last executing test programs: 9.331142924s ago: executing program 0 (id=763): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="400f4d00000069"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.698090818s ago: executing program 0 (id=790): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 5.511287749s ago: executing program 0 (id=792): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) capset(&(0x7f0000000000)={0x20080522}, 0x0) 4.932214221s ago: executing program 1 (id=797): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x0) 4.458226353s ago: executing program 0 (id=799): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) 4.276243934s ago: executing program 0 (id=800): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="400f4d00000069"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.167845694s ago: executing program 3 (id=801): sigaltstack(&(0x7f0000000100)={0x0, 0x1}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.754037219s ago: executing program 2 (id=805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10400, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) 2.55210413s ago: executing program 2 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x88a, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) fchown(r0, r1, 0x0) 2.50371842s ago: executing program 3 (id=807): unshare(0x2c020400) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, 0x0) openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) 2.382468131s ago: executing program 3 (id=808): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 2.121149612s ago: executing program 3 (id=809): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) keyctl$invalidate(0x15, 0x0) dup(r0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) mremap(&(0x7f0000723000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000434000/0x3000)=nil) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.975614892s ago: executing program 2 (id=811): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x44080) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000002c0)={0x3, &(0x7f00000000c0)=[{0x11}, {0x4, 0x8}, {0x5cec, 0xc616}]}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48040}, 0x1) r9 = eventfd(0x483c21cf) r10 = eventfd2(0x10000, 0x80000) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SCSI_IOCTL_GET_PCI(r12, 0x5393, &(0x7f0000000000)) pipe(0x0) io_submit(0x0, 0x7, &(0x7f0000000b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xb, r2, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000400)="d285d23a2869be2a8babd2e015c68bc991a12653fc7037c8d7870bf25110f35032c3c01b772d7bb67d257668235c0f367d77f921352f74fb9050ce5043e5c9b378c3a5d060dcb0bb3555e4fdaf7b856156e32ae266c4de228d8e23a482584f0c1952b7bb368d52b2d7c04c2495a5a3db970a07742715aa402bc6d50e37fa18aac3d31b1e014ce53bc0ecf752e347c0aea4108a2f43400d8064fb05734c52d03deecec86f84d07fa5b72444082177525b216cc6ee28b2c6aa58314ee88c3e6c2dfd0b85b038f173b6ba49fe183586ff1c53987fe5e009d4462d7235e90511f2", 0xdf, 0x1, 0x0, 0x2, r7}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000540)="fbc0476ae4b87153423e749a10748ca2416e341067f48b9e0c9740146a38a3a405a1c89d92c849f5a9a503b9a528e527cfe63a7d543f485b980234940dafe4d2426dbf76431826d712a46b081a7ed1a11f253d3dfb277fcc0053c5780e43a227d8a492f8f39d8be9b7093b1715c4647ea124bdd85e73e87a3f7de0754a2b98fcfce0da11ea5358a6fd06f989ee46454c408246b17f53883880f18fcfe2518e642998ee02daa8b021849f9ca92d3cfedf0790a9281996eaaab3b24fdab686a9df065198528a8510b5", 0xc8, 0xa4, 0x0, 0x3, r9}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x8c0f, r3, &(0x7f0000000680)="0a64bda18fe528ac9c8ac80799a2a996816d6c2e309bb37726c15f516851a346a7895746d8043f478fb1bdf326ec623d8c368e1585f7f359b05a2bc019024b1a0d74d8e8fcce5bdba59d14596f269347a079d14396d57b7147cbe87d", 0x5c, 0xffffffffffffffff, 0x0, 0x0, r10}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x46b, r3, &(0x7f00000007c0)="daa087d1e23f71502b0c340e92a9d79f61ae56b6b44a8a414418749130a0865570369243bfed8652d225062ac2190f9d9830473f42433ede35ffaddb1fd1743b1890290293e5e4a04f0111c649de778c16ef39faf3d896376dc86c6d57d71d3f4ee92f630e140bff09a149e67dfc7565062dd2e5f24612b43cfa478fa600bace9d16414219c8844dce07ba0fffa2c088c9ed100abdd66bc3ae1d8309e59afd218371dc484387", 0xa6, 0xa000, 0x0, 0x3}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000880)="f1482ae547a8bc09caf806d3f0adb66b0ccd596d8725a8b88093ce330cb325a2cb3ced970dc0ef61a005a99616b5ee79e5c959b0d1c09f62d17d6a22020a9c2bfaf1f1d745463ccc2c247b4cee5d6582f48ea1c8a9f423b5c7f1de653a5f37e05135c710be998f81c4736ba773fe01ff37d63993e3165eeec285b3814f37164effeb17e30f5e4f27f90229fe46ece2e77294baf272d2cd7e1e70c401957a5a7db1b567056170b312d73773c5afed8267fe2a8b3ad6bbd23f45bc298d68aa99eef9c060dde2f1fae3451b2235cb0167491db362de4a503ab16ba9a8c5c39f", 0xde, 0x4, 0x0, 0x1, r12}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f00000009c0)="7a803d31b1a8ef5d489092f3d1723fa55faf93a3d9f54e74bbacac98313af68d6737cc178aad1025d6a3649a8b97e9ec4138cc70e286a47e96c231a6757b30d5cc2ac0f91a5b4424cd53b9c29b239adb26102e542c76e52aa4e3534da57d4282e095eb326959eab6e44ff7881fcd5300c4a5b1d07d2750b772ec32fef9d6c9b20159bc4883f14a696113e802d2d8681a1a5c8be7bc629cccabca3ece078fccaaeea3773d3aea0dba30dd455b0d4067281360859cecbeb8", 0xb7, 0x3, 0x0, 0x2}]) ioctl$NBD_DO_IT(r0, 0xab03) 1.729014333s ago: executing program 1 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000042}, 0x20000000) 1.728884004s ago: executing program 4 (id=813): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 1.574658704s ago: executing program 4 (id=814): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 1.551580904s ago: executing program 1 (id=815): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.481568194s ago: executing program 3 (id=816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10400, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) 1.358673385s ago: executing program 1 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @initial, {0x9, 0x5}}, @val={0x0, 0x2, @random="7ce2"}, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.232936646s ago: executing program 4 (id=818): unshare(0x2c020400) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, 0x0) openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x8}, 0x18) 1.168348716s ago: executing program 1 (id=819): socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 1.133820366s ago: executing program 4 (id=820): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.098140476s ago: executing program 3 (id=821): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) truncate(&(0x7f0000000080)='./file1/file0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000840) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='_', 0x1}], 0x1, 0x7ffd, 0xffffffff, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[], [{@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, ']]['}}, {@obj_user={'obj_user', 0x3d, 'upperdir'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.@'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x39, 0x33, 0x65, 0x64, 0x64, 0x30, 0x33], 0x2d, [0x31, 0x63, 0x32, 0x66], 0x2d, [0x62, 0x0, 0x36, 0x34], 0x2d, [0x35, 0x63, 0x66, 0x39], 0x2d, [0x30, 0x33, 0x66, 0x62, 0x62, 0x34, 0x31, 0x36]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'delalloc'}}]}, 0xfe, 0x561, &(0x7f00000013c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r6, 0x8004510b, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000001300)={[{@inode64}, {@logdev={'logdev', 0x3d, './file2'}}, {@bsdgroups}, {@sysvgroups}, {@noalign}, {@nogrpid}, {@prjquota}, {@qnoenforce}, {@allocsize={'allocsize', 0x3d, [0x70]}}, {@attr2}, {@nolargeio}, {@nobarrier}, {}, {}, {@grpquota}]}, 0xff, 0x9715, &(0x7f0000009780)="$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") 1.051614026s ago: executing program 0 (id=822): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 980.564386ms ago: executing program 1 (id=823): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203", @ANYRES16=r0], 0x0) 876.422107ms ago: executing program 4 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4430, &(0x7f0000000240)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r0, 0xffffffff7fffffff, 0x4) 515.090128ms ago: executing program 2 (id=825): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x250, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x23c, 0x1, [@m_skbmod={0x184, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xe1, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace9aaf8a1a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x84, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0xffff, 0x0, 0x5, 0xc3cd}}]}, {0x3d, 0x6, "2d3226d2e3c57ead557080202f648bcdfedc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x250}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 425.164408ms ago: executing program 4 (id=826): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) keyctl$invalidate(0x15, 0x0) dup(r0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) mremap(&(0x7f0000723000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000434000/0x3000)=nil) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 240.701589ms ago: executing program 2 (id=827): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0) 0s ago: executing program 2 (id=828): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[], 0x5, 0xa68, &(0x7f0000001b40)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x8000, 0x80000001) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x2) kernel console output (not intermixed with test programs): T4369] Bluetooth: MGMT ver 1.22 [ 81.583256][ T4297] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 81.605812][ T4297] usb 1-1: USB disconnect, device number 2 [ 82.215783][ T125] cfg80211: failed to load regulatory.db [ 82.459411][ T4298] usb 5-1: Cannot set autoneg [ 82.469596][ T4298] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 82.504015][ T4395] tipc: Started in network mode [ 82.508988][ T4395] tipc: Node identity ac1414aa, cluster identity 4711 [ 82.557225][ T4298] usb 5-1: USB disconnect, device number 2 [ 82.575051][ T4395] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 82.582337][ T4395] tipc: Enabled bearer , priority 10 [ 82.713782][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 82.852580][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 82.992642][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.132553][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.179334][ T4401] loop2: detected capacity change from 0 to 4096 [ 83.242380][ T4401] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 83.272610][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.412554][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.552543][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 83.952107][ T4419] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.023002][ T4297] tipc: Node number set to 2886997162 [ 84.034287][ T4401] ntfs3: loop2: Failed to load $MFT. [ 84.112619][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 84.215863][ T4423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 84.275619][ T4423] device bridge_slave_1 left promiscuous mode [ 84.314754][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.327941][ T4427] loop0: detected capacity change from 0 to 64 [ 84.383020][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 84.398813][ T4423] device bridge_slave_0 left promiscuous mode [ 84.419411][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.457706][ T4427] hfs: bad catalog entry type 0 [ 84.572589][ T4298] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.792499][ T4298] usb 2-1: Using ep0 maxpacket: 8 [ 84.804309][ T4298] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.822597][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.841113][ T4298] usb 2-1: Product: syz [ 84.850952][ T4298] usb 2-1: Manufacturer: syz [ 84.870552][ T4298] usb 2-1: SerialNumber: syz [ 84.899939][ T4298] usb 2-1: config 0 descriptor?? [ 85.880511][ T4298] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 86.342070][ T4471] Zero length message leads to an empty skb [ 87.223712][ T4298] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 87.246816][ T4298] usb 2-1: USB disconnect, device number 2 [ 87.416862][ T4476] loop4: detected capacity change from 0 to 4096 [ 87.463583][ T4476] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.515206][ T4476] ntfs3: loop4: Failed to load $MFT. [ 87.773206][ T3582] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.112501][ T3582] usb 4-1: Using ep0 maxpacket: 8 [ 88.122010][ T3582] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 88.142102][ T3582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.182523][ C0] net_ratelimit: 3 callbacks suppressed [ 88.182544][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 88.399445][ T3582] usb 4-1: Product: syz [ 88.462227][ T4501] loop2: detected capacity change from 0 to 512 [ 88.566192][ T3582] usb 4-1: Manufacturer: syz [ 88.613732][ T4501] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.668540][ T3582] usb 4-1: SerialNumber: syz [ 88.835589][ T3582] usb 4-1: config 0 descriptor?? [ 88.847150][ T4501] EXT4-fs (loop2): invalid journal inode [ 88.882059][ T4501] EXT4-fs (loop2): can't get journal size [ 88.894809][ T3582] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 89.100582][ T4501] EXT4-fs (loop2): 1 truncate cleaned up [ 89.145160][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.245082][ T4514] loop0: detected capacity change from 0 to 2048 [ 89.741571][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 89.803842][ T26] audit: type=1800 audit(1732341258.824:3): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.59" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 89.977795][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 89.986760][ T4517] loop4: detected capacity change from 0 to 1024 [ 90.044093][ T4517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.219464][ T4528] loop1: detected capacity change from 0 to 256 [ 90.309823][ T4528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 90.335293][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 90.345581][ T4333] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.704415][ T4333] usb 3-1: Using ep0 maxpacket: 8 [ 90.742517][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 92.170541][ T4540] sched: RT throttling activated [ 92.187996][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.288729][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.343631][ T3582] gspca_sonixj: i2c_w8 err -110 [ 93.433396][ T3582] sonixj: probe of 4-1:0.0 failed with error -110 [ 93.532909][ T4333] usb 3-1: string descriptor 0 read error: -71 [ 93.539269][ T4333] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.556444][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.566467][ T4333] usb 3-1: config 0 descriptor?? [ 93.574370][ T4333] usb 3-1: can't set config #0, error -71 [ 93.581223][ T4333] usb 3-1: USB disconnect, device number 2 [ 93.614050][ T3582] usb 4-1: USB disconnect, device number 2 [ 93.875550][ T4567] loop4: detected capacity change from 0 to 128 [ 93.994125][ T4567] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.075043][ T4567] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.299304][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 