last executing test programs: 1m40.166938883s ago: executing program 2 (id=266): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x2000042, &(0x7f0000000380)=ANY=[], 0x1, 0x2c3, &(0x7f0000002780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20943, 0x0) fstatfs(r0, &(0x7f0000000380)=""/93) 1m39.891500138s ago: executing program 2 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r5, r4, 0xe}, 0x14) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 1m38.467806065s ago: executing program 2 (id=274): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2fc835cd83886412, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775", 0xa, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1m37.504095182s ago: executing program 2 (id=278): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x481, &(0x7f0000000880)="$eJzs3M1vFOUfAPDv7G7hx2v7Q3wBUUE0El9aWlA5eNHExIMmJnrAYy2FIIUaWhMhjS2G4MVESbgbEy8m/gWePBH1ZOIV74aEGC6gXtZMd2bZ7gvtdrdsYT+fZOB5dp6Z5/nOzLPzzExnA+hbe9N/koitEXEtIgYjolBbYFNlSsvdvjk38ffNuYkkyuX3/krSxeLWzbmJvGi+3JbKOkvpB4WLSQzVrTI1c+78qfGpqcmzWX5k9vTHIzPnzr908vT4ickTk2fGjhw5fGj01VfGXu5KnGmbbu3+bHrPrrc+uPzOxNHLH/7yQ7I4p1y+cvXgkji6YyAi5iJpMffZ7lbWc9tq0kmphw2hLRsjopQdrddiMIoXt1fnDcabn/e0ccCaKpfL5bHWsxfKwAMsibaK79sU7S0ArFf5iT69/s2n2gHAv2s7/Oi5G69XLoDSuG9nU2VOKS5kZQbqrm+7aW9EHF3455t0irr7KQAAa+GndPzzYpPx31DEIzXltmfPhoYi4v8RsSMiHoqInRHxcFbm0Yh4rM3699blG8c/hevtR7Vy6fjvtezZ1tLxX/WR1VAxy21bjH8gOX5yavJgtk0OxMDGND/adO1JxEL6/+9ftaq/dvyXTmn9+Vgwa8f10salyxwbnx3vOPDMjQsRu0vN4k+idCeK2BURu1dZx8nnv9+z9JNiNbV8/HfRhedM5W8jnqvs/4Woiz+XLD6fLLR6Pjnyv5iaPDiSHxWNfv3t0rut6u8o/i5I9//mpsd/Nf6hpPZ57UzDKjYsV8elP75oeU2z2uN/Q/L+kso/HZ+dPTsasSF5u/HzmhvceT4vn8Z/YH/z/r8j7myJxyMiPYifiIgnI+KprO37IuLpiNh/l/h/fuOZj1Yf/9pK459va/+3nyieuvpjq/pXtv8P55nFRq3k+6+hFdE8iA42HQAAANw3ChGxNZLCcDVdKAwPV/5efmdsLkxNz8y+cHz6kzPHKu8IDMVAIb/TNVhzP3Q0uzec58ey/HyWP5TdN75S3LSYH56YnjrW6+Chz21p0f9TfxZ73TpgzXlfC/qX/g/9a/X93zcH3O+W6cUNP94BPDicxaF/Nev/8z1oB3DvOf9D/6r2/69XULjmda/6lzeB+4/zP/SvZfu/PwSEB1En7/Wvi0R8F3H3Msl6aWpbiS87Wbx0D1oYhfWxoe5hYqwY0cNmlBp/1aJ5Is6V5zuutNffTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xXwAAAP//LVfi+g==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0) 1m36.953108112s ago: executing program 2 (id=281): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x140) fallocate(r0, 0x40, 0x0, 0x8ffff) 1m34.97585975s ago: executing program 2 (id=288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c870c0000002890000beb212189830000000093cdd2f361"], 0x0}, 0x0) 1m34.815863598s ago: executing program 32 (id=288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c870c0000002890000beb212189830000000093cdd2f361"], 0x0}, 0x0) 5.367786551s ago: executing program 0 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0x0, 0x51, 0xa, 0x8, 0x0, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010004000000fbdbdf250a404000030000080800000014000200fc02000000000000000000000000000014000100200100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) mmap(&(0x7f0000ad4000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, 0xffffffffffffffff, 0x2a9f8000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x87) fchdir(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 4.476227142s ago: executing program 5 (id=857): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@user_xattr}, {@balloc_noborder}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0x2}], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x2c, 0x0) 4.434749592s ago: executing program 0 (id=858): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "369d"}]}}}}}}}}, 0x0) 4.368806567s ago: executing program 0 (id=859): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2fc835cd83886412, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775", 0xa, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x120, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 3.419050932s ago: executing program 0 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r4, r3, 0xe}, 0x14) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x7e, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000100000001"], 0x30}, 0x4040810) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 3.330881743s ago: executing program 1 (id=863): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000000) 3.105838386s ago: executing program 1 (id=865): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0, 0x1}}}]}}]}]}, @TCA_BASIC_CLASSID={0x5, 0x1, {0xfff3}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.979384146s ago: executing program 1 (id=866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffc}, [@mark={0xc, 0x15, {0x35075a, 0x80000000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 2.769384395s ago: executing program 1 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0x0, 0x51, 0xa, 0x8, 0x0, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010004000000fbdbdf250a404000030000080800000014000200fc02000000000000000000000000000014000100200100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) mmap(&(0x7f0000ad4000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, r2, 0x2a9f8000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x87) fchdir(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 2.768060625s ago: executing program 5 (id=869): unshare(0x26020480) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) 1.782858509s ago: executing program 5 (id=871): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.631402664s ago: executing program 5 (id=874): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0x3, 0x0, 'queue1\x00', 0x2}) r5 = fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) 1.52239528s ago: executing program 3 (id=875): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r5, r3, 0x0, 0x100000000) 1.448990927s ago: executing program 3 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 1.382475633s ago: executing program 4 (id=877): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000002140)=0x800000000004, 0x5) 739.204935ms ago: executing program 1 (id=878): socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 738.361885ms ago: executing program 3 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 692.257596ms ago: executing program 5 (id=880): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) 648.560136ms ago: executing program 4 (id=881): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x110, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x6c, 0x1, [@m_connmark={0x68, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x19, 0x6, "d67402bb32f833319ec68c1fb0cd16a83121ff292c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, {0x90, 0x1, [@m_ct={0x5c, 0xe, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x7}]}, {0x2a, 0x6, "e33c4a40fd135f84fc41bb644eed6fd2d292397d478ab9a5db9c74539e74c426d3715b685aa6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x30, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 636.433979ms ago: executing program 1 (id=882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) socket(0x10, 0x803, 0x6) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x20, 0x6, 0x3b, "03aa8ba8d1c4a2eaf4700c2c83010b53f365c0e79de7099fbe5f9551265ce5a78bdc1cab3f6cb5a2d80364085df0f334691ce468a0a592487ff73e"}, 0x0, 0x0, 0x0, 0x0}) 500.079341ms ago: executing program 3 (id=883): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_getvlan={0x30, 0x72, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 498.758722ms ago: executing program 4 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x100000000000000) 361.395334ms ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f0000001400)=""/102, 0x66}, {&(0x7f0000001480)=""/28, 0x1c}], 0x6}, 0xe9}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 356.364705ms ago: executing program 0 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad9900000000", 0x14}], 0x2) 289.459371ms ago: executing program 3 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100040000000000040003000000006c10000100000000002000"], 0x24, 0x0) 288.236121ms ago: executing program 4 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/events_poll_msecs\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10', 0x2) 259.324309ms ago: executing program 5 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0x0, 0x51, 0xa, 0x8, 0x0, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010004000000fbdbdf250a404000030000080800000014000200fc02000000000000000000000000000014000100200100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) mmap(&(0x7f0000ad4000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, r2, 0x2a9f8000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x87) fchdir(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 215.223939ms ago: executing program 4 (id=890): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x5, 0x3, 0x0, 'queue1\x00', 0x2}) r5 = fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) 6.887938ms ago: executing program 3 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) 0s ago: executing program 0 (id=892): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): tected capacity change from 0 to 256 [ 94.428474][ T4892] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 94.450964][ T1107] hub 3-1:4.128: 27 ports detected [ 94.457223][ T1107] hub 3-1:4.128: Using single TT (err -22) [ 94.480857][ T4396] gspca_spca1528: reg_w err -71 [ 94.489937][ T25] audit: type=1800 audit(1790767324.576:4): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 94.493271][ T4892] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 94.511101][ T1107] hub 3-1:4.128: insufficient power available to use all downstream ports [ 94.528959][ T4396] spca1528: probe of 2-1:0.1 failed with error -71 [ 94.545008][ T4396] usb 2-1: USB disconnect, device number 7 [ 94.624750][ T4876] BTRFS info (device loop4): enabling ssd optimizations [ 94.634614][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 94.671100][ T1107] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 94.684004][ T1107] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 94.737733][ T1107] usb 3-1: USB disconnect, device number 8 [ 94.912502][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 94.927847][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.030868][ T13] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 95.043516][ T13] usb 1-1: config 179 has no interface number 0 [ 95.049979][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 95.066510][ T4921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.074759][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 95.092791][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.106050][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 95.123156][ T13] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 95.139044][ T13] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 95.153390][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.181126][ T4891] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 95.330830][ T4921] usb 4-1: Using ep0 maxpacket: 32 [ 95.432505][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.442248][ T4923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.445632][ T4927] loop4: detected capacity change from 0 to 32768 [ 95.494925][ T4921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.508670][ T4927] gfs2: fsid=Ô±rÐÛ»ð_î [ 95.508670][ T4927] ˜b‚ç€: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 95.508670][ T4927] ˜b‚ç€" [ 95.527493][ T4927] gfs2: fsid=Ô±rÐÛ»ð_î [ 95.527493][ T4927] ˜b‚ç€: Now mounting FS (format 1801)... [ 95.531114][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.564408][ T4927] gfs2: fsid=Ô±rÐÛ»ð_î [ 95.564408][ T4927] ˜b‚ç€.s: journal 0 mapped with 5 extents in 0ms [ 95.601002][ T4921] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 95.621489][ T4921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.660181][ T13] usb 1-1: USB disconnect, device number 7 [ 95.666127][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.666167][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.688839][ T4927] gfs2: fsid=Ô±rÐÛ»ð_î [ 95.688839][ T4927] ˜b‚ç€.s: first mount done, others may mount [ 95.801120][ T1107] usb 2-1: Using ep0 maxpacket: 32 [ 95.820978][ T4921] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 95.841169][ T4921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.849207][ T4921] usb 4-1: Product: syz [ 95.866524][ T4921] usb 4-1: Manufacturer: syz [ 95.877258][ T4921] usb 4-1: SerialNumber: syz [ 95.940945][ T1107] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 95.953570][ T1107] usb 2-1: config 0 has no interface number 0 [ 95.965037][ T4921] usb 4-1: selecting invalid altsetting 1 [ 95.971535][ T1107] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 96.001568][ T1107] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 96.037879][ T4336] udevd[4336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.173622][ T4921] usb 4-1: USB disconnect, device number 5 [ 96.220951][ T1107] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 96.237325][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.271910][ T1107] usb 2-1: Product: syz [ 96.288428][ T1107] usb 2-1: Manufacturer: syz [ 96.305857][ T1107] usb 2-1: SerialNumber: syz [ 96.315835][ T1107] usb 2-1: config 0 descriptor?? [ 96.671915][ T4957] lo speed is unknown, defaulting to 1000 [ 96.677991][ T4957] lo speed is unknown, defaulting to 1000 [ 96.729249][ T1107] radio-si470x 2-1:0.35: this is not a si470x device. [ 96.748930][ T4957] lo speed is unknown, defaulting to 1000 [ 96.798002][ T4957] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.849554][ T4957] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 96.950396][ T4957] lo speed is unknown, defaulting to 1000 [ 96.986952][ T4957] lo speed is unknown, defaulting to 1000 [ 97.005412][ T4944] loop4: detected capacity change from 0 to 32768 [ 97.017510][ T4957] lo speed is unknown, defaulting to 1000 [ 97.045478][ T4957] lo speed is unknown, defaulting to 1000 [ 97.074200][ T4957] lo speed is unknown, defaulting to 1000 [ 97.115772][ T4944] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 97.294558][ T4982] tmpfs: Bad value for 'mpol' [ 97.302069][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 97.310918][ T1107] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 97.340935][ T4984] loop2: detected capacity change from 0 to 256 [ 97.370206][ T4920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.403662][ T4984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 97.471520][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.359658][ T4379] usb 2-1: USB disconnect, device number 8 [ 98.433691][ T4999] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 98.545751][ T1107] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.631665][ T4395] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.845404][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 98.881730][ T4920] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.889302][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 98.898747][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.900877][ T4395] usb 4-1: Using ep0 maxpacket: 8 [ 98.934655][ T5007] loop1: detected capacity change from 0 to 32768 [ 98.964261][ T5007] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.011127][ T13] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 99.022658][ T13] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.028178][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 99.040800][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.048792][ T13] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 99.058861][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.060863][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.078136][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.086500][ T4395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.089694][ T13] usb 1-1: config 0 descriptor?? [ 99.100803][ T4395] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 99.110209][ T4395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.121170][ T4395] usb 4-1: config 0 descriptor?? [ 99.191159][ T1107] usb 3-1: config 1 has an invalid interface number: 54 but max is 1 [ 99.209088][ T1107] usb 3-1: config 1 has an invalid interface number: 54 but max is 1 [ 99.217646][ T1107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.227260][ T1107] usb 3-1: config 1 has no interface number 0 [ 99.233597][ T1107] usb 3-1: config 1 interface 54 has no altsetting 0 [ 99.330869][ T4920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.410878][ T4920] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 99.430987][ T1107] usb 3-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 99.440148][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.448180][ T1107] usb 3-1: Product: syz [ 99.452466][ T1107] usb 3-1: Manufacturer: syz [ 99.457037][ T1107] usb 3-1: SerialNumber: syz [ 99.530765][ T4234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.580975][ T4920] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 99.590552][ T4920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.598656][ T4920] usb 5-1: Product: syz [ 99.602843][ T4920] usb 5-1: Manufacturer: syz [ 99.603719][ T4395] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 99.607427][ T4920] usb 5-1: SerialNumber: syz [ 99.800877][ T1107] sierra 3-1:1.54: Sierra USB modem converter detected [ 99.810991][ T13] usb 1-1: string descriptor 0 read error: -71 [ 99.823737][ T4395] usb 4-1: USB disconnect, device number 6 [ 99.833640][ T13] uclogic 0003:5543:004D.0004: failed retrieving string descriptor #200: -71 [ 99.847353][ T1107] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 99.848525][ T13] uclogic 0003:5543:004D.0004: failed retrieving pen parameters: -71 [ 99.857151][ T1107] usb 3-1: USB disconnect, device number 9 [ 99.879619][ T13] uclogic 0003:5543:004D.0004: failed probing pen v2 parameters: -71 [ 99.885487][ T1107] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 99.888263][ T13] uclogic 0003:5543:004D.0004: failed probing parameters: -71 [ 99.903245][ T1107] sierra 3-1:1.54: device disconnected [ 99.905708][ T13] uclogic: probe of 0003:5543:004D.0004 failed with error -71 [ 99.918137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.928539][ T4234] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 99.938665][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.943763][ T13] usb 1-1: USB disconnect, device number 8 [ 99.948890][ T4234] usb 2-1: config 0 descriptor?? [ 100.001944][ T4234] cp210x 2-1:0.0: cp210x converter detected [ 100.241153][ T5015] loop2: detected capacity change from 0 to 256 [ 100.300939][ T5015] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.313190][ T5015] FAT-fs (loop2): Filesystem has been set read-only [ 100.319916][ T5015] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.340558][ T5015] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 100.375721][ T25] audit: type=1800 audit(1790767330.466:5): pid=5015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 100.547390][ T4234] usb 2-1: cp210x converter now attached to ttyUSB0 [ 100.834871][ T4234] usb 2-1: USB disconnect, device number 9 [ 100.893218][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 101.387822][ T4234] cp210x 2-1:0.0: device disconnected [ 101.882531][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.890874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.935225][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.505919][ T5041] xt_policy: output policy not valid in PREROUTING and INPUT [ 102.605002][ T4920] usb 5-1: USB disconnect, device number 6 [ 102.949709][ T5045] loop2: detected capacity change from 0 to 512 [ 102.983709][ T5047] smc: net device erspan0 applied user defined pnetid SYZ1 [ 103.065541][ T5049] loop4: detected capacity change from 0 to 512 [ 103.088905][ T5045] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 103.120033][ T5045] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.164580][ T5045] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (2000000) [ 103.224562][ T5045] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 103.258633][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,noinit_itable,nodiscard,noquota,,errors=continue. Quota mode: none. [ 103.277696][ T5049] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.300846][ T5049] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.331724][ T5045] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (2000000) [ 103.477647][ T4194] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /56/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 103.518479][ T5059] loop0: detected capacity change from 0 to 8192 [ 103.544630][ T4194] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 103.568443][ T5059] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 103.593377][ T5059] REISERFS (device loop0): using journaled data mode [ 103.612799][ T5059] reiserfs: using flush barriers [ 103.632578][ T4194] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 103.646857][ T5059] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.698945][ T5052] loop3: detected capacity change from 0 to 32768 [ 103.853422][ T5059] REISERFS (device loop0): checking transaction log (loop0) [ 104.186744][ T5059] REISERFS (device loop0): Using r5 hash to sort names [ 104.259800][ T5059] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 104.403208][ T5059] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 104.940903][ T4235] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.350683][ C0] sched: RT throttling activated [ 105.352221][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.365286][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.375331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.385286][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.393346][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.417957][ T5075] loop3: detected capacity change from 0 to 1024 [ 105.434412][ T4235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 105.458708][ T4235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.488836][ T4235] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 105.534662][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.579750][ T5075] hfsplus: failed to extend attributes file [ 105.636618][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.747038][ T5084] loop0: detected capacity change from 0 to 128 [ 105.758106][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.788962][ T5084] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 105.852663][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.940561][ T5086] loop4: detected capacity change from 0 to 2048 [ 105.968657][ T5086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.046673][ T4235] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 106.151285][ T4235] lg-g15 0003:046D:C222.0006: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 106.389598][ T4235] usb 2-1: USB disconnect, device number 10 [ 106.406828][ T5087] lo speed is unknown, defaulting to 1000 [ 106.907387][ T5099] fido_id[5099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 107.147404][ T5112] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.259908][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 107.523291][ T5120] loop3: detected capacity change from 0 to 32768 [ 107.626318][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.653880][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.671730][ T5128] xt_policy: output policy not valid in PREROUTING and INPUT [ 107.678508][ T5087] device bridge_slave_0 entered promiscuous mode [ 107.709523][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.744173][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.775684][ T5087] device bridge_slave_1 entered promiscuous mode [ 107.847825][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.873119][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.900117][ T5120] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.908343][ T5120] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.917876][ T5120] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 107.917876][ T5120] inode = 1 19 [ 107.917876][ T5120] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 107.936436][ T5120] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 107.943934][ T5120] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 107.952721][ T5120] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 107.961263][ T5120] gfs2: fsid=syz:syz.s: File system withdrawn [ 107.967356][ T5120] CPU: 0 PID: 5120 Comm: syz.3.303 Not tainted syzkaller #0 [ 107.974636][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.984706][ T5120] Call Trace: [ 107.987983][ T5120] [ 107.990913][ T5120] dump_stack_lvl+0x188/0x250 [ 107.995609][ T5120] ? show_regs_print_info+0x20/0x20 [ 108.000811][ T5120] ? load_image+0x410/0x410 [ 108.005330][ T5120] gfs2_withdraw+0xb9a/0x14e0 [ 108.010012][ T5120] ? gfs2_lm+0x240/0x240 [ 108.014258][ T5120] ? _raw_spin_unlock+0x24/0x40 [ 108.019118][ T5120] ? gfs2_glock_nq+0xcaa/0x1510 [ 108.023972][ T5120] ? gfs2_consist_inode_i+0xc0/0xe0 [ 108.029173][ T5120] gfs2_jdesc_check+0x137/0x290 [ 108.034029][ T5120] check_journal_clean+0x186/0x360 [ 108.039145][ T5120] ? gfs2_trans_remove_revoke+0x360/0x360 [ 108.044869][ T5120] ? check_journal_clean+0x142/0x360 [ 108.050162][ T5120] ? __rwlock_init+0x140/0x140 [ 108.054936][ T5120] ? do_raw_spin_unlock+0x11d/0x230 [ 108.060138][ T5120] ? _raw_spin_unlock+0x24/0x40 [ 108.064988][ T5120] ? gfs2_jdesc_find+0xa7/0xc0 [ 108.069762][ T5120] init_journal+0x182e/0x22d0 [ 108.074452][ T5120] ? end_bio_io_page+0x100/0x100 [ 108.079387][ T5120] ? vsnprintf+0x1b22/0x1c20 [ 108.083988][ T5120] ? snprintf+0xe5/0x140 [ 108.088234][ T5120] ? init_journal+0x749/0x22d0 [ 108.093007][ T5120] ? vscnprintf+0x80/0x80 [ 108.097338][ T5120] ? gfs2_glock_nq_num+0x170/0x1b0 [ 108.102454][ T5120] init_inodes+0xdb/0x320 [ 108.106786][ T5120] gfs2_fill_super+0x1671/0x1ea0 [ 108.111731][ T5120] ? gfs2_reconfigure+0xd80/0xd80 [ 108.116758][ T5120] ? gfs2_glock_nq_num+0x7e/0x1b0 [ 108.121793][ T5120] ? sb_set_blocksize+0xa5/0xe0 [ 108.126647][ T5120] get_tree_bdev+0x3e6/0x610 [ 108.131254][ T5120] ? gfs2_reconfigure+0xd80/0xd80 [ 108.136288][ T5120] gfs2_get_tree+0x4d/0x1e0 [ 108.140793][ T5120] vfs_get_tree+0x88/0x270 [ 108.145212][ T5120] do_new_mount+0x247/0xa40 [ 108.149721][ T5120] __se_sys_mount+0x2e3/0x3d0 [ 108.154402][ T5120] ? __x64_sys_mount+0xc0/0xc0 [ 108.159167][ T5120] ? lockdep_hardirqs_on+0x94/0x140 [ 108.164366][ T5120] ? __x64_sys_mount+0x1c/0xc0 [ 108.169141][ T5120] do_syscall_64+0x4c/0xa0 [ 108.173556][ T5120] ? clear_bhb_loop+0x30/0x80 [ 108.178234][ T5120] ? clear_bhb_loop+0x30/0x80 [ 108.182916][ T5120] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.188818][ T5120] RIP: 0033:0x7f8c36b933ca [ 108.193233][ T5120] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.212837][ T5120] RSP: 002b:00007f8c34de9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.221253][ T5120] RAX: ffffffffffffffda RBX: 00007f8c34de9ee0 RCX: 00007f8c36b933ca [ 108.229229][ T5120] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f8c34de9ea0 [ 108.237207][ T5120] RBP: 0000200000000400 R08: 00007f8c34de9ee0 R09: 0000000000210401 [ 108.245177][ T5120] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 108.253144][ T5120] R13: 00007f8c34de9ea0 R14: 00000000000125d8 R15: 0000200000000240 [ 108.261130][ T5120] [ 108.264186][ T5120] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 108.380317][ T4235] Bluetooth: hci4: command 0x0409 tx timeout [ 108.921159][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.041129][ T5087] team0: Port device team_slave_0 added [ 109.939155][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.947485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.004818][ T5087] team0: Port device team_slave_1 added [ 110.443662][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.450632][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.476916][ T4379] Bluetooth: hci4: command 0x041b tx timeout [ 110.833879][ T4588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.834704][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.843436][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.861017][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.872269][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.880365][ T4922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.890825][ T5167] xt_policy: output policy not valid in PREROUTING and INPUT [ 110.891004][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.913303][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.928553][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.961923][ T5171] loop0: detected capacity change from 0 to 128 [ 110.966346][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.134292][ T5087] device hsr_slave_0 entered promiscuous mode [ 111.158640][ T5087] device hsr_slave_1 entered promiscuous mode [ 111.194237][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.208356][ T5087] Cannot create hsr debugfs directory [ 111.764072][ T5087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.312240][ T5087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.362904][ T5087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.427171][ T5087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.448943][ T5182] loop0: detected capacity change from 0 to 32768 [ 112.512518][ T5182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.318 (5182) [ 112.539086][ T5180] loop3: detected capacity change from 0 to 32768 [ 112.550794][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 113.448288][ T5180] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.317 (5180) [ 113.736958][ T5212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.324'. [ 113.806909][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 113.935084][ T4180] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4180) [ 114.238854][ T5182] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 114.240989][ T4920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.281862][ T5182] BTRFS info (device loop0): using free space tree [ 114.288399][ T5182] BTRFS info (device loop0): has skinny extents [ 114.300818][ T4379] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.477885][ T5182] BTRFS error (device loop0): open_ctree failed: -12 [ 114.631001][ T4396] Bluetooth: hci4: command 0x0419 tx timeout [ 114.641140][ T4235] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.661890][ T4379] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 114.679658][ T4379] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 114.699047][ T4379] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 114.729874][ T4379] usb 2-1: config 220 has no interface number 2 [ 114.736442][ T4379] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.829984][ T4379] usb 2-1: config 220 interface 0 has no altsetting 0 [ 114.923502][ T4379] usb 2-1: config 220 interface 76 has no altsetting 0 [ 115.001386][ T4235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.036085][ T4379] usb 2-1: config 220 interface 1 has no altsetting 0 [ 115.071546][ T4235] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 115.305346][ T144] device hsr_slave_0 left promiscuous mode [ 115.331600][ T4379] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 115.381769][ T4235] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 115.394058][ T4379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.413027][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.423126][ T4379] usb 2-1: Product: syz [ 115.430065][ T4379] usb 2-1: Manufacturer: syz [ 115.435314][ T4235] usb 4-1: Product: syz [ 115.440074][ T4379] usb 2-1: SerialNumber: syz [ 115.445027][ T4235] usb 4-1: Manufacturer: syz [ 115.467969][ T4235] usb 4-1: SerialNumber: syz [ 115.470838][ T4915] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.511833][ T144] device hsr_slave_1 left promiscuous mode [ 115.556234][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.581493][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.641381][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.670804][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.695388][ T144] device bridge_slave_1 left promiscuous mode [ 115.709855][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.747076][ T144] device bridge_slave_0 left promiscuous mode [ 115.754784][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.779109][ T144] device veth1_macvtap left promiscuous mode [ 115.785559][ T144] device veth0_macvtap left promiscuous mode [ 115.794413][ T144] device veth1_vlan left promiscuous mode [ 115.800466][ T144] device veth0_vlan left promiscuous mode [ 115.861149][ T4915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.891745][ T4915] usb 5-1: config 0 has no interfaces? [ 115.995688][ T5197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.008223][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.101874][ T4915] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 116.138279][ T4915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.212676][ T4915] usb 5-1: Product: syz [ 116.289211][ T4915] usb 5-1: Manufacturer: syz [ 116.320289][ C1] usb 4-1: check_urb_status: overflow actual length is 128 [ 116.327530][ C1] usb 4-1: arpc in-urb error -75 (dropped) [ 116.335207][ T4915] usb 5-1: SerialNumber: syz [ 116.351167][ T4235] usb 4-1: failed to set cport flags for port 0 [ 116.358215][ T4235] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 116.358224][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.366539][ T4915] usb 5-1: config 0 descriptor?? [ 116.374387][ T4379] usb 2-1: selecting invalid altsetting 0 [ 116.386589][ T4379] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 116.394413][ T4379] usb 2-1: No valid video chain found. [ 116.417559][ T4235] es2_ap_driver: probe of 4-1:1.0 failed with error -110 [ 116.481848][ T4379] usb 2-1: selecting invalid altsetting 0 [ 116.514503][ T4379] usbtest: probe of 2-1:220.1 failed with error -22 [ 116.551563][ T5197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.566702][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.578208][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.581493][ T4381] usb 4-1: USB disconnect, device number 7 [ 116.609623][ T4379] usb 2-1: USB disconnect, device number 11 [ 116.705880][ T13] usb 5-1: USB disconnect, device number 7 [ 116.758815][ T144] team0 (unregistering): Port device team_slave_1 removed [ 116.783109][ T144] team0 (unregistering): Port device team_slave_0 removed [ 116.807498][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.832108][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.935792][ T144] bond0 (unregistering): Released all slaves [ 117.021865][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.051312][ T4915] lo speed is unknown, defaulting to 1000 [ 117.060177][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.068434][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.080625][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.121286][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.152482][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.191064][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.199382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.202214][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.214565][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.286365][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.315925][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.339130][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.346324][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.383861][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.402668][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.458433][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.610876][ T4234] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 117.742171][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.894047][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.001651][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.040208][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.076564][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.151709][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.160217][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.174238][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.181386][ T4234] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 118.182584][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.206179][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.237610][ T4234] usb 4-1: config 0 descriptor?? [ 118.243098][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.257960][ T5304] mkiss: ax0: crc mode is auto. [ 118.299622][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.311076][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.576285][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.591972][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.650444][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.725318][ T4234] input: HID 046d:c20a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C20A.0007/input/input14 [ 118.845801][ T4234] logitech 0003:046D:C20A.0007: input,hidraw0: USB HID v0.01 Joystick [HID 046d:c20a] on usb-dummy_hcd.3-1/input0 [ 118.888435][ T4234] logitech 0003:046D:C20A.0007: missing HID_OUTPUT_REPORT 0 [ 118.900870][ T4915] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 119.000013][ T4234] usb 4-1: USB disconnect, device number 8 [ 119.059570][ T5345] loop4: detected capacity change from 0 to 512 [ 119.094551][ T5345] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.164979][ T5341] fido_id[5341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 119.170747][ T5345] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.220628][ T5345] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 119.231142][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.250368][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.286369][ T5345] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 119.295898][ T4915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.310719][ T4915] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 119.314565][ T5345] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 119.341233][ T5345] System zones: 0-2, 18-18, 34-35 [ 119.364304][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.382900][ T5345] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 119.383444][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.432743][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.441871][ T5087] device veth0_vlan entered promiscuous mode [ 119.483725][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.500915][ T4915] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 119.506143][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.529045][ T4915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.556700][ T5087] device veth1_vlan entered promiscuous mode [ 119.557682][ T4915] usb 2-1: Product: syz [ 119.600723][ T4915] usb 2-1: Manufacturer: syz [ 119.605349][ T4915] usb 2-1: SerialNumber: syz [ 119.656639][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.677418][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.706597][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.729254][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.752607][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.914091][ T5087] device veth0_macvtap entered promiscuous mode [ 120.088545][ T5087] device veth1_macvtap entered promiscuous mode [ 120.385629][ T5357] device ip6_vti0 entered promiscuous mode [ 120.413013][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.441532][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.493311][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.540758][ C0] usb 2-1: check_urb_status: overflow actual length is 128 [ 120.547998][ C0] usb 2-1: arpc in-urb error -75 (dropped) [ 120.554216][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.590716][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.626574][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.654024][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.674995][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.706105][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.736930][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.754779][ T4915] usb 2-1: failed to set cport flags for port 0 [ 120.765462][ T4915] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 120.785211][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.809485][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.844180][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.846251][ T4915] es2_ap_driver: probe of 2-1:1.0 failed with error -71 [ 120.894441][ T4915] usb 2-1: USB disconnect, device number 12 [ 120.899711][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.959373][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.004768][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.025506][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.037289][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.048081][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.059953][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.078466][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.102488][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.124542][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.145492][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.180327][ T5087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.194262][ T5087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.233951][ T5087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.253060][ T5087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.253853][ T5394] loop4: detected capacity change from 0 to 1024 [ 121.435071][ T4642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.448344][ T5394] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.363: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.493232][ T4642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.600523][ T5394] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.363: couldn't read orphan inode 11 (err -117) [ 121.624477][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.630975][ T5394] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: writeback. [ 121.639045][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.739858][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.765896][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.321837][ T4642] net_ratelimit: 1 callbacks suppressed [ 122.321851][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.517663][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.841741][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.850047][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.913908][ T5389] loop3: detected capacity change from 0 to 32768 [ 123.022856][ T5437] loop4: detected capacity change from 0 to 128 [ 123.199280][ T5447] ip_tables: iptables: counters copy to user failed while replacing table [ 123.228606][ T5389] XFS (loop3): Mounting V5 Filesystem [ 123.250882][ T4915] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.531780][ T5454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 123.551046][ T4915] usb 6-1: Using ep0 maxpacket: 16 [ 123.581896][ T5437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'. [ 123.599875][ T5437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'. [ 123.610726][ T5389] XFS (loop3): Ending clean mount [ 123.800850][ T4915] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 123.808985][ T4915] usb 6-1: config 0 has no interface number 0 [ 123.815176][ T4915] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 124.147336][ T5389] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 124.225557][ T5389] XFS (loop3): Unmount and run xfs_repair [ 