last executing test programs: 17.489832911s ago: executing program 3 (id=1433): syz_usb_connect(0x2, 0x3f0, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da072501010003"], 0x0) 13.243209132s ago: executing program 3 (id=1440): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r3 = syz_io_uring_setup(0x4072, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xd}, {0x9, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 13.179717202s ago: executing program 1 (id=1441): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xcb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000002680)=""/178, 0xb2}], 0x132}}], 0x5, 0x0, 0x0) 12.145172417s ago: executing program 1 (id=1442): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@cachetag={'cachetag', 0x3d, 'GPL\x00'}}], [{@obj_role={'obj_role', 0x3d, 'c:::\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 11.372648436s ago: executing program 0 (id=1445): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' z\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='@\x00\x00\x00'], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="bff1de127bd7cd9dd101455842337a87772e508e3e70ae"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000580)=ANY=[], 0x1008) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) socket$unix(0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 10.348802477s ago: executing program 2 (id=1446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' z\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='@\x00\x00\x00'], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="bff1de127bd7cd9dd101455842337a87772e508e3e70ae"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 9.57540856s ago: executing program 4 (id=1447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 9.508079894s ago: executing program 3 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf250500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept4(r5, &(0x7f00000006c0)=@ieee802154={0x24, @long}, 0x0, 0x80c00) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r7, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 9.474937462s ago: executing program 4 (id=1449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 8.976901674s ago: executing program 0 (id=1450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) 8.879894548s ago: executing program 0 (id=1451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newpolicy={0xb8, 0x13, 0x1, 0x70bd2d, 0x25dfdbfc, {{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e22, 0x0, 0x4e20, 0x10, 0x2, 0x80, 0xa0, 0x3a}, {0x3, 0x4, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x81}, {0x80000000, 0x10, 0x9, 0x5b}, 0x3, 0x6e6bb3, 0x2, 0x1, 0x3, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40041c0}, 0x20008010) 8.815197523s ago: executing program 4 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 8.767665305s ago: executing program 2 (id=1453): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xcb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000002680)=""/178, 0xb2}], 0x132}}], 0x5, 0x0, 0x0) 8.764439052s ago: executing program 3 (id=1454): bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(0x0, 0x800, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000080), 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = userfaultfd(0x80400) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000068e000/0x1000)=nil, 0x1000}}) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000033, r4, 0x0) fremovexattr(r3, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') 8.562210796s ago: executing program 1 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(r1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) r4 = inotify_init1(0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5452, &(0x7f0000000080)={{}, "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"}) 6.54297336s ago: executing program 0 (id=1456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {0x0, 0x80000000}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000009c0)={{0x80000000, r6, 0x4, [0xc, 0x2]}, {r5, 0x0, 0x3, [0xfffffff9, 0xffffff79]}, 0x2, [0x3]}) r7 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000240)={0x2a, 0x900, 0x0, 0x4, 0x2, 0x4f}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 6.499805038s ago: executing program 2 (id=1457): syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) socket$inet(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x2c, 0x2, @thr={&(0x7f0000000100)="72a2ca2efa932d01b25691ff66058fbb5625070fa9957b7971d65da926ecfd1bc75371145ce2a7b2eab3e4f1d6caddd907ce201fcc78ab9726daa1b723061ba60f9a07773710d0e36255d98a931a9c1253697c12b032359b7e39ebd0959279bb038fc9e940d6acb0f48a4a2b1b116a5e7afc889efe8e1b16e09c79be1619939f", &(0x7f0000000180)="e0b109bc323f41a8eca28bf4a774c2c96ecb718559fb53eaea1dcd453371e7450e489e90907603c5736f5392f07d5fac3506a2c2a8cefd177fff21e65fcf2266486cb2a0e0ff84a6c50724358e60e8fa409c8758b719cf5e68c0b0bad97ee6205a6e52fbc0c58e41bb4219aeec566fb9"}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYRESDEC=r2], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x9}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 6.497938069s ago: executing program 4 (id=1458): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x5, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.717095151s