94.342798][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 94.471658][ T3582] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.662631][ T3582] usb 4-1: Using ep0 maxpacket: 16 [ 94.674094][ T3582] usb 4-1: config 128 has an invalid interface number: 61 but max is 0 [ 94.689800][ T3582] usb 4-1: config 128 has no interface number 0 [ 94.699684][ T3582] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=25.84 [ 94.726792][ T3582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.737197][ T3582] usb 4-1: Product: syz [ 94.741447][ T3582] usb 4-1: Manufacturer: syz [ 94.746400][ T3582] usb 4-1: SerialNumber: syz [ 95.166417][ T3582] usb 4-1: ignoring: probably an ADSL modem [ 95.202680][ T4333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.370499][ T3582] cxacru 4-1:128.61: usbatm_usb_probe: bind failed: -19! [ 95.381944][ T3582] usb 4-1: USB disconnect, device number 3 [ 95.387961][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 95.414499][ T4333] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 95.425368][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.445991][ T4333] usb 3-1: config 0 descriptor?? [ 96.012544][ T3582] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.201016][ T4646] loop4: detected capacity change from 0 to 4096 [ 96.209882][ T3582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.225174][ T4646] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 96.234947][ T3582] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 96.281089][ T3582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 96.299634][ T3582] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.301526][ T4646] ntfs3: loop4: Failed to load $MFT. [ 96.316462][ T3582] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.324990][ T3582] usb 2-1: Manufacturer: syz [ 96.333484][ T3582] usb 2-1: config 0 descriptor?? [ 96.422520][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 96.548747][ T3582] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 96.580250][ T3582] usb 2-1: USB disconnect, device number 3 [ 96.649503][ T4655] loop3: detected capacity change from 0 to 16 [ 96.664247][ T4655] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.676973][ T4655] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 15 [ 97.209369][ T4671] input: syz1 as /devices/virtual/input/input5 [ 97.401059][ T4667] loop3: detected capacity change from 0 to 32768 [ 97.462584][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 97.505513][ T4667] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.571079][ T4680] loop1: detected capacity change from 0 to 1024 [ 97.591251][ T4680] EXT4-fs: Ignoring removed oldalloc option [ 97.618469][ T4680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.715935][ T4256] ocfs2: Unmounting device (7,3) on (node local) [ 97.925453][ T4333] usb 3-1: Cannot set autoneg [ 97.930287][ T4333] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 98.188206][ T4691] overlayfs: './file1' not a directory [ 98.502635][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 98.824039][ T4333] usb 3-1: USB disconnect, device number 3 [ 98.843401][ T4693] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.131'. [ 98.956420][ T4693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'. [ 99.229833][ T4699] syz.0.132 uses obsolete (PF_INET,SOCK_PACKET) [ 99.294789][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 99.437122][ T3582] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.510635][ T48] Bluetooth: Unknown BR/EDR signaling command 0xee [ 99.517541][ T48] Bluetooth: Wrong link type (-22) [ 99.542506][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 99.542775][ T4333] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.657827][ T3582] usb 4-1: Using ep0 maxpacket: 32 [ 99.667288][ T3582] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 99.712528][ T3582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.720572][ T3582] usb 4-1: Product: syz [ 99.742652][ T4333] usb 1-1: Using ep0 maxpacket: 16 [ 99.757177][ T4333] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 99.770663][ T3582] usb 4-1: Manufacturer: syz [ 99.775756][ T3582] usb 4-1: SerialNumber: syz [ 99.779930][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.802595][ T4333] usb 1-1: Product: syz [ 99.806985][ T4333] usb 1-1: Manufacturer: syz [ 99.810543][ T3582] usb 4-1: config 0 descriptor?? [ 99.811614][ T4333] usb 1-1: SerialNumber: syz [ 99.857534][ T4333] usb 1-1: config 0 descriptor?? [ 99.874389][ T3582] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.908066][ T4333] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 100.040542][ T9] usb 4-1: Failed to submit usb control message: -71 [ 100.041723][ T3582] usb 4-1: USB disconnect, device number 4 [ 100.052644][ T9] usb 4-1: unable to send the bmi data to the device: -71 [ 100.071290][ T9] usb 4-1: unable to get target info from device [ 100.094126][ T9] usb 4-1: could not get target info (-71) [ 100.099983][ T9] usb 4-1: could not probe fw (-71) [ 100.156505][ T4294] usb 1-1: USB disconnect, device number 3 [ 100.252595][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.266331][ T4729] loop1: detected capacity change from 0 to 1024 [ 100.283580][ T4729] EXT4-fs: Ignoring removed oldalloc option [ 100.316717][ T4729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.442495][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 100.451644][ T14] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 100.481552][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.516895][ T14] usb 5-1: Product: syz [ 100.531332][ T14] usb 5-1: Manufacturer: syz [ 100.550165][ T14] usb 5-1: SerialNumber: syz [ 100.574634][ T14] usb 5-1: config 0 descriptor?? [ 100.582843][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 100.631156][ T4728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 100.757112][ T4735] overlayfs: './file1' not a directory [ 101.450998][ T14] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 101.622523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 101.728335][ T48] Bluetooth: Unknown BR/EDR signaling command 0xee [ 101.736408][ T48] Bluetooth: Wrong link type (-22) [ 101.899496][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 101.921727][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 101.944660][ T4742] device bridge_slave_1 left promiscuous mode [ 101.950959][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.993014][ T4742] device bridge_slave_0 left promiscuous mode [ 102.001219][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.523840][ T14] gspca_sonixj: reg_w1 err -71 [ 102.662537][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.382231][ T14] sonixj: probe of 5-1:0.0 failed with error -71 [ 103.390411][ T14] usb 5-1: USB disconnect, device number 3 [ 103.502147][ T4763] loop0: detected capacity change from 0 to 512 [ 103.616047][ T4763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.665081][ T4763] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.702539][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.072821][ T4770] loop1: detected capacity change from 0 to 256 [ 104.392596][ T26] audit: type=1800 audit(1732341273.404:4): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.152" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 104.486286][ T26] audit: type=1800 audit(1732341273.404:5): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.152" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 104.493400][ T4770] FAT-fs (loop1): Directory bread(block 64) failed [ 104.608171][ T48] Bluetooth: Unknown BR/EDR signaling command 0xee [ 104.614820][ T48] Bluetooth: Wrong link type (-22) [ 104.618350][ T4770] FAT-fs (loop1): Directory bread(block 65) failed [ 104.635735][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 104.654327][ T4770] FAT-fs (loop1): Directory bread(block 66) failed [ 104.712679][ T4770] FAT-fs (loop1): Directory bread(block 67) failed [ 104.733950][ T4775] loop4: detected capacity change from 0 to 1024 [ 104.742548][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.777377][ T4770] FAT-fs (loop1): Directory bread(block 68) failed [ 104.803266][ T4775] EXT4-fs: Ignoring removed oldalloc option [ 104.834122][ T4770] FAT-fs (loop1): Directory bread(block 69) failed [ 104.840843][ T4770] FAT-fs (loop1): Directory bread(block 70) failed [ 104.891903][ T4775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.902511][ T4770] FAT-fs (loop1): Directory bread(block 71) failed [ 104.913047][ T4770] FAT-fs (loop1): Directory bread(block 72) failed [ 104.929833][ T4770] FAT-fs (loop1): Directory bread(block 73) failed [ 105.182146][ C1] Unknown status report in ack skb [ 105.195946][ T4770] process 'syz.1.155' launched './file0' with NULL argv: empty string added [ 105.248912][ T46] kworker/u4:3: attempt to access beyond end of device [ 105.248912][ T46] loop1: rw=2049, sector=1160, nr_sectors = 4 limit=256 [ 105.292057][ T4789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'. [ 105.468719][ T4792] overlayfs: './file1' not a directory [ 106.286344][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.417944][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 106.625924][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 107.457923][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.514958][ T4806] loop3: detected capacity change from 0 to 512 [ 107.570555][ T4806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.654925][ T48] Bluetooth: Unknown BR/EDR signaling command 0xee [ 107.661530][ T48] Bluetooth: Wrong link type (-22) [ 107.708997][ T4806] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.876327][ T26] audit: type=1800 audit(1732341276.894:6): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.168" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.961636][ T26] audit: type=1800 audit(1732341276.894:7): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.168" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 107.999098][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 108.502543][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 108.512745][ T4333] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 108.598782][ T4835] loop3: detected capacity change from 0 to 1024 [ 108.742807][ T4835] EXT4-fs: Ignoring removed oldalloc option [ 108.799087][ T4835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.846080][ T4333] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.081421][ T4333] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 109.091266][ T4333] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 109.101577][ T4333] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.124763][ T4333] usb 3-1: string descriptor 0 read error: -22 [ 109.131039][ T4333] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.131926][ T4843] loop4: detected capacity change from 0 to 512 [ 109.153218][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.256010][ T4294] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.410602][ T4845] overlayfs: './file1' not a directory [ 109.542566][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.983536][ T4843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.121142][ T4333] usb 3-1: 0:2 : does not exist [ 110.220132][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.179: corrupted inode contents [ 110.247328][ T4843] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #16: comm syz.4.179: mark_inode_dirty error [ 110.273669][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.179: corrupted inode contents [ 110.295808][ T4843] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.179: mark_inode_dirty error [ 110.322948][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.179: corrupted inode contents [ 110.375571][ T4843] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 110.415300][ T4843] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.179: corrupted inode contents [ 110.443364][ T4294] usb 1-1: Using ep0 maxpacket: 8 [ 110.454429][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 110.465247][ T4294] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 110.480096][ T1168] usb 3-1: USB disconnect, device number 4 [ 110.482737][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 110.495031][ T4294] usb 1-1: Product: syz [ 110.499220][ T4294] usb 1-1: Manufacturer: syz [ 110.504542][ T4294] usb 1-1: SerialNumber: syz [ 110.512524][ T4843] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.179: mark_inode_dirty error [ 110.524560][ T4294] usb 1-1: config 0 descriptor?? [ 110.550567][ T4843] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 110.582865][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.597647][ T4294] usbtest 1-1:0.0: FX2 device [ 110.603368][ T4843] EXT4-fs (loop4): 1 truncate cleaned up [ 110.610072][ T4294] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 110.627224][ T4843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.636696][ T4843] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.654640][ T4846] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.692474][ T4846] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:16: Failed to release dquot type 1 [ 110.840248][ T4843] device syzkaller0 entered promiscuous mode [ 111.072467][ T3582] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.115365][ T48] Bluetooth: Unknown BR/EDR signaling command 0xee [ 111.123728][ T48] Bluetooth: Wrong link type (-22) [ 111.211646][ T4861] loop2: detected capacity change from 0 to 512 [ 111.262803][ T3582] usb 2-1: Using ep0 maxpacket: 8 [ 111.277044][ T3582] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 111.301584][ T3582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.305987][ T4333] usb 1-1: USB disconnect, device number 4 [ 111.343373][ T4861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.354711][ T3582] usb 2-1: Product: syz [ 111.358930][ T3582] usb 2-1: Manufacturer: syz [ 111.372565][ T4861] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.410215][ T3582] usb 2-1: SerialNumber: syz [ 111.450561][ T3582] usb 2-1: config 0 descriptor?? [ 111.487903][ T26] audit: type=1800 audit(1732341280.514:8): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 111.499169][ T3582] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 111.524542][ T26] audit: type=1800 audit(1732341280.554:9): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 111.582462][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 111.626008][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 112.084629][ T4881] loop3: detected capacity change from 0 to 512 [ 112.091756][ T4881] EXT4-fs: Ignoring removed nobh option [ 112.099896][ T4881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.148497][ T4881] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.164200][ T4881] EXT4-fs (loop3): 1 truncate cleaned up [ 112.169912][ T4881] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.282745][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 112.674882][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 112.731629][ T3582] gspca_sonixj: reg_w1 err -71 [ 112.795210][ T3582] sonixj: probe of 2-1:0.0 failed with error -71 [ 112.972097][ T3582] usb 2-1: USB disconnect, device number 4 [ 113.705671][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 113.744959][ T4294] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.952547][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 