124.234317][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.244036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.321854][ T5389] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.331247][ T4915] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.344334][ T5389] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 124.353580][ T5389] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 124.369566][ T5389] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 124.380849][ T5389] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 124.415237][ T5389] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 124.490991][ T5389] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 124.521132][ T4915] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 124.558846][ T4915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.585727][ T5389] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 124.603805][ T4915] usb 6-1: Product: syz [ 124.608002][ T4915] usb 6-1: Manufacturer: syz [ 124.650307][ T4915] usb 6-1: SerialNumber: syz [ 124.662388][ T5389] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 124.680628][ T4915] usb 6-1: config 0 descriptor?? [ 124.691162][ T5389] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 124.720276][ T5389] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 124.720868][ T4379] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.737298][ T5435] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.760938][ T5389] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 124.819470][ T4191] XFS (loop3): Unmounting Filesystem [ 125.065893][ T4915] usb 6-1: USB disconnect, device number 2 [ 125.136430][ T5482] loop0: detected capacity change from 0 to 256 [ 125.172795][ T4379] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.224420][ T4379] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 125.272915][ T4379] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.316448][ T4379] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.336712][ T4379] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 125.375790][ T4379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.396122][ T5482] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 125.417695][ T4379] usb 5-1: config 0 descriptor?? [ 125.455886][ T5469] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.741842][ T4234] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 125.833381][ T5498] loop0: detected capacity change from 0 to 512 [ 125.920978][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.932661][ T4379] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x5 [ 125.953876][ T4379] greenasia 0003:0E8F:0012.0008: unknown main item tag 0x0 [ 125.974954][ T4379] greenasia 0003:0E8F:0012.0008: No inputs registered, leaving [ 125.984302][ T5503] loop5: detected capacity change from 0 to 8 [ 126.003618][ T4379] greenasia 0003:0E8F:0012.0008: hidraw0: USB HID v0.00 Keyboard [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 126.029221][ T4379] greenasia 0003:0E8F:0012.0008: no inputs found [ 126.098343][ T5498] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 126.110836][ T4234] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.128394][ T4234] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.155705][ T4234] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.161975][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.170761][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.198864][ T5498] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 126.215236][ T4234] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 126.239092][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.248443][ T5498] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.380: Failed to acquire dquot type 1 [ 126.266382][ T4234] usb 4-1: config 0 descriptor?? [ 126.274414][ T4379] usb 5-1: USB disconnect, device number 8 [ 126.317056][ T5498] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 126.328660][ T5511] loop5: detected capacity change from 0 to 512 [ 126.355651][ T5498] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 126.390910][ T5498] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.380: Failed to acquire dquot type 1 [ 126.420634][ T5498] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.380: bg 0: block 248: padding at end of block bitmap is not set [ 126.448964][ T5511] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 126.488945][ T5498] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 126.506720][ T5511] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.520578][ T4328] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.546533][ T5498] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 126.579175][ T5498] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 126.637202][ T5498] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.380: Failed to acquire dquot type 1 [ 126.668461][ T5498] EXT4-fs (loop0): 1 orphan inode deleted [ 126.695356][ T5498] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 126.724117][ T5498] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.970880][ T4234] sony 0003:054C:042F.0009: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 126.975925][ T4328] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.992370][ T4234] sony 0003:054C:042F.0009: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 126.992401][ T4234] sony 0003:054C:042F.0009: failed to claim input [ 127.001348][ T4234] usb 4-1: USB disconnect, device number 9 [ 127.060884][ T4381] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 127.076029][ T4328] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.118449][ T4328] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.124486][ T5526] fido_id[5526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 127.130715][ T4328] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 127.165346][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.199494][ T4328] usb 2-1: config 0 descriptor?? [ 127.391044][ T4381] usb 6-1: not running at top speed; connect to a high speed hub [ 127.438473][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.478154][ T4915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.480922][ T4381] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 127.513647][ T4381] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.541294][ T4381] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 127.563878][ T4381] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 127.581695][ T4381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.592607][ T4381] usb 6-1: config 0 descriptor?? [ 127.632925][ T4381] usb 6-1: Found UVC 9.00 device (046d:0825) [ 127.775754][ T4328] hid-multitouch 0003:0EEF:72C4.000A: unbalanced delimiter at end of report description [ 127.789000][ T4328] hid-multitouch: probe of 0003:0EEF:72C4.000A failed with error -22 [ 127.894922][ T5546] xt_policy: output policy not valid in PREROUTING and INPUT [ 128.076380][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.088705][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.201747][ T4234] usb 2-1: USB disconnect, device number 13 [ 128.291135][ T4381] uvcvideo 6-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 128.367599][ T4381] uvcvideo 6-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 128.417179][ T4328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.450814][ T4381] uvcvideo 6-1:0.1: Failed to initialize the device (-5). [ 128.517634][ T4381] usb 6-1: USB disconnect, device number 3 [ 128.706459][ T4915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.749204][ T4915] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 128.767236][ T4915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.831377][ T4915] usb 5-1: config 0 descriptor?? [ 128.905414][ T5553] loop5: detected capacity change from 0 to 512 [ 129.010031][ T5557] loop3: detected capacity change from 0 to 2048 [ 129.014652][ T5553] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 129.043128][ T5553] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.096840][ T5557] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 129.115806][ T5557] loop3: partition table partially beyond EOD, truncated [ 129.142768][ T5557] loop3: p1 start 3405774849 is beyond EOD, truncated [ 129.191070][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.195632][ T5557] loop3: p2 start 53543428 is beyond EOD, truncated [ 129.224912][ T5557] loop3: p3 start 4284289 is beyond EOD, truncated [ 129.237520][ T5557] loop3: p5 start 3405774849 is beyond EOD, truncated [ 129.248414][ T5557] loop3: p6 start 53543428 is beyond EOD, truncated [ 129.324154][ T4915] kye 0003:0458:4018.000B: invalid report_size -292171435 [ 129.365162][ T4915] kye 0003:0458:4018.000B: item 0 4 1 7 parsing failed [ 129.377435][ T4915] kye 0003:0458:4018.000B: parse failed [ 129.383950][ T4915] kye: probe of 0003:0458:4018.000B failed with error -22 [ 129.522493][ T4381] usb 5-1: USB disconnect, device number 9 [ 129.550736][ T4915] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 129.570911][ T4230] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.595122][ T5575] loop0: detected capacity change from 0 to 164 [ 129.641105][ T5575] rock: directory entry would overflow storage [ 129.647627][ T5575] rock: sig=0x4543, size=28, remaining=18 [ 129.720991][ T13] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 129.820976][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 129.941071][ T4915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 11104, setting to 64 [ 129.957510][ T4915] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.967980][ T4915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.997924][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.016975][ T4915] usb 4-1: config 0 descriptor?? [ 130.055324][ T5567] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 130.086966][ T4915] hub 4-1:0.0: USB hub found [ 130.151251][ T4230] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 130.160856][ T13] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 130.177113][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.185783][ T13] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.205691][ T4230] usb 2-1: Product: syz [ 130.210117][ T4230] usb 2-1: Manufacturer: syz [ 130.216173][ T13] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.227298][ T4230] usb 2-1: SerialNumber: syz [ 130.233496][ T13] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 130.248721][ T4230] usb 2-1: config 0 descriptor?? [ 130.257317][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.280487][ T13] usb 6-1: config 0 descriptor?? [ 130.301943][ T4915] hub 4-1:0.0: 26 ports detected [ 130.310334][ T4230] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 130.346314][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 130.352523][ T4915] hub 4-1:0.0: insufficient power available to use all downstream ports [ 130.370931][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.382142][ T5573] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 130.405201][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 130.420770][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.442557][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.484386][ T5602] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.490970][ T4230] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 130.500137][ T4230] usb 2-1: media controller created [ 130.510949][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.416'. [ 130.524647][ T5569] ttusb2: i2c wr len=58 too high [ 130.541539][ T4915] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 130.547903][ T4915] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 130.563226][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.592862][ T4230] usb 2-1: selecting invalid altsetting 3 [ 130.598700][ T4230] ttusb2: set interface to alts=3 failed [ 130.652148][ T4230] DVB: Unable to find symbol tda10086_attach() [ 130.673113][ T4230] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 130.701699][ T4915] usbhid 4-1:0.0: can't add hid device: -71 [ 130.712927][ T4915] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.741718][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 130.754128][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.767400][ T4915] usb 4-1: USB disconnect, device number 10 [ 130.824529][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 130.845954][ T13] kye 0003:0458:5013.000C: unknown main item tag 0x2 [ 130.863728][ T13] kye 0003:0458:5013.000C: unknown main item tag 0x7 [ 130.872790][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.897507][ T13] kye 0003:0458:5013.000C: hidraw0: USB HID v0.0c Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 130.914542][ T4230] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 130.929739][ T13] kye 0003:0458:5013.000C: tablet-enabling feature report not found [ 130.956779][ T4230] usb 2-1: USB disconnect, device number 14 [ 130.969341][ T13] kye 0003:0458:5013.000C: tablet enabling failed [ 131.067281][ T13] usb 6-1: USB disconnect, device number 4 [ 131.088499][ T4230] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 131.227741][ T5620] fido_id[5620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 131.277334][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.277557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.644754][ T5633] netlink: 36 bytes leftover after parsing attributes in process `syz.5.422'. [ 131.852485][ T4230] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.250458][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.267599][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.278491][ T4230] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 132.307306][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.520790][ T25] audit: type=1400 audit(1790767362.606:6): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5663 comm="syz.5.434" name="p" offset=58 [ 132.556483][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.565536][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.590876][ T5667] loop3: detected capacity change from 0 to 512 [ 132.624794][ T4381] usb 2-1: USB disconnect, device number 15 [ 132.653110][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.437'. [ 132.678982][ T5667] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.879549][ T25] audit: type=1400 audit(1790767362.966:7): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=5676 comm="syz.5.438" name="p" offset=74 [ 133.347763][ T5686] 9pnet: Insufficient options for proto=fd [ 133.832704][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.841012][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.849657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.857794][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.868501][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.868952][ T5741] xt_policy: output policy not valid in PREROUTING and INPUT [ 135.121549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.570009][ T5750] loop1: detected capacity change from 0 to 1024 [ 135.882474][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.832807][ T5760] loop1: detected capacity change from 0 to 512 [ 136.948492][ T5760] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.465: corrupted inode contents [ 136.965188][ T5760] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 136.976151][ T5760] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.465: corrupted inode contents [ 137.006146][ T5760] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.465: mark_inode_dirty error [ 137.028489][ T5760] EXT4-fs (loop1): 1 orphan inode deleted [ 137.038695][ T5760] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,sb=0x0000000000000007,,errors=continue. Quota mode: none. [ 137.060948][ T25] audit: type=1400 audit(1790767367.146:8): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=5766 comm="syz.4.468" name="//o" offset=45 [ 137.070309][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.099442][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.130588][ T5771] netlink: 280 bytes leftover after parsing attributes in process `syz.0.467'. [ 138.138988][ T5785] loop0: detected capacity change from 0 to 128 [ 138.336853][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.535678][ T5798] 9pnet: Insufficient options for proto=fd [ 139.123768][ T4916] net_ratelimit: 1 callbacks suppressed [ 139.123782][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.148518][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'. [ 139.195420][ T5785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'. [ 139.215093][ T5802] loop5: detected capacity change from 0 to 512 [ 139.260595][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.272009][ T5802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.353439][ T5802] EXT4-fs (loop5): 1 truncate cleaned up [ 139.359177][ T5802] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 139.504305][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.579318][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.592998][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.602215][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.612238][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.702727][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.721363][ T5823] bond0: option slaves: interface -VetÚÿN¶¾6h0-g does not exist! [ 139.742900][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.769327][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.838069][ T5826] loop5: detected capacity change from 0 to 1024 [ 139.895717][ T5826] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 139.938792][ T5826] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.953167][ T5832] syz.3.487[5832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.953258][ T5832] syz.3.487[5832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.956937][ T5826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 139.994945][ T5826] System zones: 0-1, 3-36 [ 140.006131][ T5826] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 140.025335][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.067200][ T25] audit: type=1800 audit(1790767370.156:9): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.485" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 140.080865][ T5826] Invalid ELF header magic: != ELF [ 141.674715][ T5844] loop3: detected capacity change from 0 to 32768 [ 141.741194][ T5844] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 141.758204][ T5844] JBD2: Ignoring recovery information on journal [ 141.973220][ T5844] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.205083][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 142.265970][ T5901] process 'syz.0.506' launched '/dev/fd/4' with NULL argv: empty string added [ 142.386538][ T5899] loop1: detected capacity change from 0 to 4096 [ 142.672060][ T5899] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 143.197852][ T5899] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 143.276889][ T5899] ntfs3: loop1: Failed to load $Extend. [ 143.510804][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.577441][ T5920] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 143.798377][ T5899] ntfs3: loop1: ino=5, "/" directory corrupted [ 143.853006][ T5899] ntfs3: loop1: ino=5, "/" directory corrupted [ 144.100944][ T13] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 144.110015][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.144116][ T13] usb 1-1: Product: syz [ 144.148409][ T13] usb 1-1: Manufacturer: syz [ 144.300989][ T13] usb 1-1: SerialNumber: syz [ 144.476076][ T5960] 9pnet: Insufficient options for proto=fd [ 144.551843][ T4234] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.705325][ T5913] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 144.705325][ T5913] program syz.0.509 not setting count and/or reply_len properly [ 144.867882][ T4916] net_ratelimit: 5 callbacks suppressed [ 144.867896][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.942916][ T13] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 144.962408][ T13] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 144.980994][ T4234] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.009534][ T13] usb 1-1: USB disconnect, device number 9 [ 145.015633][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.040775][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.076058][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.245841][ T4234] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.332338][ T4234] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.351976][ T4326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.505828][ T4234] usb 4-1: Manufacturer: syz [ 145.644598][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.692031][ T4234] usb 4-1: config 0 descriptor?? [ 145.701139][ T5975] loop4: detected capacity change from 0 to 1024 [ 145.918642][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.927062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.935716][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.990594][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.046233][ T5975] EXT4-fs error (device loop4): __ext4_new_inode:1084: comm syz.4.522: reserved inode found cleared - inode=1 [ 146.262447][ T4234] appleir 0003:05AC:8243.000D: item fetching failed at offset 0/1 [ 146.291427][ T4234] appleir 0003:05AC:8243.000D: parse failed [ 146.297921][ T4234] appleir: probe of 0003:05AC:8243.000D failed with error -22 [ 146.353722][ T4197] block nbd0: Receive control failed (result -32) [ 146.500572][ T4230] usb 4-1: USB disconnect, device number 11 [ 146.520744][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.063600][ T6051] vhci_hcd: not connected 4 [ 148.400884][ T4234] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 148.686520][ T6071] 9pnet: Insufficient options for proto=fd [ 148.751452][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.900090][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.960909][ T4230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.099587][ T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.199955][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.233411][ T13] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 149.259847][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.551309][ T4234] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.652442][ T4234] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.858939][ T6081] loop4: detected capacity change from 0 to 1024 [ 149.871608][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.888589][ T4234] usb 2-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 150.615209][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.804374][ T4234] usb 2-1: config 0 descriptor?? [ 150.981460][ T13] usb 5-1: can't set config #1, error -71 [ 150.989107][ T13] usb 5-1: USB disconnect, device number 10 [ 151.051519][ T6088] loop0: detected capacity change from 0 to 128 [ 151.112054][ T6088] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 151.133603][ T6088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.203658][ T6092] loop5: detected capacity change from 0 to 512 [ 151.213140][ T6091] loop4: detected capacity change from 0 to 512 [ 151.225433][ T6091] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.248023][ T6091] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.554: corrupted inode contents [ 151.260285][ T6091] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 151.270258][ T6091] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.554: corrupted inode contents [ 151.295724][ T6091] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.554: mark_inode_dirty error [ 151.312588][ T4230] usb 4-1: device not accepting address 12, error -71 [ 151.319159][ T4234] asus 0003:0B05:1807.000E: No inputs registered, leaving [ 151.325523][ T6091] EXT4-fs (loop4): 1 orphan inode deleted [ 151.346235][ T6092] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.352827][ T4234] asus 0003:0B05:1807.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.1-1/input0 [ 151.364225][ T6091] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,jqfmt=vfsold,grpid,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003c,nodelalloc,,errors=continue. Quota mode: none. [ 151.407113][ T6092] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.415591][ T6091] EXT4-fs (loop4): shut down requested (2) [ 151.516906][ T4379] usb 2-1: USB disconnect, device number 16 [ 151.742332][ T4395] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.780840][ T4230] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 151.864548][ T6111] 9pnet: Insufficient options for proto=fd [ 151.941021][ T13] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 152.181600][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 152.216948][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.256174][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 152.321664][ T13] usb 5-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 152.355524][ T13] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping [ 152.401777][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 152.521014][ T4230] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 152.530603][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.539052][ T13] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.548153][ T13] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.556462][ T4230] usb 4-1: Product: syz [ 152.560628][ T4230] usb 4-1: Manufacturer: syz [ 152.566185][ T4230] usb 4-1: SerialNumber: syz [ 152.571037][ T13] usb 5-1: Manufacturer: syz [ 152.587487][ T4230] usb 4-1: config 0 descriptor?? [ 152.597713][ T13] usb 5-1: config 0 descriptor?? [ 152.621077][ T6109] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 152.623626][ T6115] loop5: detected capacity change from 0 to 4096 [ 152.640828][ T4395] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.654346][ T4395] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.666446][ T6119] loop1: detected capacity change from 0 to 64 [ 152.672666][ T4395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.683195][ T4395] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.693531][ T4395] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 152.706514][ T4395] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 152.715743][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.739341][ T6115] NILFS (loop5): invalid segment: Checksum error in segment payload [ 152.748445][ T6115] NILFS (loop5): trying rollback from an earlier position [ 152.772698][ T25] audit: type=1800 audit(1790767382.866:10): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.565" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 152.793829][ T6097] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.832324][ T4395] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 152.849493][ T25] audit: type=1800 audit(1790767382.896:11): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.565" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 152.851904][ T4395] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 152.883953][ T4395] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 152.894835][ T4230] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 152.896217][ T4395] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 152.911001][ T6115] NILFS (loop5): recovery complete [ 152.924903][ T4395] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 152.933493][ T6120] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.944783][ T4395] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 152.954036][ T4395] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 152.986651][ T4395] usb 5-1: USB disconnect, device number 11 [ 153.057571][ T6122] loop1: detected capacity change from 0 to 64 [ 153.113702][ T13] usb 4-1: USB disconnect, device number 13 [ 153.246520][ T6126] loop1: detected capacity change from 0 to 512 [ 153.372300][ T1107] usb 1-1: USB disconnect, device number 10 [ 153.551202][ T1107] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 153.625694][ T6126] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.777576][ T6126] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.931184][ T1107] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 153.977467][ T1107] keyspan 1-1:1.0: device disconnected [ 154.095527][ T6142] loop3: detected capacity change from 0 to 256 [ 154.206326][ T6142] FAT-fs (loop3): Directory bread(block 64) failed [ 154.219391][ T6142] FAT-fs (loop3): Directory bread(block 65) failed [ 154.248227][ T6142] FAT-fs (loop3): Directory bread(block 66) failed [ 154.261967][ T6142] FAT-fs (loop3): Directory bread(block 67) failed [ 154.273336][ T6142] FAT-fs (loop3): Directory bread(block 68) failed [ 154.282939][ T6142] FAT-fs (loop3): Directory bread(block 69) failed [ 154.289583][ T6142] FAT-fs (loop3): Directory bread(block 70) failed [ 154.313788][ T6142] FAT-fs (loop3): Directory bread(block 71) failed [ 154.328451][ T6142] FAT-fs (loop3): Directory bread(block 72) failed [ 154.339533][ T6142] FAT-fs (loop3): Directory bread(block 73) failed [ 154.366862][ T6154] loop1: detected capacity change from 0 to 4096 [ 154.464413][ T6158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.513666][ T25] audit: type=1800 audit(1790767384.606:12): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.578" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 