ago: executing program 0 (id=1459): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x6, 0x19, 0x0, 0x2000e881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r8, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7d5722780b6c2a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) 3.514897851s ago: executing program 4 (id=1460): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1f", 0x14, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.448073313s ago: executing program 3 (id=1461): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' z\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='@\x00\x00\x00'], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="bff1de127bd7cd9dd101455842337a87772e508e3e70ae"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000580)=ANY=[], 0x1008) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x20) socket$unix(0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 3.396373592s ago: executing program 1 (id=1462): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/11) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, 0x0, r6}, &(0x7f0000000580)=""/237, 0xed, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f009, 0x4}) 3.393151271s ago: executing program 2 (id=1463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) 1.026918571s ago: executing program 0 (id=1464): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x16, 0xc4, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xb, 0x6d, [@loopback, @loopback]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@broadcast, 0xfffffffd}, {@remote}, {@multicast1}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010105, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x8000, 0x0, 0x8000, 0x20000000000000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x38, r6, 0x811, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) r8 = dup(r4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.023092389s ago: executing program 1 (id=1465): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' z\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='@\x00\x00\x00'], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="bff1de127bd7cd9dd101455842337a87772e508e3e70ae"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000500010007"], 0x1c}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000580)=ANY=[], 0x1008) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 404.550941ms ago: executing program 1 (id=1466): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newpolicy={0xb8, 0x13, 0x1, 0x70bd2d, 0x25dfdbfc, {{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e22, 0x0, 0x4e20, 0x10, 0x2, 0x80, 0xa0, 0x3a}, {0x3, 0x4, 0x0, 0xfff, 0x5, 0x0, 0x0, 0x81}, {0x80000000, 0x10, 0x9, 0x5b}, 0x3, 0x6e6bb3, 0x2, 0x1, 0x3, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40041c0}, 0x20008010) 195.332966ms ago: executing program 3 (id=1468): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xcb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000002680)=""/178, 0xb2}], 0x132}}], 0x5, 0x0, 0x0) 724.605µs ago: executing program 4 (id=1469): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bee) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020}, 0x2020) timer_delete(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="747240e4157896dd56be7ea12d36ecac75c99508b6fd4902150cd7a8fc5f29", @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYBLOB=',\x00']) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) 0s ago: executing program 2 (id=1470): unshare(0x8000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x38, 0x1) kernel console output (not intermixed with test programs): 52][ T5838] Bluetooth: hci2: unexpected cc 0x2039 length: 4 > 1 [ 122.454711][ T3569] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 122.521161][ T3569] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 48 with error 28 [ 122.597505][ T3569] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.597505][ T3569] [ 122.658077][ T3569] EXT4-fs (loop4): Total free blocks count 0 [ 122.685258][ T3569] EXT4-fs (loop4): Free/Dirty block details [ 122.706410][ T3569] EXT4-fs (loop4): free_blocks=68451041280 [ 122.713705][ T3569] EXT4-fs (loop4): dirty_blocks=48 [ 122.726342][ T3569] EXT4-fs (loop4): Block reservation details [ 122.733757][ T3569] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 122.791884][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.820018][ T6752] vivid-007: disconnect [ 122.846886][ T6751] vivid-007: reconnect [ 123.624838][ T6759] loop1: detected capacity change from 0 to 512 [ 123.734669][ T6764] loop3: detected capacity change from 0 to 2048 [ 123.767092][ T6764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.778337][ T6761] netlink: 44 bytes leftover after parsing attributes in process `syz.4.286'. [ 123.822386][ T6759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.843627][ T6759] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.859436][ T5835] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1336 (mode 100755) has inode size 21510 different from extent length 22016. Filesystem need not be standards compliant. [ 124.038969][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.084546][ T6769] netlink: 252 bytes leftover after parsing attributes in process `syz.4.298'. [ 