last executing test programs: 12.225747959s ago: executing program 0 (id=2521): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_emit_vhci(0x0, 0x8a) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b144d48270cbdeccc"], 0xe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket(0x22, 0x0, 0x4) getsockname(r4, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x40000000) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) poll(&(0x7f00000003c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x0, 0xd1b0], [], [0x0, 0x8000000000000001, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xf, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) close_range(r1, 0xffffffffffffffff, 0x0) 10.782406018s ago: executing program 0 (id=2527): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000380)="650f01ca0f2042baf80c66b87cacac8166efbafc0c66ed66b80500000066b91e32c3710f01c10fae9f010036ff1c260f3802e866b8b50000000f23d00f21f86635100000050f23f8baf80c66b868321d8c66efbafc0cb80000ef66b80500000066b9008000000f01c1", 0x69}], 0x1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) fsopen(&(0x7f0000000080)='overlay\x00', 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/3\x00') sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x6, 0x303, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x4004000) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000100)=@overlay={0x4, 0x9, 0x4, 0x10000, 0x5, {0x0, 0xea60}, {0x1, 0x9, 0x5, 0x8, 0x3, 0xc, "e51f1a03"}, 0x940, 0x3, {}, 0x0, 0x0, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b41, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) 10.25135718s ago: executing program 0 (id=2533): ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 9.159144265s ago: executing program 0 (id=2538): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_emit_vhci(0x0, 0x8a) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b144d48270cbdeccc"], 0xe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket(0x22, 0x0, 0x4) getsockname(r4, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x40000000) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) poll(&(0x7f00000003c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x0, 0xd1b0], [], [0x0, 0x8000000000000001, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xf, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) close_range(r1, 0xffffffffffffffff, 0x0) 8.54071006s ago: executing program 1 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x30, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x128, r6, 0x101, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@fast_bss_trans={0x37, 0x100, {0x0, 0x7, "f61627dca75d09bbd0d1a65a6b37889c", "138ce9c3eb8456aa7cf6efd0a20a9c2b77d3f74c6b06772f6f362fa16f13673a", "ea1f2d844af179417bc669be69300b0a10deba6996b25f7495408a0e80296433", [{0x0, 0x28, "d6000004f8a70aa844ef18d19210035bce7af32432ed01b5a561ab5056537da2acf6f23cca575cb0"}, {0x0, 0x5, '2VX0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b41, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) 7.642435526s ago: executing program 0 (id=2546): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) fcntl$setstatus(r0, 0x4, 0x2000) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x90, &(0x7f0000000600)=ANY=[@ANYBLOB="17010000020000102505a1a440000102030109027e00020100c0000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c08241c03000900000e2407320300060009020008c900202e174354dd490905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000004000"/154], 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r1, 0x0, 0x0) fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b) lseek(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063510800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x101, 0x20, r4, 0xffffc000, '\x00', r5, r4, 0x4, 0x3, 0x1, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x20) 7.327515955s ago: executing program 2 (id=2548): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x60, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0400"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c5a6fc26fb"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x60}}, 0x0) 7.273487763s ago: executing program 2 (id=2549): ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 7.075224663s ago: executing program 1 (id=2550): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1278, 0x48, 0x20, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x11fc, 0x93, 0x0, 0x1, [@generic="9b9a648b97beb2df25b2deeb99feebdf3df9d4a2064eba722c4753f7f70a238acd75d78152de6b5d064e553d8777de659fd0266c5d9e30d30cd0158a8d8221d811d16e3fb373c751d92195ca9877994f917964627d4f64896b8ceea217870d26ad77f248ae68002be3ab0900b454f95e33e6cb009a8584afb8435f4eaad967e1ebb17973ef7cde0955dd25b0bd95644dec", @generic="c7d4d44b333a7e02b01fae89d76cbe982891fa3dc95849edca064a0fc55a8c08ef4c09acc0280798404546ad81bebd6a63e250f90082796335585a481703f66bd4789498224469b8e173842e65ddeb9187287ac25a690bae593e821064aac06333f4648326a8f347ad439a2da67319349624aed4bcb217bc1db7384152ffd362fc8cec15d21995a16c983cc11ae3fef011ba61e865624c38e06de8cc3591716cd5d5e7", @generic="d0b3479f09065a0b2174f0fad92c13a5243eca310f543f95ba255ff9a028604d177476ceeb1ccecc76f6af042976694fa136cc3205c42177b8bb7c867a99a401530a3afc7f27964f3ebf9f985201b3e73bf2318c046b115b0ab0f2cbe2d02bdd5d40dff0e86da1556e34c3efb12f645f33ee8e2ce62f5821d2b8b0c6d7647e461d0f263e04e1b3d70bc91c4872fa7fa67d21924c5e392b8eeadb7eeab9b1ee3690528f15ff7d66cb68a80e6731c7015fe63f65b393f92235a0ce709fc9a1dee5", @generic="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", @typed={0x4, 0x3e}]}, @generic="3ca1d5acd12075f4cfc3e2de18a0271c8bb16296071ad085d6bfc45241db70a01edf86bd520b3ffdd3acd59464a48f86b8f2597899282cc2b7d8c62cd23801a243fdcce39fac4e5f3667ee1ed09374734a6918215ec5a2a65c354fb6b192ead58d002a4b22f11f3a"]}, 0x1278}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x67035000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x2f, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r2], 0x3c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 7.001070074s ago: executing program 1 (id=2551): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 6.046772519s ago: executing program 2 (id=2552): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000580)) 5.901561642s ago: executing program 1 (id=2553): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, 'Y'}, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) unshare(0x22020600) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xca40, 0x0) 4.746493068s ago: executing program 1 (id=2557): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x1903, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000408"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.484424517s ago: executing program 4 (id=2558): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f000049e000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000002c0)="362e0f81003000000aa0080000002e0f01cb66baf80cb85412cb8bef66bafc0cec2e0f7f123ef30f0926650f75aef2000000c4e259930c830f3566b838008ec8", 0x40}], 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="1e8292", 0xfff6}], 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)=@v2={0x3, 0x2, 0x17, 0x0, 0x1, '9'}, 0xa, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c8f00a000600050001295ead3589"], 0xf) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0bee051010010000000007003ac153d1f6940af94cfab4c038d9d69d6ac3b9b47c98905a8d02c4528f37d51fc78bc74efcc28e8e8fbaf11eae2072d1e4f5d2bff97472b61ab6d99508dd6b64621b55c3ab4516e2b74ba149d29f2a5ceb2b7c13cbea6eeb7d935eac42"], 0xe) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r2) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYRESHEX=0x0]) 4.298670036s ago: executing program 4 (id=2559): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x60, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0400"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c5a6fc26fb"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x60}}, 0x0) 4.170962755s ago: executing program 4 (id=2560): rt_sigreturn() futex(&(0x7f0000000700), 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/106, 0xd8ab0885d87f518) mbind(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 3.999658601s ago: executing program 3 (id=2561): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1278, 0x48, 0x20, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x11fc, 0x93, 0x0, 0x1, [@generic="9b9a648b97beb2df25b2deeb99feebdf3df9d4a2064eba722c4753f7f70a238acd75d78152de6b5d064e553d8777de659fd0266c5d9e30d30cd0158a8d8221d811d16e3fb373c751d92195ca9877994f917964627d4f64896b8ceea217870d26ad77f248ae68002be3ab0900b454f95e33e6cb009a8584afb8435f4eaad967e1ebb17973ef7cde0955dd25b0bd95644dec", @generic="c7d4d44b333a7e02b01fae89d76cbe982891fa3dc95849edca064a0fc55a8c08ef4c09acc0280798404546ad81bebd6a63e250f90082796335585a481703f66bd4789498224469b8e173842e65ddeb9187287ac25a690bae593e821064aac06333f4648326a8f347ad439a2da67319349624aed4bcb217bc1db7384152ffd362fc8cec15d21995a16c983cc11ae3fef011ba61e865624c38e06de8cc3591716cd5d5e7", @generic="d0b3479f09065a0b2174f0fad92c13a5243eca310f543f95ba255ff9a028604d177476ceeb1ccecc76f6af042976694fa136cc3205c42177b8bb7c867a99a401530a3afc7f27964f3ebf9f985201b3e73bf2318c046b115b0ab0f2cbe2d02bdd5d40dff0e86da1556e34c3efb12f645f33ee8e2ce62f5821d2b8b0c6d7647e461d0f263e04e1b3d70bc91c4872fa7fa67d21924c5e392b8eeadb7eeab9b1ee3690528f15ff7d66cb68a80e6731c7015fe63f65b393f92235a0ce709fc9a1dee5", @generic="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", @typed={0x4, 0x3e}]}, @generic="3ca1d5acd12075f4cfc3e2de18a0271c8bb16296071ad085d6bfc45241db70a01edf86bd520b3ffdd3acd59464a48f86b8f2597899282cc2b7d8c62cd23801a243fdcce39fac4e5f3667ee1ed09374734a6918215ec5a2a65c354fb6b192ead58d002a4b22f11f3a"]}, 0x1278}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x67035000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x2f, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x26}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r2], 0x3c}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 3.997895921s ago: executing program 4 (id=2562): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0585611, &(0x7f0000000400)={0x0, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 3.927865762s ago: executing program 3 (id=2563): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x13, 0x507, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "01040400"}]}, 0x54}}, 0x0) 3.831242037s ago: executing program 3 (id=2564): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) 2.902231438s ago: executing program 2 (id=2565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) 2.899189329s ago: executing program 4 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x0) 2.88853834s ago: executing program 0 (id=2567): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) readv(0xffffffffffffffff, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.808175573s ago: executing program 3 (id=2568): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, 'Y'}, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) unshare(0x22020600) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xca40, 0x0) 2.719623286s ago: executing program 4 (id=2569): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000400)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x6, "34a6caf5"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x2}, {0x0, 0x8, "533dbeccbc1f"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x10, r5, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x270, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x38, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x5, 0x6, {0x9, 0x21, 0x8001, 0x81, 0x1, {0x22, 0x624}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x83, 0x6, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7f, 0x0, 0x1}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.457800546s ago: executing program 1 (id=2570): syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "de4dadc6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 2.420112292s ago: executing program 3 (id=2571): ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2.401096174s ago: executing program 2 (id=2572): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_emit_vhci(0x0, 0x8a) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b144d48270cbdeccc"], 0xe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket(0x22, 0x0, 0x4) getsockname(r4, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x40000000) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) poll(&(0x7f00000003c0), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x0, 0xd1b0], [], [0x0, 0x8000000000000001, 0x0, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0xf, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=2573): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x79}], 0x5, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): nterface descriptor's value: 21 [ 403.453201][ T3594] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.466378][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.504760][ T3594] usb 2-1: config 0 descriptor?? [ 403.756663][ T27] audit: type=1326 audit(1719573959.781:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9882 comm="syz.4.1916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbad5575b29 code=0x0 [ 403.989448][ T3017] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 404.002645][ T3594] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 404.018443][ T3594] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 404.070483][ T3594] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 404.279485][ T3017] usb 4-1: Using ep0 maxpacket: 16 [ 404.379599][ T3594] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 404.439630][ T3017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 404.457436][ T3017] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 404.468618][ T3017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.484072][ T3017] usb 4-1: config 0 descriptor?? [ 404.629398][ T3594] usb 1-1: Using ep0 maxpacket: 16 [ 404.651403][ T3555] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 404.666073][ T9898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 404.732542][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 404.745982][ T9901] 9pnet_fd: Insufficient options for proto=fd [ 404.762625][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.785719][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.796460][ T3594] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 404.820214][ T3594] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.845561][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.867141][ T3594] usb 1-1: config 0 descriptor?? [ 405.045476][ T27] audit: type=1800 audit(1719573961.071:118): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1924" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C9 dev="sda1" ino=1996 res=0 errno=0 [ 405.110155][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.118955][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.141952][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.156651][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.196710][ T3017] hid-generic 0003:0158:0100.003B: unknown main item tag 0x1 [ 405.218726][ T3017] hid-generic 0003:0158:0100.003B: unexpected long global item [ 405.250553][ T3017] hid-generic: probe of 0003:0158:0100.003B failed with error -22 [ 405.441399][ T3593] usb 4-1: USB disconnect, device number 50 [ 406.573665][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 406.819149][ T27] audit: type=1800 audit(1719573962.841:119): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1935" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C9 dev="sda1" ino=1984 res=0 errno=0 [ 407.009325][ T3017] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 407.073101][ T3017] usb 2-1: device reset changed ep0 maxpacket size! [ 407.089629][ T3594] usbhid 1-1:0.0: can't add hid device: -71 [ 407.096809][ T3594] usbhid: probe of 1-1:0.0 failed with error -71 [ 407.106475][ T14] usb 2-1: USB disconnect, device number 46 [ 407.111756][ T3594] usb 1-1: USB disconnect, device number 54 [ 407.139450][ T936] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 407.339516][ T14] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 407.379546][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 407.492344][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 407.519740][ T936] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 407.532025][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.532064][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.532114][ T936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 407.532157][ T936] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 407.532192][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.534606][ T936] usb 3-1: config 0 descriptor?? [ 407.574229][ T3594] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 407.589478][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 407.639619][ T3593] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 407.729723][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.740870][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.751381][ T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 407.760953][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.781072][ T14] usb 2-1: config 0 descriptor?? [ 407.829475][ T3594] usb 1-1: Using ep0 maxpacket: 16 [ 407.969627][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 407.981168][ T3594] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 407.991054][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.000236][ T3593] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 408.002559][ T3594] usb 1-1: config 0 descriptor?? [ 408.016978][ T3593] usb 5-1: config 0 has no interface number 0 [ 408.021823][ T936] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.003C/input/input10 [ 408.026003][ T3593] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.044996][ T936] uclogic 0003:28BD:1903.003C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 408.056872][ T3593] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.069055][ T3593] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 408.078454][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.100884][ T3593] usb 5-1: config 0 descriptor?? [ 408.223152][ T936] usb 3-1: USB disconnect, device number 46 [ 408.267645][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1939'. [ 408.280572][ T14] apple 0003:05AC:022B.003D: unknown main item tag 0x0 [ 408.287711][ T14] apple 0003:05AC:022B.003D: unbalanced collection at end of report description [ 408.297475][ T14] apple 0003:05AC:022B.003D: parse failed [ 408.303380][ T14] apple: probe of 0003:05AC:022B.003D failed with error -22 [ 408.480104][ T14] usb 2-1: USB disconnect, device number 47 [ 408.582610][ T3593] logitech-djreceiver 0003:046D:C534.003E: unknown main item tag 0x0 [ 408.591045][ T3593] logitech-djreceiver 0003:046D:C534.003E: unknown main item tag 0x0 [ 408.603408][ T3593] logitech-djreceiver 0003:046D:C534.003E: unknown main item tag 0x0 [ 408.611919][ T3593] logitech-djreceiver 0003:046D:C534.003E: unknown main item tag 0x0 [ 408.621393][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.629958][ T3593] logitech-djreceiver 0003:046D:C534.003E: unknown main item tag 0x0 [ 408.630243][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.643018][ T3593] logitech-djreceiver 0003:046D:C534.003E: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input21 [ 408.655294][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.670244][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.703960][ T3594] hid-generic 0003:0158:0100.003F: unknown main item tag 0x1 [ 408.715418][ T3594] hid-generic 0003:0158:0100.003F: unexpected long global item [ 408.723802][ T3594] hid-generic: probe of 0003:0158:0100.003F failed with error -22 [ 408.788206][ T14] usb 5-1: USB disconnect, device number 38 [ 408.856622][ T27] audit: type=1800 audit(1719573964.881:120): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1948" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B dev="sda1" ino=1993 res=0 errno=0 [ 408.909041][ T3594] usb 1-1: USB disconnect, device number 55 [ 409.259341][ T936] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 409.359525][ T3017] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 409.539531][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 409.557544][ T9993] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 409.605209][ T3017] usb 2-1: Using ep0 maxpacket: 16 [ 409.656333][ T9999] 9pnet_fd: Insufficient options for proto=fd [ 409.661922][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 409.685662][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.705451][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.727873][ T936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.755816][ T936] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.765580][ T3017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.783452][ T3017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.808763][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.827552][ T3017] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.858931][ T936] usb 3-1: config 0 descriptor?? [ 409.870570][ T3017] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.885020][ T3017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.921059][ T3017] usb 2-1: config 0 descriptor?? [ 410.154257][T10005] loop3: detected capacity change from 0 to 2048 [ 410.199623][T10005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 410.234843][ T14] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 410.516293][T10011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 410.531411][T10011] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 410.543815][T10011] EXT4-fs (loop3): This should not happen!! Data will be lost [ 410.543815][T10011] [ 410.553590][T10011] EXT4-fs (loop3): Total free blocks count 0 [ 410.559658][T10011] EXT4-fs (loop3): Free/Dirty block details [ 410.565719][T10011] EXT4-fs (loop3): free_blocks=2415919104 [ 410.571570][T10011] EXT4-fs (loop3): dirty_blocks=16 [ 410.576812][T10011] EXT4-fs (loop3): Block reservation details [ 410.583159][T10011] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 410.619486][ T14] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 410.636609][ T14] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 410.659424][ T14] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=3d.6c [ 410.668709][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.692752][ T14] usb 1-1: config 0 descriptor?? [ 410.739672][ T14] bfusb: probe of 1-1:0.0 failed with error -5 [ 410.935212][ T3594] usb 1-1: USB disconnect, device number 56 [ 411.048389][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 411.519368][ T14] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 411.939450][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 412.069407][ T936] usbhid 3-1:0.0: can't add hid device: -71 [ 412.069971][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.077417][ T936] usbhid: probe of 3-1:0.0 failed with error -71 [ 412.110683][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.127845][ T14] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 412.137911][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.156907][ T14] usb 4-1: config 0 descriptor?? [ 412.179955][ T936] usb 3-1: USB disconnect, device number 47 [ 412.291670][ T3017] usbhid 2-1:0.0: can't add hid device: -71 [ 412.297890][ T3017] usbhid: probe of 2-1:0.0 failed with error -71 [ 412.332201][ T3017] usb 2-1: USB disconnect, device number 48 [ 412.804422][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 412.897878][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 412.907185][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 412.945671][ T14] usb 4-1: USB disconnect, device number 51 [ 413.182254][ T27] audit: type=1800 audit(1719573969.211:121): pid=10051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1973" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B7012F42AD3F1D59FD4DDE45FBAFF1C7E01041755 dev="sda1" ino=1993 res=0 errno=0 [ 413.959667][ T3593] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 414.032419][ T27] audit: type=1800 audit(1719573970.061:122): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1984" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B7012F42AD3F1D59FD4DDE45FBAFF1C7E01041755 dev="sda1" ino=1992 res=0 errno=0 [ 414.158422][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 414.199336][ T3593] usb 2-1: Using ep0 maxpacket: 16 [ 414.243491][ T3597] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 414.319696][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.353798][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.369321][ T3593] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.409360][ T3593] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.418469][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.473395][ T3593] usb 2-1: config 0 descriptor?? [ 414.519416][ T3597] usb 5-1: Using ep0 maxpacket: 16 [ 414.669541][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 414.689329][ T3597] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 414.707252][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.729335][ T3597] usb 5-1: config 0 descriptor?? [ 414.751627][ T3596] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 414.983307][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1982'. [ 415.019463][ T3596] usb 4-1: Using ep0 maxpacket: 16 [ 415.144157][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 7 [ 415.187197][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25183, setting to 1024 [ 415.376028][ T3596] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 415.395059][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.395675][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.427257][ T3596] usb 4-1: Product: syz [ 415.437662][ T3596] usb 4-1: Manufacturer: syz [ 415.444196][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.455148][ T3596] usb 4-1: SerialNumber: syz [ 415.462103][ T3596] usb 4-1: config 0 descriptor?? [ 415.478273][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.524742][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.574323][ T3597] hid-generic 0003:0158:0100.0040: unknown main item tag 0x1 [ 415.595661][ T3597] hid-generic 0003:0158:0100.0040: unexpected long global item [ 415.619088][ T3597] hid-generic: probe of 0003:0158:0100.0040 failed with error -22 [ 415.702789][ T3596] usb 4-1: USB disconnect, device number 52 [ 415.773569][ T14] usb 5-1: USB disconnect, device number 39 [ 416.037452][ T3555] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 416.050504][T10100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 416.136456][T10101] 9pnet_fd: Insufficient options for proto=fd [ 416.929444][ T3593] usbhid 2-1:0.0: can't add hid device: -71 [ 416.933200][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 416.935806][ T3593] usbhid: probe of 2-1:0.0 failed with error -71 [ 417.732129][ T3593] usb 2-1: USB disconnect, device number 49 [ 418.309322][ T936] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 418.425592][ T3593] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 418.509407][ T3596] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 418.525012][ T936] usb 4-1: device descriptor read/64, error -71 [ 418.674709][ T3593] usb 5-1: Using ep0 maxpacket: 16 [ 418.765428][ T3596] usb 2-1: Using ep0 maxpacket: 16 [ 418.779674][ T3017] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 418.799494][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.817652][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.819323][ T936] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 418.828184][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.858180][ T3593] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.867705][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.879167][ T3593] usb 5-1: config 0 descriptor?? [ 418.909486][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.934781][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.948993][ T3596] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.967906][ T3596] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.977467][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.002945][ T3596] usb 2-1: config 0 descriptor?? [ 419.049472][ T3017] usb 3-1: Using ep0 maxpacket: 16 [ 419.059557][ T936] usb 4-1: device descriptor read/64, error -71 [ 419.217615][ T936] usb usb4-port1: attempt power cycle [ 419.349900][ T3596] usbhid 2-1:0.0: can't add hid device: -71 [ 419.377950][ T3596] usbhid: probe of 2-1:0.0 failed with error -71 [ 419.486880][ T3596] usb 2-1: USB disconnect, device number 50 [ 420.063564][ T3017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.074679][ T3017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.086121][ T3017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 420.096025][ T3017] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 420.106300][ T3017] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.209734][ T3017] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 420.229278][ T3017] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 420.259662][ T3017] usb 3-1: Manufacturer: syz [ 420.285413][ T3017] usb 3-1: config 0 descriptor?? [ 420.359594][ T936] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 420.459687][ T936] usb 4-1: device descriptor read/8, error -71 [ 420.589520][ T3597] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 420.619337][ T3017] rc_core: IR keymap rc-hauppauge not found [ 420.625326][ T3017] Registered IR keymap rc-empty [ 420.631450][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.659390][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.701612][ T3017] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 420.716581][ T3017] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 420.733727][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.749370][ T936] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 420.771041][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.803484][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.833336][ T3597] usb 1-1: Using ep0 maxpacket: 8 [ 420.840037][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.859796][ T936] usb 4-1: device descriptor read/8, error -71 [ 420.882866][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.919433][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.949391][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 420.989543][ T3597] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 421.001193][ T936] usb usb4-port1: unable to enumerate USB device [ 421.007827][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 421.017875][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.029403][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.039514][ T3597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 421.061529][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 421.084917][ T3597] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 421.094260][ T3017] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 421.102018][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.119654][ T3593] usbhid 5-1:0.0: can't add hid device: -71 [ 421.120378][ T3597] usb 1-1: config 0 descriptor?? [ 421.130713][ T3593] usbhid: probe of 5-1:0.0 failed with error -71 [ 421.139075][ T3593] usb 5-1: USB disconnect, device number 40 [ 421.150975][ T3017] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 421.171052][ T3017] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 421.519503][ T3593] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 421.719473][ T3597] usbhid 1-1:0.0: can't add hid device: -71 [ 421.725618][ T3597] usbhid: probe of 1-1:0.0 failed with error -71 [ 421.732279][ T936] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 421.757479][ T3597] usb 1-1: USB disconnect, device number 57 [ 421.760496][ T3593] usb 5-1: Using ep0 maxpacket: 8 [ 421.900497][ T3593] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 421.924953][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.949394][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.959181][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 421.989325][ T936] usb 4-1: Using ep0 maxpacket: 16 [ 421.989331][ T3593] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 421.989359][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.030012][ T3593] usb 5-1: config 0 descriptor?? [ 422.119704][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.139619][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.174938][ T936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.203072][ T936] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.240694][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.279847][ T936] usb 4-1: config 0 descriptor?? [ 422.424799][ T3596] usb 3-1: USB disconnect, device number 48 [ 422.569556][ T3593] usbhid 5-1:0.0: can't add hid device: -71 [ 422.575615][ T3593] usbhid: probe of 5-1:0.0 failed with error -71 [ 422.624754][ T3593] usb 5-1: USB disconnect, device number 41 [ 422.660813][ T936] usbhid 4-1:0.0: can't add hid device: -71 [ 422.673788][ T936] usbhid: probe of 4-1:0.0 failed with error -71 [ 422.698999][ T936] usb 4-1: USB disconnect, device number 57 [ 422.716753][ T3555] Bluetooth: hci1: link tx timeout [ 422.727898][ T3555] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 423.109500][ T3597] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 423.399513][ T3597] usb 3-1: Using ep0 maxpacket: 8 [ 423.550198][ T3597] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 423.644733][ T3597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.828767][ T3597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.869591][ T3597] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 423.907141][ T3597] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 423.957222][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.025063][ T3597] usb 3-1: config 0 descriptor?? [ 424.473358][T10266] loop1: detected capacity change from 0 to 2048 [ 424.589439][ T3597] usbhid 3-1:0.0: can't add hid device: -71 [ 424.600519][ T3597] usbhid: probe of 3-1:0.0 failed with error -71 [ 424.648476][ T3597] usb 3-1: USB disconnect, device number 49 [ 424.693505][T10266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 424.937022][T10266] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 424.952908][T10266] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 424.965342][T10266] EXT4-fs (loop1): This should not happen!! Data will be lost [ 424.965342][T10266] [ 424.975093][T10266] EXT4-fs (loop1): Total free blocks count 0 [ 424.981172][T10266] EXT4-fs (loop1): Free/Dirty block details [ 424.987124][T10266] EXT4-fs (loop1): free_blocks=2415919104 [ 424.994213][T10266] EXT4-fs (loop1): dirty_blocks=16 [ 424.999628][T10266] EXT4-fs (loop1): Block reservation details [ 425.005654][T10266] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 425.080691][ T3559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.121266][ T3559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.130530][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.138883][ T3559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.142264][ T3850] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 425.219565][ T3559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 425.227006][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.819453][ T3596] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 426.139596][ T3596] usb 2-1: Using ep0 maxpacket: 16 [ 426.264029][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 7 [ 426.301113][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25183, setting to 1024 [ 426.322728][T10277] chnl_net:caif_netlink_parms(): no params data found [ 426.496103][ T3596] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.523745][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.539796][ T3596] usb 2-1: Product: syz [ 426.544155][ T3596] usb 2-1: Manufacturer: syz [ 426.548869][ T3596] usb 2-1: SerialNumber: syz [ 426.564271][ T3596] usb 2-1: config 0 descriptor?? [ 426.630569][T10277] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.668218][T10277] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.697165][T10277] device bridge_slave_0 entered promiscuous mode [ 426.723538][T10277] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.742829][T10277] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.764614][T10277] device bridge_slave_1 entered promiscuous mode [ 426.831158][ T3596] usb 2-1: USB disconnect, device number 51 [ 426.894504][T10277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.935783][T10277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.033114][T10277] team0: Port device team_slave_0 added [ 427.058285][T10277] team0: Port device team_slave_1 added [ 427.128569][T10277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.138344][T10277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.177965][T10277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.201480][T10277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.221467][T10277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.228262][T10319] loop3: detected capacity change from 0 to 2048 [ 427.263620][T10277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.319413][ T48] Bluetooth: hci0: command tx timeout [ 427.342035][T10277] device hsr_slave_0 entered promiscuous mode [ 427.350837][T10277] device hsr_slave_1 entered promiscuous mode [ 427.358811][T10319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 427.589977][T10319] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 427.605226][T10319] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 427.618385][T10319] EXT4-fs (loop3): This should not happen!! Data will be lost [ 427.618385][T10319] [ 427.628148][T10319] EXT4-fs (loop3): Total free blocks count 0 [ 427.634223][T10319] EXT4-fs (loop3): Free/Dirty block details [ 427.640237][T10319] EXT4-fs (loop3): free_blocks=2415919104 [ 427.646000][T10319] EXT4-fs (loop3): dirty_blocks=16 [ 427.651244][T10319] EXT4-fs (loop3): Block reservation details [ 427.657310][T10319] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 427.772135][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 427.826243][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 427.922603][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 428.002263][T10277] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.017712][ T27] audit: type=1800 audit(1719573984.041:123): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2066" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B7012F42AD3F1D59FD4DDE45FBAFF1C7E01041755C28BDE dev="sda1" ino=1984 res=0 errno=0 [ 428.215111][T10277] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.445426][T10277] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.614625][ T27] audit: type=1800 audit(1719573984.641:124): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2079" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B7012F42AD3F1D59FD4DDE45FBAFF1C7E010417 dev="sda1" ino=1989 res=0 errno=0 [ 428.616535][T10277] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.749536][ T3593] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 428.800694][T10369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2080'. [ 428.896087][T10277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.923303][T10277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.952036][T10277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.964010][T10277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 428.989632][ T3593] usb 4-1: Using ep0 maxpacket: 32 [ 429.109525][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.129760][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.152070][ T3593] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 429.189603][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.212213][T10277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.219164][ T3593] usb 4-1: config 0 descriptor?? [ 429.244509][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.272497][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.288982][T10277] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.314915][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.335671][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.346339][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.353540][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.384741][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.395340][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.399648][ T48] Bluetooth: hci0: command tx timeout [ 429.416482][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.426210][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.433417][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.447848][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.489860][ T27] audit: type=1800 audit(1719573985.521:125): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2089" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B7012F42AD3F1D59FD4DDE45FBAFF1C dev="sda1" ino=1989 res=0 errno=0 [ 429.492335][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.556422][T10390] device syzkaller0 entered promiscuous mode [ 429.569530][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.580012][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.614119][T10390] device syzkaller0 left promiscuous mode [ 429.669351][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.677575][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.688872][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.697891][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.710423][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.719067][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.728717][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.738138][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2091'. [ 429.753228][T10277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.952817][ T3593] usbhid 4-1:0.0: can't add hid device: -71 [ 429.979441][ T3593] usbhid: probe of 4-1:0.0 failed with error -71 [ 430.038201][ T3593] usb 4-1: USB disconnect, device number 58 [ 430.123512][ T27] audit: type=1326 audit(1719573986.111:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.1.2093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f875b375b29 code=0x0 [ 430.169643][ T3597] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 430.439483][ T3597] usb 5-1: Using ep0 maxpacket: 16 [ 430.559685][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.602429][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.647595][ T3597] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.714635][ T3597] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.790028][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.846711][ T3597] usb 5-1: config 0 descriptor?? [ 430.887473][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.900955][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.940032][T10277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.031726][ T27] audit: type=1800 audit(1719573987.061:127): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2100" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47FFD6303EF0C930ED3796433ACDA2E0B09A43B371D5B5DC69C92DCAE2B601802E1E0E4DD130BBA019C35B4B94EA3CFBE123D704422D357DD2AD4422698C80E2E59B7012F42AD3F1D59FD4DDE4 dev="sda1" ino=1985 res=0 errno=0 [ 431.042562][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.097493][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.158223][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.168650][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.188005][T10277] device