last executing test programs: 24.899039652s ago: executing program 0 (id=5495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) fstatfs(r4, &(0x7f0000000040)=""/17) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x6, 0x4002) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 21.078375954s ago: executing program 2 (id=5505): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20.527980711s ago: executing program 0 (id=5506): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4048840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op={0x1, 0x19}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) fcntl$setown(r2, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x1000, 0x200000000000000, 0x3}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x8008010) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x44) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x28}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 19.547820669s ago: executing program 0 (id=5507): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) userfaultfd(0x80001) mmap(&(0x7f0000469000/0x1000)=nil, 0x1000, 0x80000d, 0x10, r0, 0xce2bd000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120410007f02000001"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 17.427363192s ago: executing program 2 (id=5513): syz_usb_connect(0x1, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x46}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 15.082441499s ago: executing program 3 (id=5519): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 14.02267575s ago: executing program 4 (id=5522): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 12.847383568s ago: executing program 4 (id=5523): syz_extract_tcp_res(0x0, 0x100, 0x2e3) syz_open_dev$hidraw(0x0, 0x1, 0x803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x0, 0x2000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x114}], 0x1}, 0x0) 11.306580101s ago: executing program 4 (id=5526): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 10.86608045s ago: executing program 4 (id=5527): io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 10.026705167s ago: executing program 2 (id=5530): socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.812103826s ago: executing program 4 (id=5531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fce4a875117078183c0001006e657464657673696d0000000f0002080003000000000008000b008de8c8ff0000000800000000004000080015"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x940) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0xfffffffd, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfe000002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2fab, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0x7fff, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0xb37d, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x1, 0x0, 0x1000000, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0xc474, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000008, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xd, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r4, 0xd, &(0x7f0000000180)={0x1, 0x401}, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0) 8.811834626s ago: executing program 3 (id=5532): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4048840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op={0x1, 0x19}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) fcntl$setown(r2, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x44) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x28}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.499301426s ago: executing program 2 (id=5535): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 7.27591568s ago: executing program 3 (id=5536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x74, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xc3, 0x40, {0xffffffffffffffff}, {}, 0x10000, 0x3}) get_robust_list(r4, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000400)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)}, &(0x7f0000000200)=0x18) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = syz_open_dev$dvb_dvr(0x0, 0x22, 0x240082) dup3(r6, r3, 0x80000) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) 7.22719214s ago: executing program 2 (id=5537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, 0x0, 0x0, 0x4100, 0x0, 0x0) 6.377980035s ago: executing program 1 (id=5538): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x7) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) 6.333862426s ago: executing program 0 (id=5539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) creat(0x0, 0x350) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x34, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x301, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.58649322s ago: executing program 4 (id=5540): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000380)={'gretap0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) timer_delete(0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) socket$kcm(0x2b, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x0, 0x0, 0x1a0, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080011408000000005001500030000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000002d345d0cbfb92006a12874a9bf94cf262a39856a5938d059c36506ca0a66293f6d591988cb96cfc37dce50d800aa0949ee21a7375da3171c0dfeedb2a3c65c397c865bb91d9439303c08dbceb5d4659fa892388fc86b00ca1507cb073805668f826654462fc7d6f33e2c5facbd0a125cffffafdd16bc10c9bc26e22e9c3b4642654aaa29cadfbcc3d7572d0aa760c4101c4aacfe3686ac0480710c4315b420288d3b707901b6d24020bdd29441fb6310776a63c93dbda8d2e21fec24a8d70e65ca8ca5e8"], 0x64}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @noop, @ssrr={0x89, 0x3, 0xb5}]}}}}}) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) 3.572646907s ago: executing program 3 (id=5541): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x4, "fa02791d2a69a2610f02000000000000001100010000000800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) close(r0) 3.425203187s ago: executing program 2 (id=5542): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 3.355654672s ago: executing program 3 (id=5543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000080)={0x2, 0xc0010115, &(0x7f00000003c0), 0x0}) 3.355027652s ago: executing program 1 (id=5553): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pread64(r1, 0x0, 0x0, 0x10000000000a) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) 3.324299476s ago: executing program 0 (id=5544): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xff, @mcast2, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000001c0)="a5688f24cf0a8a3c3a25fd7d26eea3675ad9aada4789b221f90e220c662222f5c04a74dfeb90eab94b4bd59afbd738972467b0e66fa2a031309d74259289877ceb4c368e2212730e200dcfd3e306f150fd5421a0a7248b8a72765268e981fac35fcb31a03ea38c956d17e657d08e0b6e6f5a1ccdbc27b3bc1fb7604e8bef7ba7927b4e2dd2d02a6a2a63df28c139954fbff7e0ebd7ef47a24a7f759131f807d04f83074945cdfe74b5d28ef73755719e7df121f72feee99b352a91b3eb47dac7a90825522ce43a7518436a2dbd29ff9749e2b9b4cb49dc152366019d4630e8b5c6a211aa61a22883f4d4334d6a5d0fc0611f74e3527a9dfe471b16f63f", 0xfd}, {&(0x7f0000000400)="6aa60452331d0e2b888bc05e6c53716db5f4382dc59ee027169e78a7a80316ea0000000000", 0x25}, {&(0x7f0000002500)="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", 0x47d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="09f9e60123626fa19b01c22f4ca78304748f9cc1f199c7fe71a643a61b69c48e0d613d12340598fc088e4d3a1228d11d850fb82ac4db5071f694c6b6307d50540ff774aeadee5efc76c477081696914f53c7d546e0", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000640)="40706b15e43b291c8eb6c3e0", 0xc}], 0x4c}}], 0x3, 0x24008040) 3.232739317s ago: executing program 3 (id=5545): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x8, 0x80000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = gettid() getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x3, 0x5002) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) fanotify_init(0x4, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xb0, 0x6, 0x13, 0x0, "0c449f9069584bd7896acc94537bb3d1e1ce3cda422f8ef8d863bc3a8a03e9a61cdbdfdda13e4328ceeda87aa3ec552d3160b65c097552749cc74fd2aff66adc", "c9dc81b7e58abb1b5c50a539c87c778099ca9cbe6bcbbf3b12ff0c6f6e424e7d", [0x7, 0x401]}) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) waitid$P_PIDFD(0x3, r8, &(0x7f0000000140), 0x4, &(0x7f0000000480)) ioctl$BLKRRPART(r7, 0x125f, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 2.384044682s ago: executing program 1 (id=5546): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4048840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op={0x1, 0x19}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) fcntl$setown(r2, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x44) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x28}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.458748911s ago: executing program 1 (id=5547): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000740)=ANY=[], 0x18}, 0x4004000) 1.361510551s ago: executing program 1 (id=5548): openat$kvm(0xffffffffffffff9c, 0x0, 0x88840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 98.330911ms ago: executing program 1 (id=5549): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0202000004000000080000d21a00000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x3, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x27, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x1, 0x3, 0x1, 0x2, 0x2, 0x50, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffeffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4000}) 0s ago: executing program 0 (id=5550): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x2) landlock_create_ruleset(&(0x7f0000000200)={0x4, 0x0, 0x2}, 0x18, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1}, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) kernel console output (not intermixed with test programs): with error -71 [ 728.158222][ T9877] usb 3-1: USB disconnect, device number 17 [ 728.790695][ T9877] Bluetooth: hci2: command 0x0406 tx timeout [ 729.162148][T18527] loop2: detected capacity change from 0 to 16 [ 729.214909][T18527] erofs: Unknown parameter '' [ 730.564491][ T154] device hsr_slave_0 left promiscuous mode [ 730.602235][ T154] device hsr_slave_1 left promiscuous mode [ 730.628374][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.666805][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.705485][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.741881][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.788252][ T154] device bridge_slave_1 left promiscuous mode [ 730.820579][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.864797][ T154] device bridge_slave_0 left promiscuous mode [ 730.917074][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.998945][ T154] device veth1_macvtap left promiscuous mode [ 731.007089][ T154] device veth0_macvtap left promiscuous mode [ 731.042561][ T154] device veth1_vlan left promiscuous mode [ 731.067712][ T154] device veth0_vlan left promiscuous mode [ 733.762193][ T154] team0 (unregistering): Port device team_slave_1 removed [ 733.778375][ T154] team0 (unregistering): Port device team_slave_0 removed [ 733.817293][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.887375][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.134498][ T154] bond0 (unregistering): Released all slaves [ 741.441196][T18685] 9pnet_virtio: no channels available for device syz [ 741.487882][T18685] netlink: set zone limit has 8 unknown bytes [ 744.640791][T18747] fuse: Unknown parameter '+l$n|fd' [ 747.102041][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.108999][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.590564][ T4230] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 750.240611][ T4230] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 750.273342][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.332740][ T4230] usb 5-1: Product: syz [ 750.348538][ T4230] usb 5-1: Manufacturer: syz [ 750.353551][ T4230] usb 5-1: SerialNumber: syz [ 750.367320][ T4230] usb 5-1: config 0 descriptor?? [ 750.630560][ T4230] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 751.910511][ T4230] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 753.111323][ T5027] usb 5-1: USB disconnect, device number 14 [ 758.701911][T18951] fuse: Unknown parameter '+l$n|fd' [ 760.304790][T18983] fuse: Unknown parameter '+l$n|fd' [ 762.516465][T19001] fuse: Unknown parameter '+l$n|fd' [ 764.374556][T19037] fuse: Unknown parameter '+l$n|fd' [ 766.066668][T19064] fuse: Unknown parameter '+l$n|fd' [ 768.569002][T19101] fuse: Unknown parameter '+l$n|fd' [ 768.890353][ T4230] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 769.160360][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 769.360377][ T4230] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 769.368492][ T4230] usb 4-1: config 0 has no interface number 0 [ 769.560550][ T4230] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 769.598125][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.630155][ T4230] usb 4-1: Product: syz [ 769.653974][ T4230] usb 4-1: Manufacturer: syz [ 769.667944][ T4230] usb 4-1: SerialNumber: syz [ 769.711060][ T4230] usb 4-1: config 0 descriptor?? [ 769.789456][ T4230] smsc95xx v2.0.0 [ 769.807668][ T4230] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 769.854653][ T4230] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 771.945687][T19147] fuse: Unknown parameter '+l$n|fd' [ 772.924657][ T4230] usb 4-1: USB disconnect, device number 19 [ 777.920365][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 778.180316][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 778.245167][T19217] fuse: Unknown parameter '+l$n|fd' [ 778.310600][ T21] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 778.322145][ T21] usb 5-1: config 0 has no interface number 0 [ 778.480400][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 778.495744][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.539908][ T21] usb 5-1: Product: syz [ 778.557699][ T21] usb 5-1: Manufacturer: syz [ 778.580314][ T21] usb 5-1: SerialNumber: syz [ 778.624110][ T21] usb 5-1: config 0 descriptor?? [ 778.701312][ T21] smsc95xx v2.0.0 [ 778.705000][ T21] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 778.762756][ T21] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 780.047842][ T21] usb 5-1: USB disconnect, device number 15 [ 781.234305][T19254] 9pnet_virtio: no channels available for device syz [ 783.711848][ T4297] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 784.230360][ T4230] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 784.250401][ T4297] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 784.290353][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.314732][ T4297] usb 4-1: Product: syz [ 784.318931][ T4297] usb 4-1: Manufacturer: syz [ 784.339251][ T4297] usb 4-1: SerialNumber: syz [ 784.385279][ T4297] usb 4-1: config 0 descriptor?? [ 784.510305][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 784.660602][ T4297] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 784.669096][ T4230] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 784.683081][ T4230] usb 5-1: config 0 has no interface number 0 [ 784.880621][ T4230] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 784.895858][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.912142][ T4230] usb 5-1: Product: syz [ 784.920468][ T4230] usb 5-1: Manufacturer: syz [ 784.936683][ T4230] usb 5-1: SerialNumber: syz [ 784.946110][ T4230] usb 5-1: config 0 descriptor?? [ 785.001310][ T4230] smsc95xx v2.0.0 [ 785.005070][ T4230] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 785.034614][ T4230] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 785.400429][ T4297] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 786.462470][ T4297] usb 4-1: USB disconnect, device number 20 [ 786.781394][ T5027] usb 5-1: USB disconnect, device number 16 [ 786.979433][T19324] device syzkaller0 entered promiscuous mode [ 787.382359][T19341] 9pnet_virtio: no channels available for device syz [ 787.461936][T19341] netlink: set zone limit has 8 unknown bytes [ 789.420331][ T23] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 790.020503][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 790.037466][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.063626][ T23] usb 1-1: Product: syz [ 790.078051][ T23] usb 1-1: Manufacturer: syz [ 790.088747][ T23] usb 1-1: SerialNumber: syz [ 790.110481][ T23] usb 1-1: config 0 descriptor?? [ 790.506516][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 792.260467][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 793.265197][ T4297] usb 1-1: USB disconnect, device number 20 [ 793.772661][T19440] 9pnet_virtio: no channels available for device syz [ 793.813122][T19440] netlink: set zone limit has 8 unknown bytes [ 794.882251][T19449] device syzkaller0 entered promiscuous mode [ 796.190391][ T23] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 796.669870][T19488] 9pnet_virtio: no channels available for device syz [ 796.705515][T19488] netlink: set zone limit has 8 unknown bytes [ 796.801323][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 796.821081][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.847197][ T23] usb 3-1: Product: syz [ 796.857320][ T23] usb 3-1: Manufacturer: syz [ 796.892632][ T23] usb 3-1: SerialNumber: syz [ 796.935071][ T23] usb 3-1: config 0 descriptor?? [ 797.855410][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 798.313512][T19500] device syzkaller0 entered promiscuous mode [ 799.070450][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 800.069696][ T4297] usb 3-1: USB disconnect, device number 18 [ 801.229484][T19556] device syzkaller0 entered promiscuous mode [ 804.741121][T19606] 9pnet_virtio: no channels available for device syz [ 804.767659][T19606] netlink: set zone limit has 8 unknown bytes [ 805.833002][ T4297] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 806.240618][ T4297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.269135][ T4297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.400552][ T4297] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.435347][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.454187][ T4297] usb 5-1: SerialNumber: syz [ 806.793022][ T4297] usb 5-1: 0:2 : does not exist [ 806.826443][ T4297] usb 5-1: USB disconnect, device number 17 [ 807.184727][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.619305][T19639] device syzkaller0 entered promiscuous mode [ 808.551699][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.558016][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.700283][ T4230] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 809.980429][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 810.310584][ T4230] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 810.318708][ T4230] usb 1-1: config 0 has no interface number 0 [ 810.540822][ T4230] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 810.549867][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.565424][ T4230] usb 1-1: Product: syz [ 810.587238][ T4230] usb 1-1: Manufacturer: syz [ 810.610401][ T4230] usb 1-1: SerialNumber: syz [ 810.626023][ T4230] usb 1-1: config 0 descriptor?? [ 810.684205][ T4230] smsc95xx v2.0.0 [ 810.687854][ T4230] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 810.750703][ T4230] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 810.896598][ T4230] usb 1-1: USB disconnect, device number 21 [ 812.993334][T19737] fuse: Unknown parameter '+l$n|fd' [ 815.209123][T19771] device syzkaller0 entered promiscuous mode [ 820.987354][ T9877] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 821.260332][ T9877] usb 5-1: Using ep0 maxpacket: 32 [ 821.510562][ T9877] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 821.519806][ T9877] usb 5-1: config 0 has no interface number 0 [ 821.710380][ T9877] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 821.770030][ T9877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.794359][ T9877] usb 5-1: Product: syz [ 821.806457][ T9877] usb 5-1: Manufacturer: syz [ 821.820270][ T9877] usb 5-1: SerialNumber: syz [ 821.910461][ T9877] usb 5-1: config 0 descriptor?? [ 821.994452][ T9877] smsc95xx v2.0.0 [ 821.998523][ T9877] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 822.034325][ T9877] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 822.210341][ T4230] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 822.622764][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.680996][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.780707][ T4230] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 822.826543][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 822.852345][ T4230] usb 2-1: SerialNumber: syz [ 823.152178][ T4230] usb 2-1: 0:2 : does not exist [ 823.191824][ T4230] usb 2-1: USB disconnect, device number 19 [ 823.220768][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.359083][ T4297] usb 5-1: USB disconnect, device number 18 [ 825.800381][ T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 826.040305][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 826.160506][ T23] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 826.183489][ T23] usb 4-1: config 0 has no interface number 0 [ 826.240335][ T21] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 826.350508][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 826.373099][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.391366][ T23] usb 4-1: Product: syz [ 826.395557][ T23] usb 4-1: Manufacturer: syz [ 826.400150][ T23] usb 4-1: SerialNumber: syz [ 826.431275][ T23] usb 4-1: config 0 descriptor?? [ 826.481224][ T23] smsc95xx v2.0.0 [ 826.484933][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 826.509500][ T23] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 826.680344][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.697696][T19987] fuse: Unknown parameter '+l$n|fd' [ 826.710405][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.805824][ T21] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 826.819437][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 826.835199][ T21] usb 1-1: SerialNumber: syz [ 827.222650][ T21] usb 1-1: 0:2 : does not exist [ 827.273643][ T21] usb 1-1: USB disconnect, device number 22 [ 827.436284][T19994] fuse: Unknown parameter '+l$n|fd' [ 828.218832][ T9877] usb 4-1: USB disconnect, device number 21 [ 830.987169][T20038] fuse: Unknown parameter '+l$n|fd' [ 833.601360][T20102] fuse: Unknown parameter '+l$n|fd' [ 834.530745][T20126] loop2: detected capacity change from 0 to 1024 [ 834.650903][T20126] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 834.698177][T20126] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 835.078351][T20138] loop4: detected capacity change from 0 to 1024 [ 835.124057][T20138] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 835.216860][T20138] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 836.509666][T20159] fuse: Unknown parameter '+l$n|fd' [ 838.330350][ T4297] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 838.570344][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 838.690962][ T4297] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 838.699112][ T4297] usb 1-1: config 0 has no interface number 0 [ 838.757310][T20187] loop2: detected capacity change from 0 to 512 [ 838.845840][T20187] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.4175: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 838.890471][ T4297] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 838.905280][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.920141][ T4297] usb 1-1: Product: syz [ 838.929031][ T4297] usb 1-1: Manufacturer: syz [ 838.933749][ T4297] usb 1-1: SerialNumber: syz [ 838.936546][T20187] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.4175: Bad quota inode: 15, type: 2 [ 838.949030][ T4297] usb 1-1: config 0 descriptor?? [ 838.991260][ T4297] smsc95xx v2.0.0 [ 838.995030][ T4297] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 839.021016][ T4297] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 839.023321][T20187] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 839.121975][T20187] EXT4-fs (loop2): mount failed [ 839.155956][T20196] loop1: detected capacity change from 0 to 1024 [ 839.200187][T20196] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 841.080731][ T6385] usb 1-1: USB disconnect, device number 23 [ 843.239685][T20243] loop4: detected capacity change from 0 to 512 [ 843.418351][T20243] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.4188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 843.480574][T20243] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.4188: Bad quota inode: 15, type: 2 [ 843.495417][T20243] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 843.531388][T20243] EXT4-fs (loop4): mount failed [ 844.754787][T20265] loop4: detected capacity change from 0 to 512 [ 844.814837][T20270] loop1: detected capacity change from 0 to 512 [ 844.899666][T20265] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.4193: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 844.899774][T20270] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.4197: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 844.943325][T20270] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.4197: Bad quota inode: 15, type: 2 [ 844.959113][T20270] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 844.980386][T20265] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.4193: Bad quota inode: 15, type: 2 [ 844.981088][T20270] EXT4-fs (loop1): mount failed [ 845.047483][T20265] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 845.076719][T20265] EXT4-fs (loop4): mount failed [ 847.069264][T20311] device syzkaller0 entered promiscuous mode [ 847.897273][T20333] loop3: detected capacity change from 0 to 1024 [ 848.178524][T20333] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 849.186706][T20339] loop2: detected capacity change from 0 to 1024 [ 849.373535][T20339] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.666334][T20368] loop3: detected capacity change from 0 to 512 [ 850.859248][T20368] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.4219: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 850.985310][T20368] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.4219: Bad quota inode: 15, type: 2 [ 851.048324][T20368] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 851.101304][T20368] EXT4-fs (loop3): mount failed [ 855.280303][T20439] loop2: detected capacity change from 0 to 512 [ 855.389607][T20439] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.4235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 855.491123][T20439] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.4235: Bad quota inode: 15, type: 2 [ 855.567724][T20439] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 855.610549][T20446] loop3: detected capacity change from 0 to 512 [ 855.619483][T20439] EXT4-fs (loop2): mount failed [ 855.722277][T20446] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.4236: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 855.767274][T20446] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.4236: Bad quota inode: 15, type: 2 [ 855.876070][T20446] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 855.891993][T20446] EXT4-fs (loop3): mount failed [ 858.250205][ C0] sched: RT throttling activated [ 858.680266][ T9877] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 859.050391][ T9877] usb 1-1: device descriptor read/64, error -71 [ 859.320344][ T9877] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 859.570299][ T9877] usb 1-1: device descriptor read/64, error -71 [ 859.700512][ T9877] usb usb1-port1: attempt power cycle [ 860.120303][ T9877] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 860.213045][T20510] loop2: detected capacity change from 0 to 1024 [ 860.230585][ T9877] usb 1-1: device descriptor read/8, error -71 [ 860.259312][T20510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 860.620357][ T9877] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 860.790364][ T9877] usb 1-1: device descriptor read/8, error -71 [ 860.968113][ T9877] usb usb1-port1: unable to enumerate USB device [ 863.334358][T20568] loop1: detected capacity change from 0 to 512 [ 863.518603][T20568] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.4265: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 863.550882][T20568] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.4265: Bad quota inode: 15, type: 2 [ 863.628741][T20568] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 863.650929][T20568] EXT4-fs (loop1): mount failed [ 864.767599][T20581] loop0: detected capacity change from 0 to 1024 [ 864.883577][T20581] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 864.900956][ T9877] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 865.100259][ T9877] usb 2-1: device descriptor read/64, error -71 [ 866.136157][T20601] loop0: detected capacity change from 0 to 512 [ 866.140594][ T9877] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 866.325230][T20601] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.4272: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 866.343113][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.470404][ T9877] usb 2-1: device descriptor read/64, error -71 [ 866.483410][T20601] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.4272: Bad quota inode: 15, type: 2 [ 866.595268][T20601] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 866.612842][ T9877] usb usb2-port1: attempt power cycle [ 866.645637][T20601] EXT4-fs (loop0): mount failed [ 867.030277][ T9877] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 868.544777][T20630] loop0: detected capacity change from 0 to 512 [ 868.683295][T20630] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.4281: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 868.706072][ T9877] usb 2-1: device not accepting address 22, error -71 [ 868.771696][T20639] loop4: detected capacity change from 0 to 1024 [ 868.778407][T20630] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.4281: Bad quota inode: 15, type: 2 [ 868.796823][T20630] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 868.881491][T20630] EXT4-fs (loop0): mount failed [ 868.919053][T20639] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 871.164058][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.170396][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.583636][T20664] loop2: detected capacity change from 0 to 1024 [ 871.647056][T20664] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 872.770270][ T6062] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 872.960253][ T6062] usb 5-1: device descriptor read/64, error -71 [ 873.320575][ T6062] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 873.530297][ T6062] usb 5-1: device descriptor read/64, error -71 [ 873.650440][ T6062] usb usb5-port1: attempt power cycle [ 874.100509][ T6062] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 