113.967683][ T4294] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 113.996896][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 114.015118][ T4294] usb 4-1: Product: syz [ 114.026542][ T4294] usb 4-1: Manufacturer: syz [ 114.037194][ T4294] usb 4-1: SerialNumber: syz [ 114.056485][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 114.094497][ T4294] usb 4-1: config 0 descriptor?? [ 114.111125][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 114.156645][ T4294] usbtest 4-1:0.0: FX2 device [ 114.161385][ T4294] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 114.313541][ T4910] loop2: detected capacity change from 0 to 512 [ 114.321047][ T4910] EXT4-fs: Ignoring removed nobh option [ 114.327479][ T4910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.413936][ T4910] EXT4-fs (loop2): 1 truncate cleaned up [ 114.440003][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.406263][ T125] usb 4-1: USB disconnect, device number 5 [ 115.428630][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 115.466409][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 115.588363][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 115.796163][ T4937] loop2: detected capacity change from 0 to 2048 [ 115.813703][ T4937] EXT4-fs: Ignoring removed nobh option [ 115.819307][ T4937] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.899303][ T4937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.502619][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.580789][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 117.049093][ T4964] loop1: detected capacity change from 0 to 512 [ 117.094669][ T4964] EXT4-fs: Ignoring removed nobh option [ 117.119130][ T4964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.184896][ T4964] EXT4-fs (loop1): 1 truncate cleaned up [ 117.193143][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.542504][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.614542][ T4990] loop3: detected capacity change from 0 to 1024 [ 117.651517][ T4990] EXT4-fs: Ignoring removed oldalloc option [ 117.707984][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 117.720434][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.739867][ T4995] device bridge_slave_1 left promiscuous mode [ 117.746723][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.839837][ T4995] device bridge_slave_0 left promiscuous mode [ 117.846264][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.208449][ T5007] overlayfs: './file1' not a directory [ 119.056971][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 119.256298][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 119.387304][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 119.564593][ T5022] loop0: detected capacity change from 0 to 256 [ 119.606558][ T5022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 119.883574][ T48] Bluetooth: Unknown BR/EDR signaling command 0xee [ 119.890165][ T48] Bluetooth: Wrong link type (-22) [ 119.896034][ T48] Bluetooth: hci4: link tx timeout [ 119.901467][ T48] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.102558][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.131620][ T5044] loop4: detected capacity change from 0 to 1024 [ 120.145454][ T5041] loop3: detected capacity change from 0 to 512 [ 120.152312][ T5041] EXT4-fs: Ignoring removed nobh option [ 120.188045][ T5041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.229461][ T5044] EXT4-fs: Ignoring removed oldalloc option [ 120.266440][ T5041] EXT4-fs (loop3): 1 truncate cleaned up [ 120.289226][ T5041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.318359][ T5044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.816451][ T5064] overlayfs: './file1' not a directory [ 121.142611][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.550212][ T5067] loop0: detected capacity change from 0 to 256 [ 121.626190][ T5067] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 121.810815][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 121.929491][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 121.943590][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 121.958658][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 122.180169][ T4255] Bluetooth: Unknown BR/EDR signaling command 0xee [ 122.186870][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.195055][ T4255] Bluetooth: Wrong link type (-22) [ 122.200450][ T4255] Bluetooth: hci4: link tx timeout [ 122.206076][ T4255] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.369345][ T5095] overlayfs: missing 'lowerdir' [ 122.511533][ T5098] loop4: detected capacity change from 0 to 512 [ 122.549262][ T5098] EXT4-fs: Ignoring removed nobh option [ 122.593253][ T5098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.637482][ T5098] EXT4-fs (loop4): 1 truncate cleaned up [ 122.678226][ T5103] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.836540][ T5098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.299836][ T5100] loop1: detected capacity change from 0 to 256 [ 123.312868][ T5106] loop2: detected capacity change from 0 to 1024 [ 123.355721][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.365384][ T5106] EXT4-fs: Ignoring removed oldalloc option [ 123.395212][ T5111] loop0: detected capacity change from 0 to 256 [ 123.439250][ T5111] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 123.458498][ T5106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.592744][ T5100] FAT-fs (loop1): Directory bread(block 64) failed [ 123.601352][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 123.650965][ T4294] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 123.670266][ T5100] FAT-fs (loop1): Directory bread(block 65) failed [ 123.682200][ T5100] FAT-fs (loop1): Directory bread(block 66) failed [ 123.752696][ T5100] FAT-fs (loop1): Directory bread(block 67) failed [ 123.921142][ T5117] overlayfs: './file1' not a directory [ 123.939340][ T4294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.960376][ T4294] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 124.505779][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 124.569412][ T5100] FAT-fs (loop1): Directory bread(block 68) failed [ 124.603983][ T5100] FAT-fs (loop1): Directory bread(block 69) failed [ 124.645840][ T5100] FAT-fs (loop1): Directory bread(block 70) failed [ 124.667524][ T5100] FAT-fs (loop1): Directory bread(block 71) failed [ 124.669630][ T4294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.789641][ T5100] FAT-fs (loop1): Directory bread(block 72) failed [ 124.814307][ T4294] usb 4-1: string descriptor 0 read error: -22 [ 124.820650][ T4294] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.831022][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.850117][ T5100] FAT-fs (loop1): Directory bread(block 73) failed [ 124.876404][ T4294] usb 4-1: 0:2 : does not exist [ 125.040795][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 125.095565][ T4294] usb 4-1: USB disconnect, device number 6 [ 125.154641][ T5099] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 125.220090][ T5099] team0: Port device netdevsim0 added [ 125.542738][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.665337][ T5134] loop4: detected capacity change from 0 to 32768 [ 125.703800][ T5141] loop2: detected capacity change from 0 to 512 [ 125.704514][ T5134] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 125.758833][ T5141] EXT4-fs: Ignoring removed nobh option [ 125.791871][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 125.824189][ T5141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.885678][ T5141] EXT4-fs (loop2): 1 truncate cleaned up [ 125.893737][ T5141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.240015][ T4294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.307993][ T5162] netlink: 'syz.4.297': attribute type 72 has an invalid length. [ 126.316358][ T5162] netlink: 'syz.4.297': attribute type 8 has an invalid length. [ 126.433203][ T4294] usb 1-1: Using ep0 maxpacket: 8 [ 126.440321][ T4294] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 126.455712][ T4294] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.466059][ T4294] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.476814][ T4294] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.481604][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.487917][ T4294] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.528242][ T4294] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.537695][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.582599][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.598064][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 126.692550][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 126.703021][ T7] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 126.712094][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.763270][ T7] usb 4-1: Product: syz [ 126.765681][ T4294] usb 1-1: usb_control_msg returned -32 [ 126.772794][ T7] usb 4-1: Manufacturer: syz [ 126.780690][ T7] usb 4-1: SerialNumber: syz [ 126.793779][ T4294] usbtmc 1-1:16.0: can't read capabilities [ 126.805000][ T7] usb 4-1: config 0 descriptor?? [ 126.826287][ T7] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 126.842574][ T125] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 127.088321][ T125] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.274623][ T125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.411389][ T125] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.560974][ T125] usb 2-1: string descriptor 0 read error: -22 [ 127.653542][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.666923][ T125] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.700440][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.724775][ T7] usb 4-1: USB disconnect, device number 7 [ 127.740100][ T5185] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 127.759350][ T125] usb 2-1: 0:2 : does not exist [ 127.808089][ T5189] loop2: detected capacity change from 0 to 512 [ 127.920271][ T5189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.948299][ T5189] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.986836][ T125] usb 2-1: USB disconnect, device number 5 [ 128.017974][ T5199] netlink: 'syz.4.308': attribute type 72 has an invalid length. [ 128.026479][ T5199] netlink: 'syz.4.308': attribute type 8 has an invalid length. [ 128.177928][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 128.336516][ T5205] loop2: detected capacity change from 0 to 512 [ 128.354930][ T5205] EXT4-fs: Ignoring removed nobh option [ 128.367433][ T5205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.395572][ T5205] EXT4-fs (loop2): 1 truncate cleaned up [ 128.412807][ T5205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.612487][ T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.662493][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.797797][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 128.807419][ T125] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 128.819218][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.828187][ T125] usb 5-1: Product: syz [ 128.833169][ T125] usb 5-1: Manufacturer: syz [ 128.838585][ T125] usb 5-1: SerialNumber: syz [ 128.853211][ T125] usb 5-1: config 0 descriptor?? [ 128.865348][ T125] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 128.866628][ T5224] netlink: 'syz.3.319': attribute type 72 has an invalid length. [ 128.885685][ T5224] netlink: 'syz.3.319': attribute type 8 has an invalid length. [ 128.999356][ T14] usb 1-1: USB disconnect, device number 5 [ 129.233310][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.270800][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 129.292984][ T5235] loop1: detected capacity change from 0 to 128 [ 129.339693][ T5237] loop0: detected capacity change from 0 to 64 [ 129.446398][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 129.468612][ T7] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 129.501420][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.519357][ T7] usb 4-1: Product: syz [ 129.527129][ T7] usb 4-1: Manufacturer: syz [ 129.537559][ T7] usb 4-1: SerialNumber: syz [ 129.568338][ T7] usb 4-1: config 0 descriptor?? [ 129.602072][ T7] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 129.702511][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.806963][ T4333] usb 4-1: USB disconnect, device number 8 [ 129.982444][ T1168] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 130.000012][ T5258] netlink: 892 bytes leftover after parsing attributes in process `syz.2.331'. [ 130.055783][ T5260] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 130.066517][ T125] gspca_sonixj: reg_w1 err -71 [ 130.152612][ T125] sonixj: probe of 5-1:0.0 failed with error -71 [ 130.169955][ T125] usb 5-1: USB disconnect, device number 4 [ 130.175965][ T1168] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.194310][ T1168] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.220548][ T1168] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.239086][ T1168] usb 2-1: string descriptor 0 read error: -22 [ 130.250844][ T1168] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.268720][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.292683][ T1168] usb 2-1: 0:2 : does not exist [ 130.326108][ T5269] loop0: detected capacity change from 0 to 512 [ 130.334403][ T5269] EXT4-fs: Ignoring removed nobh option [ 130.352586][ T5269] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.431006][ T5269] EXT4-fs (loop0): 1 truncate cleaned up [ 130.482730][ T5269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.498485][ T1168] usb 2-1: USB disconnect, device number 6 [ 130.742500][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 130.832024][ T5288] netlink: 892 bytes leftover after parsing attributes in process `syz.2.343'. [ 130.929217][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 131.193088][ T5296] loop1: detected capacity change from 0 to 4096 [ 131.198345][ T125] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.212188][ T5296] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 131.220020][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 131.266816][ T5296] ntfs3: loop1: Failed to load $MFT. [ 131.394217][ T125] usb 5-1: no configurations [ 131.398868][ T125] usb 5-1: can't read configurations, error -22 [ 131.557973][ T1168] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.692446][ T125] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.782555][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.792931][ T5307] loop1: detected capacity change from 0 to 1024 [ 131.801470][ T5307] ext4: Unknown parameter 'dont_hash' [ 132.572541][ T1168] usb 1-1: Using ep0 maxpacket: 16 [ 132.582198][ T1168] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 132.623578][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629988][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.677677][ T1168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.680129][ T5307] loop1: detected capacity change from 0 to 32768 [ 132.733588][ T1168] usb 1-1: Product: syz [ 132.734751][ T125] usb 5-1: no configurations [ 132.737779][ T1168] usb 1-1: Manufacturer: syz [ 132.762470][ T125] usb 5-1: can't read configurations, error -22 [ 132.773226][ T125] usb