124.797052][ T6748] loop0: detected capacity change from 0 to 32768 [ 124.846096][ T6748] XFS: ikeep mount option is deprecated. [ 124.852472][ T6748] XFS: ikeep mount option is deprecated. [ 125.004284][ T6790] loop1: detected capacity change from 0 to 1024 [ 125.053234][ T6748] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.066950][ T6790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.942081][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.009978][ T6748] XFS (loop0): Ending clean mount [ 126.058001][ T46] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 126.870635][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.976142][ T6812] loop2: detected capacity change from 0 to 2048 [ 127.015926][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.027954][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.066363][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.114263][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.119184][ T6812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.162444][ T46] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.198767][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.222508][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.256862][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.300034][ T25] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 127.331052][ T46] hub 5-1:1.0: bad descriptor, ignoring hub [ 127.341104][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.355755][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.368697][ T46] hub 5-1:1.0: probe with driver hub failed with error -5 [ 127.376396][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 127.383077][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 127.388632][ T46] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 127.424044][ T25] usb 4-1: config 0 descriptor?? [ 127.604346][ T6826] netlink: 252 bytes leftover after parsing attributes in process `syz.1.311'. [ 127.640839][ T5165] usb 5-1: USB disconnect, device number 8 [ 128.068687][ T6807] capability: warning: `syz.3.306' uses deprecated v2 capabilities in a way that may be insecure [ 128.448012][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 128.454602][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 128.464247][ T25] usb 4-1: USB disconnect, device number 7 [ 129.143196][ T6843] sctp: [Deprecated]: syz.2.318 (pid 6843) Use of int in maxseg socket option. [ 129.143196][ T6843] Use struct sctp_assoc_value instead [ 129.519585][ T6843] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 129.521494][ T6861] netlink: 252 bytes leftover after parsing attributes in process `syz.4.323'. [ 129.589009][ T95] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.890610][ T95] usb 1-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 8 [ 129.900698][ T95] usb 1-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.914550][ T95] usb 1-1: config 1 interface 0 has no altsetting 0 [ 129.927569][ T95] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.945459][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.954783][ T95] usb 1-1: Product: syz [ 129.995512][ T95] usb 1-1: Manufacturer: syz [ 130.015333][ T95] usb 1-1: SerialNumber: syz [ 130.021320][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.072881][ T6848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.198976][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 130.205173][ T8] usb 5-1: no configurations [ 130.218020][ T8] usb 5-1: can't read configurations, error -22 [ 130.313952][ T95] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 130.348835][ T95] usb 1-1: USB disconnect, device number 7 [ 130.377952][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.570558][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 130.587787][ T8] usb 5-1: no configurations [ 130.593439][ T8] usb 5-1: can't read configurations, error -22 [ 130.607097][ T8] usb usb5-port1: attempt power cycle [ 130.807015][ T6882] binder: 6879:6882 ioctl c0306201 20000480 returned -14 [ 131.559052][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.628882][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 131.634676][ T8] usb 5-1: no configurations [ 131.639349][ T8] usb 5-1: can't read configurations, error -22 [ 131.706833][ T6889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 131.716484][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 131.725718][ T6889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 131.735051][ T6889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 131.768194][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.823383][ T6894] netlink: 252 bytes leftover after parsing attributes in process `syz.0.336'. [ 131.828306][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 131.858353][ T8] usb 5-1: no configurations [ 131.863365][ T8] usb 5-1: can't read configurations, error -22 [ 131.924324][ T8] usb usb5-port1: unable to enumerate USB device [ 133.128719][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.137967][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.749179][ T6911] binder: 6910:6911 unknown command 0 [ 133.783525][ T6911] binder: 6910:6911 ioctl c0306201 200001c0 returned -22 [ 135.044187][ T6928] netlink: 252 bytes leftover after parsing attributes in process `syz.2.348'. [ 