875.308934][T20703] loop2: detected capacity change from 0 to 40427 [ 875.377191][T20703] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 875.390874][T20703] F2FS-fs (loop2): invalid crc value [ 876.254568][T20703] F2FS-fs (loop2): Found nat_bits in checkpoint [ 877.250275][ T6062] usb 5-1: device descriptor read/8, error -71 [ 877.816977][T20715] loop0: detected capacity change from 0 to 512 [ 877.961329][T20715] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.4302: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 878.120747][T20715] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.4302: Bad quota inode: 15, type: 2 [ 878.153668][T20715] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 878.219133][T20715] EXT4-fs (loop0): mount failed [ 879.765285][ T6385] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 879.960343][ T6385] usb 5-1: device descriptor read/64, error -71 [ 880.241714][ T6385] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 881.595583][T20765] loop3: detected capacity change from 0 to 40427 [ 881.604910][ T6385] usb 5-1: device descriptor read/64, error -71 [ 881.751606][ T6385] usb usb5-port1: attempt power cycle [ 882.180501][ T6385] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 882.263489][T20765] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 882.273974][T20765] F2FS-fs (loop3): invalid crc value [ 882.659617][T20765] F2FS-fs (loop3): Found nat_bits in checkpoint [ 883.263141][T20765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 883.296957][ T6385] usb 5-1: device descriptor read/8, error -71 [ 883.468201][T20778] loop4: detected capacity change from 0 to 1024 [ 883.687689][T20778] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 883.786255][T20784] loop3: detected capacity change from 0 to 512 [ 884.695911][T20784] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.4317: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 884.775852][T20784] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.4317: Bad quota inode: 15, type: 2 [ 884.869027][T20784] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 885.078864][T20784] EXT4-fs (loop3): mount failed [ 885.274381][T20805] loop2: detected capacity change from 0 to 512 [ 886.149698][T20805] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.4322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 886.230400][T20805] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.4322: Bad quota inode: 15, type: 2 [ 886.249335][T20805] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 886.281179][T20805] EXT4-fs (loop2): mount failed [ 886.560322][ T6385] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 887.410313][ T6385] usb 1-1: device descriptor read/64, error -71 [ 887.510954][T20829] loop2: detected capacity change from 0 to 512 [ 887.550138][T20833] loop4: detected capacity change from 0 to 1024 [ 887.572437][T20831] loop3: detected capacity change from 0 to 1024 [ 887.606108][T20829] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.4327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 887.632369][T20829] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.4327: Bad quota inode: 15, type: 2 [ 887.648034][T20829] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 887.673716][T20833] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 887.684262][T20829] EXT4-fs (loop2): mount failed [ 887.719996][T20831] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 887.730421][ T6385] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 887.771755][T20833] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 888.148285][ T6385] usb 1-1: device descriptor read/64, error -71 [ 889.759864][ T6385] usb usb1-port1: attempt power cycle [ 889.923420][T20856] loop4: detected capacity change from 0 to 1024 [ 889.977562][T20859] loop1: detected capacity change from 0 to 512 [ 890.038290][T20856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 890.384094][T20859] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.4335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 890.690483][T20859] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.4335: Bad quota inode: 15, type: 2 [ 890.730358][T20859] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 890.773153][T20859] EXT4-fs (loop1): mount failed [ 893.498840][T20905] loop1: detected capacity change from 0 to 1024 [ 893.561265][T20905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 893.700277][ T6385] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 894.529252][ T6385] usb 1-1: no configurations [ 894.533954][ T6385] usb 1-1: can't read configurations, error -22 [ 894.665783][T20924] loop4: detected capacity change from 0 to 512 [ 894.711093][ T6385] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 894.779403][T20926] loop3: detected capacity change from 0 to 1024 [ 895.038875][ T6385] usb 1-1: no configurations [ 895.043739][ T6385] usb 1-1: can't read configurations, error -22 [ 895.057829][ T6385] usb usb1-port1: attempt power cycle [ 895.282781][T20924] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.4350: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 895.307660][T20926] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 895.333304][T20924] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.4350: Bad quota inode: 15, type: 2 [ 895.351441][T20924] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 895.387237][T20924] EXT4-fs (loop4): mount failed [ 895.510599][ T6385] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 896.940530][ T6385] usb 1-1: device descriptor read/all, error -71 [ 899.830249][ T4269] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 900.120553][ T4269] usb 1-1: no configurations [ 900.125335][ T4269] usb 1-1: can't read configurations, error -22 [ 900.300634][ T4269] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 900.344716][T21000] loop3: detected capacity change from 0 to 512 [ 900.451202][T21000] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.4367: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 900.549248][T21000] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.4367: Bad quota inode: 15, type: 2 [ 900.590467][ T4269] usb 1-1: no configurations [ 900.595088][ T4269] usb 1-1: can't read configurations, error -22 [ 900.599410][T21000] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 900.610398][ T4269] usb usb1-port1: attempt power cycle [ 900.652320][T21000] EXT4-fs (loop3): mount failed [ 901.040274][ T4269] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 902.510549][ T4269] usb 1-1: no configurations [ 902.515198][ T4269] usb 1-1: can't read configurations, error -22 [ 902.557455][T21016] loop1: detected capacity change from 0 to 1024 [ 902.711592][T21016] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 903.644628][T21043] loop0: detected capacity change from 0 to 1024 [ 903.759129][T21043] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 903.835487][T21043] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 903.880439][ T4234] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 904.289034][T21049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 904.370466][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.388416][ T4234] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.530463][ T4234] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 904.541875][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 904.551018][ T4234] usb 5-1: SerialNumber: syz [ 905.482851][ T4234] usb 5-1: 0:2 : does not exist [ 905.525819][T21065] loop0: detected capacity change from 0 to 40427 [ 905.552845][T21065] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 905.562871][T21065] F2FS-fs (loop0): invalid crc value [ 905.584785][ T4234] usb 5-1: USB disconnect, device number 27 [ 905.605238][T21065] F2FS-fs (loop0): Found nat_bits in checkpoint [ 905.658508][T21065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 905.841791][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.200293][ T9877] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 906.480438][ T9877] usb 4-1: no configurations [ 906.485078][ T9877] usb 4-1: can't read configurations, error -22 [ 907.460277][ T9877] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 908.815909][T21106] loop0: detected capacity change from 0 to 40427 [ 909.670051][T21106] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 911.187270][T21106] F2FS-fs (loop0): invalid crc value [ 911.192709][T21106] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 911.370335][ T9877] usb 4-1: device not accepting address 23, error -71 [ 911.385083][ T9877] usb usb4-port1: attempt power cycle [ 912.424252][T21117] loop2: detected capacity change from 0 to 40427 [ 912.445145][T21130] loop4: detected capacity change from 0 to 512 [ 912.507318][T21117] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 912.568856][T21117] F2FS-fs (loop2): invalid crc value [ 912.589917][T21130] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.4402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 912.621816][T21130] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.4402: Bad quota inode: 15, type: 2 [ 912.695969][T21117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 912.731198][T21130] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 912.788752][T21130] EXT4-fs (loop4): mount failed [ 912.839184][T21117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 914.768129][T21175] loop2: detected capacity change from 0 to 40427 [ 915.831871][T21175] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 915.850555][T21175] F2FS-fs (loop2): invalid crc value [ 915.978565][T21175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 916.123212][T21175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 918.830498][ T21] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 919.190532][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.205283][ T21] usb 3-1: config 0 has no interfaces? [ 919.370362][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 919.413284][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.443122][ T21] usb 3-1: Product: syz [ 919.453462][ T21] usb 3-1: Manufacturer: syz [ 919.462854][ T21] usb 3-1: SerialNumber: syz [ 919.467179][T21249] loop3: detected capacity change from 0 to 512 [ 919.473712][ T21] usb 3-1: config 0 descriptor?? [ 919.560667][T21249] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.4430: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 919.589284][T21249] EXT4-fs error (device loop3): ext4_quota_enable:6445: comm syz.3.4430: Bad quota inode: 15, type: 2 [ 919.606974][T21249] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 919.628935][T21249] EXT4-fs (loop3): mount failed [ 920.520614][T21267] loop3: detected capacity change from 0 to 40427 [ 920.614124][T21267] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 920.623934][T21267] F2FS-fs (loop3): invalid crc value [ 920.680915][T21267] F2FS-fs (loop3): Found nat_bits in checkpoint [ 920.759902][T21267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 920.915935][ T9877] usb 3-1: USB disconnect, device number 19 [ 923.935983][T21317] loop0: detected capacity change from 0 to 40427 [ 924.044920][T21317] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 924.059843][T21317] F2FS-fs (loop0): invalid crc value [ 924.204713][T21317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 924.249701][T21317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 928.403802][ T6385] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 928.543233][T21382] device syzkaller0 entered promiscuous mode [ 929.445304][ T6385] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.514341][ T6385] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.920279][ T6385] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 930.930540][ T6385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 930.990393][ T6385] usb 3-1: can't set config #1, error -71 [ 931.052728][ T6385] usb 3-1: USB disconnect, device number 20 [ 931.460261][T21406] raw_sendmsg: syz.3.4468 forgot to set AF_INET. Fix it! [ 931.482401][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.488694][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.607891][T21467] loop1: detected capacity change from 0 to 512 [ 935.951953][T21467] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.4485: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 936.200474][T21467] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.4485: Bad quota inode: 15, type: 2 [ 936.423501][T21467] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 936.578736][T21467] EXT4-fs (loop1): mount failed [ 938.834204][T21526] device syzkaller0 entered promiscuous mode [ 939.031428][T21533] loop0: detected capacity change from 0 to 512 [ 939.179055][T21533] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.4502: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 939.220950][T21533] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.4502: Bad quota inode: 15, type: 2 [ 939.285194][T21533] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 939.331053][T21533] EXT4-fs (loop0): mount failed [ 940.881361][T21565] fuse: Unknown parameter '+l$n|fd' [ 944.099790][T21613] loop1: detected capacity change from 0 to 512 [ 944.287025][T21613] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.4522: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 944.315220][T21613] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.4522: Bad quota inode: 15, type: 2 [ 944.440249][T21613] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 944.471264][T21613] EXT4-fs (loop1): mount failed [ 945.741627][T21643] loop2: detected capacity change from 0 to 512 [ 946.268795][T21643] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.4531: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 946.470822][T21643] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.4531: Bad quota inode: 15, type: 2 [ 946.534088][T21643] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 946.562315][T21643] EXT4-fs (loop2): mount failed [ 949.537781][T21708] loop3: detected capacity change from 0 to 1024 [ 949.653911][T21708] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 952.116406][T21750] loop1: detected capacity change from 0 to 512 [ 952.346147][T21750] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.4557: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 952.445477][T21750] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.4557: Bad quota inode: 15, type: 2 [ 952.520646][T21750] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 952.569599][T21750] EXT4-fs (loop1): mount failed [ 955.793010][T21812] loop0: detected capacity change from 0 to 512 [ 956.050968][T21812] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.4573: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 956.091503][T21812] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.4573: Bad quota inode: 15, type: 2 [ 956.107577][T21812] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 956.174787][T21812] EXT4-fs (loop0): mount failed [ 958.751287][T21870] loop0: detected capacity change from 0 to 512 [ 958.850446][T21870] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz.0.4588: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 958.977614][T21870] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.4588: Bad quota inode: 15, type: 2 [ 958.992524][T21870] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 959.008687][T21870] EXT4-fs (loop0): mount failed [ 959.696901][T21887] loop2: detected capacity change from 0 