usb5-port1: attempt power cycle [ 132.782624][ T1168] usb 1-1: SerialNumber: syz [ 132.790864][ T4351] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.822491][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.838202][ T1168] usb 1-1: config 0 descriptor?? [ 132.847237][ T5312] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 132.878488][ T1168] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 133.130752][ T1168] usb 1-1: USB disconnect, device number 6 [ 133.236528][ T5324] loop1: detected capacity change from 0 to 512 [ 133.246189][ T5324] EXT4-fs: Ignoring removed nobh option [ 133.258676][ T5324] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.268787][ T125] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.277580][ T5324] EXT4-fs (loop1): 1 truncate cleaned up [ 133.283539][ T5324] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.329782][ T125] usb 5-1: no configurations [ 133.334662][ T125] usb 5-1: can't read configurations, error -22 [ 133.351032][ T5327] loop3: detected capacity change from 0 to 4096 [ 133.367791][ T5327] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 133.382642][ T5327] ntfs3: loop3: Failed to load $MFT. [ 133.462599][ T3582] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 133.502445][ T125] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.536142][ T125] usb 5-1: no configurations [ 133.540805][ T125] usb 5-1: can't read configurations, error -22 [ 133.548248][ T125] usb usb5-port1: unable to enumerate USB device [ 133.644210][ T3582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.654351][ T3582] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.664564][ T3582] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.676612][ T3582] usb 3-1: string descriptor 0 read error: -22 [ 133.683289][ T3582] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.692410][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.706198][ T3582] usb 3-1: 0:2 : does not exist [ 133.866220][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.919811][ T3582] usb 3-1: USB disconnect, device number 5 [ 133.976587][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 134.109215][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 134.409991][ T5350] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 134.498582][ T5350] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.595637][ T5350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.730754][ T5354] loop4: detected capacity change from 0 to 1024 [ 134.739806][ T5354] ext4: Unknown parameter 'dont_hash' [ 134.902605][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.439195][ T3582] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.474216][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 135.615924][ T5354] loop4: detected capacity change from 0 to 32768 [ 135.686787][ T3582] usb 2-1: Using ep0 maxpacket: 16 [ 135.714563][ T3582] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 135.780349][ T3582] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 135.852117][ T3582] usb 2-1: Manufacturer: syz [ 135.928034][ T3582] usb 2-1: config 0 descriptor?? [ 135.942511][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.959217][ T5362] loop0: detected capacity change from 0 to 4096 [ 135.977547][ T5364] loop2: detected capacity change from 0 to 512 [ 135.993405][ T5364] EXT4-fs: Ignoring removed nobh option [ 136.017396][ T5364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.029343][ T5362] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 136.087532][ T5364] EXT4-fs (loop2): 1 truncate cleaned up [ 136.098714][ T5362] ntfs3: loop0: Failed to load $MFT. [ 136.111700][ T5364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.132493][ T4294] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.158824][ T3582] usb 2-1: Limiting number of CPorts to U8_MAX [ 136.170342][ T3582] usb 2-1: Not enough endpoints found in device, aborting! [ 136.324763][ T4294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.347753][ T4294] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.393428][ T4294] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 136.449064][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.470867][ T4294] usb 4-1: Product: syz [ 136.487929][ T4294] usb 4-1: Manufacturer: syz [ 136.508539][ T4294] usb 4-1: SerialNumber: syz [ 136.527940][ T4333] usb 2-1: USB disconnect, device number 7 [ 136.550790][ T5372] loop4: detected capacity change from 0 to 32768 [ 136.563513][ T5372] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.378 (5372) [ 136.582852][ T4294] usb 4-1: config 0 descriptor?? [ 136.600514][ T5372] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 136.611074][ T5372] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 136.621394][ T5372] BTRFS info (device loop4): using free space tree [ 136.666861][ T5380] overlayfs: missing 'lowerdir' [ 136.780832][ T5372] BTRFS info (device loop4): enabling ssd optimizations [ 136.910158][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 136.982499][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.030903][ T4260] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.198636][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 137.320333][ T5408] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.387' sets config #9 [ 137.574133][ T5416] loop1: detected capacity change from 0 to 1024 [ 137.582604][ T5416] ext4: Unknown parameter 'dont_hash' [ 138.280761][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.438270][ T5416] loop1: detected capacity change from 0 to 32768 [ 138.488641][ T4351] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.777480][ T5421] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 138.815039][ T5414] usb 4-1: USB disconnect, device number 9 [ 138.849967][ T5424] overlayfs: missing 'lowerdir' [ 138.929154][ T5430] loop1: detected capacity change from 0 to 512 [ 138.987246][ T5427] loop2: detected capacity change from 0 to 4096 [ 138.996674][ T5426] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 139.007289][ T5421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.016650][ T5430] EXT4-fs: Ignoring removed nobh option [ 139.024354][ T5430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.048972][ T5427] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 139.121215][ T5430] EXT4-fs (loop1): 1 truncate cleaned up [ 139.151552][ T5430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.181319][ T5427] ntfs3: loop2: Failed to load $MFT. [ 139.302508][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.439871][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 139.475737][ T5448] device bridge_slave_1 left promiscuous mode [ 139.482145][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.493584][ T5448] device bridge_slave_0 left promiscuous mode [ 139.500814][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.522893][ T4333] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.722675][ T4333] usb 1-1: Using ep0 maxpacket: 16 [ 139.730797][ T4333] usb 1-1: config 0 has no interfaces? [ 139.749620][ T4333] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 139.754682][ T5454] loop3: detected capacity change from 0 to 1024 [ 139.765218][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.766042][ T5454] EXT4-fs: Ignoring removed oldalloc option [ 139.784969][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 139.811013][ T4333] usb 1-1: Product: syz [ 139.815447][ T4333] usb 1-1: Manufacturer: syz [ 139.836522][ T5454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.837222][ T4333] r8152-cfgselector 1-1: config 0 descriptor?? [ 139.942639][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 140.122545][ T3582] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.321699][ T5465] overlayfs: './file1' not a directory [ 140.962551][ T5413] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 141.084525][ T4333] r8152-cfgselector 1-1: Unknown version 0x0000 [ 141.102207][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.133331][ T4333] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 141.194711][ T5413] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.239623][ T5413] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.251313][ T5413] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.271370][ T5413] usb 2-1: string descriptor 0 read error: -22 [ 141.280846][ T5413] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.294344][ T3582] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.299810][ T5413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.313324][ T3582] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.315603][ T3582] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 141.432778][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.440568][ T5413] usb 2-1: 0:2 : does not exist [ 141.446145][ T3582] usb 3-1: Product: syz [ 141.450340][ T3582] usb 3-1: Manufacturer: syz [ 141.455013][ T3582] usb 3-1: SerialNumber: syz [ 141.461466][ T3582] usb 3-1: config 0 descriptor?? [ 141.481865][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 141.652530][ T5413] usb 2-1: USB disconnect, device number 8 [ 141.702740][ T5475] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 141.787079][ T5475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.957512][ T5488] loop3: detected capacity change from 0 to 512 [ 141.965511][ T5488] EXT4-fs: Ignoring removed nobh option [ 141.973493][ T5488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.015552][ T5488] EXT4-fs (loop3): 1 truncate cleaned up [ 142.021242][ T5488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.067961][ T5489] loop0: detected capacity change from 0 to 4096 [ 142.098201][ T5489] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 142.105321][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.180316][ T5489] ntfs3: loop0: Failed to load $MFT. [ 143.142507][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.191965][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 143.241029][ T3582] usb 3-1: USB disconnect, device number 6 [ 143.272517][ T4333] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.380852][ T5506] loop4: detected capacity change from 0 to 1024 [ 143.453483][ T5506] EXT4-fs: Ignoring removed oldalloc option [ 143.472782][ T4333] usb 2-1: Using ep0 maxpacket: 8 [ 143.493652][ T4333] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.533287][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.583828][ T4333] usb 2-1: Product: syz [ 143.588134][ T4333] usb 2-1: Manufacturer: syz [ 143.595847][ T5506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.622675][ T4333] usb 2-1: SerialNumber: syz [ 143.783784][ T5521] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 143.814723][ T4333] usb 2-1: config 0 descriptor?? [ 144.130358][ T5528] overlayfs: './file1' not a directory [ 144.182475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.740548][ T5526] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 144.755287][ T5521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.827613][ T5534] loop3: detected capacity change from 0 to 2048 [ 144.828313][ T5534] EXT4-fs: Ignoring removed nobh option [ 144.828334][ T5534] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.889801][ T4333] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.918537][ T5534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.995798][ T5538] loop2: detected capacity change from 0 to 2048 [ 145.009145][ T5538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.222484][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.366527][ T5542] loop0: detected capacity change from 0 to 4096 [ 145.410209][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 145.704441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 146.230558][ T5542] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 146.262998][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.293687][ T5542] ntfs3: loop0: Failed to load $MFT. [ 146.443868][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 147.214557][ T5551] loop2: detected capacity change from 0 to 512 [ 147.260687][ T5551] EXT4-fs: Ignoring removed nobh option [ 147.302251][ T5551] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.312456][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.354069][ T4333] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 147.364188][ T4333] usb 2-1: USB disconnect, device number 9 [ 147.392713][ T5551] EXT4-fs (loop2): 1 truncate cleaned up [ 147.398488][ T5551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.561403][ T5554] loop3: detected capacity change from 0 to 256 [ 147.719034][ T5554] FAT-fs (loop3): Directory bread(block 64) failed [ 147.751817][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 147.753463][ T5554] FAT-fs (loop3): Directory bread(block 65) failed [ 147.773172][ T5554] FAT-fs (loop3): Directory bread(block 66) failed [ 147.800520][ T5554] FAT-fs (loop3): Directory bread(block 67) failed [ 147.845193][ T5554] FAT-fs (loop3): Directory bread(block 68) failed [ 147.851787][ T5554] FAT-fs (loop3): Directory bread(block 69) failed [ 147.862975][ T5410] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.864049][ T5554] FAT-fs (loop3): Directory bread(block 70) failed [ 147.886663][ T5554] FAT-fs (loop3): Directory bread(block 71) failed [ 147.894609][ T5554] FAT-fs (loop3): Directory bread(block 72) failed [ 147.901168][ T5554] FAT-fs (loop3): Directory bread(block 73) failed [ 147.907742][ T5574] loop2: detected capacity change from 0 to 1024 [ 147.908555][ T5574] EXT4-fs: Ignoring removed oldalloc option [ 148.011734][ T5574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.030485][ T5410] usb 1-1: device descriptor read/64, error -71 [ 148.372489][ T5410] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.509433][ T5582] overlayfs: './file1' not a directory [ 148.552519][ T5410] usb 1-1: device descriptor read/64, error -71 [ 149.052081][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.131298][ T1168] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.332500][ T1168] usb 2-1: Using ep0 maxpacket: 8 [ 149.341822][ T1168] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.380078][ T1168] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 149.391871][ T5585] loop3: detected capacity change from 0 to 1024 [ 149.412336][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.417739][ T5585] hfsplus: failed to load root directory [ 149.428429][ T5410] usb usb1-port1: attempt power cycle [ 149.452782][ T1168] usb 2-1: Product: syz [ 149.457143][ T1168] usb 2-1: Manufacturer: syz [ 149.461747][ T1168] usb 2-1: SerialNumber: syz [ 149.476226][ T1168] usb 2-1: config 0 descriptor?? [ 149.492653][ T1168] cdc_ether 2-1:0.0: skipping garbage [ 149.498058][ T1168] usb 2-1: bad CDC descriptors [ 149.522045][ T1168] usb 2-1: unsupported MDLM descriptors [ 149.537477][ T1168] cdc_acm 2-1:0.0: skipping garbage [ 149.586044][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 149.722472][ T1168] usb 2-1: USB disconnect, device number 10 [ 149.864445][ T5594] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.864445][ T5594] The task syz.4.446 (5594) triggered the difference, watch for misbehavior. [ 150.022677][ T5410] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.100671][ T5410] usb 1-1: device descriptor read/8, error -71 [ 