veth0_vlan entered promiscuous mode [ 431.197559][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.206935][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.215432][T10432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2103'. [ 431.247477][T10277] device veth1_vlan entered promiscuous mode [ 431.264671][ T3597] usbhid 5-1:0.0: can't add hid device: -71 [ 431.277347][ T3597] usbhid: probe of 5-1:0.0 failed with error -71 [ 431.278336][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.293174][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.302939][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.308847][ T3597] usb 5-1: USB disconnect, device number 42 [ 431.312757][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.333525][T10277] device veth0_macvtap entered promiscuous mode [ 431.363243][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.388207][T10277] device veth1_macvtap entered promiscuous mode [ 431.431155][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.444687][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.457261][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.475490][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.496993][ T48] Bluetooth: hci0: command tx timeout [ 431.509563][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.520544][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.530758][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.542994][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.553195][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.564528][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.577320][T10277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.591079][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.602793][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.613765][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.625586][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.635682][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.660977][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.671250][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.682607][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.694180][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.712721][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.727163][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.738213][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.755551][T10277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.768198][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.778910][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.779510][ T152] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 431.802797][T10277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.822636][T10277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.835789][T10277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.848657][T10277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.906505][ T48] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 431.913513][T10446] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 431.989155][T10447] 9pnet_fd: Insufficient options for proto=fd [ 431.998167][ T3814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.026267][ T4138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.026471][ T3814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.040624][ T152] usb 2-1: Using ep0 maxpacket: 32 [ 432.049920][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 432.051324][ T4138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.071255][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.159518][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.178854][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.196209][ T152] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 432.206284][ T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.220763][ T152] usb 2-1: config 0 descriptor?? [ 432.785160][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2115'. [ 432.847310][T10467] loop4: detected capacity change from 0 to 2048 [ 432.899573][ T3017] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 432.947748][T10467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 432.959739][ T152] usbhid 2-1:0.0: can't add hid device: -71 [ 432.965793][ T152] usbhid: probe of 2-1:0.0 failed with error -71 [ 433.066604][ T152] usb 2-1: USB disconnect, device number 52 [ 433.311301][T10484] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 433.326417][ T3017] usb 3-1: Using ep0 maxpacket: 8 [ 433.342886][T10484] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 433.364307][T10484] EXT4-fs (loop4): This should not happen!! Data will be lost [ 433.364307][T10484] [ 433.378755][T10484] EXT4-fs (loop4): Total free blocks count 0 [ 433.411057][T10484] EXT4-fs (loop4): Free/Dirty block details [ 433.417342][T10484] EXT4-fs (loop4): free_blocks=2415919104 [ 433.460739][ T3017] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 433.489684][T10484] EXT4-fs (loop4): dirty_blocks=16 [ 433.496516][ T3017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.520274][ T3017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.533872][T10484] EXT4-fs (loop4): Block reservation details [ 433.540769][ T3017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 433.569950][ T48] Bluetooth: hci0: command tx timeout [ 433.571096][T10490] serio: Serial port pts0 [ 433.591025][T10484] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 433.597493][ T3017] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 433.611870][ T3017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.660044][ T3017] usb 3-1: config 0 descriptor?? [ 433.910604][T10498] program syz.1.2124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.920201][T10498] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 433.933172][T10498] ubi: mtd0 is already attached to ubi0 [ 434.229574][ T3017] usbhid 3-1:0.0: can't add hid device: -71 [ 434.241334][ T3017] usbhid: probe of 3-1:0.0 failed with error -71 [ 434.281753][ T3017] usb 3-1: USB disconnect, device number 50 [ 434.498551][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2128'. [ 434.664750][ T6087] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 434.828945][T10514] 9pnet_fd: Insufficient options for proto=fd [ 434.829266][ T27] audit: type=1800 audit(1719573990.851:128): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2132" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 434.949604][ T3593] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 435.027987][ T27] audit: type=1800 audit(1719573991.051:129): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2134" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 435.209444][ T3593] usb 1-1: Using ep0 maxpacket: 16 [ 435.329536][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 435.349809][ T3593] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 435.384246][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.408000][T10529] serio: Serial port pts0 [ 435.428664][ T3593] usb 1-1: config 0 descriptor?? [ 435.673933][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2130'. [ 435.957258][ T27] audit: type=1800 audit(1719573991.981:130): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2145" name="bus" dev="sda1" ino=1990 res=0 errno=0 [ 435.983963][T10551] 9pnet_fd: Insufficient options for proto=fd [ 436.085895][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.107671][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.128124][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.142747][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.229524][ T3017] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 436.284323][ T3593] hid-generic 0003:0158:0100.0041: unknown main item tag 0x1 [ 436.291890][ T3593] hid-generic 0003:0158:0100.0041: unexpected long global item [ 436.300218][ T3593] hid-generic: probe of 0003:0158:0100.0041 failed with error -22 [ 436.451079][ T3593] usb 1-1: USB disconnect, device number 58 [ 436.607670][T10565] program syz.4.2149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.617761][T10565] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 436.627256][T10565] ubi: mtd0 is already attached to ubi0 [ 436.700809][ T3017] usb 3-1: Using ep0 maxpacket: 8 [ 436.819427][ T3017] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 436.842766][ T3017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.875462][ T3017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.904589][ T3017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 436.945290][ T3017] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 436.980810][ T3017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.024108][ T3017] usb 3-1: config 0 descriptor?? [ 437.519443][ T27] audit: type=1800 audit(1719573993.541:131): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2157" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 437.637158][ T27] audit: type=1326 audit(1719573993.651:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10580 comm="syz.3.2155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5409775b29 code=0x0 [ 438.339388][ T3017] usbhid 3-1:0.0: can't add hid device: -71 [ 438.349361][ T3017] usbhid: probe of 3-1:0.0 failed with error -71 [ 438.361372][ T3017] usb 3-1: USB disconnect, device number 51 [ 439.304868][T10597] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 439.318157][T10604] serio: Serial port pts0 [ 439.460748][T10611] 9pnet_fd: Insufficient options for proto=fd [ 439.557666][ T27] audit: type=1800 audit(1719573995.581:133): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2168" name="bus" dev="sda1" ino=1990 res=0 errno=0 [ 439.999409][ T3595] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 440.046442][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.053065][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.174140][T10636] loop2: detected capacity change from 0 to 2048 [ 440.226335][T10636] loop2: p3 < > p4 < > [ 440.236319][T10636] loop2: partition table partially beyond EOD, truncated [ 440.249969][T10636] loop2: p3 start 4284289 is beyond EOD, truncated [ 440.279564][ T3595] usb 4-1: Using ep0 maxpacket: 8 [ 440.367646][T10639] loop1: detected capacity change from 0 to 256 [ 440.419476][ T3595] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 440.444147][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.476359][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.481538][T10639] FAT-fs (loop1): Directory bread(block 64) failed [ 440.528656][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 440.535410][T10639] FAT-fs (loop1): Directory bread(block 65) failed [ 440.579739][ T3595] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 440.584380][T10639] FAT-fs (loop1): Directory bread(block 66) failed [ 440.613112][T10639] FAT-fs (loop1): Directory bread(block 67) failed [ 440.619443][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.642546][ T3595] usb 4-1: config 0 descriptor?? [ 440.657210][T10639] FAT-fs (loop1): Directory bread(block 68) failed [ 440.664977][T10639] FAT-fs (loop1): Directory bread(block 69) failed [ 440.671917][T10639] FAT-fs (loop1): Directory bread(block 70) failed [ 440.678667][T10639] FAT-fs (loop1): Directory bread(block 71) failed [ 440.691341][T10639] FAT-fs (loop1): Directory bread(block 72) failed [ 440.697945][T10639] FAT-fs (loop1): Directory bread(block 73) failed [ 440.918165][T10658] program syz.0.2181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.929734][T10658] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 440.938906][T10658] ubi: mtd0 is already attached to ubi0 [ 441.112950][ T3595] microsoft 0003:045E:00F9.0042: item fetching failed at offset 5/7 [ 441.148428][ T3595] microsoft 0003:045E:00F9.0042: parse failed [ 441.175452][ T3595] microsoft: probe of 0003:045E:00F9.0042 failed with error -22 [ 441.362763][ T3597] usb 4-1: USB disconnect, device number 59 [ 441.503771][ T27] audit: type=1326 audit(1719573997.501:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.1.2185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f875b375b29 code=0x0 [ 444.499359][ T3597] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 444.760886][ T3597] usb 2-1: Using ep0 maxpacket: 16 [ 444.779586][ T3017] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 444.875183][ T27] audit: type=1326 audit(1719574000.901:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10709 comm="syz.2.2198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d2c775b29 code=0x0 [ 444.909855][ T3597] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 444.978176][ T3597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.049751][ T3017] usb 4-1: Using ep0 maxpacket: 16 [ 445.180090][ T3017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 445.208990][ T3597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 445.301938][ T3017] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 445.609401][ T3017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.620965][ T3017] usb 4-1: config 0 descriptor?? [ 445.669615][ T3597] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 445.678727][ T3597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.709305][ T3597] usb 2-1: Product: syz [ 445.713547][ T3597] usb 2-1: Manufacturer: syz [ 445.718179][ T3597] usb 2-1: SerialNumber: syz [ 445.866147][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 446.059579][ T3597] usb 2-1: 0:2 : does not exist [ 446.087032][ T3597] usb 2-1: USB disconnect, device number 53 [ 446.269528][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.298073][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.337140][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.348881][ T4050] udevd[4050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.376566][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.438783][ T3017] hid-generic 0003:0158:0100.0043: unknown main item tag 0x1 [ 446.491890][ T3017] hid-generic 0003:0158:0100.0043: unexpected long global item [ 446.518527][ T3017] hid-generic: probe of 0003:0158:0100.0043 failed with error -22 [ 446.637795][ T3017] usb 4-1: USB disconnect, device number 60 [ 446.929365][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 447.323669][ T27] audit: type=1326 audit(1719574003.351:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.1.2210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f875b375b29 code=0x0 [ 448.194867][ T27] audit: type=1800 