135.187497][ T6931] Cannot find set identified by id 0 to match [ 135.826585][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.349'. [ 135.889111][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 135.922322][ T6931] bridge_slave_1: left allmulticast mode [ 135.929896][ T6931] bridge_slave_1: left promiscuous mode [ 135.987216][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.719186][ T6945] loop4: detected capacity change from 0 to 16 [ 136.903136][ T6945] erofs: (device loop4): mounted with root inode @ nid 36. [ 137.045518][ T6945] syz.4.351: attempt to access beyond end of device [ 137.045518][ T6945] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 137.061127][ T6945] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 0 of nid 36 [ 137.088794][ T6945] syz.4.351: attempt to access beyond end of device [ 137.088794][ T6945] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 137.103267][ T6945] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 0 of nid 36 [ 137.111867][ T6945] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 137.142218][ T6945] syz.4.351: attempt to access beyond end of device [ 137.142218][ T6945] loop4: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 137.156209][ T6945] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 0 of nid 36 [ 137.164762][ T6945] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 137.360097][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.438732][ T6931] bridge_slave_0: left allmulticast mode [ 137.458960][ T6931] bridge_slave_0: left promiscuous mode [ 137.465412][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.658594][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 137.678388][ T25] usb 3-1: no configurations [ 137.683085][ T25] usb 3-1: can't read configurations, error -22 [ 137.818012][ T5165] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 137.848207][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.980843][ T5165] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 138.016474][ T5165] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 138.058135][ T5165] usb 5-1: config 1 interface 0 has no altsetting 0 [ 138.279485][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 138.285846][ T25] usb 3-1: no configurations [ 138.290657][ T25] usb 3-1: can't read configurations, error -22 [ 138.297653][ T25] usb usb3-port1: attempt power cycle [ 138.307627][ T5165] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 138.316945][ T5165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.325184][ T5165] usb 5-1: Product: syz [ 138.329630][ T5165] usb 5-1: Manufacturer: syz [ 138.334266][ T5165] usb 5-1: SerialNumber: syz [ 139.319529][ T6971] syz.3.362 uses obsolete (PF_INET,SOCK_PACKET) [ 139.417980][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.446285][ T25] usb 3-1: device descriptor read/8, error -71 [ 139.459592][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.731747][ T6976] fuse: Bad value for 'group_id' [ 139.736737][ T6976] fuse: Bad value for 'group_id' [ 139.798023][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 139.813531][ T46] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 139.845168][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 139.862981][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.924215][ T25] usb 3-1: device descriptor read/8, error -71 [ 140.091952][ T25] usb usb3-port1: unable to enumerate USB device [ 140.343019][ T46] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 140.541990][ T46] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 140.556534][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.573425][ T46] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.079065][ T46] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.098347][ T46] usb 2-1: Product: syz [ 141.106905][ T46] usb 2-1: Manufacturer: syz [ 141.112767][ T46] usb 2-1: SerialNumber: syz [ 141.124385][ T46] usb 2-1: config 0 descriptor?? [ 141.141468][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'. [ 141.149047][ T46] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.156189][ T6988] netlink: 'syz.2.366': attribute type 7 has an invalid length. [ 141.172575][ T6988] netlink: 'syz.2.366': attribute type 8 has an invalid length. [ 141.181966][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 141.191471][ T46] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.212077][ T6987] loop3: detected capacity change from 0 to 4096 [ 141.275719][ T6987] NILFS (loop3): invalid segment: Checksum error in segment payload [ 141.328178][ T6987] NILFS (loop3): trying rollback from an earlier position [ 141.403784][ T6987] NILFS (loop3): recovery complete [ 141.419423][ T46] usb 2-1: USB disconnect, device number 5 [ 141.419486][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 141.435790][ T6992] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.445954][ T6994] Cannot find set identified by id 0 to match [ 141.455990][ T46] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 141.525240][ T6996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.369'. [ 141.565858][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 141.978788][ T5165] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 142.021198][ T5165] usb 5-1: USB disconnect, device number 13 [ 142.063758][ T5165] usblp0: removed [ 142.383330][ T7011] loop2: detected capacity change from 0 to 2048 [ 143.177922][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.328313][ T95] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.337147][ T5879] usb 1-1: device descriptor read/64, error -71 [ 143.359202][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.384563][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.379'. [ 143.399462][ T7032] netlink: 'syz.4.379': attribute type 7 has an invalid length. [ 143.407272][ T7032] netlink: 'syz.4.379': attribute type 8 has an invalid length. [ 143.420427][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 143.518719][ T95] usb 4-1: Using ep0 maxpacket: 16 [ 143.526434][ T95] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 143.539240][ T95] usb 4-1: can't read configurations, error -61 [ 143.548842][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.570910][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.585131][ T7035] loop4: detected capacity change from 0 to 128 [ 143.585408][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.602161][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.678817][ T7035] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 143.778097][ T95] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.817986][ T5879] usb 1-1: device descriptor read/64, error -71 [ 143.847614][ T7035] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 143.986936][ T8] usb 3-1: config 0 descriptor?? [ 144.000266][ T5879] usb usb1-port1: attempt power cycle [ 144.028751][ T95] usb 4-1: Using ep0 maxpacket: 16 [ 144.151287][ T95] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 144.171363][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 144.206785][ T95] usb 4-1: can't read configurations, error -61 [ 144.247121][ T95] usb usb4-port1: attempt power cycle [ 144.488031][ T5879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.509852][ T5879] usb 1-1: device descriptor read/8, error -71 [ 144.547073][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 144.554445][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 144.561879][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 144.569188][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 144.667996][ T95] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.708694][ T95] usb 4-1: Using ep0 maxpacket: 16 [ 144.710657][ T7035] loop4: detected capacity change from 0 to 32768 [ 144.718763][ T95] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 144.729200][ T95] usb 4-1: can't read configurations, error -61 [ 144.737397][ T7035] xfs: Unknown parameter 'uid>00000000000000000000' [ 144.945017][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.953623][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 144.960761][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 144.968532][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 144.975944][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 144.984634][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 144.991363][ T5879] usb 1-1: device descriptor read/8, error -71 [ 144.997640][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 145.004427][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 145.011153][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 145.018632][ T5877] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 145.028222][ T95] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.038649][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 145.046801][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 145.055588][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.165604][ T5879] usb usb1-port1: unable to enumerate USB device [ 145.444482][ T5877] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 145.468695][ T5877] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 145.482193][ T95] usb 4-1: Using ep0 maxpacket: 16 [ 145.501332][ T95] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 145.509575][ T8] pwc: Registered as video103. [ 145.515499][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 145.526895][ T95] usb 4-1: can't read configurations, error -61 [ 145.551483][ T5877] usb 2-1: config 1 interface 0 has no altsetting 0 [ 145.559169][ T95] usb usb4-port1: unable to enumerate USB device [ 145.569180][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.589937][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.618124][ T8] usb 3-1: USB disconnect, device number 10 [ 145.648683][ T5877] usb 2-1: Product: syz [ 145.675682][ T5877] usb 2-1: Manufacturer: syz [ 145.702703][ T5877] usb 2-1: SerialNumber: syz [ 147.594302][ T7049] loop2: detected capacity change from 0 to 40427 [ 147.784170][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.391'. [ 147.793608][ T7068] netlink: 'syz.4.391': attribute type 7 has an invalid length. [ 147.798606][ T7049] F2FS-fs (loop2): invalid crc value [ 147.801349][ T7068] netlink: 'syz.4.391': attribute type 8 has an invalid length. [ 147.814473][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 147.920642][ T7049] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.114738][ T7078] binder: 7072:7078 ioctl c0306201 20000480 returned -14 [ 149.016532][ T5877] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 149.035735][ T5877] usb 