150.102663][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.392777][ T5410] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.475918][ T5410] usb 1-1: device descriptor read/8, error -71 [ 150.812748][ T5410] usb usb1-port1: unable to enumerate USB device [ 150.877586][ T5602] loop4: detected capacity change from 0 to 256 [ 150.891139][ T5612] loop2: detected capacity change from 0 to 256 [ 150.908067][ T5608] loop0: detected capacity change from 0 to 512 [ 150.915480][ T5608] EXT4-fs: Ignoring removed nobh option [ 150.934037][ T5608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.937503][ T5602] FAT-fs (loop4): Directory bread(block 64) failed [ 150.953252][ T5612] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.982650][ T5602] FAT-fs (loop4): Directory bread(block 65) failed [ 150.989265][ T5602] FAT-fs (loop4): Directory bread(block 66) failed [ 151.010988][ T5608] EXT4-fs (loop0): 1 truncate cleaned up [ 151.028121][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.055941][ T5612] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 151.080209][ T5615] loop1: detected capacity change from 0 to 1024 [ 151.088416][ T5602] FAT-fs (loop4): Directory bread(block 67) failed [ 151.102276][ T5615] EXT4-fs: Ignoring removed oldalloc option [ 151.110578][ T5612] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 151.142482][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.148395][ T5602] FAT-fs (loop4): Directory bread(block 68) failed [ 151.168556][ T5602] FAT-fs (loop4): Directory bread(block 69) failed [ 151.175202][ T5615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.188408][ T5602] FAT-fs (loop4): Directory bread(block 70) failed [ 151.195358][ T5602] FAT-fs (loop4): Directory bread(block 71) failed [ 151.202110][ T5602] FAT-fs (loop4): Directory bread(block 72) failed [ 151.209039][ T5602] FAT-fs (loop4): Directory bread(block 73) failed [ 151.401629][ T26] audit: type=1800 audit(1732341320.424:10): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.455" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 151.599080][ T5626] overlayfs: './file1' not a directory [ 152.182515][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.580604][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 152.725770][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 152.764813][ T5635] loop2: detected capacity change from 0 to 1024 [ 152.801386][ T5633] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 152.828998][ T5633] batman_adv: batadv0: Adding interface: ip6gretap2 [ 152.837494][ T5635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.878223][ T5633] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.922555][ T5633] batman_adv: batadv0: Interface activated: ip6gretap2 [ 153.214533][ T5648] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.227425][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.513365][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.712469][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 153.724814][ T14] usb 1-1: no configurations [ 153.783294][ T14] usb 1-1: can't read configurations, error -22 [ 154.052525][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.117498][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 154.262540][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.302687][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 154.310373][ T14] usb 1-1: no configurations [ 154.330521][ T14] usb 1-1: can't read configurations, error -22 [ 154.356757][ T14] usb usb1-port1: attempt power cycle [ 154.412756][ T5655] loop3: detected capacity change from 0 to 32768 [ 154.468822][ T5655] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 154.468822][ T5655] [ 154.481084][ T5655] ERROR: (device loop3): remounting filesystem as read-only [ 154.489165][ T5655] syz.3.470: attempt to access beyond end of device [ 154.489165][ T5655] loop3: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 154.522774][ T5662] loop1: detected capacity change from 0 to 512 [ 154.539892][ T5662] EXT4-fs: Ignoring removed nobh option [ 154.557340][ T5662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.594963][ T106] blkno = 5002c, nblocks = 1 [ 154.601000][ T106] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 154.601000][ T106] [ 154.621704][ T5662] EXT4-fs (loop1): 1 truncate cleaned up [ 154.627604][ T5662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.628539][ T5660] loop4: detected capacity change from 0 to 4096 [ 154.661966][ T5664] loop2: detected capacity change from 0 to 2048 [ 154.669006][ T5664] EXT4-fs: Ignoring removed nobh option [ 154.675027][ T5664] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.694824][ T5660] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 154.716228][ T5664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.727542][ T5660] ntfs3: loop4: Failed to load $MFT. [ 154.802466][ T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.834343][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 154.834914][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 154.840072][ T14] usb 1-1: no configurations [ 154.855808][ T14] usb 1-1: can't read configurations, error -22 [ 154.908776][ T5671] loop2: detected capacity change from 0 to 1024 [ 154.923169][ T5671] EXT4-fs: Ignoring removed oldalloc option [ 154.940201][ T5671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.012507][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 155.043252][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 155.049760][ T14] usb 1-1: no configurations [ 155.054846][ T14] usb 1-1: can't read configurations, error -22 [ 155.061328][ T14] usb usb1-port1: unable to enumerate USB device [ 155.302484][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.306811][ T5675] overlayfs: './file1' not a directory [ 156.290487][ T5680] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 156.310993][ T5680] batman_adv: batadv0: Adding interface: ip6gretap2 [ 156.318060][ T5680] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.328391][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 156.343861][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.414214][ T5680] batman_adv: batadv0: Interface activated: ip6gretap2 [ 156.476035][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 156.793011][ T5410] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.912494][ T14] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 157.149770][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.204981][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.350886][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.382492][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.515205][ T14] usb 4-1: string descriptor 0 read error: -22 [ 157.521470][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.611804][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.673971][ T14] usb 4-1: 0:2 : does not exist [ 157.698730][ T5701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.482'. [ 157.792570][ T5410] usb 2-1: Using ep0 maxpacket: 8 [ 157.810922][ T5410] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 157.839512][ T5410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.854139][ T5410] usb 2-1: Product: syz [ 157.858742][ T5410] usb 2-1: Manufacturer: syz [ 157.863430][ T5410] usb 2-1: SerialNumber: syz [ 157.879396][ T14] usb 4-1: USB disconnect, device number 10 [ 157.879908][ T5410] usb 2-1: config 0 descriptor?? [ 157.944053][ T5709] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.028087][ T5704] loop4: detected capacity change from 0 to 2048 [ 158.083492][ T5704] EXT4-fs: Ignoring removed nobh option [ 158.109482][ T5704] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.181872][ T5707] loop2: detected capacity change from 0 to 4096 [ 158.237661][ T5707] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 158.259916][ T5704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.285552][ T5707] ntfs3: loop2: Failed to load $MFT. [ 158.329842][ T5704] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 158.357416][ T5410] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 158.422515][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.569572][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 158.607787][ T5720] loop0: detected capacity change from 0 to 1024 [ 158.616700][ T5720] EXT4-fs: Ignoring removed oldalloc option [ 158.705433][ T5720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.751447][ T5726] loop3: detected capacity change from 0 to 2048 [ 158.770123][ T5726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.821005][ T5728] netlink: 888 bytes leftover after parsing attributes in process `syz.2.491'. [ 159.274299][ T5735] overlayfs: './file1' not a directory [ 159.462577][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.134763][ T5410] gspca_sonixj: reg_r err -32 [ 160.139530][ T5410] sonixj: probe of 2-1:0.0 failed with error -32 [ 160.282208][ T5741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.495'. [ 160.361788][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 160.502510][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.950776][ T5752] loop2: detected capacity change from 0 to 2048 [ 160.957934][ T5752] EXT4-fs: Ignoring removed nobh option [ 160.963583][ T5752] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.038122][ T5752] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.084512][ T5410] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 161.088765][ T14] usb 2-1: USB disconnect, device number 11 [ 161.118131][ T5751] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 161.255351][ T5762] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.401185][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 161.538022][ T5770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 161.547119][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.725163][ T5410] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.743497][ T5410] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 161.759350][ T5410] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 161.768386][ T5410] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 161.770343][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 161.778919][ T5410] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.784671][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.823821][ T5410] usb 5-1: string descriptor 0 read error: -22 [ 161.858034][ T5410] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.882662][ T5410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.886829][ T5780] loop2: detected capacity change from 0 to 1024 [ 161.915644][ T5774] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 161.916730][ T5780] EXT4-fs: Ignoring removed oldalloc option [ 161.952026][ T5410] usb 5-1: 0:2 : does not exist [ 161.956515][ T5774] kvm: pic: non byte read [ 161.962104][ T5774] kvm: pic: non byte read [ 161.968950][ T5774] kvm: pic: non byte read [ 161.979226][ T5774] kvm: pic: non byte read [ 161.988619][ T14] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.008638][ T5774] kvm: pic: non byte read [ 162.008760][ T5780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.015627][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.043948][ T5774] kvm: pic: non byte read [ 162.059316][ T5774] kvm: pic: level sensitive irq not supported [ 162.059449][ T5774] kvm: pic: non byte read [ 162.079410][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.125839][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.177697][ T7] usb 5-1: USB disconnect, device number 9 [ 162.187287][ T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.200944][ T14] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.211870][ T14] usb 2-1: Manufacturer: syz [ 162.251869][ T14] usb 2-1: config 0 descriptor?? [ 162.588545][ T5786] overlayfs: './file1' not a directory [ 163.091765][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.330540][ T14] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 163.439050][ T14] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 163.603937][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 163.611980][ T5792] loop3: detected capacity change from 0 to 2048 [ 163.643147][ T5792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.758458][ T1168] usb 2-1: USB disconnect, device number 12 [ 163.972486][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.102499][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.182615][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 164.192339][ T14] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 164.222092][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.262268][ T14] usb 5-1: Product: syz [ 164.298944][ T14] usb 5-1: Manufacturer: syz [ 164.327700][ T14] usb 5-1: SerialNumber: syz [ 164.378652][ T14] usb 5-1: config 0 descriptor?? [ 164.457403][ T14] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 164.646232][ T5809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 164.738319][ T5811] loop2: detected capacity change from 0 to 2048 [ 164.753210][ T5811] EXT4-fs: Ignoring removed nobh option [ 164.765252][ T5811] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.772984][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 164.838114][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.905566][ T5811] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 165.042178][ T5824] loop0: detected capacity change from 0 to 1024 [ 165.053422][ T5824] EXT4-fs: Ignoring removed oldalloc option [ 165.078844][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 165.129808][ T5824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.142531][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.398260][ T14] gspca_sonixj: reg_r err -32 [ 165.403602][ T14] sonixj: probe of 5-1:0.0 failed with error -32 [ 165.697634][ T5841] overlayfs: './file1' not a directory [ 166.421925][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.433120][ T5410] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.527626][ T5840] loop3: detected capacity change from 0 to 4096 [ 166.536833][ T5840] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 166.571493][ T5840] ntfs3: loop3: Failed to load $MFT. [ 166.642672][ T5410] usb 3-1: Using ep0 maxpacket: 32 [ 166.659444][ T5410] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 166.688345][ T5410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.711150][ T5410] usb 3-1: Product: syz [ 166.740361][ T5410] usb 3-1: Manufacturer: syz [ 166.767746][ T5410] usb 3-1: SerialNumber: syz [ 166.783575][ T5849] loop1: detected capacity change from 0 to 256 [ 166.794896][ T5413] usb 5-1: USB disconnect, device number 10 [ 166.814125][ T5410] usb 3-1: config 0 descriptor?? [ 166.821709][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 166.913782][ T5410] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 166.946255][ T5856] loop3: detected capacity change from 0 to 256 [ 166.967784][ T5856] FAT-fs (loop3): Directory bread(block 64) failed [ 166.974598][ T5856] FAT-fs (loop3): Directory bread(block 65) failed [ 166.981324][ T5856] FAT-fs (loop3): Directory bread(block 66) failed [ 166.988603][ T5856] FAT-fs (loop3): Directory bread(block 67) failed [ 166.995640][ T5856] FAT-fs (loop3): Directory bread(block 68) failed [ 167.002197][ T5856] FAT-fs (loop3): Directory bread(block 69) failed [ 