 0 has no interface number 0 [ 237.226139][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 237.245604][ T7543] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 237.261085][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 237.272911][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.273343][ T7543] netlink: 'syz.2.544': attribute type 4 has an invalid length. [ 237.290178][ T9] usb 5-1: Product: syz [ 237.308504][ T9] usb 5-1: Manufacturer: syz [ 237.313246][ T9] usb 5-1: SerialNumber: syz [ 237.395536][ T9] usb 5-1: config 0 descriptor?? [ 237.458530][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 238.028762][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 238.670257][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 238.693404][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 238.711048][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 238.719829][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 238.720113][ T7576] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 238.782254][ T7576] netlink: 'syz.3.557': attribute type 4 has an invalid length. [ 238.784063][ T9] usb 5-1: USB disconnect, device number 13 [ 239.495578][ T5825] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.504997][ T7597] loop2: detected capacity change from 0 to 2048 [ 239.514232][ T7597] EXT4-fs: Ignoring removed i_version option [ 239.551542][ T7597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.564329][ T7597] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.686009][ T5825] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 239.696363][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.708273][ T5825] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.725306][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.733700][ T5825] usb 2-1: SerialNumber: syz [ 239.813740][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.974779][ T5825] usb 2-1: 0:2 : does not exist [ 240.094732][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 240.111479][ T5825] usb 2-1: unit 5: unexpected type 0x03 [ 240.180028][ T5825] usb 2-1: USB disconnect, device number 6 [ 240.350180][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.373379][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.453537][ T5903] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 240.779813][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.797377][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.811447][ T5903] usb 1-1: Product: syz [ 240.829479][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.847383][ T5903] usb 1-1: Manufacturer: syz [ 240.868806][ T5903] usb 1-1: SerialNumber: syz [ 240.939004][ T7617] netlink: 'syz.4.571': attribute type 4 has an invalid length. [ 241.103603][ T7603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 241.537976][ T5903] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 241.555503][ T5903] cdc_ncm 1-1:1.0: bind() failure [ 241.591721][ T5903] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 241.611509][ T5903] cdc_ncm 1-1:1.1: bind() failure [ 241.642214][ T5903] usb 1-1: USB disconnect, device number 6 [ 241.655468][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 241.827445][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 241.857299][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 241.882224][ T9] usb 2-1: config 0 has no interface number 0 [ 241.889440][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 241.908299][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 241.934510][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.953137][ T9] usb 2-1: Product: syz [ 241.963280][ T9] usb 2-1: Manufacturer: syz [ 241.973479][ T9] usb 2-1: SerialNumber: syz [ 241.994627][ T9] usb 2-1: config 0 descriptor?? [ 243.311147][ T9] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 243.380925][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 244.165027][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 244.265734][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 244.299549][ T9] usb 2-1: USB disconnect, device number 7 [ 244.358400][ T7660] netlink: 'syz.2.587': attribute type 4 has an invalid length. [ 244.587960][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 244.763577][ T5903] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 244.795225][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.829925][ T5903] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.868609][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.896612][ T5903] usb 4-1: SerialNumber: syz [ 245.153723][ T5903] usb 4-1: 0:2 : does not exist [ 245.158944][ T5903] usb 4-1: unit 5: unexpected type 0x03 [ 245.381740][ T5903] usb 4-1: USB disconnect, device number 7 [ 245.479797][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.747751][ T7687] syz.2.598 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 246.222522][ T7697] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 246.336072][ T7698] netlink: 'syz.0.601': attribute type 4 has an invalid length. [ 246.746088][ T7702] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.603'. [ 246.774852][ T7705] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 246.804765][ T7702] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.603'. [ 247.015484][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 247.206579][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 247.239405][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 247.284575][ T9] usb 3-1: config 0 has no interface number 0 [ 247.304774][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 247.358982][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 247.395465][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.435590][ T9] usb 3-1: Product: syz [ 247.585776][ T9] usb 3-1: Manufacturer: syz [ 247.595766][ T9] usb 3-1: SerialNumber: syz [ 247.620070][ T7730] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 247.894760][ T7734] netlink: 'syz.0.614': attribute type 4 has an invalid length. [ 248.232542][ T9] usb 3-1: config 0 descriptor?? [ 248.415011][ T7737] netlink: 'syz.1.616': attribute type 4 has an invalid length. [ 248.480087][ T7741] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.617'. [ 248.507514][ T7741] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.617'. [ 248.885842][ T7746] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 249.597827][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 249.690548][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 249.775475][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 249.813925][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 249.984065][ T9] usb 3-1: USB disconnect, device number 6 [ 250.360498][ T7764] loop3: detected capacity change from 0 to 2048 [ 250.376809][ T7764] EXT4-fs: Ignoring removed i_version option [ 250.480469][ T7764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.501120][ T7764] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.766134][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.432536][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 253.455467][ T5903] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 253.657108][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.685792][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.735240][ T5903] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 253.756889][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.775664][ T5903] usb 3-1: SerialNumber: syz [ 254.035061][ T5903] usb 3-1: 0:2 : does not exist [ 254.762444][ T7825] NFSD: Failed to start, no listeners configured. [ 254.796948][ T5903] usb 3-1: USB disconnect, device number 7 [ 254.971376][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.041325][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 256.002454][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.025611][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.535994][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 257.788258][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.962513][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.090692][ T5873] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.125475][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.163842][ T5873] usb 4-1: SerialNumber: syz [ 258.502981][ T5873] usb 4-1: 0:2 : does not exist [ 259.736105][ T5873] usb 4-1: USB disconnect, device number 8 [ 259.942566][ T7900] loop1: detected capacity change from 0 to 128 [ 260.024502][ T7901] loop2: detected capacity change from 0 to 512 [ 260.055527][ T5960] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 260.124066][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.205803][ T7901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.280099][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.293261][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.326210][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.345500][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.355895][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.360997][ T7901] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.372015][ T5960] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.389273][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.414593][ T5960] usb 1-1: config 0 descriptor?? [ 261.702985][ T5960] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 261.852147][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.571603][ T5960] usb 1-1: USB disconnect, device number 7 [ 264.573476][ T7932] binder: 7931:7932 ioctl 4018620d 0 returned -22 [ 264.806462][ T5903] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 264.839770][ T7939] loop1: detected capacity change from 0 to 512 [ 264.865533][ T7939] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 264.887745][ T7939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 264.979016][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.009525][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.043943][ T5903] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.074961][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.103780][ T7939] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.688: inode has both inline data and extents flags [ 265.118353][ T5903] usb 1-1: SerialNumber: syz [ 265.124949][ T7939] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.125388][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 265.141074][ C1] EXT4-fs (loop1): initial error at time 1770407193: ext4_orphan_get:1391: inode 15 [ 265.150815][ C1] EXT4-fs (loop1): last error at time 1770407193: ext4_orphan_get:1391: inode 15 [ 265.168726][ T7939] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.688: couldn't read orphan inode 15 (err -117) [ 265.289028][ T7939] loop1: lost filesystem error report for type 5 error -117 [ 265.343618][ T7939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.959831][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.969163][ T7947] loop2: detected capacity change from 0 to 512 [ 266.002336][ T7947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.017226][ T7951] netlink: 'syz.4.682': attribute type 4 has an invalid length. [ 266.101945][ T7947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.132682][ T5903] usb 1-1: 0:2 : does not exist [ 266.176955][ T7947] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.215536][ T5960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 266.367768][ T5903] usb 1-1: USB disconnect, device number 8 [ 266.398805][ T5960] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 266.528265][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.549496][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.946888][ T5960] usb 4-1: config 0 descriptor?? [ 266.972319][ T5960] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 266.987171][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.418976][ T7964] loop2: detected capacity change from 0 to 40427 [ 267.456753][ T7964] F2FS-fs (loop2): invalid crc value [ 267.559469][ T7964] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 267.580509][ T7964] F2FS-fs (loop2): Start checkpoint disabled! [ 267.588589][ T7964] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 267.597132][ T7964] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 270.979788][ T5960] usb 4-1: USB disconnect, device number 9 [ 271.107862][ T7991] binder: 7989:7991 ioctl 4018620d 0 returned -22 [ 271.118345][ T7988] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.701'. [ 271.128179][ T7988] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.701'. [ 272.313993][ T8000] loop1: detected capacity change from 0 to 512 [ 272.395743][ T8000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.570282][ T8000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.638846][ T8000] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.446890][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.369232][ T8023] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.713'. [ 275.479489][ T8026] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.713'. [ 276.698550][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 276.711656][ T8044] loop3: detected capacity change from 0 to 512 [ 276.797019][ T8044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.875820][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 