audit(1719574004.221:137): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2212" name="bus" dev="sda1" ino=1985 res=0 errno=0 [ 448.644613][T10767] program syz.3.2211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.654627][T10767] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 448.669434][T10767] ubi: mtd0 is already attached to ubi0 [ 449.372674][T10774] loop2: detected capacity change from 0 to 2048 [ 450.169084][T10774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 450.572113][T10786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 450.590786][T10786] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 450.603303][T10786] EXT4-fs (loop2): This should not happen!! Data will be lost [ 450.603303][T10786] [ 450.613078][T10786] EXT4-fs (loop2): Total free blocks count 0 [ 450.619350][T10786] EXT4-fs (loop2): Free/Dirty block details [ 450.625525][T10786] EXT4-fs (loop2): free_blocks=2415919104 [ 450.631601][T10786] EXT4-fs (loop2): dirty_blocks=16 [ 450.636816][T10786] EXT4-fs (loop2): Block reservation details [ 450.643039][T10786] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 451.110147][ T3852] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 452.382927][ T27] audit: type=1326 audit(1719574008.411:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10798 comm="syz.2.2223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d2c775b29 code=0x0 [ 453.671166][ T27] audit: type=1800 audit(1719574009.701:139): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2224" name="bus" dev="sda1" ino=1984 res=0 errno=0 [ 454.119570][T10817] device geneve1 entered promiscuous mode [ 454.136223][T10817] device syzkaller0 entered promiscuous mode [ 454.203945][T10817] device syzkaller0 left promiscuous mode [ 454.367847][T10815] device geneve1 left promiscuous mode [ 454.553623][T10823] loop2: detected capacity change from 0 to 2048 [ 454.642397][T10823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 455.029312][T10834] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 455.044631][T10834] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 455.057939][T10834] EXT4-fs (loop2): This should not happen!! Data will be lost [ 455.057939][T10834] [ 455.068030][T10834] EXT4-fs (loop2): Total free blocks count 0 [ 455.074136][T10834] EXT4-fs (loop2): Free/Dirty block details [ 455.080445][T10834] EXT4-fs (loop2): free_blocks=2415919104 [ 455.086253][T10834] EXT4-fs (loop2): dirty_blocks=16 [ 455.091476][T10834] EXT4-fs (loop2): Block reservation details [ 455.097669][T10834] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 455.659538][ T6092] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 455.814831][T10838] device bond3 entered promiscuous mode [ 455.908243][T10840] device bond_slave_0 entered promiscuous mode [ 455.980656][T10840] bond3: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.984303][T10868] program syz.0.2238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.994044][T10868] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 458.003688][T10868] ubi: mtd0 is already attached to ubi0 [ 459.466313][T10883] loop4: detected capacity change from 0 to 2048 [ 459.575440][T10883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 459.969472][ T22] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 459.981933][T10894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 460.049076][T10894] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 460.112762][T10894] EXT4-fs (loop4): This should not happen!! Data will be lost [ 460.112762][T10894] [ 460.179507][T10894] EXT4-fs (loop4): Total free blocks count 0 [ 460.185942][T10894] EXT4-fs (loop4): Free/Dirty block details [ 460.200048][T10894] EXT4-fs (loop4): free_blocks=2415919104 [ 460.229311][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 460.236963][T10894] EXT4-fs (loop4): dirty_blocks=16 [ 460.277061][T10894] EXT4-fs (loop4): Block reservation details [ 460.284537][ T3594] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 460.309461][T10894] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 460.349411][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.380823][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.409281][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.449279][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 460.478977][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.518900][ T22] usb 2-1: config 0 descriptor?? [ 460.539320][ T3594] usb 1-1: Using ep0 maxpacket: 8 [ 460.669512][ T3594] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 460.693552][ T3594] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 460.713270][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.741273][ T3594] usb 1-1: config 0 descriptor?? [ 460.791922][ T3594] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 461.011433][ T22] microsoft 0003:045E:07DA.0044: ignoring exceeding usage max [ 461.040916][ T22] microsoft 0003:045E:07DA.0044: global environment stack underflow [ 461.049058][ T22] microsoft 0003:045E:07DA.0044: item 0 4 1 11 parsing failed [ 461.087865][ T22] microsoft 0003:045E:07DA.0044: parse failed [ 461.096104][ T22] microsoft: probe of 0003:045E:07DA.0044 failed with error -22 [ 461.342495][ T3814] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 461.485583][T10902] device geneve1 entered promiscuous mode [ 461.504107][T10902] device syzkaller0 entered promiscuous mode [ 461.523869][T10902] device syzkaller0 left promiscuous mode [ 461.633736][T10901] device geneve1 left promiscuous mode [ 461.874261][ T3597] usb 2-1: USB disconnect, device number 54 [ 462.269541][ T3555] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 462.283095][T10914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.405567][T10915] 9pnet_fd: Insufficient options for proto=fd [ 463.040719][ T3604] usb 1-1: USB disconnect, device number 59 [ 463.439408][ T3596] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 463.689364][ T3596] usb 4-1: Using ep0 maxpacket: 16 [ 463.813887][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.848083][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.879008][ T3596] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.914140][ T3596] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 463.944474][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.001037][ T3596] usb 4-1: config 0 descriptor?? [ 464.359914][ T3596] usbhid 4-1:0.0: can't add hid device: -71 [ 464.366396][ T3596] usbhid: probe of 4-1:0.0 failed with error -71 [ 464.396724][ T3596] usb 4-1: USB disconnect, device number 61 [ 464.492281][ T27] audit: type=1800 audit(1719574020.521:140): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2266" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 464.720501][ T3555] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 464.723160][T10947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.893177][T10953] 9pnet_fd: Insufficient options for proto=fd [ 465.019417][ T3593] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 465.269340][ T3593] usb 2-1: Using ep0 maxpacket: 8 [ 465.389726][ T3593] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 465.419411][ T3593] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 465.449487][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.497123][ T3593] usb 2-1: config 0 descriptor?? [ 465.552510][ T3593] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 466.263358][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 466.809350][ T3596] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 467.069375][ T3596] usb 1-1: Using ep0 maxpacket: 16 [ 467.075674][ T27] audit: type=1800 audit(1719574023.101:141): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2277" name="bus" dev="sda1" ino=1991 res=0 errno=0 [ 467.079154][T10979] 9pnet_fd: Insufficient options for proto=fd [ 467.189527][ T3596] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 467.198324][ T3596] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.219284][ T3596] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.228304][ T3596] usb 1-1: config 1 has no interface number 1 [ 467.269331][ T3596] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 467.306402][ T3596] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.346406][ T27] audit: type=1326 audit(1719574023.371:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.3.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5409775b29 code=0x0 [ 467.539550][ T3596] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.554192][ T3596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.571531][ T3596] usb 1-1: Product: syz [ 467.580426][ T3596] usb 1-1: Manufacturer: syz [ 467.590534][ T3596] usb 1-1: SerialNumber: syz [ 467.797121][ T3604] usb 2-1: USB disconnect, device number 55 [ 467.967435][ T3596] usb 1-1: USB disconnect, device number 60 [ 468.086921][T10994] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 468.142981][T10994] device bond2 entered promiscuous mode [ 468.204241][T10997] device bond_slave_0 entered promiscuous mode [ 468.234593][T10997] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.277473][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.459362][ T3593] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 468.709478][ T3593] usb 4-1: Using ep0 maxpacket: 8 [ 468.719646][ T27] audit: type=1800 audit(1719574024.751:143): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2288" name="bus" dev="sda1" ino=1981 res=0 errno=0 [ 468.729940][T11011] 9pnet_fd: Insufficient options for proto=fd [ 468.748421][ T3597] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 468.839518][ T3593] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 468.868429][ T3593] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 468.899446][ T3593] usb 4-1: config 135 has no interface number 0 [ 468.905883][ T3593] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.019320][ T3597] usb 2-1: Using ep0 maxpacket: 16 [ 469.099622][ T3593] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 469.112944][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.128739][ T3593] usb 4-1: Product: syz [ 469.133314][ T3593] usb 4-1: Manufacturer: syz [ 469.137972][ T3593] usb 4-1: SerialNumber: syz [ 469.145790][T11025] program syz.4.2287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.155481][T11025] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 469.164756][T11025] ubi: mtd0 is already attached to ubi0 [ 469.435327][ T3593] usb 4-1: USB disconnect, device number 62 [ 469.549466][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.569900][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.579994][ T3597] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.593796][ T3594] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 469.601963][ T3597] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.611374][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.622110][ T3597] usb 2-1: config 0 descriptor?? [ 469.849605][ T3596] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 469.869413][ T3594] usb 3-1: Using ep0 maxpacket: 8 [ 469.979473][ T3593] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 469.999669][ T3594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.021397][ T3594] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 470.035548][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.075496][ T3594] usb 3-1: config 0 descriptor?? [ 470.089478][ T3596] usb 1-1: Using ep0 maxpacket: 16 [ 470.111209][ T3597] microsoft 0003:045E:07DA.0045: ignoring exceeding usage max [ 470.125933][ T3594] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 470.139787][ T3597] microsoft 0003:045E:07DA.0045: global environment stack underflow [ 470.162044][ T3597] microsoft 0003:045E:07DA.0045: item 0 4 1 11 parsing failed [ 470.175809][ T3597] microsoft 0003:045E:07DA.0045: parse failed [ 470.183233][ T3597] microsoft: probe of 0003:045E:07DA.0045 failed with error -22 [ 470.209517][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.220772][ T3593] usb 5-1: Using ep0 maxpacket: 16 [ 470.239539][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.266297][ T3596] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.287224][ T3596] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 470.297097][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.334524][ T3596] usb 1-1: config 0 descriptor?? [ 470.349716][ T3593] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 470.368776][ T3593] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.391483][ T3593] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 470.422928][ T3593] usb 5-1: config 1 has no interface number 1 [ 470.430566][ T3593] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.430648][T11036] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 470.446879][ T3593] usb 5-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 470.506668][T11038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 470.573204][T11039] 9pnet_fd: Insufficient options for proto=fd [ 470.629644][ T3593] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.639512][ T3593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.647751][ T3593] usb 5-1: Product: syz [ 470.653176][ T3593] usb 5-1: Manufacturer: syz [ 470.657917][ T3593] usb 5-1: SerialNumber: syz [ 470.692663][ T3596] usbhid 1-1:0.0: can't add hid device: -71 [ 470.700370][ T3596] usbhid: probe of 1-1:0.0 failed with error -71 [ 470.721004][ T3596] usb 1-1: USB disconnect, device number 61 [ 471.018013][ T3593] usb 5-1: USB disconnect, device number 43 [ 471.046253][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.146912][ T27] audit: type=1800 audit(1719574027.171:144): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2300" name="bus" dev="sda1" ino=1994 res=0 errno=0 [ 471.152616][T11046] 9pnet_fd: Insufficient options for proto=fd [ 471.409879][ T3596] usb 2-1: USB disconnect, device number 56 [ 471.867909][T11062] device veth1_to_bond entered promiscuous mode [ 471.875278][T11062] device batadv_slave_0 entered promiscuous mode [ 471.892979][ T3594] usb 3-1: USB disconnect, device number 52 [ 471.907201][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 471.964155][ T3596] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 472.017052][ T3555] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 472.026676][T11066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 472.111788][T11069] 9pnet_fd: Insufficient options for proto=fd [ 472.209438][ T3596] usb 2-1: Using ep0 maxpacket: 8 [ 472.310152][T11071] loop0: detected capacity change from 0 to 2048 [ 472.329400][ T3596] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 