167.009375][ T5856] FAT-fs (loop3): Directory bread(block 70) failed [ 167.016359][ T5856] FAT-fs (loop3): Directory bread(block 71) failed [ 167.026879][ T5856] FAT-fs (loop3): Directory bread(block 72) failed [ 167.042065][ T9] usb 3-1: Failed to submit usb control message: -71 [ 167.044583][ T5856] FAT-fs (loop3): Directory bread(block 73) failed [ 167.049624][ T5410] usb 3-1: USB disconnect, device number 7 [ 167.077090][ T9] usb 3-1: unable to send the bmi data to the device: -71 [ 167.090163][ T9] usb 3-1: unable to get target info from device [ 167.098462][ T9] usb 3-1: could not get target info (-71) [ 167.127632][ T9] usb 3-1: could not probe fw (-71) [ 167.153235][ T5859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 167.252623][ T5413] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.383052][ T5863] loop0: detected capacity change from 0 to 2048 [ 167.409327][ T5863] EXT4-fs: Ignoring removed nobh option [ 167.415960][ T5863] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.462487][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.471426][ T5413] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 167.498237][ T5863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.502415][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.518421][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.528508][ T5413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 167.545323][ T5413] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 167.554794][ T5413] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 167.563314][ T5413] usb 5-1: Manufacturer: syz [ 167.569659][ T5413] usb 5-1: config 0 descriptor?? [ 167.587797][ T5863] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 167.609771][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 167.630575][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 167.843969][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 167.983819][ T5413] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 168.007883][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 168.008823][ T5413] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 168.074035][ T5886] loop2: detected capacity change from 0 to 4096 [ 168.087086][ T5886] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 168.102973][ T4294] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 168.133398][ T5886] ntfs3: loop2: Failed to load $MFT. [ 168.279314][ T7] usb 5-1: USB disconnect, device number 11 [ 168.302500][ T4294] usb 2-1: Using ep0 maxpacket: 8 [ 168.324059][ T4294] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 168.353039][ T4294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.392433][ T4294] usb 2-1: Product: syz [ 168.396882][ T4294] usb 2-1: Manufacturer: syz [ 168.401497][ T4294] usb 2-1: SerialNumber: syz [ 168.429693][ T4294] usb 2-1: config 0 descriptor?? [ 168.461412][ T4294] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 168.502477][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.559905][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 168.612493][ T14] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 168.804240][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.832499][ T14] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 168.842231][ T14] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 168.851642][ T4294] gspca_sonixj: reg_r err -32 [ 168.856668][ T4294] sonixj: probe of 2-1:0.0 failed with error -32 [ 168.877441][ T14] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 168.910144][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.938278][ T14] usb 1-1: string descriptor 0 read error: -22 [ 168.945594][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.962487][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.986272][ T14] usb 1-1: 0:2 : does not exist [ 169.047389][ T5911] netlink: 'syz.2.552': attribute type 21 has an invalid length. [ 169.132522][ T5914] loop3: detected capacity change from 0 to 2048 [ 169.149712][ T5914] EXT4-fs: Ignoring removed nobh option [ 169.156413][ T5914] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.189901][ T14] usb 1-1: USB disconnect, device number 16 [ 169.212563][ T5413] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.228333][ T5914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.249949][ T5914] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 169.339884][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 169.378670][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 169.402449][ T5413] usb 5-1: Using ep0 maxpacket: 32 [ 169.429680][ T5413] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 169.452722][ T5413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.464283][ T5413] usb 5-1: Product: syz [ 169.468487][ T5413] usb 5-1: Manufacturer: syz [ 169.473341][ T5413] usb 5-1: SerialNumber: syz [ 169.495690][ T5413] usb 5-1: config 0 descriptor?? [ 169.511995][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 169.539574][ T5413] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 169.542780][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.713785][ T9] usb 5-1: Failed to submit usb control message: -71 [ 169.720818][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 169.728909][ T5413] usb 5-1: USB disconnect, device number 12 [ 169.735544][ T9] usb 5-1: unable to get target info from device [ 169.747568][ T9] usb 5-1: could not get target info (-71) [ 169.753842][ T9] usb 5-1: could not probe fw (-71) [ 170.122423][ T3582] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 170.302445][ T3582] usb 1-1: Using ep0 maxpacket: 8 [ 170.314172][ T3582] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.325004][ T3582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.334181][ T3582] usb 1-1: Product: syz [ 170.338548][ T3582] usb 1-1: Manufacturer: syz [ 170.343575][ T3582] usb 1-1: SerialNumber: syz [ 170.359473][ T3582] usb 1-1: config 0 descriptor?? [ 170.372560][ T5413] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 170.449592][ T4255] block nbd2: Receive control failed (result -32) [ 170.461524][ T5934] block nbd2: shutting down sockets [ 170.570717][ T3582] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 170.582486][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.589227][ T5413] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.634832][ T5947] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.636522][ T5413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.666575][ T26] audit: type=1326 audit(1732341339.694:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.697254][ T5413] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.708914][ T5413] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.727034][ T26] audit: type=1326 audit(1732341339.724:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.763553][ T5413] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 170.776573][ T5413] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.784868][ T26] audit: type=1326 audit(1732341339.724:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.807499][ T5413] usb 4-1: Manufacturer: syz [ 170.827153][ T5413] usb 4-1: config 0 descriptor?? [ 170.842197][ T26] audit: type=1326 audit(1732341339.724:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.844032][ T14] usb 2-1: USB disconnect, device number 13 [ 170.873236][ T26] audit: type=1326 audit(1732341339.724:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.907984][ T26] audit: type=1326 audit(1732341339.724:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.935745][ T26] audit: type=1326 audit(1732341339.724:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.960773][ T26] audit: type=1326 audit(1732341339.724:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 170.997822][ T26] audit: type=1326 audit(1732341339.724:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 171.062535][ T26] audit: type=1326 audit(1732341339.724:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 171.120470][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 171.123164][ T5954] loop1: detected capacity change from 0 to 2048 [ 171.141018][ T5954] EXT4-fs: Ignoring removed nobh option [ 171.147803][ T5954] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.189712][ T5954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.259058][ T5413] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 171.294019][ T5954] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 171.302217][ T5413] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 171.440987][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 171.527481][ T5413] usb 4-1: USB disconnect, device number 11 [ 171.622516][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.642642][ T14] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 171.668721][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 171.751308][ T5971] loop1: detected capacity change from 0 to 1024 [ 171.758610][ T5971] EXT4-fs: Ignoring removed oldalloc option [ 171.777320][ T5971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.834469][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.844574][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.854941][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.868058][ T14] usb 5-1: string descriptor 0 read error: -22 [ 171.874506][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.883664][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.913604][ T14] usb 5-1: 0:2 : does not exist [ 172.015197][ T3582] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.027505][ T3582] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 172.042765][ T3582] usb 1-1: media controller created [ 172.080406][ T3582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.127241][ T14] usb 5-1: USB disconnect, device number 13 [ 172.294236][ T3582] i2c i2c-1: Added multiplexed i2c bus 2 [ 172.299933][ T3582] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 172.302674][ T5979] overlayfs: './file1' not a directory [ 172.333013][ T3582] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 172.345649][ T3582] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 172.470520][ T3582] DVB: Unable to find symbol r820t_attach() [ 172.576887][ T3582] usb 1-1: USB disconnect, device number 17 [ 172.662764][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.722668][ T5406] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.760439][ T5988] program syz.4.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.889757][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 172.932510][ T5406] usb 4-1: Using ep0 maxpacket: 8 [ 172.944541][ T5406] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 172.958203][ T5406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.972023][ T5406] usb 4-1: Product: syz [ 172.980116][ T5406] usb 4-1: Manufacturer: syz [ 172.987110][ T5406] usb 4-1: SerialNumber: syz [ 172.997740][ T5406] usb 4-1: config 0 descriptor?? [ 173.040081][ T5406] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 173.152115][ T4255] block nbd2: Receive control failed (result -32) [ 173.168612][ T5986] block nbd2: shutting down sockets [ 173.441035][ T5406] gspca_sonixj: reg_r err -32 [ 173.450727][ T5406] sonixj: probe of 4-1:0.0 failed with error -32 [ 173.604870][ T6002] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.702726][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.752215][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 174.192431][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.252443][ T1168] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 174.382494][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 174.400235][ T14] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 174.422109][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 174.423662][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.444679][ T1168] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.464326][ T1168] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.482419][ T14] usb 3-1: Product: syz [ 174.486706][ T1168] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.495730][ T14] usb 3-1: Manufacturer: syz [ 174.510536][ T14] usb 3-1: SerialNumber: syz [ 174.519097][ T1168] usb 1-1: string descriptor 0 read error: -22 [ 174.540375][ T14] usb 3-1: config 0 descriptor?? [ 174.552538][ T1168] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.571780][ T1168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.602682][ T14] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 174.742554][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.827410][ T1168] usb 1-1: 0:2 : does not exist [ 174.855628][ T1168] usb 1-1: USB disconnect, device number 18 [ 175.174119][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.684239][ T4414] usb 3-1: Failed to submit usb control message: -110 [ 175.691652][ T4414] usb 3-1: unable to send the bmi data to the device: -110 [ 175.698976][ T4414] usb 3-1: unable to get target info from device [ 175.706002][ T4414] usb 3-1: could not get target info (-110) [ 175.711932][ T4414] usb 3-1: could not probe fw (-110) [ 175.727343][ T1168] usb 4-1: USB disconnect, device number 12 [ 175.739079][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 175.782522][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.916122][ T5406] usb 3-1: USB disconnect, device number 8 [ 176.304194][ T6039] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.460457][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 176.540303][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 176.819333][ T4255] block nbd1: Receive control failed (result -32) [ 176.822577][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.827949][ T6041] block nbd1: shutting down sockets [ 177.862547][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.041414][ T6062] loop1: detected capacity change from 0 to 32768 [ 178.073502][ T6062] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.102258][ T6067] loop2: detected capacity change from 0 to 4096 [ 178.150339][ T6067] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.162512][ T4294] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 178.374622][ T6067] ntfs3: loop2: Failed to load $MFT. [ 178.382120][ T6078] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.392495][ T4248] ocfs2: Unmounting device (7,1) on (node local) [ 178.464751][ T4294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.485504][ T4294] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.506171][ T4294] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.534731][ T6080] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.571925][ T6080] kvm: pic: non byte read [ 178.587163][ T4294] usb 5-1: string descriptor 0 read error: -22 [ 178.595320][ T26] kauditd_printk_skb: 181 callbacks suppressed [ 178.595335][ T26] audit: type=1326 audit(1732341347.624:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e92d7e819 code=0x7ffc0000 [ 178.641243][ T4294] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.671778][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.694985][ T26] audit: type=1326 audit(1732341347.664:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f1e92d7e819 code=0x7ffc0000 [ 178.731560][ T4294] usb 5-1: 0:2 : does not exist [ 178.777889][ T26] audit: type=1326 audit(1732341347.664:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e92d7e819 