276.883726][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.908896][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.936728][ T8044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.966004][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.978656][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.990200][ T8044] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.001465][ T10] usb 2-1: Product: syz [ 277.006193][ T10] usb 2-1: Manufacturer: syz [ 277.014734][ T10] usb 2-1: SerialNumber: syz [ 277.942281][ T10] usb 2-1: 0:2 : does not exist [ 277.954791][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.022795][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 278.167111][ T10] usb 2-1: USB disconnect, device number 8 [ 278.294331][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.234837][ T8067] NFSD: Failed to start, no listeners configured. [ 280.745123][ T8077] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.726'. [ 280.906930][ T8080] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.726'. [ 281.844858][ T8101] binder: BINDER_SET_CONTEXT_MGR already set [ 281.852692][ T8101] binder: 8100:8101 ioctl 4018620d 200000004a80 returned -16 [ 282.039757][ T8106] netlink: 'syz.4.739': attribute type 4 has an invalid length. [ 282.173664][ T8112] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.741'. [ 282.186208][ T8112] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.741'. [ 283.432469][ T8140] netlink: 'syz.0.752': attribute type 4 has an invalid length. [ 283.465938][ T8142] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.753'. [ 283.494487][ T8142] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.753'. [ 284.088939][ T8157] binder: BINDER_SET_CONTEXT_MGR already set [ 284.103145][ T8157] binder: 8156:8157 ioctl 4018620d 200000004a80 returned -16 [ 284.133412][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 284.775579][ T978] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 284.891350][ T8170] netlink: 'syz.3.765': attribute type 4 has an invalid length. [ 284.965900][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 284.977637][ T978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.995835][ T978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.007640][ T8174] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.767'. [ 285.012402][ T978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.017654][ T8174] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.767'. [ 285.055449][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.075467][ T978] usb 3-1: Product: syz [ 285.079730][ T978] usb 3-1: Manufacturer: syz [ 285.125540][ T978] usb 3-1: SerialNumber: syz [ 285.389774][ T978] usb 3-1: 0:2 : does not exist [ 285.436967][ T978] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 285.540588][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 286.241529][ T978] usb 3-1: USB disconnect, device number 8 [ 286.406535][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.496131][ T8196] binder: 8195:8196 ioctl c0306201 0 returned -14 [ 287.095933][ T8203] netlink: 'syz.3.778': attribute type 4 has an invalid length. [ 287.113690][ T8205] tipc: Started in network mode [ 287.124110][ T8205] tipc: Node identity 6a548d851ca9, cluster identity 4711 [ 287.135960][ T8205] tipc: Enabled bearer , priority 0 [ 287.158458][ T8205] syzkaller0: entered promiscuous mode [ 287.173841][ T8205] syzkaller0: entered allmulticast mode [ 287.211486][ T8207] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.780'. [ 287.237557][ T8205] tipc: Resetting bearer [ 287.252713][ T8207] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.780'. [ 287.287386][ T8205] tipc: Disabling bearer [ 287.708116][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 288.665592][ T5903] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.165495][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 289.179508][ T8234] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 289.189186][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.211338][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.252516][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.289017][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.302630][ T8236] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.792'. [ 289.310775][ T5903] usb 5-1: Product: syz [ 289.323488][ T5903] usb 5-1: Manufacturer: syz [ 289.331871][ T5903] usb 5-1: SerialNumber: syz [ 289.354490][ T8236] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.792'. [ 289.450322][ T8238] binder: 8237:8238 ioctl c0306201 0 returned -14 [ 289.565692][ T5903] usb 5-1: 0:2 : does not exist [ 289.591067][ T5903] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 289.731955][ T5903] usb 5-1: USB disconnect, device number 14 [ 289.794177][ T8250] syz.0.798 uses obsolete (PF_INET,SOCK_PACKET) [ 289.854117][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.082269][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 290.807628][ T5903] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 290.988710][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.008219][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.018595][ T5903] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 291.038246][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.055472][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.339638][ T5903] usb 4-1: Product: syz [ 291.349572][ T5903] usb 4-1: Manufacturer: syz [ 291.354764][ T5903] usb 4-1: SerialNumber: syz [ 291.545617][ T978] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 291.690105][ T8253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.710604][ T978] usb 1-1: device descriptor read/64, error -71 [ 291.965542][ T978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 292.125539][ T978] usb 1-1: device descriptor read/64, error -71 [ 292.251017][ T978] usb usb1-port1: attempt power cycle [ 292.340061][ T5903] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 292.369499][ T5903] cdc_ncm 4-1:1.0: bind() failure [ 292.437727][ T5903] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 292.445297][ T5903] cdc_ncm 4-1:1.1: bind() failure [ 292.496839][ T5903] usb 4-1: USB disconnect, device number 10 [ 292.665567][ T978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 292.694501][ T978] usb 1-1: device descriptor read/8, error -71 [ 292.935498][ T978] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.976383][ T978] usb 1-1: device descriptor read/8, error -71 [ 293.132137][ T978] usb usb1-port1: unable to enumerate USB device [ 293.980536][ T8274] loop2: detected capacity change from 0 to 32768 [ 294.033333][ T8274] (syz.2.806,8274,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 294.052391][ T8274] (syz.2.806,8274,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 294.197333][ T8274] JBD2: Ignoring recovery information on journal [ 294.259815][ T8274] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 294.361410][ T8274] [ 294.363781][ T8274] ====================================================== [ 294.370877][ T8274] WARNING: possible circular locking dependency detected [ 294.377971][ T8274] syzkaller #0 Tainted: G L [ 294.384038][ T8274] ------------------------------------------------------ [ 294.391139][ T8274] syz.2.806/8274 is trying to acquire lock: [ 294.397117][ T8274] ffff8880259ee610 (sb_internal#7){.+.+}-{0:0}, at: ocfs2_simple_size_update+0xd6/0x4a0 [ 294.407383][ T8274] [ 294.407383][ T8274] but task is already holding lock: [ 294.414732][ T8274] ffff8880480e4da0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_create_local_dquot+0x1a5/0x1af0 [ 294.426090][ T8274] [ 294.426090][ T8274] which lock already depends on the new lock. [ 294.426090][ T8274] [ 294.436490][ T8274] [ 294.436490][ T8274] the existing dependency chain (in reverse order) is: [ 294.445498][ T8274] [ 294.445498][ T8274] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 294.454711][ T8274] down_write+0x96/0x200 [ 294.459579][ T8274] ocfs2_lock_global_qf+0x201/0x290 [ 294.465397][ T8274] ocfs2_acquire_dquot+0x3fa/0xb30 [ 294.471060][ T8274] dqget+0x7b1/0xf10 [ 294.475484][ T8274] __dquot_initialize+0x3ba/0xd30 [ 294.481029][ T8274] ocfs2_get_init_inode+0x147/0x1c0 [ 294.486943][ T8274] ocfs2_mknod+0xa67/0x2290 [ 294.492092][ T8274] ocfs2_create+0x195/0x490 [ 294.497161][ T8274] path_openat+0x1395/0x3860 [ 294.502304][ T8274] do_file_open+0x23e/0x4a0 [ 294.507365][ T8274] do_sys_openat2+0x113/0x200 [ 294.512681][ T8274] __x64_sys_openat+0x138/0x170 [ 294.518085][ T8274] do_syscall_64+0x14d/0xf80 [ 294.523247][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.529674][ T8274] [ 294.529674][ T8274] -> #2 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 294.540202][ T8274] down_write+0x96/0x200 [ 294.544994][ T8274] ocfs2_lock_global_qf+0x1da/0x290 [ 294.550921][ T8274] ocfs2_acquire_dquot+0x3fa/0xb30 [ 294.556569][ T8274] dqget+0x7b1/0xf10 [ 294.561005][ T8274] __dquot_initialize+0x3ba/0xd30 [ 294.566574][ T8274] ocfs2_get_init_inode+0x147/0x1c0 [ 294.572319][ T8274] ocfs2_mknod+0xa67/0x2290 [ 294.577360][ T8274] ocfs2_create+0x195/0x490 [ 294.582411][ T8274] path_openat+0x1395/0x3860 [ 294.587574][ T8274] do_file_open+0x23e/0x4a0 [ 294.592626][ T8274] do_sys_openat2+0x113/0x200 [ 294.598060][ T8274] __x64_sys_openat+0x138/0x170 [ 294.603450][ T8274] do_syscall_64+0x14d/0xf80 [ 294.608576][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.615080][ T8274] [ 294.615080][ T8274] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 294.623693][ T8274] down_read+0x47/0x2e0 [ 294.628392][ T8274] ocfs2_start_trans+0x3ab/0x700 [ 294.633864][ T8274] ocfs2_modify_bh+0xe3/0x4d0 [ 294.639163][ T8274] ocfs2_local_read_info+0x1454/0x1810 [ 294.645324][ T8274] dquot_load_quota_sb+0x791/0xbd0 [ 294.650973][ T8274] dquot_load_quota_inode+0x2e1/0x5d0 [ 294.657303][ T8274] ocfs2_enable_quotas+0x1c8/0x4a0 [ 294.663029][ T8274] ocfs2_fill_super+0x5305/0x6900 [ 294.668589][ T8274] get_tree_bdev_flags+0x431/0x4f0 [ 294.674324][ T8274] vfs_get_tree+0x92/0x2a0 [ 294.679269][ T8274] do_new_mount+0x341/0xd30 [ 294.684298][ T8274] __se_sys_mount+0x31d/0x420 [ 294.689612][ T8274] do_syscall_64+0x14d/0xf80 [ 294.694733][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.701173][ T8274] [ 294.701173][ T8274] -> #0 (sb_internal#7){.+.+}-{0:0}: [ 294.708676][ T8274] __lock_acquire+0x15a5/0x2cf0 [ 294.714279][ T8274] lock_acquire+0xf0/0x2e0 [ 294.719219][ T8274] ocfs2_start_trans+0x2ac/0x700 [ 294.724687][ T8274] ocfs2_simple_size_update+0xd6/0x4a0 [ 294.730666][ T8274] ocfs2_create_local_dquot+0x70d/0x1af0 [ 294.736825][ T8274] ocfs2_acquire_dquot+0x6d7/0xb30 [ 294.742511][ T8274] dqget+0x7b1/0xf10 [ 294.746932][ T8274] __dquot_initialize+0x3ba/0xd30 [ 294.752480][ T8274] ocfs2_get_init_inode+0x147/0x1c0 [ 294.758201][ T8274] ocfs2_mknod+0xa67/0x2290 [ 294.763293][ T8274] ocfs2_create+0x195/0x490 [ 294.768347][ T8274] path_openat+0x1395/0x3860 [ 294.773483][ T8274] do_file_open+0x23e/0x4a0 [ 294.778533][ T8274] do_sys_openat2+0x113/0x200 [ 294.783829][ T8274] __x64_sys_openat+0x138/0x170 [ 294.789256][ T8274] do_syscall_64+0x14d/0xf80 [ 294.794372][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.800786][ T8274] [ 294.800786][ T8274] other info that might help us debug this: [ 294.800786][ T8274] [ 294.811096][ T8274] Chain exists of: [ 294.811096][ T8274] sb_internal#7 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key [ 294.811096][ T8274] [ 294.828052][ T8274] Possible unsafe locking scenario: [ 294.828052][ T8274] [ 294.835767][ T8274] CPU0 CPU1 [ 294.841128][ T8274] ---- ---- [ 294.846613][ T8274] lock(&ocfs2_quota_ip_alloc_sem_key); [ 294.852259][ T8274] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 294.862152][ T8274] lock(&ocfs2_quota_ip_alloc_sem_key); [ 294.870849][ T8274] rlock(sb_internal#7); [ 294.875206][ T8274] [ 294.875206][ T8274] *** DEADLOCK *** [ 294.875206][ T8274] [ 294.883346][ T8274] 5 locks held by syz.2.806/8274: [ 294.888383][ T8274] #0: ffff8880259ee420 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 294.897779][ T8274] #1: ffff8880480cb480 (&type->i_mutex_dir_key#16){+.+.}-{4:4}, at: path_openat+0xb4c/0x3860 [ 294.908170][ T8274] #2: ffff88807de69800 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940 [ 294.922293][ T8274] #3: ffff888055c876a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x271/0xb30 [ 294.932440][ T8274] #4: ffff8880480e4da0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_create_local_dquot+0x1a5/0x1af0 [ 294.944188][ T8274] [ 294.944188][ T8274] stack backtrace: [ 294.950089][ T8274] CPU: 1 UID: 0 PID: 8274 Comm: syz.2.806 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.950110][ T8274] Tainted: [L]=SOFTLOCKUP [ 294.950115][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 294.950131][ T8274] Call Trace: [ 294.950139][ T8274] [ 294.950146][ T8274] dump_stack_lvl+0xe8/0x150 [ 294.950167][ T8274] print_circular_bug+0x2e1/0x300 [ 294.950191][ T8274] check_noncircular+0x12e/0x150 [ 294.950214][ T8274] __lock_acquire+0x15a5/0x2cf0 [ 294.950239][ T8274] lock_acquire+0xf0/0x2e0 [ 294.950255][ T8274] ? ocfs2_simple_size_update+0xd6/0x4a0 [ 294.950275][ T8274] ocfs2_start_trans+0x2ac/0x700 [ 294.950294][ T8274] ? ocfs2_simple_size_update+0xd6/0x4a0 [ 294.950312][ T8274] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 294.950335][ T8274] ocfs2_simple_size_update+0xd6/0x4a0 [ 294.950352][ T8274] ? __pfx_ocfs2_simple_size_update+0x10/0x10 [ 294.950367][ T8274] ? down_write+0x16d/0x200 [ 294.950388][ T8274] ? __pfx_down_write+0x10/0x10 [ 294.950409][ T8274] ocfs2_create_local_dquot+0x70d/0x1af0 [ 294.950433][ T8274] ? __pfx_ocfs2_create_local_dquot+0x10/0x10 [ 294.950451][ T8274] ? kasan_quarantine_put+0xbb/0x1f0 [ 294.950465][ T8274] ? lockdep_hardirqs_on+0x7a/0x110 [ 294.950483][ T8274] ? kmem_cache_free+0x187/0x630 [ 294.950498][ T8274] ? jbd2_journal_stop+0x8dd/0xda0 [ 294.950522][ T8274] ? __up_read+0x291/0x6b0 [ 294.950539][ T8274] ? sb_end_intwrite+0xe9/0x1c0 [ 294.950559][ T8274] ? ocfs2_commit_trans+0x133/0x250 [ 294.950579][ T8274] ? __pfx_ocfs2_commit_trans+0x10/0x10 [ 294.950600][ T8274] ? do_raw_spin_unlock+0xf5/0x210 [ 294.950615][ T8274] ocfs2_acquire_dquot+0x6d7/0xb30 [ 294.950639][ T8274] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 294.950662][ T8274] dqget+0x7b1/0xf10 [ 294.950679][ T8274] __dquot_initialize+0x3ba/0xd30 [ 294.950697][ T8274] ? __pfx___dquot_initialize+0x10/0x10 [ 294.950712][ T8274] ? do_raw_spin_unlock+0xf5/0x210 [ 294.950725][ T8274] ? from_vfsgid+0x72/0xa0 [ 294.950741][ T8274] ? inode_init_owner+0x1ed/0x390 [ 294.950758][ T8274] ocfs2_get_init_inode+0x147/0x1c0 [ 294.950774][ T8274] ? __pfx_ocfs2_get_init_inode+0x10/0x10 [ 294.950793][ T8274] ocfs2_mknod+0xa67/0x2290 [ 294.950814][ T8274] ? __pfx_ocfs2_mknod+0x10/0x10 [ 294.950831][ T8274] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 294.950852][ T8274] ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0 [ 294.950875][ T8274] ? look_up_lock_class+0x57/0x110 [ 294.950894][ T8274] ? __lock_acquire+0x6b5/0x2cf0 [ 294.950912][ T8274] ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0 [ 294.950931][ T8274] ? __lock_acquire+0x6b5/0x2cf0 [ 294.950950][ T8274] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 294.950972][ T8274] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.950988][ T8274] ? do_raw_spin_unlock+0xf5/0x210 [ 294.951002][ T8274] ? _raw_spin_unlock+0x28/0x50 [ 294.951017][ T8274] ? rcu_is_watching+0x15/0xb0 [ 294.951036][ T8274] ? ocfs2_lookup+0x5e1/0xa50 [ 294.951052][ T8274] ? __pfx_apparmor_path_mknod+0x10/0x10 [ 294.951069][ T8274] ocfs2_create+0x195/0x490 [ 294.951086][ T8274] ? __pfx_ocfs2_lookup+0x10/0x10 [ 294.951103][ T8274] ? __pfx_ocfs2_create+0x10/0x10 [ 294.951118][ T8274] ? bpf_lsm_inode_permission+0x9/0x20 [ 294.951140][ T8274] ? security_inode_permission+0xb7/0x2e0 [ 294.951157][ T8274] ? may_o_create+0x2d2/0x370 [ 294.951172][ T8274] ? bpf_lsm_inode_create+0x9/0x20 [ 294.951186][ T8274] ? __pfx_ocfs2_create+0x10/0x10 [ 294.951202][ T8274] path_openat+0x1395/0x3860 [ 294.951226][ T8274] ? __pfx_path_openat+0x10/0x10 [ 294.951239][ T8274] ? __x64_sys_openat+0x138/0x170 [ 294.951262][ T8274] ? __lock_acquire+0x6b5/0x2cf0 [ 294.951281][ T8274] do_file_open+0x23e/0x4a0 [ 294.951297][ T8274] ? __pfx_do_file_open+0x10/0x10 [ 294.951317][ T8274] ? _raw_spin_unlock+0x28/0x50 [ 294.951331][ T8274] ? alloc_fd+0x64b/0x6c0 [ 294.951352][ T8274] do_sys_openat2+0x113/0x200 [ 294.951372][ T8274] ? __se_sys_futex+0x3a8/0x450 [ 294.951390][ T8274] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.951411][ T8274] ? rcu_is_watching+0x15/0xb0 [ 294.951430][ T8274] __x64_sys_openat+0x138/0x170 [ 294.951451][ T8274] do_syscall_64+0x14d/0xf80 [ 294.951468][ T8274] ? trace_irq_disable+0x3b/0x150 [ 294.951488][ T8274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.951502][ T8274] ? clear_bhb_loop+0x40/0x90 [ 294.951518][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.951533][ T8274] RIP: 0033:0x7f2e4f99aeb9 [ 294.951547][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.951560][ T8274] RSP: 002b:00007f2e508ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.951576][ T8274] RAX: ffffffffffffffda RBX: 00007f2e4fc15fa0 RCX: 00007f2e4f99aeb9 [ 294.951588][ T8274] RDX: 0000000000105042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 294.951598][ T8274] RBP: 00007f2e4fa08c1f R08: 0000000000000000 R09: 0000000000000000 [ 294.951608][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.951617][ T8274] R13: 00007f2e4fc16038 R14: 00007f2e4fc15fa0 R15: 00007ffce92a3cf8 [ 294.951632][ T8274] [ 295.556369][ T29] audit: type=1800 audit(1770407223.886:8): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.806" name="file1" dev="loop2" ino=16978 res=0 errno=0 [ 295.666093][ T5817] ocfs2: Unmounting device (7,2) on (node local)