472.337976][ T3596] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 472.357224][ T3596] usb 2-1: config 135 has no interface number 0 [ 472.364076][ T3596] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.435354][ T27] audit: type=1800 audit(1719574028.461:145): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2311" name="bus" dev="sda1" ino=1989 res=0 errno=0 [ 472.467348][T11071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 472.495100][T11076] 9pnet_fd: Insufficient options for proto=fd [ 472.529486][ T3596] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 472.538598][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.589486][ T3596] usb 2-1: Product: syz [ 472.594058][ T3596] usb 2-1: Manufacturer: syz [ 472.598892][ T3596] usb 2-1: SerialNumber: syz [ 472.892371][ T3604] usb 2-1: USB disconnect, device number 57 [ 472.939440][ T3594] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 473.060652][ T27] audit: type=1326 audit(1719574029.091:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.2.2318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d2c775b29 code=0x0 [ 473.094558][T11097] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 473.110481][T11097] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 473.122906][T11097] EXT4-fs (loop0): This should not happen!! Data will be lost [ 473.122906][T11097] [ 473.132698][T11097] EXT4-fs (loop0): Total free blocks count 0 [ 473.138706][T11097] EXT4-fs (loop0): Free/Dirty block details [ 473.144768][T11097] EXT4-fs (loop0): free_blocks=2415919104 [ 473.150705][T11097] EXT4-fs (loop0): dirty_blocks=16 [ 473.155967][T11097] EXT4-fs (loop0): Block reservation details [ 473.162195][T11097] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 473.319921][ T3596] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 473.559273][ T3594] usb 5-1: Using ep0 maxpacket: 16 [ 473.569662][ T3596] usb 4-1: Using ep0 maxpacket: 8 [ 473.623219][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 473.679805][ T3594] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.689851][ T3596] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 473.690780][ T3594] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.717824][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.749367][ T3594] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 473.754119][ T3596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.758367][ T3594] usb 5-1: config 1 has no interface number 1 [ 473.758409][ T3594] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.875973][ T3596] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 473.889773][ T3594] usb 5-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 473.911723][ T3596] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 473.926758][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.970106][ T3596] usb 4-1: config 0 descriptor?? [ 474.027107][ T3596] usbhid 4-1:0.0: can't add hid device: -22 [ 474.042224][ T3596] usbhid: probe of 4-1:0.0 failed with error -22 [ 474.139562][ T3594] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.167000][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.194366][ T3594] usb 5-1: Product: syz [ 474.207639][ T3594] usb 5-1: Manufacturer: syz [ 474.214504][ T3594] usb 5-1: SerialNumber: syz [ 474.274945][ T27] audit: type=1800 audit(1719574030.301:147): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2326" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 474.278181][T11118] 9pnet_fd: Insufficient options for proto=fd [ 474.571543][ T3594] usb 5-1: USB disconnect, device number 44 [ 474.857493][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.112190][T11135] loop4: detected capacity change from 0 to 2048 [ 475.179636][T11135] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 475.547497][T11143] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 475.633610][T11143] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 475.703110][T11143] EXT4-fs (loop4): This should not happen!! Data will be lost [ 475.703110][T11143] [ 475.769343][T11143] EXT4-fs (loop4): Total free blocks count 0 [ 475.789302][T11143] EXT4-fs (loop4): Free/Dirty block details [ 475.821574][T11143] EXT4-fs (loop4): free_blocks=2415919104 [ 475.827382][T11143] EXT4-fs (loop4): dirty_blocks=16 [ 475.843205][ T27] audit: type=1326 audit(1719574031.871:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.1.2334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f875b375b29 code=0x0 [ 475.899467][T11143] EXT4-fs (loop4): Block reservation details [ 475.935810][T11143] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 476.001471][ T22] usb 4-1: USB disconnect, device number 63 [ 476.667563][T11159] program syz.0.2337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.677596][T11159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 476.687118][T11159] ubi: mtd0 is already attached to ubi0 [ 477.099340][ T3594] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 477.399619][ T3594] usb 3-1: Using ep0 maxpacket: 16 [ 477.428046][ T3555] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 477.441454][T11167] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 477.536008][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.563352][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.583529][T11172] 9pnet_fd: Insufficient options for proto=fd [ 477.600527][ T3594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 477.628219][ T3594] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 477.647646][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.668723][ T3594] usb 3-1: config 0 descriptor?? [ 478.012041][ T3594] usbhid 3-1:0.0: can't add hid device: -71 [ 478.029777][ T3594] usbhid: probe of 3-1:0.0 failed with error -71 [ 478.037073][ T3644] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 478.096214][ T3594] usb 3-1: USB disconnect, device number 53 [ 478.625988][ T27] audit: type=1800 audit(1719574034.651:149): pid=11198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2352" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29FF4F165FD170CE47 dev="sda1" ino=1991 res=0 errno=0 [ 479.649461][ T22] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 479.712792][T11223] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 479.809545][T11226] 9pnet_fd: Insufficient options for proto=fd [ 479.831394][T11225] loop2: detected capacity change from 0 to 2048 [ 479.905399][T11225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 479.929372][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 480.049789][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 480.080640][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.133315][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.176724][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 480.262544][ T22] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 480.289414][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.321920][ T22] usb 5-1: config 0 descriptor?? [ 480.380619][ T22] usbhid 5-1:0.0: can't add hid device: -22 [ 480.386705][ T22] usbhid: probe of 5-1:0.0 failed with error -22 [ 480.539337][ T152] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 480.629296][ T3596] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 480.756851][T11235] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 480.799290][ T152] usb 4-1: Using ep0 maxpacket: 16 [ 480.831948][T11235] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 480.882915][ T3596] usb 1-1: Using ep0 maxpacket: 16 [ 480.939615][ T152] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 480.948371][ T152] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.966940][T11235] EXT4-fs (loop2): This should not happen!! Data will be lost [ 480.966940][T11235] [ 480.997460][ T152] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 481.009058][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.035423][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.047174][T11235] EXT4-fs (loop2): Total free blocks count 0 [ 481.052854][ T152] usb 4-1: config 1 has no interface number 1 [ 481.060845][T11235] EXT4-fs (loop2): Free/Dirty block details [ 481.063776][ T3596] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.087710][T11235] EXT4-fs (loop2): free_blocks=2415919104 [ 481.089283][ T152] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 481.100335][T11235] EXT4-fs (loop2): dirty_blocks=16 [ 481.106944][ T3596] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.121309][ T152] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.134109][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.151742][ T3596] usb 1-1: config 0 descriptor?? [ 481.167724][T11235] EXT4-fs (loop2): Block reservation details [ 481.184314][T11235] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 481.290150][ T152] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.309296][ T152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.317391][ T152] usb 4-1: Product: syz [ 481.329257][ T152] usb 4-1: Manufacturer: syz [ 481.333919][ T152] usb 4-1: SerialNumber: syz [ 481.496480][ T4137] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 481.509056][ T3596] usbhid 1-1:0.0: can't add hid device: -71 [ 481.515118][ T3596] usbhid: probe of 1-1:0.0 failed with error -71 [ 481.529936][ T3596] usb 1-1: USB disconnect, device number 62 [ 481.659738][ T152] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 481.667643][ T152] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 481.791124][ T152] usb 4-1: USB disconnect, device number 64 [ 481.828095][T10198] udevd[10198]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.346697][ T3017] usb 5-1: USB disconnect, device number 45 [ 482.899343][ T3593] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 483.089404][ T3593] usb 5-1: device descriptor read/64, error -71 [ 483.118827][ T27] audit: type=1800 audit(1719574039.141:150): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2375" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C30978A29 dev="sda1" ino=1989 res=0 errno=0 [ 483.369472][ T3593] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 483.509283][ T3596] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 483.549672][ T152] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 483.559830][ T3593] usb 5-1: device descriptor read/64, error -71 [ 483.680353][ T3593] usb usb5-port1: attempt power cycle [ 483.749452][ T3596] usb 4-1: Using ep0 maxpacket: 16 [ 483.792654][ T152] usb 1-1: Using ep0 maxpacket: 8 [ 483.869536][ T3596] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 483.889368][ T3596] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.909593][ T3596] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 483.918600][ T3596] usb 4-1: config 1 has no interface number 1 [ 483.925174][ T152] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 483.936671][ T152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.947874][ T3596] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 483.961016][ T152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.970881][ T152] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 483.984504][ T3596] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.006410][ T152] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 484.029145][ T152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.067001][ T152] usb 1-1: config 0 descriptor?? [ 484.089440][ T3593] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 484.121943][ T152] usbhid 1-1:0.0: can't add hid device: -22 [ 484.128014][ T152] usbhid: probe of 1-1:0.0 failed with error -22 [ 484.166552][ T3596] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.179477][ T3593] usb 5-1: device descriptor read/8, error -71 [ 484.195207][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.203845][ T3596] usb 4-1: Product: syz [ 484.208058][ T3596] usb 4-1: Manufacturer: syz [ 484.212978][ T3596] usb 4-1: SerialNumber: syz [ 484.369348][ T3604] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 484.449350][ T3593] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 484.539593][ T3593] usb 5-1: device descriptor read/8, error -71 [ 484.549638][ T3596] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 484.557513][ T3596] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 484.609367][ T3604] usb 2-1: Using ep0 maxpacket: 16 [ 484.645210][ T3596] usb 4-1: USB disconnect, device number 65 [ 484.660626][ T3593] usb usb5-port1: unable to enumerate USB device [ 484.729661][ T3604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 484.741162][ T3604] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 484.750941][ T3604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.765868][ T3604] usb 2-1: config 0 descriptor?? [ 484.870061][ T3738] udevd[3738]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.019466][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 485.309443][ T22] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 485.373522][T11291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.383319][T11291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.392680][T11291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.402132][T11291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.433064][ T3604] hid-generic 0003:0158:0100.0046: unknown main item tag 0x1 [ 485.441380][ T3604] hid-generic 0003:0158:0100.0046: unexpected long global item [ 485.450131][ T3604] hid-generic: probe of 0003:0158:0100.0046 failed with error -22 [ 485.589530][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 485.635792][ T3604] usb 2-1: USB disconnect, device number 58 [ 485.696040][ T27] audit: type=1800 audit(1719574041.721:151): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2389" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8ED35EF78C dev="sda1" ino=1995 res=0 errno=0 [ 485.734709][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.759028][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.780741][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.796905][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 485.826928][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.950796][ T22] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.965775][ T22] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.977654][ T22] usb 4-1: Manufacturer: syz [ 485.991915][ T22] usb 4-1: config 0 descriptor?? [ 486.332986][ T3604] usb 1-1: USB disconnect, device number 63 [ 486.429370][ T22] rc_core: IR keymap rc-hauppauge not found [ 486.436887][ T22] Registered IR keymap rc-empty [ 