to 1024 [ 959.843058][T21887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 959.948337][T21894] loop0: detected capacity change from 0 to 1024 [ 960.166282][T21894] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 963.129861][T21942] loop4: detected capacity change from 0 to 512 [ 963.376500][T21942] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz.4.4606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 963.425795][T21942] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.4606: Bad quota inode: 15, type: 2 [ 963.472208][T21942] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 963.489623][T21942] EXT4-fs (loop4): mount failed [ 969.975401][T22057] fuse: Unknown parameter '+l$n|fd' [ 973.139484][T22103] loop3: detected capacity change from 0 to 1024 [ 973.436522][T22103] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 975.285284][T22141] fuse: Unknown parameter '+l$n|fd' [ 977.458811][T22165] loop4: detected capacity change from 0 to 32768 [ 980.790278][ T6062] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 981.050206][ T6062] usb 2-1: Using ep0 maxpacket: 16 [ 981.176242][ T6062] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.196698][ T6062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.390563][ T6062] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.405007][ T6062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.427432][ T6062] usb 2-1: Product: syz [ 981.432481][ T6062] usb 2-1: Manufacturer: syz [ 981.437152][ T6062] usb 2-1: SerialNumber: syz [ 981.800431][ T6062] usb 2-1: 0:2 : does not exist [ 981.842894][ T6062] usb 2-1: USB disconnect, device number 24 [ 981.918563][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.072226][T22283] loop0: detected capacity change from 0 to 32768 [ 986.301043][T22293] loop2: detected capacity change from 0 to 1024 [ 986.887832][T22293] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 988.173827][T22288] loop1: detected capacity change from 0 to 32768 [ 992.133780][T22362] loop4: detected capacity change from 0 to 1024 [ 992.227951][T22362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 993.105198][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.531291][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.719771][T22355] loop3: detected capacity change from 0 to 32768 [ 995.950699][T22397] loop2: detected capacity change from 0 to 1024 [ 996.056946][T22397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 997.443928][T22424] loop1: detected capacity change from 0 to 1024 [ 998.298474][T22424] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1000.327636][T22487] loop0: detected capacity change from 0 to 512 [ 1000.588788][T22487] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1000.678831][T22487] ext4 filesystem being mounted at /357/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.305628][T22564] loop0: detected capacity change from 0 to 1024 [ 1007.455788][T22564] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1013.673512][ T4391] device hsr_slave_0 left promiscuous mode [ 1013.702656][ T4391] device hsr_slave_1 left promiscuous mode [ 1013.754760][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.780276][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.826995][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.845267][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.854586][ T4391] device bridge_slave_1 left promiscuous mode [ 1013.870302][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.597577][ T4391] device bridge_slave_0 left promiscuous mode [ 1014.622761][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.708117][ T4391] device veth1_macvtap left promiscuous mode [ 1015.060274][ T4391] device veth0_macvtap left promiscuous mode [ 1015.180334][ T4391] device veth1_vlan left promiscuous mode [ 1015.187684][ T4391] device veth0_vlan left promiscuous mode [ 1017.748298][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 1017.819152][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 1017.870249][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.940309][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.222675][T22663] loop3: detected capacity change from 0 to 32768 [ 1018.233148][ T4391] bond0 (unregistering): Released all slaves [ 1022.142943][T22734] loop3: detected capacity change from 0 to 1024 [ 1022.334969][T22734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1025.011200][T22743] loop1: detected capacity change from 0 to 32768 [ 1028.447817][T22821] loop1: detected capacity change from 0 to 512 [ 1028.452965][T22819] loop2: detected capacity change from 0 to 512 [ 1028.519271][T22819] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1028.559171][T22819] ext4 filesystem being mounted at /343/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.642446][T22821] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1028.770439][T22821] ext4 filesystem being mounted at /362/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.419215][T22850] loop4: detected capacity change from 0 to 512 [ 1030.533697][T22850] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1030.610297][T22850] ext4 filesystem being mounted at /386/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.181885][T22848] loop0: detected capacity change from 0 to 32768 [ 1031.532967][ T5027] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1031.990658][ T5027] usb 3-1: Using ep0 maxpacket: 16 [ 1032.150829][ T5027] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.200547][ T5027] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.673776][ T5027] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.720385][T22883] loop4: detected capacity change from 0 to 512 [ 1032.722052][ T5027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.764092][ T5027] usb 3-1: Product: syz [ 1032.768463][ T5027] usb 3-1: Manufacturer: syz [ 1032.778578][ T5027] usb 3-1: SerialNumber: syz [ 1032.883994][T22883] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1032.990435][T22883] ext4 filesystem being mounted at /388/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.520366][ T5027] usb 3-1: 0:2 : does not exist [ 1034.324483][ T5027] usb 3-1: USB disconnect, device number 21 [ 1034.468013][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.186133][ T6062] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1040.362813][ T6062] usb 5-1: Using ep0 maxpacket: 16 [ 1040.496811][T22986] loop1: detected capacity change from 0 to 32768 [ 1040.520401][ T6062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.529473][T23005] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1040.535945][ T6062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.558930][T23005] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1040.730365][ T6062] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.740970][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.749059][ T6062] usb 5-1: Product: syz [ 1040.862906][ T6062] usb 5-1: Manufacturer: syz [ 1040.886674][ T6062] usb 5-1: SerialNumber: syz [ 1041.260423][ T6062] usb 5-1: 0:2 : does not exist [ 1041.305140][ T6062] usb 5-1: USB disconnect, device number 28 [ 1041.571942][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.314959][T23046] fuse: Unknown parameter '+l$n|fd' [ 1047.917507][T23129] loop3: detected capacity change from 0 to 40427 [ 1048.018062][T23129] F2FS-fs (loop3): invalid crc value [ 1048.041099][T23129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1048.066984][T23129] F2FS-fs (loop3): Start checkpoint disabled! [ 1048.145290][T23129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1049.652268][T22190] attempt to access beyond end of device [ 1049.652268][T22190] loop3: rw=2049, want=40984, limit=40427 [ 1051.255682][T23159] loop4: detected capacity change from 0 to 32768 [ 1051.339095][T23159] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.4915 (23159) [ 1051.383869][T23159] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1051.392926][T23159] BTRFS info (device loop4): enabling disk space caching [ 1051.399975][T23159] BTRFS info (device loop4): force clearing of disk cache [ 1051.407486][T23159] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1051.417302][T23159] BTRFS info (device loop4): use zstd compression, level 3 [ 1051.424579][T23159] BTRFS info (device loop4): disk space caching is enabled [ 1051.431869][T23159] BTRFS info (device loop4): has skinny extents [ 1051.892363][T23171] loop3: detected capacity change from 0 to 32768 [ 1052.894164][T23171] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.4912 (23171) [ 1054.305067][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.311419][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.033028][T23159] BTRFS error (device loop4): open_ctree failed: -12 [ 1056.039985][ T4179] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (4179) [ 1056.136428][T23212] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1059.018296][T23241] loop2: detected capacity change from 0 to 40427 [ 1059.241550][T23245] loop1: detected capacity change from 0 to 40427 [ 1059.625224][T23247] loop0: detected capacity change from 0 to 40427 [ 1059.720003][T23247] F2FS-fs (loop0): invalid crc value [ 1059.732130][T23245] F2FS-fs (loop1): invalid crc value [ 1059.796087][T23241] F2FS-fs (loop2): invalid crc value [ 1059.812189][T23241] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1059.821985][T23247] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1059.853718][T23241] F2FS-fs (loop2): Start checkpoint disabled! [ 1059.862244][T23245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1059.891864][T23247] F2FS-fs (loop0): Start checkpoint disabled! [ 1059.897824][T23245] F2FS-fs (loop1): Start checkpoint disabled! [ 1059.913117][T23241] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1059.942346][T23245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1060.000254][T23247] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1060.251239][T23258] loop4: detected capacity change from 0 to 40427 [ 1063.751478][ T4391] attempt to access beyond end of device [ 1063.751478][ T4391] loop1: rw=2049, want=40992, limit=40427 [ 1063.853081][ T4403] attempt to access beyond end of device [ 1063.853081][ T4403] loop2: rw=2049, want=40992, limit=40427 [ 1063.905224][T12480] attempt to access beyond end of device [ 1063.905224][T12480] loop0: rw=2049, want=40976, limit=40427 [ 1064.046627][T23265] loop3: detected capacity change from 0 to 2048 [ 1064.338942][T23268] loop1: detected capacity change from 0 to 32768 [ 1064.376092][T23265] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000005,errors=remount-ro,resgid=0x0000000000000000,barrier,noauto_da_alloc,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 1065.083189][T23265] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.153494][T23268] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1065.162869][T23268] BTRFS info (device loop1): enabling disk space caching [ 1065.170028][T23268] BTRFS info (device loop1): force clearing of disk cache [ 1065.177201][T23268] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1065.186671][T23268] BTRFS info (device loop1): use zstd compression, level 3 [ 1065.194037][T23268] BTRFS info (device loop1): disk space caching is enabled [ 1065.201276][T23268] BTRFS info (device loop1): has skinny extents [ 1065.227015][T23276] befs: (nbd0): No write support. Marking filesystem read-only [ 1065.274653][ T150] block nbd0: Attempted send on invalid socket [ 1065.282649][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1065.486516][T23280] loop4: detected capacity change from 0 to 32768 [ 1065.741045][T23280] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.4937 (23280) [ 1065.992911][T23292] loop2: detected capacity change from 0 to 32768 [ 1066.093371][T23292] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.4932 (23292) [ 1066.979512][T23305] loop0: detected capacity change from 0 to 40427 [ 1067.041477][T23305] F2FS-fs (loop0): invalid crc value [ 1067.284457][T23315] loop3: detected capacity change from 0 to 40427 [ 1067.343287][T23305] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1069.376558][T23305] F2FS-fs (loop0): Start checkpoint disabled! [ 1069.409986][T23305] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1069.440796][T23268] BTRFS error (device loop1): open_ctree failed: -12 [ 1069.447682][ T4176] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by udevd (4176) [ 1069.530023][T23315] F2FS-fs (loop3): invalid crc value [ 1069.542800][T23315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1069.578529][T23315] F2FS-fs (loop3): Start checkpoint disabled! [ 1069.608234][T23315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1071.363491][ T4403] attempt to access beyond end of device [ 1071.363491][ T4403] loop0: rw=2049, want=40984, limit=40427 [ 1072.488286][T23357] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1075.460213][T23220] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1077.910184][T23220] usb 3-1: Using ep0 maxpacket: 16 [ 1078.650341][T23220] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1078.657965][T23220] usb 3-1: can't read configurations, error -71 [ 1078.796973][T23403] loop1: detected capacity change from 0 to 40427 [ 1078.808753][T23403] F2FS-fs (loop1): invalid crc value [ 1078.823373][T23403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1078.878530][T23403] F2FS-fs (loop1): Start checkpoint disabled! [ 1078.923256][T23403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1081.163721][T23407] loop3: detected capacity change from 0 to 2048 [ 1081.450296][ T1279] attempt to access beyond end of device [ 1081.450296][ T1279] loop1: rw=2049, want=40984, limit=40427 [ 1081.599863][T23438] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1082.166038][T23407] EXT4-fs: error -4 creating inode table initialization thread [ 1082.658641][T23407] EXT4-fs (loop3): mount failed [ 1084.201145][T23454] loop1: detected capacity change from 0 to 32768 [ 1084.421689][ T5027] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1084.485902][T23457] loop3: detected capacity change from 0 to 40427 [ 1084.864720][T23457] F2FS-fs (loop3): invalid crc value [ 1084.990817][ T5027] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1085.006827][T23457] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1085.050622][T23457] F2FS-fs (loop3): Start checkpoint disabled! [ 1085.192926][T23454] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1085.201799][T23454] BTRFS info (device loop1): enabling disk space caching [ 1085.208908][T23454] BTRFS info (device loop1): force clearing of disk cache [ 1085.216075][T23454] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1085.225491][T23454] BTRFS info (device loop1): use zstd compression, level 3 [ 1085.233421][T23454] BTRFS info (device loop1): disk space caching is enabled [ 1085.240655][T23454] BTRFS info (device loop1): has skinny extents [ 1085.262749][T23457] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1085.344322][ T5027] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.354313][ T5027] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1085.367486][ T5027] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1085.374129][ T5027] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1085.383226][ T5027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.393017][ T5027] usb 1-1: config 0 descriptor?? [ 1085.519854][T23465] loop4: detected capacity change from 0 to 40427 [ 1085.548413][T23465] F2FS-fs (loop4): invalid crc value [ 