154.601022][ T6164] 9pnet: Insufficient options for proto=fd [ 154.641391][ T6166] loop5: detected capacity change from 0 to 256 [ 154.701539][ T6166] FAT-fs (loop5): Directory bread(block 64) failed [ 154.708111][ T6166] FAT-fs (loop5): Directory bread(block 65) failed [ 154.724692][ T1107] wacom 0003:056A:003F.000F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 154.748162][ T6166] FAT-fs (loop5): Directory bread(block 66) failed [ 154.792628][ T6166] FAT-fs (loop5): Directory bread(block 67) failed [ 154.794488][ T4187] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 154.805671][ T6166] FAT-fs (loop5): Directory bread(block 68) failed [ 154.829465][ T6169] fido_id[6169]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.848251][ T6166] FAT-fs (loop5): Directory bread(block 69) failed [ 154.859581][ T6166] FAT-fs (loop5): Directory bread(block 70) failed [ 154.890102][ T6166] FAT-fs (loop5): Directory bread(block 71) failed [ 154.908628][ T6166] FAT-fs (loop5): Directory bread(block 72) failed [ 154.929750][ T6166] FAT-fs (loop5): Directory bread(block 73) failed [ 155.318362][ T6173] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 155.747336][ T25] audit: type=1800 audit(1790767385.836:13): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.588" name="file1" dev="loop4" ino=1048628 res=0 errno=0 [ 155.989072][ T6195] EXT4-fs (loop3): Ignoring removed nobh option [ 156.099752][ T6203] set_capacity_and_notify: 2 callbacks suppressed [ 156.099767][ T6203] loop4: detected capacity change from 0 to 128 [ 156.135044][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,errors=remount-ro,noblock_validity,. Quota mode: none. [ 156.277781][ T6195] EXT4-fs error (device loop3): ext4_generic_delete_entry:2731: inode #12: block 7: comm syz.3.594: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 156.346749][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.598'. [ 156.356517][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.598'. [ 156.489055][ T6195] EXT4-fs (loop3): Remounting filesystem read-only [ 156.530826][ T6195] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1817: Corrupt filesystem [ 156.560780][ T6195] EXT4-fs (loop3): Remounting filesystem read-only [ 156.986335][ T6209] loop5: detected capacity change from 0 to 32768 [ 157.061867][ T6209] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.599 (6209) [ 157.226137][ T6209] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 157.286489][ T6209] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 157.328194][ T6209] BTRFS info (device loop5): use zstd compression, level 3 [ 157.419471][ T6209] BTRFS info (device loop5): using free space tree [ 157.461113][ T6209] BTRFS info (device loop5): has skinny extents [ 157.971950][ T6226] 9pnet: Insufficient options for proto=fd [ 158.148509][ T6251] loop0: detected capacity change from 0 to 256 [ 158.199242][ T6209] BTRFS info (device loop5): enabling ssd optimizations [ 158.370777][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 158.770904][ T13] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.774483][ T6260] loop3: detected capacity change from 0 to 32768 [ 158.784785][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.816605][ T13] usb 5-1: config 0 descriptor?? [ 158.856958][ T6269] loop1: detected capacity change from 0 to 64 [ 158.856999][ T6267] loop0: detected capacity change from 0 to 512 [ 158.871636][ T13] cp210x 5-1:0.0: cp210x converter detected [ 158.877941][ T6260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.609 (6260) [ 158.946365][ T6267] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 158.981745][ T6260] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 159.026425][ T6267] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000004,quota,stripe=0x0000000000000006,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 159.040877][ T6260] BTRFS info (device loop3): force clearing of disk cache [ 159.063545][ T6267] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.100320][ T6260] BTRFS info (device loop3): use zlib compression, level 3 [ 159.109321][ T6260] BTRFS info (device loop3): enabling ssd optimizations [ 159.118435][ T6260] BTRFS info (device loop3): using spread ssd allocation scheme [ 159.126663][ T6260] BTRFS info (device loop3): using free space tree [ 159.133790][ T6260] BTRFS info (device loop3): has skinny extents [ 159.281926][ T6287] loop1: detected capacity change from 0 to 512 [ 159.311091][ T13] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 159.330060][ T6287] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.354041][ T6287] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.362961][ T6287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.363207][ T13] usb 5-1: cp210x converter now attached to ttyUSB0 [ 159.427532][ T6287] EXT4-fs (loop1): 1 truncate cleaned up [ 159.430438][ T6260] BTRFS info (device loop3): clearing free space tree [ 159.440619][ T6287] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,nogrpid,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 159.447100][ T6260] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.476194][ T1107] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.543228][ T6260] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.732962][ T4395] usb 5-1: USB disconnect, device number 12 [ 159.740802][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 159.831279][ T4395] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.866335][ T1107] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 160.014950][ T1107] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 160.147878][ T4395] cp210x 5-1:0.0: device disconnected [ 160.168846][ T6260] BTRFS info (device loop3): creating free space tree [ 160.174048][ T1107] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 160.185467][ T6260] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.213567][ T6260] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.217409][ T1107] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 160.239996][ T1107] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.247675][ T6260] BTRFS info (device loop3): checking UUID tree [ 160.315223][ T6287] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 160.471915][ T1107] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 160.489139][ T1107] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 160.497917][ T1107] usb 6-1: Product: syz [ 160.510853][ T1107] usb 6-1: Manufacturer: syz [ 160.516145][ T1107] usb 6-1: SerialNumber: syz [ 160.776037][ T1107] usb 6-1: config 0 descriptor?? [ 160.823012][ T1107] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 160.836790][ T1107] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 161.067564][ T4916] usb 6-1: USB disconnect, device number 5 [ 161.091038][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 161.100890][ T4234] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.126995][ T4916] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 161.136169][ T6334] 9pnet: Insufficient options for proto=fd [ 161.272279][ T6337] loop3: detected capacity change from 0 to 2048 [ 161.308560][ T6339] loop4: detected capacity change from 0 to 128 [ 161.309643][ T6279] ldusb: No device or device unplugged -19 [ 161.340801][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 161.394953][ T6337] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 161.433124][ T6337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.461039][ T4234] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.484737][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.516202][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.530553][ T4234] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 161.545353][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.559427][ T4234] usb 1-1: config 0 descriptor?? [ 161.700366][ T6342] loop4: detected capacity change from 0 to 2048 [ 162.078641][ T4234] hid-led 0003:0FC5:B080.0010: unknown main item tag 0x1 [ 162.225297][ T4234] hid-led 0003:0FC5:B080.0010: unknown main item tag 0x0 [ 162.410375][ T4234] hid-led 0003:0FC5:B080.0010: unknown main item tag 0x4 [ 162.500552][ T6342] overlayfs: unrecognized mount option "/õ÷ÚgãÕ±+/ÍÞœ›ŸZX˜šlŒÏ´¯ÍNNÝóv[«Áê4n¾vkòúõ…Æ™çÎnÚ|{à½þ'Ž\" or missing value [ 162.730917][ T4234] hid-led: probe of 0003:0FC5:B080.0010 failed with error -71 [ 162.748841][ T4234] usb 1-1: USB disconnect, device number 11 [ 162.779431][ T6360] loop3: detected capacity change from 0 to 512 [ 162.793530][ T6361] program syz.1.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.927430][ T6360] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 162.940003][ T1107] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 162.969599][ T6349] loop5: detected capacity change from 0 to 32768 [ 162.977238][ T6360] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.108077][ T6367] xt_policy: output policy not valid in PREROUTING and INPUT [ 163.311223][ T1107] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 163.471216][ T1107] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64 [ 163.667661][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.871282][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.956037][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.137825][ T1107] usb 5-1: Product: syz [ 164.217319][ T1107] usb 5-1: Manufacturer: syz [ 164.300999][ T1107] usb 5-1: SerialNumber: syz [ 164.465029][ T1107] usb 5-1: config 0 descriptor?? [ 164.467053][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.639'. [ 164.487225][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.639'. [ 164.500971][ T6355] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 164.525226][ T1107] usb 5-1: selecting invalid altsetting 0 [ 164.762157][ T6403] loop5: detected capacity change from 0 to 256 [ 164.770772][ T4235] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.800438][ T6355] usb 5-1: selecting invalid altsetting 0 [ 164.812852][ T6355] usb 5-1: 0:0: usb_set_interface failed (-22) [ 164.824219][ T6355] usb 5-1: selecting invalid altsetting 0 [ 164.829966][ T6355] usb 5-1: 0:0: usb_set_interface failed (-22) [ 164.831601][ T6403] exfat: Deprecated parameter 'utf8' [ 164.849290][ T6354] usb 5-1: selecting invalid altsetting 0 [ 164.854451][ T6403] exfat: Deprecated parameter 'utf8' [ 164.857194][ T6354] usb 5-1: 0:0: usb_set_interface failed (-22) [ 164.870615][ T6354] usb 5-1: selecting invalid altsetting 0 [ 164.879199][ T6354] usb 5-1: 0:0: usb_set_interface failed (-22) [ 164.889037][ T6354] usb 5-1: selecting invalid altsetting 0 [ 164.898395][ T6354] usb 5-1: 0:0: usb_set_interface failed (-22) [ 164.898973][ T6403] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 164.908615][ T4234] usb 5-1: USB disconnect, device number 13 [ 165.010729][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 165.015884][ T1107] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 165.154487][ T6405] 9pnet: Insufficient options for proto=fd [ 165.660623][ T6411] program syz.5.648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.670149][ T4235] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 165.681075][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.690409][ T4235] usb 1-1: Product: syz [ 165.711425][ T4235] usb 1-1: Manufacturer: syz [ 165.716077][ T4235] usb 1-1: SerialNumber: syz [ 165.748725][ T4235] usb 1-1: config 0 descriptor?? [ 165.754396][ T1107] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.763028][ T1107] usb 2-1: config 0 has no interface number 0 [ 165.923993][ T4235] gspca_main: se401-2.14.0 probing 047d:5003 [ 166.011423][ T6425] xt_policy: output policy not valid in PREROUTING and INPUT [ 166.666957][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 166.721059][ T1107] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 166.740363][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.747265][ T6433] loop5: detected capacity change from 0 to 128 [ 166.748929][ T1107] usb 2-1: Product: syz [ 166.780547][ T1107] usb 2-1: Manufacturer: syz [ 166.807984][ T1107] usb 2-1: SerialNumber: syz [ 167.015581][ T6433] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.091880][ T1107] usb 2-1: config 0 descriptor?? [ 167.131479][ T4235] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 167.337080][ T6433] hpfs: filesystem error: improperly stopped [ 167.374826][ T6433] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.383162][ T6433] hpfs: You really don't want any checks? You are crazy... [ 167.392315][ T6433] hpfs: hpfs_map_sector(): read error [ 167.397722][ T6433] hpfs: code page support is disabled [ 167.402202][ T4235] usb 1-1: USB disconnect, device number 12 [ 167.411534][ T6433] hpfs: hpfs_map_4sectors(): unaligned read [ 167.417616][ T6433] hpfs: hpfs_map_4sectors(): unaligned read [ 167.450892][ T1107] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 167.460903][ T6433] hpfs: filesystem error: unable to find root dir [ 167.471858][ T1107] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.487916][ T1107] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 167.496290][ T1107] usb 2-1: media controller created [ 167.512542][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.536778][ T6433] hpfs: hpfs_map_4sectors(): unaligned read [ 167.562996][ T6433] hpfs: hpfs_map_sector(): read error [ 167.631571][ T6438] loop3: detected capacity change from 0 to 1024 [ 167.713059][ T6431] loop4: detected capacity change from 0 to 32768 [ 167.717999][ T6438] hfsplus: bad catalog entry type [ 167.740198][ T6431] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.655 (6431) [ 167.998187][ T4587] hfsplus: b-tree write err: -5, ino 25 [ 168.159594][ T4587] hfsplus: b-tree write err: -5, ino 4 [ 168.286123][ T4587] hfsplus: b-tree write err: -5, ino 2 [ 168.441730][ T6431] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 168.467146][ T6431] BTRFS info (device loop4): using free space tree [ 168.505552][ T6431] BTRFS info (device loop4): has skinny extents [ 168.651501][ T1107] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 168.669728][ T6461] program syz.0.