2-1: USB disconnect, device number 6 [ 149.043528][ T5877] usblp0: removed [ 149.600733][ T7092] syz.1.395 uses old SIOCAX25GETINFO [ 150.772194][ T7113] loop2: detected capacity change from 0 to 512 [ 150.840621][ T7117] binder: 7108:7117 ioctl c0306201 20000480 returned -14 [ 150.983245][ T5877] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 151.529550][ T5877] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 151.542708][ T5877] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 151.581090][ T5877] usb 2-1: config 1 interface 0 has no altsetting 0 [ 151.599695][ T7113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.627254][ T7113] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.688497][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 151.697590][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.776853][ T5877] usb 2-1: Product: syz [ 151.807188][ T5877] usb 2-1: Manufacturer: syz [ 151.827939][ T5877] usb 2-1: SerialNumber: syz [ 151.844560][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.818606][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.569010][ T7127] loop3: detected capacity change from 0 to 32768 [ 153.645674][ T7127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.409 (7127) [ 153.688512][ T29] audit: type=1326 audit(1731474419.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9bb7e719 code=0x7fc00000 [ 153.775156][ T7127] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.797931][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 153.804544][ T7127] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 153.819478][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 153.840231][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.854164][ T8] usb 1-1: config 46 has an invalid interface number: 138 but max is 0 [ 153.865020][ T7127] BTRFS info (device loop3): using free-space-tree [ 153.880232][ T8] usb 1-1: config 46 has no interface number 0 [ 153.916496][ T8] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=db.e8 [ 153.947898][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.956081][ T8] usb 1-1: Product: syz [ 153.978245][ T8] usb 1-1: Manufacturer: syz [ 153.998299][ T8] usb 1-1: SerialNumber: syz [ 154.262633][ T8] snd-usb-audio 1-1:46.138: probe with driver snd-usb-audio failed with error -71 [ 154.466545][ T8] usb 1-1: USB disconnect, device number 12 [ 155.014418][ T5877] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 155.049082][ T5835] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.072867][ T5877] usb 2-1: USB disconnect, device number 7 [ 155.108309][ T5877] usblp0: removed [ 155.217303][ T7186] loop4: detected capacity change from 0 to 1024 [ 155.314665][ T7186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.323831][ T7190] loop0: detected capacity change from 0 to 256 [ 155.442385][ T7190] FAT-fs (loop0): Directory bread(block 64) failed [ 155.452732][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.454569][ T7190] FAT-fs (loop0): Directory bread(block 65) failed [ 155.513062][ T7190] FAT-fs (loop0): Directory bread(block 66) failed [ 155.542025][ T7190] FAT-fs (loop0): Directory bread(block 67) failed [ 155.576829][ T7190] FAT-fs (loop0): Directory bread(block 68) failed [ 155.611903][ T7190] FAT-fs (loop0): Directory bread(block 69) failed [ 155.640370][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 155.649412][ T7190] FAT-fs (loop0): Directory bread(block 70) failed [ 155.649458][ T7190] FAT-fs (loop0): Directory bread(block 71) failed [ 155.649612][ T7190] FAT-fs (loop0): Directory bread(block 72) failed [ 155.649641][ T7190] FAT-fs (loop0): Directory bread(block 73) failed [ 155.992731][ T7208] FAT-fs (loop0): Filesystem has been set read-only [ 156.000250][ T7208] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000656c) [ 156.012088][ T29] audit: type=1800 audit(1731474421.370:7): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.425" name="cgroup.controllers" dev="loop0" ino=1048601 res=0 errno=0 [ 156.078194][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 156.095488][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 156.112345][ T25] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 156.167236][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 156.294872][ T7223] loop0: detected capacity change from 0 to 1024 [ 156.316624][ T25] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 156.340092][ T25] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 156.366190][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 156.376941][ T7223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.394539][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.409412][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.419752][ T25] usb 5-1: Product: syz [ 156.424045][ T25] usb 5-1: Manufacturer: syz [ 156.428980][ T25] usb 5-1: SerialNumber: syz [ 156.463326][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.915219][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'. [ 157.176488][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 157.296001][ T7237] loop0: detected capacity change from 0 to 32768 [ 157.348007][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.447740][ T7237] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 157.469904][ T7237] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 157.478805][ T7237] bcachefs (loop0): Version upgrade required: [ 157.478805][ T7237] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 157.478805][ T7237] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 157.478805][ T7237] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 157.598299][ T7237] bcachefs (loop0): dropping and reconstructing all alloc info [ 157.606906][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 157.630232][ T46] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 157.638856][ T46] usb 2-1: config 0 has no interface number 0 [ 157.644998][ T46] usb 2-1: config 0 interface 119 has no altsetting 0 [ 157.681513][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=1205, bcdDevice=99.66 [ 157.690818][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.698993][ T46] usb 2-1: Product: syz [ 157.703208][ T46] usb 2-1: Manufacturer: syz [ 157.707924][ T46] usb 2-1: SerialNumber: syz [ 157.717733][ T46] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 157.731374][ T7237] bcachefs (loop0): check_topology... done [ 157.737692][ T7237] bcachefs (loop0): accounting_read... done [ 157.748457][ T7237] bcachefs (loop0): alloc_read... done [ 157.754175][ T7237] bcachefs (loop0): stripes_read... done [ 157.760298][ T7237] bcachefs (loop0): snapshots_read... done [ 157.771836][ T7237] bcachefs (loop0): bch2_fs_start(): error starting filesystem erofs_norecovery [ 157.781820][ T7237] bcachefs (loop0): shutting down [ 157.815382][ T7237] bcachefs (loop0): shutdown complete [ 157.845979][ T7271] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.450' sets config #0 [ 157.957074][ T46] usb-storage 2-1:0.119: USB Mass Storage device detected [ 157.982333][ T46] usb-storage 2-1:0.119: Quirks match for vid 05ac pid 1205: 10 [ 158.042143][ T46] apple-mfi-fastcharge 2-1: USB disconnect, device number 8 [ 158.797298][ T25] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 158.854522][ T25] usb 5-1: USB disconnect, device number 14 [ 158.885089][ T25] usblp0: removed [ 159.276340][ T7289] loop3: detected capacity change from 0 to 64 [ 159.474003][ T7237] bcachefs: bch2_fs_get_tree() error: erofs_norecovery [ 160.228022][ T5873] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 160.273465][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 160.295946][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 160.380801][ T5873] usb 5-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 160.393132][ T5873] usb 5-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.425549][ T5873] usb 5-1: config 1 interface 0 has no altsetting 0 [ 160.453023][ T5873] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 160.462936][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.481734][ T5873] usb 5-1: Product: syz [ 160.502697][ T5873] usb 5-1: Manufacturer: syz [ 160.529309][ T5873] usb 5-1: SerialNumber: syz [ 160.536984][ T7296] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.741322][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.867430][ T7310] loop0: detected capacity change from 0 to 256 [ 161.333478][ T7310] FAT-fs (loop0): Directory bread(block 64) failed [ 161.357603][ T7310] FAT-fs (loop0): Directory bread(block 65) failed [ 161.386189][ T7310] FAT-fs (loop0): Directory bread(block 66) failed [ 161.415938][ T7310] FAT-fs (loop0): Directory bread(block 67) failed [ 161.437267][ T25] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 161.450214][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 161.460493][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.461083][ T5190] bcm5974 5-1:1.0: could not read from device [ 161.470760][ T46] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.486063][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.495396][ T7310] FAT-fs (loop0): Directory bread(block 68) failed [ 161.509129][ T46] usb 2-1: config 0 descriptor?? [ 161.516748][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 161.526695][ T5873] usb 5-1: USB disconnect, device number 15 [ 161.547023][ T7310] FAT-fs (loop0): Directory bread(block 69) failed [ 161.572584][ T7310] FAT-fs (loop0): Directory bread(block 70) failed [ 161.589860][ T7310] FAT-fs (loop0): Directory bread(block 71) failed [ 161.596520][ T7310] FAT-fs (loop0): Directory bread(block 72) failed [ 161.628509][ T7310] FAT-fs (loop0): Directory bread(block 73) failed [ 161.636096][ T25] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 161.674108][ T25] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 161.687456][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 161.751927][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.761270][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.769754][ T25] usb 4-1: Product: syz [ 161.781550][ T25] usb 4-1: Manufacturer: syz [ 161.786273][ T25] usb 4-1: SerialNumber: syz [ 161.937896][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 161.948090][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 161.958243][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 161.973237][ T46] pwc: recv_control_msg error -32 req 04 val 1000 [ 162.255359][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 162.401268][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 162.673354][ T7320] binder: 7315:7320 ioctl c0306201 20000480 