1085.589186][T23465] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1085.632966][T23465] F2FS-fs (loop4): Start checkpoint disabled! [ 1085.687509][T23470] loop2: detected capacity change from 0 to 2048 [ 1085.699567][T23465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1088.663280][T23470] EXT4-fs: error -4 creating inode table initialization thread [ 1088.709987][T23454] BTRFS error (device loop1): open_ctree failed: -22 [ 1088.730356][T23470] EXT4-fs (loop2): mount failed [ 1088.880265][ T5027] usbhid 1-1:0.0: can't add hid device: -71 [ 1088.886255][ T5027] usbhid: probe of 1-1:0.0 failed with error -71 [ 1088.903529][ T5027] usb 1-1: USB disconnect, device number 39 [ 1089.001387][T23493] attempt to access beyond end of device [ 1089.001387][T23493] loop3: rw=2049, want=45112, limit=40427 [ 1089.296672][T16720] attempt to access beyond end of device [ 1089.296672][T16720] loop4: rw=2049, want=40992, limit=40427 [ 1089.730421][T23508] loop2: detected capacity change from 0 to 40427 [ 1091.595183][T23516] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1092.190044][T23508] F2FS-fs (loop2): invalid crc value [ 1092.230429][T23508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1092.266467][T23508] F2FS-fs (loop2): Start checkpoint disabled! [ 1092.413999][T23527] loop1: detected capacity change from 0 to 16 [ 1092.423703][T23508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1092.584994][T23527] erofs: (device loop1): mounted with root inode @ nid 36. [ 1092.702724][T23527] attempt to access beyond end of device [ 1092.702724][T23527] loop1: rw=0, want=40, limit=16 [ 1092.881281][T23220] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1094.341337][T23220] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1095.039987][T23220] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.050258][T23220] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1095.093207][T23220] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1095.138963][T23220] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1095.219505][T23220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.265822][T23220] usb 4-1: config 0 descriptor?? [ 1095.350334][T23542] syz.0.4989 (23542): drop_caches: 2 [ 1095.530653][T23209] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1095.552420][T23565] binder: 23564:23565 unknown command 1074553619 [ 1095.558868][T23565] binder: 23564:23565 ioctl c0306201 200000000040 returned -22 [ 1095.855805][T23573] device vlan0 entered promiscuous mode [ 1095.953495][T23209] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1095.964647][T23209] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1097.019539][T23209] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1097.088896][T23209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.240585][T23560] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1098.180777][T23209] usb 3-1: USB disconnect, device number 24 [ 1098.210493][T23220] usbhid 4-1:0.0: can't add hid device: -71 [ 1098.216541][T23220] usbhid: probe of 4-1:0.0 failed with error -71 [ 1098.248191][T23220] usb 4-1: USB disconnect, device number 25 [ 1098.571770][T23589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5002'. [ 1098.670311][ T4297] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1098.920209][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 1099.040682][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.165546][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.244206][ T4297] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1099.253349][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.267486][ T4297] usb 5-1: config 0 descriptor?? [ 1099.321493][ T4297] hub 5-1:0.0: USB hub found [ 1099.525388][T23606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5009'. [ 1099.542845][ T4297] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1099.990272][ T5027] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1100.137248][T23615] kvm: pic: single mode not supported [ 1100.137530][T23615] kvm: pic: single mode not supported [ 1100.149096][ T4297] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 1100.172137][T23615] kvm: pic: non byte write [ 1100.182073][T23615] kvm: pic: non byte write [ 1100.199253][T23615] kvm: pic: non byte write [ 1100.214842][T23615] kvm: pic: non byte write [ 1100.231328][T23615] kvm: pic: non byte write [ 1100.243648][T23615] kvm: pic: non byte write [ 1100.275631][T23615] kvm: pic: non byte write [ 1100.294324][T23615] kvm: pic: non byte write [ 1100.320741][T23615] kvm: pic: non byte write [ 1100.326064][T23615] kvm: pic: non byte write [ 1100.340553][ T4297] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1100.401039][ T5027] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1100.415135][ T5027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.177570][ T4297] usb 5-1: USB disconnect, device number 29 [ 1101.206714][ T5027] usb 3-1: config 0 descriptor?? [ 1101.352124][ T5027] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1101.386064][T23630] fido_id[23630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1101.552146][T23209] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1101.590286][ T5027] gp8psk: usb in 128 operation failed. [ 1101.790144][ T4297] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1101.940928][ T5027] gp8psk: FW Version = 203.38.133 (0xcb2685) Build 2020/164/04 [ 1102.150464][ T5027] gp8psk: usb in 149 operation failed. [ 1102.156014][ T5027] gp8psk: failed to get FPGA version [ 1102.250683][ T5027] gp8psk: usb in 138 operation failed. [ 1102.268956][ T5027] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1102.321694][ T5027] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1102.363954][ T5027] usb 3-1: USB disconnect, device number 25 [ 1102.427943][T23209] usb 2-1: Using ep0 maxpacket: 8 [ 1102.550579][T23209] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1102.740169][ T4297] usb 5-1: device not accepting address 30, error -71 [ 1102.876832][T23670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.884106][T23670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.512231][T23209] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1103.832294][T23209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.993726][T23209] usb 2-1: Product: syz [ 1104.010204][T23209] usb 2-1: Manufacturer: syz [ 1104.019247][T23209] usb 2-1: SerialNumber: syz [ 1104.043209][T23209] usb 2-1: config 0 descriptor?? [ 1104.092266][T23209] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1104.429632][T23209] gspca_zc3xx: reg_w_i err -71 [ 1104.869277][ T4297] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1106.908032][T23209] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1107.539782][T23209] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1107.943801][T23209] usb 2-1: USB disconnect, device number 25 [ 1108.248121][T23715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.255418][T23715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.002344][T23692] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 1112.481033][ T26] audit: type=1326 audit(1772185103.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23747 comm="syz.2.5052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfc4921799 code=0x0 [ 1113.418219][ T26] audit: type=1400 audit(1772185103.987:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=23759 comm="syz.4.5055" [ 1114.426470][T23783] binder: 23781:23783 ioctl c0306201 2000000003c0 returned -14 [ 1116.917703][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.924769][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.705968][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5073'. [ 1117.961351][T23841] SET target dimension over the limit! [ 1118.637957][ T4269] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1118.814308][T23848] device macsec0 entered promiscuous mode [ 1119.124874][T23853] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1119.653701][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1119.670124][ T4269] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1119.679839][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1119.795547][ T4269] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1119.815880][ T4269] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1119.846200][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.893093][ T4269] usb 5-1: config 0 descriptor?? [ 1120.085613][T23865] capability: warning: `syz.0.5081' uses 32-bit capabilities (legacy support in use) [ 1120.180410][ T4269] hdpvr 5-1:0.0: firmware version 0x3c dated H"LlrߧLˆPmg"̓_-he/} [ 1120.196283][ T4269] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1120.400226][ T4269] hdpvr 5-1:0.0: device init failed [ 1120.406838][ T4269] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1120.433709][ T4269] usb 5-1: USB disconnect, device number 32 [ 1121.120301][ T4269] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1121.410181][ T4269] usb 2-1: Using ep0 maxpacket: 8 [ 1121.540433][ T4269] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.616429][ T4269] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.657265][ T4269] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1121.666169][ T4269] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1122.395709][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.437660][ T4269] usb 2-1: config 0 descriptor?? [ 1122.550259][T23344] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1122.760142][T23220] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1122.810216][T23344] usb 3-1: Using ep0 maxpacket: 32 [ 1122.930290][T23344] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1122.941887][T23344] usb 3-1: config 0 has no interface number 0 [ 1122.951546][T23344] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1122.972516][ T4269] smartjoyplus 0003:6666:8804.0002: unknown main item tag 0x2 [ 1122.980018][ T4269] smartjoyplus 0003:6666:8804.0002: item fetching failed at offset 4/5 [ 1122.989151][ T4269] smartjoyplus 0003:6666:8804.0002: parse failed [ 1122.995881][ T4269] smartjoyplus: probe of 0003:6666:8804.0002 failed with error -22 [ 1123.120379][T23220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.130375][T23344] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1123.145963][T23344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.161582][T23344] usb 3-1: Product: syz [ 1123.169414][T23344] usb 3-1: Manufacturer: syz [ 1123.176809][T23220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.186920][T23344] usb 3-1: SerialNumber: syz [ 1123.191262][T23220] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1123.202362][T23344] usb 3-1: config 0 descriptor?? [ 1123.208110][T23220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.251460][T23344] smsc75xx v1.0.0 [ 1123.253040][T23220] usb 5-1: config 0 descriptor?? [ 1123.263940][ T4269] usb 2-1: USB disconnect, device number 26 [ 1124.000707][T23344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1124.083505][T23344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1124.229186][T23220] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1124.237652][T23220] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1124.350332][T23220] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 1125.123476][T23220] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 1125.223963][T23220] usb 5-1: USB disconnect, device number 33 [ 1125.316661][T23934] fido_id[23934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1125.490143][ T5027] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1125.550276][T23330] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1125.896695][T23344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 1125.921905][T23344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 1125.931833][T23344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1125.941347][ T5027] usb 1-1: Using ep0 maxpacket: 16 [ 1125.952271][T23344] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1125.967209][T23344] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1126.043270][T23344] usb 3-1: USB disconnect, device number 26 [ 1126.060481][ T5027] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.150192][T23330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1126.167599][ T5027] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1126.186152][T23330] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1126.206594][ T5027] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1126.217523][T23330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.227402][ T5027] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1126.240860][ T5027] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.340737][ T5027] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1126.362428][ T5027] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1126.669851][T23330] usb 4-1: config 0 descriptor?? [ 1126.779989][ T5027] usb 1-1: Manufacturer: syz [ 1126.790608][T23933] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1126.804527][ T5027] usb 1-1: config 0 descriptor?? [ 1128.279129][T23330] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1128.371302][T23330] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1128.380200][T23330] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1128.387104][T23330] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1128.394542][T23330] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 1128.403314][T23330] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1128.426458][T23330] usb 4-1: USB disconnect, device number 26 [ 1128.490252][ T5027] rc_core: IR keymap rc-hauppauge not found [ 1128.496697][ T5027] Registered IR keymap rc-empty [ 1128.505475][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1128.540759][T23976] fido_id[23976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1128.559307][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1128.592141][ T5027] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1128.606314][ T5027] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 1128.693992][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1128.760403][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1128.800976][T23989] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1129.500623][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.570623][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.601247][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.608032][T23999] fuse: Unknown parameter 'fd0x0000000000000003' [ 1129.640688][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.690643][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.720732][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.750507][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.780491][ T5027] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1129.823389][ T5027] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1129.831564][ T5027] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1129.853443][ T4269] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1129.855204][ T5027] usb 1-1: USB disconnect, device number 41 [ 1129.875883][T23999] tmpfs: Unknown parameter 'usrquota' [ 1130.248983][T24004] ======================================================= [ 1130.248983][T24004] WARNING: The mand mount option has been deprecated and [ 1130.248983][T24004] and is ignored by this kernel. Remove the mand [ 1130.248983][T24004] option from the mount to silence this warning. [ 1130.248983][T24004] ======================================================= [ 1130.406153][ T4269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.491035][ T4269] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1130.548195][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.589922][ T4269] usb 2-1: config 0 descriptor?? [ 1131.112489][ T4269] pwc: Askey VC010 type 2 USB webcam detected. [ 1131.372202][T24013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5127'. [ 1131.820358][ T4269] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1131.910422][ T4269] pwc: recv_control_msg error -32 req 02 val 2700 [ 1131.970851][ T4269] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1132.060226][ T4269] pwc: recv_control_msg error -32 req 04 val 1000 [ 1132.100228][ T4269] pwc: recv_control_msg error -32 req 04 val 1300 [ 1132.420220][ T4269] pwc: recv_control_msg error -32 req 02 val 2000 [ 1132.460298][ T4269] pwc: recv_control_msg error -32 req 02 val 2100 [ 1132.530981][ T4269] pwc: recv_control_msg error -32 req 04 val 1500 [ 1132.820514][ T4269] pwc: recv_control_msg error -71 req 02 val 2400 [ 1133.190857][ T4269] pwc: recv_control_msg error -71 req 02 val 2600 [ 1133.232900][ T4269] pwc: recv_control_msg error -71 req 02 val 2900 [ 1133.320515][ T4269] pwc: recv_control_msg error -71 req 02 val 2800 [ 1133.443895][ T4269] pwc: recv_control_msg error -71 req 04 val 1100 [ 1133.470291][ T4269] pwc: recv_control_msg error -71 req 04 val 1200 [ 1134.145698][ T4269] pwc: Registered as video103. [ 1134.160425][ T4269] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 1134.261954][T23220] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1134.311237][ T4269] usb 2-1: USB disconnect, device number 27 [ 1135.129062][T23220] usb 3-1: device descriptor read/64, error -71 [ 1135.400178][T23220] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1135.950298][T23220] usb 3-1: device descriptor read/64, error -71 [ 1136.160396][T23220] usb usb3-port1: attempt power cycle [ 1137.184336][T24064] netlink: 'syz.2.5142': attribute type 6 has an invalid length. [ 1137.200586][T24064] netlink: 'syz.2.5142': attribute type 6 has an invalid length. [ 1137.881566][T23220] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1138.520666][T23220] usb 3-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1138.547012][T23220] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 1138.610359][T23220] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1138.822796][T23220] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1138.878410][T23220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.897099][T23220] usb 3-1: Product: syz [ 1138.901429][T23220] usb 3-1: Manufacturer: syz [ 1138.906029][T23220] usb 3-1: SerialNumber: syz [ 1138.927159][T23220] usb 3-1: config 0 descriptor?? [ 1139.824083][T24079] netlink: 'syz.4.5149': attribute type 1 has an invalid length. [ 1139.873342][T23220] usb 3-1: USB disconnect, device number 29 [ 1140.689249][T24079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1141.189039][T24081] bond1: (slave gretap1): making interface the new active one [ 1141.254566][T24081] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1141.360468][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1141.424900][T24081] syz.4.5149 (24081) used greatest stack depth: 20176 bytes left [ 1144.306056][T24139] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5166'. [ 1144.343559][ T26] audit: type=1326 audit(1772185134.917:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1144.464172][ T26] audit: type=1326 audit(1772185134.937:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1144.595508][ T26] audit: type=1326 audit(1772185135.037:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1144.706704][ T26] audit: type=1326 audit(1772185135.037:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1144.810270][ T26] audit: type=1326 audit(1772185135.037:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1144.814842][T23209] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1144.909928][ T26] audit: type=1326 audit(1772185135.037:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1145.035299][ T26] audit: type=1326 audit(1772185135.037:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1145.089948][ T26] audit: type=1326 audit(1772185135.037:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1145.125288][ T26] audit: type=1326 audit(1772185135.037:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1145.162505][ T26] audit: type=1326 audit(1772185135.037:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24117 comm="syz.0.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c1f52799 code=0x7ffc0000 [ 1145.320229][T23209] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1145.402846][T23209] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.620384][T23209] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1145.670266][T23209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.706922][T23209] usb 2-1: Product: syz [ 1145.730727][T23209] usb 2-1: Manufacturer: syz [ 1145.862699][T23209] usb 2-1: SerialNumber: syz [ 1146.303288][ T4269] Bluetooth: hci1: command 0x2016 tx timeout [ 1146.465836][T23209] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1147.172321][T23209] usb 2-1: USB disconnect, device number 28 [ 1147.520812][T23220] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1148.040575][T23220] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.057577][T23220] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1148.161786][T24181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1150.502583][T23220] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1151.015579][T23220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.073237][T24186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5179'. [ 1151.090113][T24191] fuse: Unknown parameter '0x0000000000000005' [ 1151.202240][T23220] usb 3-1: can't set config #27, error -71 [ 1151.241884][T23220] usb 3-1: USB disconnect, device number 30 [ 1155.546662][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5188'. [ 1157.080490][T24223] netlink: 876 bytes leftover after parsing attributes in process `syz.1.5190'. [ 1157.724966][T24230] device syzkaller1 entered promiscuous mode [ 1158.246679][T24242] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1160.307912][T24268] tmpfs: Bad value for 'uid' [ 1160.491211][ T5027] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1160.880408][ T5027] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.316726][ T5027] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1161.326296][ T5027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.419335][ T5027] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1163.674151][T24293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1164.180885][ T5027] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1164.200374][ T5027] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1164.208571][ T5027] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 1164.260569][ T5027] usb 5-1: USB disconnect, device number 34 [ 1164.320255][T23344] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1164.785612][T23344] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1164.950369][T23344] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1164.969843][T23344] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1164.979962][T23344] usb 1-1: Product: syz [ 1164.984196][T23344] usb 1-1: Manufacturer: syz [ 1165.000156][T23344] usb 1-1: SerialNumber: syz [ 1165.014275][T23344] usb 1-1: config 0 descriptor?? [ 1165.022126][T24312] mmap: syz.1.5217 (24312) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1165.083153][T23344] usb 1-1: selecting invalid altsetting 0 [ 1165.844804][T23344] usb 1-1: USB disconnect, device number 42 [ 1166.538909][T24340] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5224'. [ 1173.426781][T24390] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1174.492595][T24400] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1177.444882][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.823873][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.090132][T24435] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1180.650195][T24451] device veth0 entered promiscuous mode [ 1180.854400][T24444] device veth0 left promiscuous mode [ 1183.958750][T24481] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1185.048734][T24501] capability: warning: `syz.0.5272' uses deprecated v2 capabilities in a way that may be insecure [ 1187.194679][T24539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1190.105942][ T4230] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1190.260129][T23220] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1190.370393][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 1190.490492][ T4230] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1190.525365][ T4230] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1190.738360][ T4230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1190.785010][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1190.841559][ T4230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1190.892058][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1191.007449][ T4230] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1191.018220][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.034540][ T4230] usb 3-1: config 0 descriptor?? [ 1191.070168][T23344] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1191.160533][T23220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1191.347133][T24557] udc-core: couldn't find an available UDC or it's busy [ 1191.374417][T24557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1191.650638][T23344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.740807][T23344] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1191.750668][T23344] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1191.758836][T23344] usb 2-1: Manufacturer: syz [ 1192.127719][T23344] usb 2-1: config 0 descriptor?? [ 1192.137663][ T4230] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1192.181746][ T4230] usb 3-1: USB disconnect, device number 31 [ 1192.204173][ T4230] usblp0: removed [ 1192.251654][T23220] usb 4-1: string descriptor 0 read error: -71 [ 1192.258839][T23220] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1192.281424][T23220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.324057][T23220] usb 4-1: config 0 descriptor?? [ 1192.354229][T23220] usb 4-1: can't set config #0, error -71 [ 1192.372211][T23220] usb 4-1: USB disconnect, device number 27 [ 1193.310201][ T4230] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1193.387623][T23344] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1193.494016][T23344] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1193.614567][T23344] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1193.719454][T23344] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1193.885446][T23344] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1194.149173][T23344] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1194.318194][T23344] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 1194.866888][T23220] usb 2-1: USB disconnect, device number 29 [ 1194.880105][ C1] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 1196.157812][T24631] fido_id[24631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1196.812927][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1198.740189][T23220] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1199.031201][T23220] usb 1-1: Using ep0 maxpacket: 32 [ 1199.181544][T23220] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1199.543089][T23220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.612624][T23220] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1200.530448][T23220] gspca_nw80x: reg_w err -71 [ 1200.536021][T23220] nw80x: probe of 1-1:3.0 failed with error -71 [ 1200.574254][T23220] usb 1-1: USB disconnect, device number 43 [ 1200.868427][T24697] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5330'. [ 1200.927242][T24697] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5330'. [ 1201.016581][T24697] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5330'. [ 1202.490980][T23344] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1203.525039][T24732] tmpfs: Unknown parameter 'usrquota' [ 1203.640349][T23344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.676547][T23344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.703985][T23344] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1203.740463][T23344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.995386][T23344] usb 4-1: config 0 descriptor?? [ 1204.960256][T23344] usbhid 4-1:0.0: can't add hid device: -71 [ 1204.966242][T23344] usbhid: probe of 4-1:0.0 failed with error -71 [ 1205.072254][T23344] usb 4-1: USB disconnect, device number 28 [ 1209.606289][T24809] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1215.016884][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5372'. [ 1215.026001][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5372'. [ 1216.550201][T23344] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1216.800195][T23344] usb 4-1: Using ep0 maxpacket: 32 [ 1217.087621][T23344] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1217.097566][T23344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.107759][T23344] usb 4-1: config 0 descriptor?? [ 1217.282053][T23344] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1218.069043][T24890] netlink: 'syz.1.5388': attribute type 1 has an invalid length. [ 1218.091028][T24890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1218.107637][T24890] bond1: (slave gretap1): making interface the new active one [ 1218.116557][T24890] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1218.166783][T23493] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1218.180356][T23344] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1218.251657][T23344] sq930x: probe of 4-1:0.0 failed with error -71 [ 1218.285875][T23344] usb 4-1: USB disconnect, device number 29 [ 1219.559065][T24909] Unsupported ieee802154 address type: 0 [ 1219.902727][ T4230] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1219.916234][ T4230] Bluetooth: hci5: Injecting HCI hardware error event [ 1219.925872][T24135] Bluetooth: hci5: hardware error 0x00 [ 1219.947012][T24914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5395'. [ 1220.016737][T24914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1220.034282][T24916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5395'. [ 1220.112089][T24914] netlink: 'syz.0.5395': attribute type 4 has an invalid length. [ 1220.120492][T24914] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5395'. [ 1220.170451][T24914] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1220.582355][T24925] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5397'. [ 1223.337574][T24939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.405736][T23220] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1225.726473][T24970] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5410'. [ 1226.249447][T23220] usb 1-1: Using ep0 maxpacket: 8 [ 1226.782130][T23220] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1226.798554][T23220] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.810422][T23220] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.250471][T23220] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.296190][T23220] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.335296][T23220] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.344500][T23220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.562809][T24983] fuse: Unknown parameter 'grou00000000000000000000' [ 1227.850249][T23220] usb 1-1: usb_control_msg returned -32 [ 1227.855944][T23220] usbtmc 1-1:16.0: can't read capabilities [ 1228.180171][ T4269] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1228.549980][ T6385] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1229.307914][T25009] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1229.330382][ T4269] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1229.360228][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.439596][ T4297] usb 1-1: USB disconnect, device number 44 [ 1229.462171][ T4269] usb 2-1: config 0 descriptor?? [ 1229.500376][ T6385] usb 5-1: config 4 has an invalid interface number: 42 but max is 0 [ 1229.518141][ T4269] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1229.604264][ T6385] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.621136][ T6385] usb 5-1: config 4 has no interface number 0 [ 1229.627260][ T6385] usb 5-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51 [ 1229.636582][ T6385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.682435][ T6385] s2255 5-1:4.42: Could not find bulk-in endpoint [ 1229.701656][ T6385] Sensoray 2255 driver load failed: 0xfffffff4 [ 1229.720153][ T4269] gp8psk: usb in 128 operation failed. [ 1229.778124][ T6385] s2255: probe of 5-1:4.42 failed with error -12 [ 1229.984533][ T21] usb 5-1: USB disconnect, device number 35 [ 1229.984969][ T4269] gp8psk: FW Version = 203.38.133 (0xcb2685) Build 2020/164/04 [ 1230.091383][T25024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1230.196127][ T4269] gp8psk: usb in 149 operation failed. [ 1230.204122][ T4269] gp8psk: failed to get FPGA version [ 1231.450669][ T4269] gp8psk: usb in 138 operation failed. [ 1231.473404][ T4269] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1231.666230][ T4269] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1231.682285][ T4269] usb 2-1: USB disconnect, device number 30 [ 1231.960698][T25037] overlayfs: failed to set xattr on upper [ 1232.012428][T25037] overlayfs: ...falling back to index=off,metacopy=off. [ 1232.114186][T25034] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1232.201720][T25034] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1236.107444][T25077] netlink: 'syz.3.5447': attribute type 6 has an invalid length. [ 1237.240987][T25085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5439'. [ 1237.882873][T25093] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5441'. [ 1238.624416][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.630760][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.303112][ T4297] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1239.654314][T25116] fuse: Unknown parameter '0x0000000000000005' [ 1239.810331][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1241.310255][ T4297] usb 2-1: string descriptor 0 read error: -71 [ 1241.316472][ T4297] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1241.398346][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.542927][ T4297] usb 2-1: config 0 descriptor?? [ 1241.561304][ T4297] usb 2-1: can't set config #0, error -71 [ 1241.872592][ T4297] usb 2-1: USB disconnect, device number 31 [ 1244.309400][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1244.309414][ T26] audit: type=1326 audit(1772185234.877:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25140 comm="syz.4.5455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0f05a1799 code=0x0 [ 1245.811907][T25150] netlink: 'syz.1.5457': attribute type 6 has an invalid length. [ 1245.846711][T25150] netlink: 'syz.1.5457': attribute type 6 has an invalid length. [ 1246.314066][ T4297] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1246.548892][T23321] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1247.441338][T23321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.470205][ T4297] usb 2-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1247.490777][ T4297] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 1247.511442][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1247.531513][T23321] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1247.542317][T23321] usb 3-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0 [ 1247.551102][T23321] usb 3-1: Manufacturer: syz [ 1247.558458][T23321] usb 3-1: config 0 descriptor?? [ 1247.700289][ T4297] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1247.709338][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.730155][ T4297] usb 2-1: Product: syz [ 1247.734362][ T4297] usb 2-1: Manufacturer: syz [ 1247.750198][ T4297] usb 2-1: SerialNumber: syz [ 1247.756183][ T4297] usb 2-1: config 0 descriptor?? [ 1248.155543][T23321] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 1248.808479][T23321] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 1248.816809][T23321] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 1248.825508][T23321] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 1248.833684][T23321] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 1248.847894][T23321] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1248.868338][T23321] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 1249.513145][ T4297] usb 2-1: USB disconnect, device number 32 [ 1249.628454][T23344] usb 3-1: USB disconnect, device number 33 [ 1249.634502][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 1249.701457][T25184] fido_id[25184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1250.010752][T23321] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1250.324962][T25199] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1251.436258][T23321] usb 4-1: Using ep0 maxpacket: 8 [ 1252.250174][T23321] usb 4-1: config 4 has an invalid interface number: 251 but max is 0 [ 1252.282227][T23321] usb 4-1: config 4 has no interface number 0 [ 1252.399819][T25217] SET target dimension over the limit! [ 1252.989262][T23321] usb 4-1: string descriptor 0 read error: -71 [ 1253.770612][ T4297] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1253.823006][T23321] usb 4-1: New USB device found, idVendor=17ef, idProduct=480b, bcdDevice= 9.4f [ 1254.064855][T23321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.088272][T25228] rdma_rxe: rxe creation allowed on top of a real device only [ 1254.097796][T23321] usb 4-1: can't set config #4, error -71 [ 1254.190154][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 1254.285106][T23321] usb 4-1: USB disconnect, device number 30 [ 1256.880148][ T4297] usb 5-1: unable to read config index 0 descriptor/all [ 1256.920126][ T4297] usb 5-1: can't read configurations, error -71 [ 1259.258049][T25280] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5499' sets config #1 [ 1260.820719][ T4297] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1261.070196][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 1261.190324][ T4297] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1261.209688][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.249523][ T4297] usb 2-1: config 0 descriptor?? [ 1261.303075][ T4297] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1261.510273][T23209] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1261.765147][T23209] usb 3-1: Using ep0 maxpacket: 16 [ 1261.892318][T23209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.914187][T23209] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1261.925099][T23209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.979122][T25303] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5506'. [ 1262.613677][T23209] usb 3-1: config 0 descriptor?? [ 1262.660166][ T4297] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1262.730680][ T4297] sq930x: probe of 2-1:0.0 failed with error -71 [ 1262.792409][ T4297] usb 2-1: USB disconnect, device number 33 [ 1263.112602][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.130469][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.148431][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.173595][T25257] delete_channel: no stack [ 1263.193969][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.272068][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.297338][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.309448][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.426746][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1263.448251][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.762691][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.788795][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.819411][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.856290][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.864250][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.880514][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.908725][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.922427][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.933983][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.962222][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.973809][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.982624][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1264.990328][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.003495][ T26] audit: type=1326 audit(1772185255.577:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25328 comm="syz.4.5515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0f05a1799 code=0x0 [ 1265.010666][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.040310][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.049446][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.057438][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.065568][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.082588][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.137379][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1265.640519][T25341] zonefs (nullb0) ERROR: Not a zoned block device [ 1266.927127][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1267.192418][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1267.237988][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1267.343281][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1267.378497][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1267.978235][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.049400][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.057293][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.066323][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.124684][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.132839][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.140326][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.147731][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.160365][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.167795][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.190285][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.206081][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.223295][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.242970][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.310560][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.324375][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.333143][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.345019][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.353751][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.365415][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.374408][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.386113][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.394847][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.406796][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.415826][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.428526][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.437550][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.508272][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1268.525085][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1269.330430][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1269.337873][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.771636][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.779627][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.787402][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.795025][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.802874][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.810738][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.818130][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.825836][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.952286][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1270.959726][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.025755][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.133509][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.180329][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.201779][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.410417][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.417853][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.456045][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.476295][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.486416][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.530062][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.557856][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.577051][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.660112][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1271.667547][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.055135][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.062956][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.070697][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.079413][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.100180][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.107625][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.135167][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.160271][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.172566][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.234952][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.269387][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.280179][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.318212][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.348881][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1272.733035][T25396] blktrace: Concurrent blktraces are not allowed on loop2 [ 1273.322624][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.330366][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.338401][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.416754][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.424299][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.432195][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.458061][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.470373][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.477804][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.485265][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.492933][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.500376][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.507810][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.520019][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.540089][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1273.611924][ T26] audit: type=1804 audit(1772185264.137:25): pid=25402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5533" name="/newroot/512/bus/file0" dev="overlay" ino=2677 res=1 errno=0 [ 1274.177585][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.185058][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.192484][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.199871][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.207511][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.214921][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.222346][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.229726][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.258220][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.276975][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.286901][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.298008][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.308140][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.318965][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.328920][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.339750][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.349547][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.361061][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.369974][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.382135][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.389572][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.402261][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.409689][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.419687][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.432352][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.439782][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.449755][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.465089][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.473236][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.480954][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.488359][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.496462][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.504420][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.512067][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.519470][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.527240][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.535152][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.542835][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.550485][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.557887][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.565832][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.574316][T23209] hid-generic 0003:0458:5016.0007: unknown main item tag 0x0 [ 1274.590780][T23209] hid-generic 0003:0458:5016.0007: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1274.630850][T23209] usb 3-1: USB disconnect, device number 34 [ 1274.948781][T25410] fido_id[25410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1277.011280][T25425] sp0: Synchronizing with TNC [ 1278.958207][T25444] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1279.203896][T25452] loop9: detected capacity change from 0 to 7 [ 1279.235571][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.246657][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.283019][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.293962][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.360254][T25453] loop_set_status: loop9 (被xڬdGݡ [ 1279.360254][T25453] ) has still dirty pages (nrpages=1) [ 1279.378215][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.389172][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.418566][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.429476][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.485790][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.496741][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.521560][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.532482][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.550861][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.561799][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.571205][ T4179] ldm_validate_partition_table(): Disk read failed. [ 1279.594970][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.605929][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.625484][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.636448][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.644979][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1279.655898][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1279.673289][ T4179] Dev loop9: unable to read RDB block 0 [ 1279.854716][ T4179] loop9: unable to read partition table [ 1279.860508][ T4179] loop9: partition table beyond EOD, truncated [ 1279.983250][T25452] ldm_validate_partition_table(): Disk read failed. [ 1280.003592][T25452] Dev loop9: unable to read RDB block 0 [ 1280.078050][T25458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5546'. [ 1280.778473][T25452] loop9: unable to read partition table [ 1280.810122][T25452] loop9: partition table beyond EOD, truncated [ 1280.824588][T25452] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1280.824588][T25452] ) failed (rc=-5) [ 1282.920686][T25449] [ 1282.923046][T25449] ====================================================== [ 1282.930048][T25449] WARNING: possible circular locking dependency detected [ 1282.937154][T25449] syzkaller #0 Not tainted [ 1282.941548][T25449] ------------------------------------------------------ [ 1282.948554][T25449] syz.3.5545/25449 is trying to acquire lock: [ 1282.954610][T25449] ffff88807b622138 ((wq_completion)loop9){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 1282.964352][T25449] [ 1282.964352][T25449] but task is already holding lock: [ 1282.971707][T25449] ffff888147a7c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1282.980493][T25449] [ 1282.980493][T25449] which lock already depends on the new lock. [ 1282.980493][T25449] [ 1282.990884][T25449] [ 1282.990884][T25449] the existing dependency chain (in reverse order) is: [ 1282.999873][T25449] [ 1282.999873][T25449] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 1283.007313][T25449] __mutex_lock_common+0x1e3/0x2400 [ 1283.013013][T25449] mutex_lock_killable_nested+0x17/0x20 [ 1283.019068][T25449] lo_open+0x6a/0x100 [ 1283.023550][T25449] blkdev_get_whole+0x90/0x390 [ 1283.028827][T25449] blkdev_get_by_dev+0x2d0/0xa60 [ 1283.034270][T25449] blkdev_open+0x12d/0x2c0 [ 1283.039187][T25449] do_dentry_open+0x7ff/0xf80 [ 1283.044363][T25449] path_openat+0x26f5/0x2fa0 [ 1283.049453][T25449] do_filp_open+0x1e2/0x410 [ 1283.054447][T25449] do_sys_openat2+0x150/0x4b0 [ 1283.059618][T25449] __x64_sys_openat+0x135/0x160 [ 1283.064961][T25449] do_syscall_64+0x4c/0xa0 [ 1283.069873][T25449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1283.076263][T25449] [ 1283.076263][T25449] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 1283.084047][T25449] __mutex_lock_common+0x1e3/0x2400 [ 1283.089746][T25449] mutex_lock_nested+0x17/0x20 [ 1283.095003][T25449] blkdev_get_by_dev+0x157/0xa60 [ 1283.100436][T25449] swsusp_check+0xa1/0x2b0 [ 1283.105347][T25449] software_resume+0xc6/0x3b0 [ 1283.110515][T25449] resume_store+0xe4/0x130 [ 1283.115424][T25449] kernfs_fop_write_iter+0x379/0x4c0 [ 1283.121199][T25449] vfs_write+0x745/0xd60 [ 1283.125933][T25449] ksys_write+0x152/0x260 [ 1283.130753][T25449] do_syscall_64+0x4c/0xa0 [ 1283.135662][T25449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1283.142059][T25449] [ 1283.142059][T25449] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 1283.150555][T25449] __mutex_lock_common+0x1e3/0x2400 [ 1283.156264][T25449] mutex_lock_nested+0x17/0x20 [ 1283.161522][T25449] software_resume+0x7c/0x3b0 [ 1283.166694][T25449] resume_store+0xe4/0x130 [ 1283.171606][T25449] kernfs_fop_write_iter+0x379/0x4c0 [ 1283.177388][T25449] vfs_write+0x745/0xd60 [ 1283.182122][T25449] ksys_write+0x152/0x260 [ 1283.186944][T25449] do_syscall_64+0x4c/0xa0 [ 1283.191851][T25449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1283.198238][T25449] [ 1283.198238][T25449] -> #3 (&of->mutex){+.+.}-{3:3}: [ 1283.205412][T25449] __mutex_lock_common+0x1e3/0x2400 [ 1283.211111][T25449] mutex_lock_nested+0x17/0x20 [ 1283.216367][T25449] kernfs_seq_start+0x51/0x3c0 [ 1283.221626][T25449] seq_read_iter+0x3c4/0xd50 [ 1283.226712][T25449] vfs_read+0x759/0xd60 [ 1283.231357][T25449] ksys_read+0x152/0x260 [ 1283.236092][T25449] do_syscall_64+0x4c/0xa0 [ 1283.241001][T25449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1283.247388][T25449] [ 1283.247388][T25449] -> #2 (&p->lock){+.+.}-{3:3}: [ 1283.254386][T25449] __mutex_lock_common+0x1e3/0x2400 [ 1283.260096][T25449] mutex_lock_nested+0x17/0x20 [ 1283.265367][T25449] seq_read_iter+0xad/0xd50 [ 1283.270369][T25449] do_iter_readv_writev+0x47e/0x5f0 [ 1283.276078][T25449] do_iter_read+0x20b/0x7c0 [ 1283.281077][T25449] loop_process_work+0x16dd/0x24a0 [ 1283.286685][T25449] process_one_work+0x85f/0x1010 [ 1283.292119][T25449] worker_thread+0xaa6/0x1290 [ 1283.297288][T25449] kthread+0x436/0x520 [ 1283.301851][T25449] ret_from_fork+0x1f/0x30 [ 1283.306771][T25449] [ 1283.306771][T25449] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 1283.316134][T25449] process_one_work+0x7bb/0x1010 [ 1283.321576][T25449] worker_thread+0xaa6/0x1290 [ 1283.326746][T25449] kthread+0x436/0x520 [ 1283.331310][T25449] ret_from_fork+0x1f/0x30 [ 1283.336222][T25449] [ 1283.336222][T25449] -> #0 ((wq_completion)loop9){+.+.}-{0:0}: [ 1283.344267][T25449] __lock_acquire+0x2c42/0x7d10 [ 1283.349611][T25449] lock_acquire+0x19e/0x400 [ 1283.354605][T25449] flush_workqueue+0x16c/0x13d0 [ 1283.359947][T25449] drain_workqueue+0xcf/0x380 [ 1283.365114][T25449] destroy_workqueue+0x7b/0xb20 [ 1283.370455][T25449] __loop_clr_fd+0x234/0xb90 [ 1283.375540][T25449] blkdev_put+0x53f/0x7d0 [ 1283.380367][T25449] blkdev_close+0x76/0xa0 [ 1283.385189][T25449] __fput+0x234/0x930 [ 1283.389664][T25449] task_work_run+0x125/0x1a0 [ 1283.394746][T25449] do_exit+0x626/0x20c0 [ 1283.399398][T25449] do_group_exit+0x12e/0x300 [ 1283.404480][T25449] get_signal+0x6ca/0x12c0 [ 1283.409388][T25449] arch_do_signal_or_restart+0xe7/0x12c0 [ 1283.415514][T25449] exit_to_user_mode_loop+0x9e/0x130 [ 1283.421293][T25449] exit_to_user_mode_prepare+0xee/0x180 [ 1283.427347][T25449] syscall_exit_to_user_mode+0x16/0x40 [ 1283.433301][T25449] do_syscall_64+0x58/0xa0 [ 1283.438213][T25449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1283.444598][T25449] [ 1283.444598][T25449] other info that might help us debug this: [ 1283.444598][T25449] [ 1283.454795][T25449] Chain exists of: [ 1283.454795][T25449] (wq_completion)loop9 --> &disk->open_mutex --> &lo->lo_mutex [ 1283.454795][T25449] [ 1283.468224][T25449] Possible unsafe locking scenario: [ 1283.468224][T25449] [ 1283.475645][T25449] CPU0 CPU1 [ 1283.480979][T25449] ---- ---- [ 1283.486318][T25449] lock(&lo->lo_mutex); [ 1283.490530][T25449] lock(&disk->open_mutex); [ 1283.497607][T25449] lock(&lo->lo_mutex); [ 1283.504335][T25449] lock((wq_completion)loop9); [ 1283.509155][T25449] [ 1283.509155][T25449] *** DEADLOCK *** [ 1283.509155][T25449] [ 1283.517268][T25449] 2 locks held by syz.3.5545/25449: [ 1283.522436][T25449] #0: ffff888020670518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 1283.531706][T25449] #1: ffff888147a7c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 1283.540894][T25449] [ 1283.540894][T25449] stack backtrace: [ 1283.546766][T25449] CPU: 1 PID: 25449 Comm: syz.3.5545 Not tainted syzkaller #0 [ 1283.554192][T25449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1283.564233][T25449] Call Trace: [ 1283.567493][T25449] [ 1283.570399][T25449] dump_stack_lvl+0x188/0x250 [ 1283.575054][T25449] ? load_image+0x400/0x400 [ 1283.579533][T25449] ? show_regs_print_info+0x20/0x20 [ 1283.584711][T25449] ? print_circular_bug+0x12b/0x1a0 [ 1283.589888][T25449] check_noncircular+0x296/0x330 [ 1283.594799][T25449] ? add_chain_block+0x940/0x940 [ 1283.599709][T25449] ? lockdep_lock+0xf1/0x1f0 [ 1283.604279][T25449] ? mark_lock+0x94/0x320 [ 1283.608579][T25449] __lock_acquire+0x2c42/0x7d10 [ 1283.613409][T25449] ? verify_lock_unused+0x140/0x140 [ 1283.618581][T25449] ? verify_lock_unused+0x140/0x140 [ 1283.623751][T25449] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1283.629704][T25449] ? verify_lock_unused+0x140/0x140 [ 1283.634878][T25449] ? memset+0x1e/0x40 [ 1283.638835][T25449] lock_acquire+0x19e/0x400 [ 1283.643315][T25449] ? flush_workqueue+0x150/0x13d0 [ 1283.648315][T25449] ? read_lock_is_recursive+0x10/0x10 [ 1283.653673][T25449] ? __init_swait_queue_head+0xa5/0x150 [ 1283.659194][T25449] flush_workqueue+0x16c/0x13d0 [ 1283.664019][T25449] ? flush_workqueue+0x150/0x13d0 [ 1283.669014][T25449] ? __lock_acquire+0x7d10/0x7d10 [ 1283.674009][T25449] ? __mutex_lock_common+0x465/0x2400 [ 1283.679356][T25449] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1283.684788][T25449] ? lockdep_hardirqs_off+0x70/0x100 [ 1283.690052][T25449] ? rcu_work_rcufn+0x120/0x120 [ 1283.694875][T25449] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1283.700481][T25449] ? finish_wait+0xc0/0x1d0 [ 1283.704959][T25449] drain_workqueue+0xcf/0x380 [ 1283.709609][T25449] destroy_workqueue+0x7b/0xb20 [ 1283.714432][T25449] __loop_clr_fd+0x234/0xb90 [ 1283.718999][T25449] ? lo_release+0x172/0x1f0 [ 1283.723473][T25449] ? lo_open+0x100/0x100 [ 1283.727687][T25449] blkdev_put+0x53f/0x7d0 [ 1283.731995][T25449] blkdev_close+0x76/0xa0 [ 1283.736295][T25449] ? blkdev_open+0x2c0/0x2c0 [ 1283.740856][T25449] __fput+0x234/0x930 [ 1283.744817][T25449] task_work_run+0x125/0x1a0 [ 1283.749379][T25449] do_exit+0x626/0x20c0 [ 1283.753506][T25449] ? put_task_struct+0x80/0x80 [ 1283.758242][T25449] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1283.764197][T25449] ? lock_chain_count+0x20/0x20 [ 1283.769017][T25449] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1283.774013][T25449] do_group_exit+0x12e/0x300 [ 1283.778660][T25449] ? lockdep_hardirqs_on+0x94/0x140 [ 1283.783830][T25449] get_signal+0x6ca/0x12c0 [ 1283.788226][T25449] arch_do_signal_or_restart+0xe7/0x12c0 [ 1283.793838][T25449] ? kernel_read+0x1e0/0x1e0 [ 1283.798401][T25449] ? get_sigframe_size+0x10/0x10 [ 1283.803307][T25449] ? __fget_files+0x40f/0x480 [ 1283.807958][T25449] ? ksys_read+0x1fd/0x260 [ 1283.812345][T25449] ? exit_to_user_mode_loop+0x3b/0x130 [ 1283.817777][T25449] exit_to_user_mode_loop+0x9e/0x130 [ 1283.823033][T25449] exit_to_user_mode_prepare+0xee/0x180 [ 1283.828550][T25449] syscall_exit_to_user_mode+0x16/0x40 [ 1283.833979][T25449] do_syscall_64+0x58/0xa0 [ 1283.838367][T25449] ? clear_bhb_loop+0x30/0x80 [ 1283.843015][T25449] ? clear_bhb_loop+0x30/0x80 [ 1283.847665][T25449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1283.853543][T25449] RIP: 0033:0x7ff1a27a9799 [ 1283.857929][T25449] Code: Unable to access opcode bytes at RIP 0x7ff1a27a976f. [ 1283.865264][T25449] RSP: 002b:00007ff1a0a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1283.873653][T25449] RAX: 0000000000018ff8 RBX: 00007ff1a2a22fa0 RCX: 00007ff1a27a9799 [ 1283.881611][T25449] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 000000000000000a [ 1283.889561][T25449] RBP: 00007ff1a283fbd9 R08: 0000000000000000 R09: 0000000000000000 [ 1283.897512][T25449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.905458][T25449] R13: 00007ff1a2a23038 R14: 00007ff1a2a22fa0 R15: 00007ffe702850f8 [ 1283.913411][T25449]