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.739838][ T6431] BTRFS info (device loop4): enabling ssd optimizations [ 168.792408][ T1107] usb 2-1: USB disconnect, device number 17 [ 168.853629][ T6474] 9pnet: Insufficient options for proto=fd [ 169.219843][ T6478] xt_policy: output policy not valid in PREROUTING and INPUT [ 170.005854][ T6482] loop0: detected capacity change from 0 to 2048 [ 170.058253][ T6485] syz.1.668 uses obsolete (PF_INET,SOCK_PACKET) [ 170.130493][ T6489] loop5: detected capacity change from 0 to 4096 [ 170.141513][ T6482] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 170.221482][ T6482] EXT4-fs (loop0): shut down requested (1) [ 170.651062][ T6486] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 170.920901][ T6486] usb 5-1: Using ep0 maxpacket: 32 [ 170.951773][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.675'. [ 171.038781][ T6513] loop0: detected capacity change from 0 to 256 [ 171.056622][ T6486] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 171.073946][ T6486] usb 5-1: config 0 has no interface number 0 [ 171.079630][ T6513] exfat: Deprecated parameter 'utf8' [ 171.085459][ T6486] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 171.125711][ T6486] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 171.161190][ T6513] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 171.334244][ T6486] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 171.363703][ T6486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.498026][ T6526] xt_policy: output policy not valid in PREROUTING and INPUT [ 171.740480][ T6528] 9pnet: Insufficient options for proto=fd [ 171.878106][ T6486] usb 5-1: Product: syz [ 171.986923][ T6486] usb 5-1: Manufacturer: syz [ 172.010741][ T6486] usb 5-1: SerialNumber: syz [ 172.036460][ T6486] usb 5-1: config 0 descriptor?? [ 172.083915][ T6532] loop5: detected capacity change from 0 to 2048 [ 172.120842][ T4236] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 172.135837][ T6532] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 172.163376][ T6532] EXT4-fs (loop5): shut down requested (1) [ 172.311074][ T6486] radio-si470x 5-1:0.35: this is not a si470x device. [ 172.347484][ T6530] loop3: detected capacity change from 0 to 32768 [ 172.431279][ T6544] loop5: detected capacity change from 0 to 512 [ 172.451040][ T6530] JBD2: Ignoring recovery information on journal [ 172.530798][ T4236] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.531546][ T6486] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 172.550225][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.570541][ T4236] usb 2-1: config 0 descriptor?? [ 172.583118][ T6530] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 172.599986][ T6544] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 172.612560][ T4236] cp210x 2-1:0.0: cp210x converter detected [ 172.620551][ T6544] System zones: 0-2, 18-18, 34-35 [ 172.659303][ T6486] usb 5-1: USB disconnect, device number 14 [ 172.662646][ T6542] loop0: detected capacity change from 0 to 32768 [ 172.679897][ T6544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.698708][ T6544] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.766473][ T6542] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 172.816073][ T6542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 172.818897][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 172.881453][ T6542] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 4294901792 [ 172.937211][ T6542] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 172.968617][ T6542] OCFS2: File system is now read-only. [ 172.988877][ T6542] (syz.0.687,6542,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 172.993395][ T6552] loop5: detected capacity change from 0 to 4096 [ 173.036384][ T4236] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 173.043403][ T6542] (syz.0.687,6542,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 173.081068][ T6542] (syz.0.687,6542,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 173.120449][ T6542] (syz.0.687,6542,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 173.151643][ T6542] (syz.0.687,6542,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 173.168746][ T6542] (syz.0.687,6542,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 173.178750][ T6542] (syz.0.687,6542,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 173.188975][ T6542] (syz.0.687,6542,0):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 173.198435][ T6542] (syz.0.687,6542,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 173.207782][ T6542] (syz.0.687,6542,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 173.218044][ T6542] (syz.0.687,6542,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 173.232878][ T6542] (syz.0.687,6542,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 173.262799][ T6542] (syz.0.687,6542,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 173.286484][ T6542] (syz.0.687,6542,0):ocfs2_expand_inline_dir:2840 ERROR: status = -30 [ 173.295708][ T4236] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 173.309916][ T4236] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 173.318323][ T6542] (syz.0.687,6542,0):ocfs2_extend_dir:3204 ERROR: status = -30 [ 173.336818][ T4236] usb 2-1: cp210x converter now attached to ttyUSB0 [ 173.345273][ T6542] (syz.0.687,6542,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30 [ 173.371037][ T4236] usb 2-1: USB disconnect, device number 18 [ 173.382747][ T6542] (syz.0.687,6542,0):ocfs2_mknod:299 ERROR: status = -30 [ 173.392541][ T4236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.401251][ T6542] (syz.0.687,6542,0):ocfs2_mknod:509 ERROR: status = -30 [ 173.408288][ T6542] (syz.0.687,6542,0):ocfs2_mkdir:666 ERROR: status = -30 [ 173.416667][ T4236] cp210x 2-1:0.0: device disconnected [ 173.490209][ T6542] syz.0.687 (6542) used greatest stack depth: 18208 bytes left [ 173.503927][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 173.527597][ T6564] loop5: detected capacity change from 0 to 8192 [ 173.572365][ T6564] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 173.598446][ T6564] REISERFS (device loop5): using ordered data mode [ 173.650515][ T6564] reiserfs: using flush barriers [ 173.700979][ T6564] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.749821][ T6560] loop4: detected capacity change from 0 to 32768 [ 173.757029][ T6564] REISERFS (device loop5): checking transaction log (loop5) [ 173.868283][ T6572] loop1: detected capacity change from 0 to 1024 [ 173.926043][ T6557] loop3: detected capacity change from 0 to 40427 [ 173.927045][ T6560] XFS (loop4): Mounting V5 Filesystem [ 173.943330][ T6572] EXT4-fs (loop1): Ignoring removed bh option [ 173.991175][ T6557] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 173.999159][ T6557] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.036804][ T6557] F2FS-fs (loop3): invalid crc value [ 174.055875][ T6572] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 174.080959][ T6572] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.105169][ T6564] REISERFS (device loop5): Using tea hash to sort names [ 174.154656][ T6564] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 174.172757][ T6560] XFS (loop4): Ending clean mount [ 174.185454][ T6564] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 174.206376][ T6557] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.206504][ T6572] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.697: Freeing blocks not in datazone - block = 0, count = 16 [ 174.223388][ T6560] XFS (loop4): Quotacheck needed: Please wait. [ 174.352260][ T6560] XFS (loop4): Quotacheck: Done. [ 174.398153][ T6557] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.409729][ T6557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.452609][ T25] audit: type=1800 audit(1790767404.546:14): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.695" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 174.472803][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.508696][ T6596] loop1: detected capacity change from 0 to 1024 [ 174.517772][ T4186] XFS (loop4): Unmounting Filesystem [ 174.583736][ T6596] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 174.593779][ T6596] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.661789][ T6483] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 174.703802][ T4191] attempt to access beyond end of device [ 174.703802][ T4191] loop3: rw=2049, want=45104, limit=40427 [ 174.718282][ T6596] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x000000000000000c,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,jqfmt=vfsv0,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 174.900991][ T6483] usb 1-1: Using ep0 maxpacket: 32 [ 175.020953][ T6483] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 175.029072][ T6483] usb 1-1: config 0 has no interface number 0 [ 175.067682][ T6483] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 175.088298][ T6483] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 175.282459][ T6483] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 175.329786][ T6483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.401451][ T6483] usb 1-1: Product: syz [ 175.475856][ T6483] usb 1-1: Manufacturer: syz [ 175.560787][ T6483] usb 1-1: SerialNumber: syz [ 175.577288][ T6483] usb 1-1: config 0 descriptor?? [ 175.764932][ T4379] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 175.870884][ T6483] radio-si470x 1-1:0.35: this is not a si470x device. [ 175.900868][ T4265] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.986976][ T6605] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.707 (6605) [ 176.020851][ T4379] usb 2-1: Using ep0 maxpacket: 8 [ 176.081007][ T6483] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 176.101228][ T6605] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 176.138661][ T6483] usb 1-1: USB disconnect, device number 13 [ 176.145012][ T4379] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 176.154150][ T4265] usb 5-1: Using ep0 maxpacket: 32 [ 176.159381][ T4395] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 176.202156][ T4379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.210516][ T6605] BTRFS info (device loop5): enabling ssd optimizations [ 176.253698][ T6605] BTRFS info (device loop5): not using ssd optimizations [ 176.281473][ T4265] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 176.285937][ T6605] BTRFS info (device loop5): turning off barriers [ 176.298748][ T6605] BTRFS info (device loop5): use no compression [ 176.305042][ T6605] BTRFS info (device loop5): using free space tree [ 176.313740][ T4379] pvrusb2: Hardware description: Terratec Grabster AV400 [ 176.320706][ T6605] BTRFS info (device loop5): has skinny extents [ 176.338740][ T4379] pvrusb2: ********** [ 176.357069][ T4379] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 176.402230][ T4379] pvrusb2: Important functionality might not be entirely working. [ 176.420415][ T4379] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 176.432691][ T4395] usb 4-1: Using ep0 maxpacket: 32 [ 176.441231][ T4379] pvrusb2: ********** [ 176.490906][ T4265] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 176.502474][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.522431][ T4265] usb 5-1: Product: syz [ 176.526600][ T4265] usb 5-1: Manufacturer: syz [ 176.539189][ T4265] usb 5-1: SerialNumber: syz [ 176.547489][ T2425] pvrusb2: Invalid write control endpoint [ 176.554602][ T4395] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 176.618282][ T4395] usb 4-1: config 0 has no interface number 0 [ 176.655314][ T4395] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 176.684966][ T4265] snd-ua101 5-1:1.1: sample format descriptor not found [ 176.689238][ T2425] pvrusb2: Invalid write control endpoint [ 176.710228][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 176.750397][ T4265] snd-ua101 5-1:1.0: invalid num_altsetting [ 176.774837][ T4395] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 176.782381][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 176.836780][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 176.916182][ T2425] pvrusb2: Device being rendered inoperable [ 176.952228][ T4265] usb 2-1: USB disconnect, device number 19 [ 176.973650][ T4395] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 176.975604][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 177.006855][ T4395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.039503][ T4395] usb 4-1: Product: syz [ 177.054653][ T4395] usb 4-1: Manufacturer: syz [ 177.062018][ T4395] usb 4-1: SerialNumber: syz [ 177.081026][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 177.275304][ T4395] usb 4-1: config 0 descriptor?? [ 177.757058][ T6486] usb 5-1: USB disconnect, device number 15 [ 178.093537][ T2425] pvrusb2: Attached sub-driver cx25840 [ 178.111616][ T4395] radio-si470x 4-1:0.35: this is not a si470x device. [ 178.120719][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.190702][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.599979][ T6675] netlink: 168 bytes leftover after parsing attributes in process `syz.5.722'. [ 178.670840][ T4395] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 178.877261][ T6663] set_capacity_and_notify: 1 callbacks suppressed [ 178.877275][ T6663] loop4: detected capacity change from 0 to 32768 [ 178.922991][ T6663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.717 (6663) [ 180.113147][ T6677] loop1: detected capacity change from 0 to 32768 [ 180.268342][ T6663] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 180.277282][ T6649] usb 4-1: USB disconnect, device number 14 [ 180.318309][ T6663] BTRFS info (device loop4): force clearing of disk cache [ 180.355711][ T6663] BTRFS info (device loop4): max_inline at 4096 [ 180.390873][ T6663] BTRFS info (device loop4): enabling disk space caching [ 180.419579][ T6663] BTRFS info (device loop4): disk space caching is enabled [ 180.446213][ T6663] BTRFS info (device loop4): has skinny extents [ 180.544425][ T6687] loop5: detected capacity change from 0 to 32768 [ 180.741076][ T25] audit: type=1804 audit(1790767410.826:15): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.733" name="/newroot/100/tracing/trace_clock" dev="tracefs" ino=25618 res=1 errno=0 [ 180.822724][ T6663] BTRFS info (device loop4): enabling ssd optimizations [ 180.841007][ T6663] BTRFS info (device loop4): clearing free space tree [ 180.850034][ T6663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.865795][ T6663] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.116929][ T6734] loop3: detected capacity change from 0 to 128 [ 181.440518][ T6738] loop0: detected capacity change from 0 to 32768 [ 181.747500][ T6738] XFS (loop0): Mounting V5 Filesystem [ 181.866811][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 181.881533][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 181.922412][ T6738] XFS (loop0): Ending clean mount [ 181.943948][ T6738] XFS (loop0): Quotacheck needed: Please wait. [ 182.066405][ T6738] XFS (loop0): Quotacheck: Done. [ 182.384252][ T4188] XFS (loop0): Unmounting Filesystem [ 183.280797][ T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 183.359925][ T6774] loop4: detected capacity