code=0x7ffc0000 [ 178.811519][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 178.847421][ T26] audit: type=1326 audit(1732341347.664:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e92d7e819 code=0x7ffc0000 [ 178.902476][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.938516][ T5410] usb 5-1: USB disconnect, device number 14 [ 179.080239][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 179.312442][ T14] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 179.509206][ T14] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.519302][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.535386][ T14] usb 1-1: Product: syz [ 179.539656][ T14] usb 1-1: Manufacturer: syz [ 179.550967][ T14] usb 1-1: SerialNumber: syz [ 179.563787][ T14] usb 1-1: config 0 descriptor?? [ 179.655857][ T4255] block nbd3: Receive control failed (result -32) [ 179.665013][ T6097] block nbd3: shutting down sockets [ 179.844287][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 179.942518][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.816380][ T6121] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 180.863300][ T6119] loop4: detected capacity change from 0 to 4096 [ 180.867763][ T6121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.880144][ T6119] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 180.892502][ T5410] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.930394][ T6119] ntfs3: loop4: Failed to load $MFT. [ 180.982528][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.093950][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 181.152677][ T5410] usb 4-1: Using ep0 maxpacket: 8 [ 181.164233][ T5410] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.173513][ T5410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.181514][ T5410] usb 4-1: Product: syz [ 181.185749][ T5410] usb 4-1: Manufacturer: syz [ 181.190368][ T5410] usb 4-1: SerialNumber: syz [ 181.196861][ T5410] usb 4-1: config 0 descriptor?? [ 181.232470][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 181.406962][ T5410] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.414611][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.430612][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.441640][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.451610][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.466497][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.476201][ T7] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.484439][ T7] usb 3-1: Manufacturer: syz [ 181.490685][ T7] usb 3-1: config 0 descriptor?? [ 181.623562][ T6135] netlink: 'syz.4.632': attribute type 21 has an invalid length. [ 181.905284][ T7] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 181.919002][ T7] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 182.022492][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.052896][ T5406] usb 1-1: USB disconnect, device number 19 [ 182.176263][ T4294] usb 3-1: USB disconnect, device number 9 [ 182.543231][ T6139] block nbd1: shutting down sockets [ 183.062480][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.249716][ T6156] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 183.290754][ T6156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.394220][ T6152] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.417643][ T5410] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.441965][ T5410] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 183.450271][ T5410] usb 4-1: media controller created [ 183.468667][ T5410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.590557][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 183.631232][ T6171] binder_alloc: 6170: binder_alloc_buf, no vma [ 183.681639][ T5410] i2c i2c-1: Added multiplexed i2c bus 2 [ 183.713091][ T5410] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 183.723890][ T5410] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 183.759101][ T5410] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 183.870408][ T5410] DVB: Unable to find symbol r820t_attach() [ 183.940037][ T5410] usb 4-1: USB disconnect, device number 13 [ 184.062488][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.102481][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.197907][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.246151][ T7] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 184.265612][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.289285][ T7] usb 1-1: Product: syz [ 184.302725][ T7] usb 1-1: Manufacturer: syz [ 184.307354][ T7] usb 1-1: SerialNumber: syz [ 184.323605][ T7] usb 1-1: config 0 descriptor?? [ 184.362000][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 184.384679][ T6190] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 184.392549][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 184.408620][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 184.417007][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.427600][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.438545][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.449020][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.449422][ T6190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.462640][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.478754][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.599243][ T26] audit: type=1326 audit(1732341353.624:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.628950][ T26] audit: type=1326 audit(1732341353.624:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.683122][ T26] audit: type=1326 audit(1732341353.624:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.711572][ T26] audit: type=1326 audit(1732341353.624:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.738301][ T4255] block nbd2: Receive control failed (result -32) [ 184.738366][ T6180] block nbd2: shutting down sockets [ 184.745857][ T26] audit: type=1326 audit(1732341353.624:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.759920][ T14] usb 2-1: usb_control_msg returned -32 [ 184.773160][ T26] audit: type=1326 audit(1732341353.624:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.800903][ T26] audit: type=1326 audit(1732341353.624:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.812899][ T14] usbtmc 2-1:16.0: can't read capabilities [ 184.848535][ T26] audit: type=1326 audit(1732341353.624:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.881455][ T26] audit: type=1326 audit(1732341353.634:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.929022][ T26] audit: type=1326 audit(1732341353.634:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.4.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe784d7e819 code=0x7ffc0000 [ 184.999429][ T6205] binder: BINDER_SET_CONTEXT_MGR already set [ 185.019014][ T6205] binder: 6203:6205 ioctl 4018620d 20000040 returned -16 [ 185.040940][ T6202] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 185.142479][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.216113][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 185.449862][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 185.484251][ T6220] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 185.493568][ T6221] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.027434][ T6240] binder_alloc: 6239: binder_alloc_buf, no vma [ 186.182542][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.402130][ T6251] netlink: 'syz.2.676': attribute type 4 has an invalid length. [ 186.504869][ T6251] syz.2.676 (6251) used greatest stack depth: 19832 bytes left [ 186.544008][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 186.676730][ T4255] block nbd3: Receive control failed (result -32) [ 186.676996][ T6238] block nbd3: shutting down sockets [ 186.836446][ T14] usb 1-1: USB disconnect, device number 20 [ 186.960056][ T4294] usb 2-1: USB disconnect, device number 14 [ 187.032494][ T5406] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 187.154977][ T6269] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.222524][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.232675][ T5406] usb 5-1: Using ep0 maxpacket: 8 [ 187.242183][ T5406] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.263667][ T5406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.271763][ T5406] usb 5-1: Product: syz [ 187.276581][ T5406] usb 5-1: Manufacturer: syz [ 187.281277][ T5406] usb 5-1: SerialNumber: syz [ 187.314913][ T5406] usb 5-1: config 0 descriptor?? [ 187.550193][ T5406] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.698986][ T6292] loop1: detected capacity change from 0 to 64 [ 187.825601][ T6292] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 187.858283][ T6294] loop2: detected capacity change from 0 to 1024 [ 187.897036][ T6294] EXT4-fs: Ignoring removed oldalloc option [ 187.913636][ T6292] loop1: detected capacity change from 0 to 512 [ 187.940723][ T6292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.974871][ T6292] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 187.997911][ T6294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.002871][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 188.262611][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.409173][ T6304] overlayfs: './file1' not a directory [ 188.686670][ T4255] block nbd0: Receive control failed (result -32) [ 188.721167][ T6290] block nbd0: shutting down sockets [ 189.269025][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 189.302480][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.366761][ T5406] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 189.402532][ T5406] usb 5-1: USB disconnect, device number 15 [ 189.534974][ T6325] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.627728][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 189.723919][ T6337] loop1: detected capacity change from 0 to 64 [ 190.305782][ T6356] binder: BINDER_SET_CONTEXT_MGR already set [ 190.311890][ T6356] binder: 6355:6356 ioctl 4018620d 20000040 returned -16 [ 190.342468][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.361884][ T4255] block nbd3: Receive control failed (result -32) [ 190.362191][ T6334] block nbd3: shutting down sockets [ 190.678575][ T6371] netlink: 'syz.1.729': attribute type 21 has an invalid length. [ 191.072108][ T6381] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.382463][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.492603][ T5410] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 191.553014][ T6377] loop0: detected capacity change from 0 to 32768 [ 191.656888][ T6390] loop4: detected capacity change from 0 to 32768 [ 191.758798][ T6390] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 191.784181][ T5410] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 191.802137][ T5410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.814524][ T5410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.824915][ T5410] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.843951][ T5410] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 191.862435][ T5410] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 191.870793][ T5410] usb 2-1: Manufacturer: syz [ 191.877539][ T5410] usb 2-1: config 0 descriptor?? [ 191.890837][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 192.277582][ T6402] binder: BINDER_SET_CONTEXT_MGR already set [ 192.285857][ T6402] binder: 6400:6402 ioctl 4018620d 20000040 returned -16 [ 192.317958][ T5410] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 192.335168][ T5410] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 192.422474][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.594607][ T5410] usb 2-1: USB disconnect, device number 15 [ 192.655305][ T4255] block nbd2: Receive control failed (result -32) [ 192.662505][ T6396] block nbd2: shutting down sockets [ 192.909019][ T6419] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.006646][ T5413] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 193.199069][ T5413] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 193.219143][ T5413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.261762][ T5413] usb 5-1: Product: syz [ 193.272980][ T5413] usb 5-1: Manufacturer: syz [ 193.277604][ T5413] usb 5-1: SerialNumber: syz [ 193.297962][ T5413] usb 5-1: config 0 descriptor?? [ 193.311626][ T6431] binder: BINDER_SET_CONTEXT_MGR already set [ 193.329676][ T6431] binder: 6430:6431 ioctl 4018620d 20000040 returned -16 [ 193.462441][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.642021][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 193.642039][ T26] audit: type=1326 audit(1732341362.664:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ff97e819 code=0x7ffc0000 [ 193.713588][ T5413] usb 5-1: Firmware version (0.0) predates our first public release. [ 193.730796][ T5413] usb 5-1: Please update to version 0.2 or newer [ 193.743719][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'. [ 193.760056][ T26] audit: type=1326 audit(1732341362.714:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f90ff97e819 code=0x7ffc0000 [ 193.828116][ T26] audit: type=1326 audit(1732341362.714:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ff97e819 code=0x7ffc0000 [ 193.934785][ T5413] usb 5-1: USB disconnect, device number 16 [ 194.029911][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.029978][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.034935][ T6457] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 194.117838][ T6459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.252423][ T14] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.292698][ T5410] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 194.442635][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 194.449960][ T14] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.478275][ T14] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.502512][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.552769][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.577104][ T6468] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.579242][ T14] usb 2-1: Product: syz [ 194.598947][ T14] usb 2-1: Manufacturer: syz [ 194.604804][ T14] usb 2-1: SerialNumber: syz [ 194.622612][ T5410] usb 1-1: Using ep0 maxpacket: 8 [ 194.627195][ T14] usb 2-1: config 0 descriptor?? [ 194.632253][ T5410] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.652107][ T5410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.671227][ T5410] usb 1-1: Product: syz [ 194.685801][ T5410] usb 1-1: Manufacturer: syz [ 194.690449][ T5410] usb 1-1: SerialNumber: syz [ 194.702750][ T5410] usb 1-1: config 0 descriptor?? [ 194.792089][ T48] block nbd2: Receive control failed (result -32) [ 194.792241][ T6460] block nbd2: shutting down sockets [ 194.922534][ T5410] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.980902][ T26] audit: type=1326 audit(1732341364.004:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 195.021092][ T26] audit: type=1326 audit(1732341364.004:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 195.089052][ T26] audit: type=1326 audit(1732341364.004:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea7f7e819 code=0x7ffc0000 [ 195.399546][ T6485] loop4: detected capacity change from 0 to 1024 [ 195.449689][ T6485] EXT4-fs: Ignoring removed oldalloc option [ 