486.449266][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.503961][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.539969][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 486.562817][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 486.587440][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.615134][ T27] audit: type=1800 audit(1719574042.641:152): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2401" name=2321200A59E180C23B82F9E97B23B9125727ADDC71A3AA7A057C706EE7818FCDC669DB8C7DA52C10684E8E dev="sda1" ino=1994 res=0 errno=0 [ 486.652826][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.660112][ T3017] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 486.700213][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.729455][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.770216][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.809707][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.839421][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.869345][ T3604] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 486.869529][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.915302][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.939545][ T3017] usb 2-1: Using ep0 maxpacket: 16 [ 486.949352][ T22] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 486.985593][ T22] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 486.996567][ T22] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 487.061741][ T3604] usb 1-1: device descriptor read/64, error -71 [ 487.069722][ T3017] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 487.083049][ T3017] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.106120][ T3017] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 487.129677][ T3017] usb 2-1: config 1 has no interface number 1 [ 487.142465][ T3017] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.169158][ T3017] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.329471][ T3604] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 487.379572][ T3017] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.411066][ T3017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.439316][ T3017] usb 2-1: Product: syz [ 487.453048][ T3017] usb 2-1: Manufacturer: syz [ 487.467051][ T3017] usb 2-1: SerialNumber: syz [ 487.521785][ T3604] usb 1-1: device descriptor read/64, error -71 [ 487.641620][ T3604] usb usb1-port1: attempt power cycle [ 487.769861][ T22] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 487.822309][ T3017] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 487.848435][ T3017] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 487.950910][ T3017] usb 2-1: USB disconnect, device number 59 [ 488.037803][ T3596] usb 4-1: USB disconnect, device number 66 [ 488.049426][ T3604] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 488.050248][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 488.149638][ T3604] usb 1-1: device descriptor read/8, error -71 [ 488.209703][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 488.221399][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.237544][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.248821][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 488.263703][ T22] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 488.273984][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.296057][ T22] usb 5-1: config 0 descriptor?? [ 488.419441][ T3604] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 488.509594][ T3604] usb 1-1: device descriptor read/8, error -71 [ 488.639743][ T3604] usb usb1-port1: unable to enumerate USB device [ 488.727515][ T3555] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 488.840172][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 488.855356][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 488.869282][ T22] usb 5-1: USB disconnect, device number 50 [ 489.919300][ T3594] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 489.991594][ T27] audit: type=1326 audit(1719574046.021:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.2427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f875b375b29 code=0x0 [ 490.219759][ T3594] usb 3-1: Using ep0 maxpacket: 16 [ 490.349556][ T3594] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 490.358333][ T3594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.369130][ T3594] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 490.380522][ T3594] usb 3-1: config 1 has no interface number 1 [ 490.386690][ T3594] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 490.399692][ T3594] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.439469][ T22] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 490.589594][ T3594] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.598832][ T3594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.613966][ T3594] usb 3-1: Product: syz [ 490.618209][ T3594] usb 3-1: Manufacturer: syz [ 490.624630][ T3594] usb 3-1: SerialNumber: syz [ 490.719421][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 490.769358][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 490.870316][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 490.887478][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.900943][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.911154][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 490.925589][ T22] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 490.935094][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.945599][ T22] usb 4-1: config 0 descriptor?? [ 490.959645][ T3594] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 490.967707][ T3594] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 490.989400][ T14] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 491.056313][ T3594] usb 3-1: USB disconnect, device number 54 [ 491.179590][ T14] usb 2-1: device descriptor read/64, error -71 [ 491.186192][ T3555] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 491.311356][T10198] udevd[10198]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.449503][ T14] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 491.499879][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 491.520329][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 491.552368][ T22] usb 4-1: USB disconnect, device number 67 [ 491.649439][ T14] usb 2-1: device descriptor read/64, error -71 [ 491.770740][ T14] usb usb2-port1: attempt power cycle [ 492.035858][T11461] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 492.133761][T11465] 9pnet_fd: Insufficient options for proto=fd [ 492.179444][ T14] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 492.279727][ T14] usb 2-1: device descriptor read/8, error -71 [ 492.549310][ T14] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 492.650768][ T14] usb 2-1: device descriptor read/8, error -71 [ 492.769463][ T14] usb usb2-port1: unable to enumerate USB device [ 492.779577][ T22] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 493.054520][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 493.189838][ T22] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 493.199849][ T22] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 493.210864][ T22] usb 4-1: config 135 has no interface number 0 [ 493.217280][ T22] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.239481][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 493.280968][ T48] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 493.429561][ T22] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 493.461547][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.480869][ T22] usb 4-1: Product: syz [ 493.504943][ T22] usb 4-1: Manufacturer: syz [ 493.509892][ T22] usb 4-1: SerialNumber: syz [ 493.558586][ T3555] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 493.568188][T11508] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 493.661271][T11509] 9pnet_fd: Insufficient options for proto=fd [ 493.784365][ T22] usb 4-1: USB disconnect, device number 68 [ 495.263234][ T3555] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 495.319447][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 495.333266][ T3604] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 495.529347][ T3604] usb 3-1: device descriptor read/64, error -71 [ 495.569568][ T3594] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 495.799294][ T3604] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 495.829313][ T3594] usb 4-1: Using ep0 maxpacket: 8 [ 495.959520][ T3594] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 495.974172][ T3594] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 495.985697][ T3594] usb 4-1: config 135 has no interface number 0 [ 495.994186][ T3594] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.999517][ T3604] usb 3-1: device descriptor read/64, error -71 [ 496.139831][ T3604] usb usb3-port1: attempt power cycle [ 496.198532][T11562] bond0: (slave bond_slave_0): Releasing backup interface [ 496.199847][ T3594] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 496.221097][ T3594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.229488][ T3594] usb 4-1: Product: syz [ 496.233811][ T3594] usb 4-1: Manufacturer: syz [ 496.238445][ T3594] usb 4-1: SerialNumber: syz [ 496.493445][T11569] loop4: detected capacity change from 0 to 2048 [ 496.499621][ T3596] usb 4-1: USB disconnect, device number 69 [ 496.527525][T11569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 496.559508][ T3604] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 496.649658][ T3604] usb 3-1: device descriptor read/8, error -71 [ 496.789490][ T3594] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 496.837111][T11574] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 496.852850][T11574] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 496.865329][T11574] EXT4-fs (loop4): This should not happen!! Data will be lost [ 496.865329][T11574] [ 496.875210][T11574] EXT4-fs (loop4): Total free blocks count 0 [ 496.881491][T11574] EXT4-fs (loop4): Free/Dirty block details [ 496.887555][T11574] EXT4-fs (loop4): free_blocks=2415919104 [ 496.893513][T11574] EXT4-fs (loop4): dirty_blocks=16 [ 496.898744][T11574] EXT4-fs (loop4): Block reservation details [ 496.904906][T11574] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 497.149384][ T3594] usb 1-1: Using ep0 maxpacket: 16 [ 497.290299][ T3594] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 497.342950][ T3594] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.373792][ T3594] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 497.419420][ T3594] usb 1-1: config 1 has no interface number 1 [ 497.442938][ T3594] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 497.477313][ T3594] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.503015][ T48] Bluetooth: hci0: command tx timeout [ 497.517386][ T3604] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 497.531096][ T4139] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 497.609568][ T3604] usb 3-1: device descriptor read/8, error -71 [ 497.720333][ T3594] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.739457][ T3594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.739968][ T3604] usb usb3-port1: unable to enumerate USB device [ 497.747614][ T3594] usb 1-1: Product: syz [ 497.747638][ T3594] usb 1-1: Manufacturer: syz [ 497.810285][ T3594] usb 1-1: SerialNumber: syz [ 497.964678][ T48] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 498.149638][ T3594] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 498.178596][ T3594] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 498.288727][ T3594] usb 1-1: USB disconnect, device number 68 [ 498.377197][ T27] audit: type=1800 audit(1719574054.401:154): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2493" name="bus" dev="sda1" ino=1984 res=0 errno=0 [ 498.398109][ T3555] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 498.412035][T11602] 9pnet_fd: Insufficient options for proto=fd [ 498.438945][T11601] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 498.580470][ T4050] udevd[4050]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.605177][T11603] 9pnet_fd: Insufficient options for proto=fd [ 498.714968][T11604] dccp_close: ABORT with 1 bytes unread [ 498.990342][T11611] bond2: (slave bond_slave_0): Releasing backup interface [ 499.021022][T11611] device bond_slave_0 left promiscuous mode [ 499.214708][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 500.039440][ T3555] Bluetooth: hci2: command 0x0406 tx timeout [ 500.359321][ T3594] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 500.520860][ T3604] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 500.599301][ T3594] usb 5-1: Using ep0 maxpacket: 8 [ 500.648925][ T27] audit: type=1800 audit(1719574056.671:155): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2504" name="bus" dev="sda1" ino=1991 res=0 errno=0 [ 500.656506][T11637] 9pnet_fd: Insufficient options for proto=fd [ 500.729528][ T3594] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 500.759627][ T3594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.788699][ T3594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.789431][ T3604] usb 4-1: Using ep0 maxpacket: 16 [ 500.809157][ T3594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 500.833445][ T3594] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 500.849316][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.872172][ T3594] usb 5-1: config 0 descriptor?? [ 500.930282][ T3604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.950394][ T3604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.974753][ T3604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.996285][ T3604] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.018861][ T3604] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.120077][ T3604] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.147390][ T3604] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.165243][ T3604] usb 4-1: Manufacturer: syz [ 501.183613][ T3604] usb 4-1: config 0 descriptor?? [ 501.412756][ T3594] usbhid 5-1:0.0: can't add hid device: -71 [ 501.424529][ T3594] usbhid: probe of 5-1:0.0 failed with error -71 [ 501.441448][ T3594] usb 5-1: USB disconnect, device number 51 [ 501.480823][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487180][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.533525][T11645] dccp_close: ABORT with 1 bytes unread [ 501.579339][ T3604] rc_core: IR keymap rc-hauppauge not found [ 501.586498][ T3604] Registered IR keymap rc-empty [ 501.595259][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.633351][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.641114][ T3555] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 501.646400][T11653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 501.680945][ T3604] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 501.695107][ T3604] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 501.717810][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.727482][T11656] 9pnet_fd: Insufficient options for proto=fd [ 501.749483][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.779352][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.809423][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.839332][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.871306][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.899488][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.929656][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 501.961015][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 502.000080][ T3604] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 502.050970][ T3604] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 502.066801][ T3604] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.242408][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 502.437927][ T27] audit: type=1800 audit(1719574058.461:156): pid=11672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2515" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 502.448556][T11672] 9pnet_fd: Insufficient options for proto=fd [ 502.482952][ T27] audit: type=1800 audit(1719574058.511:157): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2516" name=2321200A59E180C23B82F9E97B23B9 dev="sda1" ino=1995 res=0 errno=0 [ 502.803345][ T3555] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 504.130883][ T7] usb 4-1: USB disconnect, device number 70 [ 504.344183][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 504.366395][ T27] audit: type=1800 audit(1719574060.391:158): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2529" name="bus" dev="sda1" ino=1993 res=0 errno=0 [ 504.589163][ T27] audit: type=1800 audit(1719574060.611:159): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2530" name=2321200A59E180C23B82F9 dev="sda1" ino=1994 res=0 errno=0 [ 504.839567][ T3555] Bluetooth: hci0: command tx timeout [ 504.949626][T11726] loop2: detected capacity change from 0 to 2048 [ 504.997588][T11726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 505.333907][T11734] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 505.349283][T11734] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 505.361717][T11734] EXT4-fs (loop2): This should not happen!! Data will be lost [ 505.361717][T11734] [ 505.371572][T11734] EXT4-fs (loop2): Total free blocks count 0 [ 505.377803][T11734] EXT4-fs (loop2): Free/Dirty block details [ 505.383935][T11734] EXT4-fs (loop2): free_blocks=2415919104 [ 505.390033][T11734] EXT4-fs (loop2): dirty_blocks=16 [ 505.395308][T11734] EXT4-fs (loop2): Block reservation details [ 505.401446][T11734] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 505.946109][ T3555] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 505.980399][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 506.220646][ T27] audit: type=1800 audit(1719574062.251:160): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2540" name="bus" dev="sda1" ino=1981 res=0 errno=0 [ 506.239313][ T3604] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 506.480244][ T27] audit: type=1800 audit(1719574062.301:161): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2541" name=2321200A59E180 dev="sda1" ino=1996 res=0 errno=0 [ 507.334370][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 507.349339][ T3604] usb 4-1: Using ep0 maxpacket: 16 [ 507.469593][ T3604] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 507.488640][ T3604] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 507.527307][ T3604] usb 4-1: config 1 has no interface number 1 [ 507.556636][ T3604] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 507.619471][ T3604] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.759405][ T3597] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 507.799695][ T3604] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.808845][ T3604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.849477][ T3604] usb 4-1: Product: syz [ 507.853711][ T3604] usb 4-1: Manufacturer: syz [ 507.858423][ T3604] usb 4-1: SerialNumber: syz [ 507.959343][ T48] Bluetooth: hci0: command tx timeout [ 508.027935][T11778] loop1: detected capacity change from 0 to 2048 [ 508.049353][ T3597] usb 1-1: Using ep0 maxpacket: 16 [ 508.075165][T11778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 508.199877][ T3604] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 508.211681][ T3604] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 508.295078][ T3604] usb 4-1: USB disconnect, device number 71 [ 508.339876][ T3597] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.380195][T11782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 508.395831][T11782] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 508.409443][T11782] EXT4-fs (loop1): This should not happen!! Data will be lost [ 508.409443][T11782] [ 508.419266][T11782] EXT4-fs (loop1): Total free blocks count 0 [ 508.425366][T11782] EXT4-fs (loop1): Free/Dirty block details [ 508.431391][T11782] EXT4-fs (loop1): free_blocks=2415919104 [ 508.437197][T11782] EXT4-fs (loop1): dirty_blocks=16 [ 508.442418][T11782] EXT4-fs (loop1): Block reservation details [ 508.448485][T11782] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 508.795606][ T3597] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.908569][ T3597] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.185205][ T4138] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 509.271053][ T3738] udevd[3738]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.369354][ T27] audit: type=1800 audit(1719574065.381:162): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2554" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 510.039906][ T48] Bluetooth: hci0: command tx timeout [ 510.049469][ T3597] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.058691][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.066907][ T3597] usb 1-1: Product: syz [ 510.071166][ T3597] usb 1-1: Manufacturer: syz [ 510.075826][ T3597] usb 1-1: SerialNumber: syz [ 510.103479][ T27] audit: type=1800 audit(1719574066.131:163): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2553" name=2321200A59 dev="sda1" ino=1984 res=0 errno=0 [ 510.160180][ T3597] cdc_ncm 1-1:1.0: skipping garbage [ 510.167110][ T3597] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 510.182260][ T3597] cdc_ncm 1-1:1.0: bind() failure [ 510.563132][ T48] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 510.581815][T11803] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 510.609422][ T3597] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 510.639618][T11803] 9pnet_fd: Insufficient options for proto=fd [ 510.889365][ T3597] usb 2-1: Using ep0 maxpacket: 8 [ 511.042680][ T3597] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 511.085611][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.114629][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.125159][ T3597] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 511.142477][ T3597] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 511.152265][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.189073][ T3597] usb 2-1: config 0 descriptor?? [ 511.282435][T11816] loop3: detected capacity change from 0 to 2048 [ 511.339059][T11816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 511.403378][T11821] program syz.4.2562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.641171][T11821] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 511.659053][T11816] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 511.674074][T11816] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 511.686420][T11816] EXT4-fs (loop3): This should not happen!! Data will be lost [ 511.686420][T11816] [ 511.696128][T11816] EXT4-fs (loop3): Total free blocks count 0 [ 511.702251][T11816] EXT4-fs (loop3): Free/Dirty block details [ 511.708204][T11816] EXT4-fs (loop3): free_blocks=2415919104 [ 511.713977][T11816] EXT4-fs (loop3): dirty_blocks=16 [ 511.719110][T11816] EXT4-fs (loop3): Block reservation details [ 511.725191][T11816] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 511.969505][ T3597] usbhid 2-1:0.0: can't add hid device: -71 [ 512.088233][ T3597] usbhid: probe of 2-1:0.0 failed with error -71 [ 512.106557][ T3597] usb 2-1: USB disconnect, device number 64 [ 512.153653][ T3594] usb 1-1: USB disconnect, device number 69 [ 512.179880][ T4136] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 512.477158][ T27] audit: type=1800 audit(1719574068.501:164): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2568" name=2321200A59 dev="sda1" ino=1993 res=0 errno=0 [ 512.669543][ T7] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 512.708035][ T48] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 512.889719][ T3604] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 512.919454][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 513.039545][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 513.066165][ T7] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 513.096068][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.165062][ T7] usb 5-1: config 0 descriptor?? [ 513.170273][ T3604] usb 2-1: Using ep0 maxpacket: 8 [ 514.428616][T11832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2569'. [ 514.789465][ T3555] Bluetooth: hci1: command 0x0406 tx timeout [ 515.009471][ T3604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.069151][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 620.076195][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22/1:b..l [ 620.084560][ C0] (detected by 0, t=10502 jiffies, g=71617, q=28 ncpus=2) [ 620.092157][ C0] task:kworker/1:0 state:R running task stack:21112 pid:22 ppid:2 flags:0x00004000 [ 620.104223][ C0] Workqueue: events_power_efficient gc_worker [ 620.110734][ C0] Call Trace: [ 620.114072][ C0] [ 620.117265][ C0] __schedule+0x142d/0x4550 [ 620.122098][ C0] ? __sched_text_start+0x8/0x8 [ 620.126988][ C0] ? print_irqtrace_events+0x210/0x210 [ 620.132564][ C0] ? mark_lock+0x9a/0x340 [ 620.136944][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 620.142302][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 620.147455][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 620.153223][ C0] irqentry_exit+0x53/0x80 [ 620.157723][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 620.163832][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 620.169180][ C0] Code: 2b 00 74 08 4c 89 f7 e8 3f ac 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 620.189012][ C0] RSP: 0018:ffffc900001c79a0 EFLAGS: 00000206 [ 620.195287][ C0] RAX: 0000000000000001 RBX: 1ffff92000038f40 RCX: 1ffff92000038ee0 [ 620.203359][ C0] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d4760 [ 620.211385][ C0] RBP: ffffc900001c7ae8 R08: dffffc0000000000 R09: fffffbfff2093845 [ 620.219568][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000038f3c [ 620.227549][ C0] R13: dffffc0000000000 R14: ffffc900001c7a00 R15: 0000000000000246 [ 620.235560][ C0] ? gc_worker+0x27a/0x1530 [ 620.240118][ C0] ? read_lock_is_recursive+0x10/0x10 [ 620.245514][ C0] ? gc_worker+0x27a/0x1530 [ 620.250112][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 620.255312][ C0] ? __might_sleep+0xb0/0xb0 [ 620.259903][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 620.266249][ C0] gc_worker+0x29b/0x1530 [ 620.270666][ C0] ? gc_worker+0x27a/0x1530 [ 620.275169][ C0] ? gc_worker+0x27a/0x1530 [ 620.279683][ C0] ? init_conntrack+0x14e0/0x14e0 [ 620.284705][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 620.289927][ C0] ? process_one_work+0x7a9/0x11d0 [ 620.295053][ C0] process_one_work+0x8a9/0x11d0 [ 620.300009][ C0] ? worker_detach_from_pool+0x260/0x260 [ 620.305776][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 620.311387][ C0] ? kthread_data+0x4e/0xc0 [ 620.315915][ C0] ? wq_worker_running+0x97/0x190 [ 620.320958][ C0] worker_thread+0xa47/0x1200 [ 620.325681][ C0] kthread+0x28d/0x320 [ 620.329779][ C0] ? worker_clr_flags+0x190/0x190 [ 620.334812][ C0] ? kthread_blkcg+0xd0/0xd0 [ 620.339411][ C0] ret_from_fork+0x1f/0x30 [ 620.343855][ C0] [ 620.346883][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10434 jiffies! g71617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 620.359314][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=28889 [ 620.367195][ C0] rcu: rcu_preempt kthread starved for 10435 jiffies! g71617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 620.378572][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 620.388536][ C0] rcu: RCU grace-period kthread stack dump: [ 620.394425][ C0] task:rcu_preempt state:I stack:25528 pid:16 ppid:2 flags:0x00004000 [ 620.403721][ C0] Call Trace: [ 620.407086][ C0] [ 620.410032][ C0] __schedule+0x142d/0x4550 [ 620.414544][ C0] ? _raw_spin_unlock+0x40/0x40 [ 620.419497][ C0] ? __sched_text_start+0x8/0x8 [ 620.424439][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 620.429832][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 620.435870][ C0] ? _raw_spin_unlock+0x40/0x40 [ 620.440770][ C0] schedule+0xbf/0x180 [ 620.444868][ C0] schedule_timeout+0x1b9/0x300 [ 620.449747][ C0] ? console_conditional_schedule+0x40/0x40 [ 620.455679][ C0] ? update_process_times+0x1b0/0x1b0 [ 620.461518][ C0] ? prepare_to_swait_event+0x329/0x350 [ 620.467108][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 620.472004][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 620.478200][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 620.483459][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 620.488338][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 620.494260][ C0] ? finish_swait+0xcf/0x1e0 [ 620.498883][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 620.503529][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 620.508745][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 620.514656][ C0] ? __kthread_parkme+0x168/0x1c0 [ 620.519876][ C0] kthread+0x28d/0x320 [ 620.524036][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 620.529155][ C0] ? kthread_blkcg+0xd0/0xd0 [ 620.533759][ C0] ret_from_fork+0x1f/0x30 [ 620.538213][ C0] [ 620.541338][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 620.547669][ C0] Sending NMI from CPU 0 to CPUs 1: [ 620.552924][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340