change from 0 to 40427 [ 183.384470][ T6784] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 183.396860][ T6784] netdevsim netdevsim1 netdevsim0: Failed to get key data for SA table [ 183.429507][ T6774] F2FS-fs (loop4): invalid crc value [ 183.512704][ T6774] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.530780][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 183.650963][ T26] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 183.686201][ T6787] loop5: detected capacity change from 0 to 32768 [ 183.690310][ T26] usb 4-1: config 0 has no interface number 0 [ 183.692773][ T6774] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.756201][ T26] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 183.780808][ T26] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 183.852729][ T6787] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.754 (6787) [ 183.895150][ T6787] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 183.925519][ T6787] BTRFS info (device loop5): using free space tree [ 183.945742][ T6787] BTRFS info (device loop5): has skinny extents [ 183.953063][ T26] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 183.973621][ T4186] attempt to access beyond end of device [ 183.973621][ T4186] loop4: rw=2049, want=45104, limit=40427 [ 183.975508][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.038708][ T26] usb 4-1: Product: syz [ 184.048822][ T26] usb 4-1: Manufacturer: syz [ 184.058941][ T26] usb 4-1: SerialNumber: syz [ 184.071027][ T26] usb 4-1: config 0 descriptor?? [ 184.268103][ T6825] loop0: detected capacity change from 0 to 128 [ 184.289998][ T6799] loop1: detected capacity change from 0 to 32768 [ 184.341068][ T26] radio-si470x 4-1:0.35: this is not a si470x device. [ 184.523584][ T6787] BTRFS info (device loop5): enabling ssd optimizations [ 184.529242][ T6799] XFS (loop1): Mounting V5 Filesystem [ 184.604817][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'. [ 184.619643][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'. [ 184.745529][ T6799] XFS (loop1): Ending clean mount [ 184.812575][ T6799] XFS (loop1): Quotacheck needed: Please wait. [ 184.911120][ T26] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 185.210470][ T6799] XFS (loop1): Quotacheck: Done. [ 185.772374][ T4187] XFS (loop1): Unmounting Filesystem [ 185.802003][ T6853] usb 4-1: USB disconnect, device number 15 [ 185.836634][ T6649] Bluetooth: hci1: command 0x0406 tx timeout [ 185.849499][ T6649] Bluetooth: hci2: command 0x0406 tx timeout [ 185.866010][ T6649] Bluetooth: hci0: command 0x0406 tx timeout [ 185.882313][ T6649] Bluetooth: hci3: command 0x0406 tx timeout [ 185.995096][ T6843] loop4: detected capacity change from 0 to 40427 [ 186.190948][ T6843] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 186.314819][ T6843] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 186.607833][ T6843] F2FS-fs (loop4): invalid crc value [ 186.820744][ T6852] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.846414][ T6843] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 187.008458][ T6843] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 187.021190][ T6843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 187.097881][ T4186] attempt to access beyond end of device [ 187.097881][ T4186] loop4: rw=2049, want=45104, limit=40427 [ 187.102078][ T6883] option changes via remount are deprecated (pid=6882 comm=syz.5.771) [ 187.148964][ T6883] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 187.455860][ T6891] 9pnet: Insufficient options for proto=fd [ 187.799657][ T6892] loop4: detected capacity change from 0 to 2048 [ 187.974713][ T6892] UDF-fs: bad mount option "" 00000000000000000000" or missing value [ 188.009228][ T6852] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.017352][ T6852] usb 1-1: config 0 has no interface number 0 [ 188.135144][ T6896] program syz.5.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.181072][ T6852] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.204120][ T6852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.368127][ T6852] usb 1-1: Product: syz [ 188.382848][ T6852] usb 1-1: Manufacturer: syz [ 188.387590][ T6852] usb 1-1: SerialNumber: syz [ 188.402600][ T6852] usb 1-1: config 0 descriptor?? [ 189.270857][ T6852] dvb_usb_ec168: probe of 1-1:0.1 failed with error -71 [ 189.276516][ T6852] usb 1-1: USB disconnect, device number 14 [ 189.622989][ T6925] 9pnet: Insufficient options for proto=fd [ 190.520075][ T6901] loop5: detected capacity change from 0 to 40427 [ 190.574918][ T6916] loop3: detected capacity change from 0 to 32768 [ 190.626700][ T6944] loop1: detected capacity change from 0 to 256 [ 190.640881][ T6901] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.693617][ T6916] JBD2: Ignoring recovery information on journal [ 190.773132][ T6901] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 190.795607][ T6916] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 190.936015][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 190.992164][ T5087] attempt to access beyond end of device [ 190.992164][ T5087] loop5: rw=2049, want=45104, limit=40427 [ 191.833622][ T6989] loop1: detected capacity change from 0 to 8 [ 191.915899][ T6991] device erspan0 entered promiscuous mode [ 192.889962][ T7018] netlink: 104 bytes leftover after parsing attributes in process `syz.3.827'. [ 193.005933][ T7027] device macvlan1 entered promiscuous mode [ 193.186224][ T13] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 193.270870][ T6649] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.995512][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.009479][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.082307][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.240968][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.260691][ T13] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.279982][ T13] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 194.300724][ T13] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 194.324740][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 194.347332][ T13] usb 2-1: config 1 interface 1 has no altsetting 0 [ 194.380955][ T6649] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 194.410325][ T6649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.426389][ T6649] usb 4-1: Product: syz [ 194.440688][ T6649] usb 4-1: Manufacturer: syz [ 194.445448][ T6649] usb 4-1: SerialNumber: syz [ 194.461328][ T6649] usb 4-1: config 0 descriptor?? [ 194.537588][ T4915] hid-generic 0005:16C0:05DF.0011: item fetching failed at offset 0/1 [ 194.558620][ T4915] hid-generic: probe of 0005:16C0:05DF.0011 failed with error -22 [ 194.580783][ T6852] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.620904][ T13] usb 2-1: string descriptor 0 read error: -22 [ 194.627164][ T13] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 194.648340][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.733989][ T7025] udc-core: couldn't find an available UDC or it's busy [ 194.760725][ T7025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.775538][ T4915] usb 4-1: USB disconnect, device number 16 [ 194.820816][ T6852] usb 5-1: Using ep0 maxpacket: 32 [ 194.946120][ T6852] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 194.950830][ T13] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 194.958850][ T6852] usb 5-1: config 0 has no interface number 0 [ 194.974723][ T13] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 194.990314][ T6852] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 195.030011][ T6852] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 195.264956][ T7088] 9pnet: Insufficient options for proto=fd [ 195.411125][ T6852] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 195.525349][ T6852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.676977][ T6852] usb 5-1: Product: syz [ 195.691411][ T13] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 195.701838][ T13] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 195.714176][ T6852] usb 5-1: Manufacturer: syz [ 195.730903][ T13] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 195.738161][ T6852] usb 5-1: SerialNumber: syz [ 195.762435][ T13] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 195.784410][ T6852] usb 5-1: config 0 descriptor?? [ 195.818258][ T13] usb 2-1: USB disconnect, device number 20 [ 195.981103][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 196.060845][ T6852] radio-si470x 5-1:0.35: this is not a si470x device. [ 196.163473][ T7094] loop5: detected capacity change from 0 to 8192 [ 196.630926][ T6852] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 196.801216][ T7094] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 196.833600][ T7094] REISERFS (device loop5): using ordered data mode [ 196.846567][ T7094] reiserfs: using flush barriers [ 196.878292][ T7094] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.991160][ T7094] REISERFS (device loop5): checking transaction log (loop5) [ 197.007499][ T7094] REISERFS (device loop5): Using r5 hash to sort names [ 197.022255][ T7094] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 197.060832][ T7094] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 197.266154][ T7094] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 197.332144][ T7094] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 197.359818][ T7121] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 197.381308][ T7094] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 197.795926][ T7130] 9pnet: Insufficient options for proto=fd [ 198.559896][ T7133] input: syz0 as /devices/virtual/input/input22 [ 198.669882][ T4915] usb 5-1: USB disconnect, device number 16 [ 198.735502][ T7140] jffs2: notice: (7140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.983138][ T7175] netlink: 27 bytes leftover after parsing attributes in process `syz.3.883'. [ 200.144593][ T7186] jffs2: notice: (7186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.400967][ T4191] ------------[ cut here ]------------ [ 200.407641][ T4191] kernel BUG at fs/jffs2/nodelist.c:462! [ 201.128435][ T4191] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 201.134562][ T4191] CPU: 0 PID: 4191 Comm: syz-executor Not tainted syzkaller #0 [ 201.142101][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.152140][ T4191] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 201.158040][ T4191] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 01 d2 18 ff e9 4d fe ff ff e8 47 9e d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 201.177641][ T4191] RSP: 0000:ffffc90002f5fb38 EFLAGS: 00010293 [ 201.183690][ T4191] RAX: ffffffff82a57659 RBX: ffff88802bd13000 RCX: ffff888062c51dc0 [ 201.191641][ T4191] RDX: 0000000000000000 RSI: ffff88802bd13000 RDI: ffff888077342000 [ 201.199594][ T4191] RBP: 0000000000000006 R08: ffff88807734236b R09: 1ffff1100ee6846d [ 201.207551][ T4191] R10: dffffc0000000000 R11: ffffed100ee6846e R12: ffff88802bd13000 [ 201.215502][ T4191] R13: dffffc0000000000 R14: ffff88802bd13020 R15: ffff888077342000 [ 201.223454][ T4191] FS: 0000555560828500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 201.232361][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.238923][ T4191] CR2: 00007f46f5e7692c CR3: 0000000062cac000 CR4: 00000000003506f0 [ 201.246875][ T4191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.254828][ T4191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.262783][ T4191] Call Trace: [ 201.266050][ T4191] [ 201.268959][ T4191] ? jffs2_do_clear_inode+0x310/0x390 [ 201.274319][ T4191] jffs2_do_clear_inode+0x31b/0x390 [ 201.279498][ T4191] ? jffs2_statfs+0x370/0x370 [ 201.284157][ T4191] evict+0x4b6/0x8b0 [ 201.288035][ T4191] ? evict_inodes+0x577/0x6e0 [ 201.292691][ T4191] ? proc_nr_inodes+0x320/0x320 [ 201.297522][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 201.302702][ T4191] evict_inodes+0x650/0x6e0 [ 201.307187][ T4191] ? clear_inode+0x150/0x150 [ 201.311756][ T4191] ? jffs2_sync_fs+0x93/0xa0 [ 201.316327][ T4191] generic_shutdown_super+0x93/0x300 [ 201.321594][ T4191] kill_mtd_super+0x1f/0x60 [ 201.326079][ T4191] jffs2_kill_sb+0x92/0xb0 [ 201.330475][ T4191] deactivate_locked_super+0x93/0xf0 [ 201.335738][ T4191] cleanup_mnt+0x426/0x4d0 [ 201.340137][ T4191] task_work_run+0x125/0x1a0 [ 201.344709][ T4191] exit_to_user_mode_loop+0x10f/0x130 [ 201.350057][ T4191] exit_to_user_mode_prepare+0xee/0x180 [ 201.355581][ T4191] syscall_exit_to_user_mode+0x16/0x40 [ 201.361023][ T4191] do_syscall_64+0x58/0xa0 [ 201.365417][ T4191] ? clear_bhb_loop+0x30/0x80 [ 201.370073][ T4191] ? clear_bhb_loop+0x30/0x80 [ 201.374730][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.380603][ T4191] RIP: 0033:0x7f8c36b93397 [ 201.384997][ T4191] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 201.404580][ T4191] RSP: 002b:00007ffd12c59cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 201.412970][ T4191] RAX: 0000000000000000 RBX: 00007f8c36c284bb RCX: 00007f8c36b93397 [ 201.420919][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12c59db0 [ 201.428873][ T4191] RBP: 00007ffd12c59db0 R08: 00007ffd12c5adb0 R09: 00000000ffffffff [ 201.436827][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd12c5ae40 [ 201.444774][ T4191] R13: 00007f8c36c284bb R14: 0000000000030e86 R15: 00007ffd12c5ae80 [ 201.452729][ T4191] [ 201.455739][ T4191] Modules linked in: [ 201.464121][ T4191] ---[ end trace 61f531de5abe7221 ]--- [ 201.469629][ T4191] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 201.476669][ T4191] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 01 d2 18 ff e9 4d fe ff ff e8 47 9e d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 201.496402][ T4191] RSP: 0000:ffffc90002f5fb38 EFLAGS: 00010293 [ 201.503085][ T4191] RAX: ffffffff82a57659 RBX: ffff88802bd13000 RCX: ffff888062c51dc0 [ 201.511313][ T4191] RDX: 0000000000000000 RSI: ffff88802bd13000 RDI: ffff888077342000 [ 201.519372][ T4191] RBP: 0000000000000006 R08: ffff88807734236b R09: 1ffff1100ee6846d [ 201.527668][ T4191] R10: dffffc0000000000 R11: ffffed100ee6846e R12: ffff88802bd13000 [ 201.535902][ T4191] R13: dffffc0000000000 R14: ffff88802bd13020 R15: ffff888077342000 [ 201.544659][ T4191] FS: 0000555560828500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 201.553865][ T4191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.560541][ T4191] CR2: 00002000001d5030 CR3: 0000000062cac000 CR4: 00000000003506f0 [ 201.568856][ T4191] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.582064][ T4191] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.590131][ T4191] Kernel panic - not syncing: Fatal exception [ 201.596395][ T4191] Kernel Offset: disabled [ 201.600708][ T4191] Rebooting in 86400 seconds..