195.542549][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.569561][ T6482] loop3: detected capacity change from 0 to 32768 [ 195.586731][ T6489] loop2: detected capacity change from 0 to 128 [ 195.604389][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.679526][ T6482] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.854728][ T4256] ocfs2: Unmounting device (7,3) on (node local) [ 196.112854][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 196.118952][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 196.129141][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 196.135987][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 196.142071][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 196.424750][ T6506] overlayfs: './file1' not a directory [ 196.582513][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.860362][ T5410] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.860565][ T5410] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 196.860625][ T5410] usb 1-1: media controller created [ 196.873908][ T5410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.020032][ T5410] i2c i2c-1: Added multiplexed i2c bus 2 [ 197.039487][ T5410] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 197.061458][ T5410] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 197.075131][ T14] usb 2-1: USB disconnect, device number 16 [ 197.087381][ T5410] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 197.131166][ T6507] block nbd3: shutting down sockets [ 197.251187][ T5410] DVB: Unable to find symbol r820t_attach() [ 197.352743][ T5410] usb 1-1: USB disconnect, device number 21 [ 197.429687][ T6522] loop1: detected capacity change from 0 to 1024 [ 197.455737][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 197.529399][ T6522] overlayfs: filesystem on './file0' not supported [ 197.575518][ T6524] loop2: detected capacity change from 0 to 128 [ 197.622541][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.821477][ T5065] hfsplus: b-tree write err: -5, ino 4 [ 197.967413][ T6530] loop4: detected capacity change from 0 to 32768 [ 198.030116][ T6530] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 198.228994][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 198.392635][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.572429][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 198.582139][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.607692][ T7] usb 3-1: config 0 has no interfaces? [ 198.621105][ T7] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 198.645814][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.662495][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.672550][ T14] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 198.683617][ T7] usb 3-1: Product: syz [ 198.694516][ T7] usb 3-1: Manufacturer: syz [ 198.700137][ T6551] loop4: detected capacity change from 0 to 1024 [ 198.707801][ T7] usb 3-1: SerialNumber: syz [ 198.718714][ T6551] EXT4-fs: Ignoring removed oldalloc option [ 198.726104][ T7] usb 3-1: config 0 descriptor?? [ 198.802684][ T6551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 198.994625][ T4267] block nbd3: Receive control failed (result -32) [ 198.995722][ T14] usb 2-1: device descriptor read/64, error -71 [ 199.007973][ T6545] block nbd3: shutting down sockets [ 199.261056][ T6560] overlayfs: './file1' not a directory [ 199.272520][ T14] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 199.292436][ T5413] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 199.295548][ T3582] usb 3-1: USB disconnect, device number 10 [ 199.442465][ T14] usb 2-1: device descriptor read/64, error -71 [ 199.462466][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 199.502432][ T5413] usb 1-1: Using ep0 maxpacket: 8 [ 199.519078][ T5413] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.532373][ T5413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.542795][ T5413] usb 1-1: Product: syz [ 199.546985][ T5413] usb 1-1: Manufacturer: syz [ 199.561886][ T5413] usb 1-1: SerialNumber: syz [ 199.563714][ T14] usb usb2-port1: attempt power cycle [ 199.584784][ T5413] usb 1-1: config 0 descriptor?? [ 199.662162][ T7] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 199.679091][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.702461][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.710717][ T7] usb 4-1: Product: syz [ 199.719104][ T7] usb 4-1: Manufacturer: syz [ 199.728332][ T7] usb 4-1: SerialNumber: syz [ 199.740085][ T7] usb 4-1: config 0 descriptor?? [ 199.799880][ T5413] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.982573][ T14] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 200.022988][ T14] usb 2-1: device descriptor read/8, error -71 [ 200.164915][ T7] usb 4-1: Firmware version (0.0) predates our first public release. [ 200.176272][ T7] usb 4-1: Please update to version 0.2 or newer [ 200.234210][ T7] usb 4-1: USB disconnect, device number 14 [ 200.292465][ T14] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 200.323180][ T14] usb 2-1: device descriptor read/8, error -71 [ 200.442685][ T14] usb usb2-port1: unable to enumerate USB device [ 200.742494][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.078534][ T6575] loop2: detected capacity change from 0 to 32768 [ 201.163188][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 201.178807][ T6575] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 201.264578][ T4251] ocfs2: Unmounting device (7,2) on (node local) [ 201.267045][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 201.378969][ T5413] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.400704][ T5413] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 201.424739][ T5413] usb 1-1: media controller created [ 201.474390][ T5413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.633226][ T5413] i2c i2c-1: Added multiplexed i2c bus 2 [ 201.638918][ T5413] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 201.661830][ T5413] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 201.671071][ T5413] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 201.782478][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.832004][ T6596] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 201.844696][ T5413] DVB: Unable to find symbol r820t_attach() [ 201.916246][ T5413] usb 1-1: USB disconnect, device number 22 [ 201.940028][ T6603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.246191][ T6614] loop3: detected capacity change from 0 to 1024 [ 202.261836][ T6614] EXT4-fs: Ignoring removed oldalloc option [ 202.354067][ T6614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.603561][ T6598] block nbd2: shutting down sockets [ 202.640147][ T6624] loop4: detected capacity change from 0 to 32768 [ 202.683924][ T7] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 202.699413][ T6624] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 202.762404][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 202.822467][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.830587][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 202.837472][ T6628] overlayfs: './file1' not a directory [ 202.882697][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 202.900159][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.925125][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.951128][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.959561][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 202.967448][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 202.985857][ T7] usb 1-1: Product: syz [ 202.990051][ T7] usb 1-1: Manufacturer: syz [ 203.002637][ T14] usb 2-1: can't read configurations, error -61 [ 203.017696][ T7] usb 1-1: SerialNumber: syz [ 203.035322][ T7] usb 1-1: config 0 descriptor?? [ 203.162541][ T14] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.214060][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 203.330048][ T6636] loop2: detected capacity change from 0 to 2048 [ 203.352449][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 203.368900][ T6636] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.369998][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 203.406097][ T14] usb 2-1: can't read configurations, error -61 [ 203.416204][ T4351] udevd[4351]: incorrect nilfs2 checksum on /dev/loop2 [ 203.423647][ T14] usb usb2-port1: attempt power cycle [ 203.459347][ T6637] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.543827][ T6636] ------------[ cut here ]------------ [ 203.549656][ T6636] WARNING: CPU: 1 PID: 6636 at security/landlock/fs.c:687 current_check_refer_path+0x394/0xaf0 [ 203.560379][ T6636] Modules linked in: [ 203.564415][ T6636] CPU: 1 PID: 6636 Comm: syz.2.828 Not tainted 6.1.119-syzkaller #0 [ 203.572448][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.582568][ T6636] RIP: 0010:current_check_refer_path+0x394/0xaf0 [ 203.589590][ T6636] Code: 0f a3 de 40 0f 92 c6 31 ff e8 f8 91 8c fd 41 0f a3 de 72 22 e8 0d 8f 8c fd 49 be 00 00 00 00 00 fc ff df eb 05 e8 fc 8e 8c fd <0f> 0b c7 44 24 10 00 00 00 00 eb 32 e8 eb 8e 8c fd 48 8d 9c 1b 60 [ 203.609580][ T6636] RSP: 0018:ffffc9000c867a80 EFLAGS: 00010283 [ 203.615725][ T6636] RAX: ffffffff83fe0cf4 RBX: 000000000000ffff RCX: 0000000000080000 [ 203.623842][ T6636] RDX: ffffc90005c2a000 RSI: 0000000000002393 RDI: 0000000000002394 [ 203.631852][ T6636] RBP: ffffc9000c867c00 R08: ffffffff83fe0cb5 R09: ffffc9000c867b60 [ 203.639899][ T6636] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807a8c8da8 [ 203.647931][ T6636] R13: ffff888074cf58f8 R14: dffffc0000000000 R15: 1ffff1100e99eb1f [ 203.655977][ T6636] FS: 00007fbea8c9d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 203.664968][ T6636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.671578][ T6636] CR2: 0000001b2d51fffc CR3: 0000000024671000 CR4: 00000000003506e0 [ 203.679633][ T6636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.687666][ T6636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.695703][ T6636] Call Trace: [ 203.698999][ T6636] [ 203.701963][ T6636] ? __warn+0x15a/0x520 [ 203.706199][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 203.711965][ T6636] ? report_bug+0x2af/0x500 [ 203.716561][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 203.722357][ T6636] ? handle_bug+0x3d/0x70 [ 203.726714][ T6636] ? exc_invalid_op+0x16/0x40 [ 203.731417][ T6636] ? asm_exc_invalid_op+0x16/0x20 [ 203.736531][ T6636] ? current_check_refer_path+0x355/0xaf0 [ 203.742295][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 203.748109][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 203.753936][ T6636] ? hook_file_open+0x5e0/0x5e0 [ 203.758833][ T6636] ? __d_lookup+0x8b/0x790 [ 203.763312][ T6636] ? __d_lookup+0x8b/0x790 [ 203.767768][ T6636] security_path_rename+0x16f/0x210 [ 203.773044][ T6636] do_renameat2+0x991/0x1440 [ 203.777696][ T6636] ? fsnotify_move+0x4f0/0x4f0 [ 203.782547][ T6636] ? __virt_addr_valid+0x45b/0x530 [ 203.787695][ T6636] ? __check_object_size+0x4dd/0xa30 [ 203.793059][ T6636] ? getname_flags+0x1f9/0x4f0 [ 203.797863][ T6636] __x64_sys_renameat2+0xce/0xe0 [ 203.802890][ T6636] do_syscall_64+0x3b/0xb0 [ 203.807344][ T6636] ? clear_bhb_loop+0x45/0xa0 [ 203.812051][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.818052][ T6636] RIP: 0033:0x7fbea7f7e819 [ 203.822542][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.842230][ T6636] RSP: 002b:00007fbea8c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 203.842730][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.850733][ T6636] RAX: ffffffffffffffda RBX: 00007fbea8135fa0 RCX: 00007fbea7f7e819 [ 203.862474][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.866443][ T6636] RDX: ffffffffffffff9c RSI: 0000000020000000 RDI: ffffffffffffff9c [ 203.881405][ T6636] RBP: 00007fbea7ff175e R08: 0000000000000002 R09: 0000000000000000 [ 203.889454][ T6636] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000 [ 203.897485][ T6636] R13: 0000000000000000 R14: 00007fbea8135fa0 R15: 00007ffee1f12598 [ 203.905544][ T6636] [ 203.908592][ T6636] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.915905][ T6636] CPU: 1 PID: 6636 Comm: syz.2.828 Not tainted 6.1.119-syzkaller #0 [ 203.923902][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.933976][ T6636] Call Trace: [ 203.937259][ T6636] [ 203.940190][ T6636] dump_stack_lvl+0x1e3/0x2cb [ 203.944878][ T6636] ? nf_tcp_handle_invalid+0x642/0x642 [ 203.950336][ T6636] ? panic+0x764/0x764 [ 203.954425][ T6636] ? 0xffffffffa0003b40 [ 203.958575][ T6636] ? vscnprintf+0x59/0x80 [ 203.962906][ T6636] panic+0x318/0x764 [ 203.966803][ T6636] ? __warn+0x169/0x520 [ 203.970960][ T6636] ? memcpy_page_flushcache+0xfc/0xfc [ 203.976348][ T6636] __warn+0x348/0x520 [ 203.980331][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 203.986068][ T6636] report_bug+0x2af/0x500 [ 203.990394][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 203.996122][ T6636] handle_bug+0x3d/0x70 [ 204.000386][ T6636] exc_invalid_op+0x16/0x40 [ 204.004999][ T6636] asm_exc_invalid_op+0x16/0x20 [ 204.009866][ T6636] RIP: 0010:current_check_refer_path+0x394/0xaf0 [ 204.016216][ T6636] Code: 0f a3 de 40 0f 92 c6 31 ff e8 f8 91 8c fd 41 0f a3 de 72 22 e8 0d 8f 8c fd 49 be 00 00 00 00 00 fc ff df eb 05 e8 fc 8e 8c fd <0f> 0b c7 44 24 10 00 00 00 00 eb 32 e8 eb 8e 8c fd 48 8d 9c 1b 60 [ 204.035828][ T6636] RSP: 0018:ffffc9000c867a80 EFLAGS: 00010283 [ 204.041898][ T6636] RAX: ffffffff83fe0cf4 RBX: 000000000000ffff RCX: 0000000000080000 [ 204.049878][ T6636] RDX: ffffc90005c2a000 RSI: 0000000000002393 RDI: 0000000000002394 [ 204.057862][ T6636] RBP: ffffc9000c867c00 R08: ffffffff83fe0cb5 R09: ffffc9000c867b60 [ 204.065843][ T6636] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807a8c8da8 [ 204.073848][ T6636] R13: ffff888074cf58f8 R14: dffffc0000000000 R15: 1ffff1100e99eb1f [ 204.081828][ T6636] ? current_check_refer_path+0x355/0xaf0 [ 204.087568][ T6636] ? current_check_refer_path+0x394/0xaf0 [ 204.093320][ T6636] ? hook_file_open+0x5e0/0x5e0 [ 204.098191][ T6636] ? __d_lookup+0x8b/0x790 [ 204.102616][ T6636] ? __d_lookup+0x8b/0x790 [ 204.107045][ T6636] security_path_rename+0x16f/0x210 [ 204.112250][ T6636] do_renameat2+0x991/0x1440 [ 204.116867][ T6636] ? fsnotify_move+0x4f0/0x4f0 [ 204.121645][ T6636] ? __virt_addr_valid+0x45b/0x530 [ 204.126778][ T6636] ? __check_object_size+0x4dd/0xa30 [ 204.132079][ T6636] ? getname_flags+0x1f9/0x4f0 [ 204.136849][ T6636] __x64_sys_renameat2+0xce/0xe0 [ 204.141802][ T6636] do_syscall_64+0x3b/0xb0 [ 204.146246][ T6636] ? clear_bhb_loop+0x45/0xa0 [ 204.150926][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.156827][ T6636] RIP: 0033:0x7fbea7f7e819 [ 204.161242][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.180848][ T6636] RSP: 002b:00007fbea8c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 204.189277][ T6636] RAX: ffffffffffffffda RBX: 00007fbea8135fa0 RCX: 00007fbea7f7e819 [ 204.197247][ T6636] RDX: ffffffffffffff9c RSI: 0000000020000000 RDI: ffffffffffffff9c [ 204.205235][ T6636] RBP: 00007fbea7ff175e R08: 0000000000000002 R09: 0000000000000000 [ 204.213202][ T6636] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000000 [ 204.221171][ T6636] R13: 0000000000000000 R14: 00007fbea8135fa0 R15: 00007ffee1f12598 [ 204.229156][ T6636] [ 204.232548][ T6636] Kernel Offset: disabled [ 204.236943][ T6636] Rebooting in 86400 seconds..