returned -14 [ 162.731375][ T7316] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.464' sets config #0 [ 162.943540][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 163.097513][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 163.156476][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 163.181708][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 163.209027][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 163.224856][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.261652][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.298465][ T7325] fuse: Unknown parameter 'grou00000000000000000000' [ 163.304879][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 163.333120][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 163.493927][ T46] pwc: Registered as video103. [ 163.500203][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 163.522291][ T46] usb 2-1: USB disconnect, device number 9 [ 163.633573][ T7330] process 'syz.0.465' launched './file0' with NULL argv: empty string added [ 164.277534][ T25] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 164.299528][ T25] usb 4-1: USB disconnect, device number 12 [ 164.310159][ T25] usblp0: removed [ 164.709346][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 165.001560][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 166.268323][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.476'. [ 166.322460][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 167.238823][ T7367] fuse: Bad value for 'fd' [ 167.840556][ T7352] loop0: detected capacity change from 0 to 256 [ 167.920145][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 168.007980][ T25] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 168.062521][ T7352] FAT-fs (loop0): Directory bread(block 64) failed [ 168.134856][ T7352] FAT-fs (loop0): Directory bread(block 65) failed [ 168.172465][ T7352] FAT-fs (loop0): Directory bread(block 66) failed [ 168.176181][ T25] usb 2-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 168.194493][ T7383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'. [ 168.217926][ T25] usb 2-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 168.237017][ T7352] FAT-fs (loop0): Directory bread(block 67) failed [ 168.270481][ T25] usb 2-1: config 1 interface 0 has no altsetting 0 [ 168.280700][ T7352] FAT-fs (loop0): Directory bread(block 68) failed [ 168.294483][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.330685][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.351641][ T25] usb 2-1: Product: syz [ 168.379633][ T25] usb 2-1: Manufacturer: syz [ 168.395282][ T7352] FAT-fs (loop0): Directory bread(block 69) failed [ 168.413039][ T25] usb 2-1: SerialNumber: syz [ 168.434466][ T7352] FAT-fs (loop0): Directory bread(block 70) failed [ 168.572858][ T7352] FAT-fs (loop0): Directory bread(block 71) failed [ 168.583361][ T7352] FAT-fs (loop0): Directory bread(block 72) failed [ 168.592070][ T7352] FAT-fs (loop0): Directory bread(block 73) failed [ 169.305948][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 170.269422][ T7420] loop2: detected capacity change from 0 to 8 [ 170.302790][ T7420] SQUASHFS error: Failed to read block 0x4e8: -5 [ 170.313256][ T29] audit: type=1800 audit(1731474435.680:8): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.499" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 172.276485][ T7428] loop2: detected capacity change from 0 to 512 [ 172.378001][ T5873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.398229][ T25] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 173.220973][ T25] usb 2-1: USB disconnect, device number 10 [ 173.325121][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 173.340969][ T25] usblp0: removed [ 173.346383][ T7435] netlink: 'syz.1.505': attribute type 7 has an invalid length. [ 173.354169][ T7435] netlink: 'syz.1.505': attribute type 8 has an invalid length. [ 173.362111][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 173.877697][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 174.547137][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.782215][ T7428] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.057261][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.778318][ T5165] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 176.174896][ T7458] loop1: detected capacity change from 0 to 32768 [ 176.190585][ T7473] loop2: detected capacity change from 0 to 512 [ 176.205218][ T7458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.511 (7458) [ 176.253985][ T7458] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.264579][ T7458] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 176.273619][ T7458] BTRFS info (device loop1): using free-space-tree [ 176.285270][ T7473] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.516: casefold flag without casefold feature [ 176.291265][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'. [ 176.304851][ T7473] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.516: couldn't read orphan inode 15 (err -117) [ 176.320821][ T5165] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 176.326070][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.341553][ T5165] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 176.358230][ T5165] usb 1-1: config 1 interface 0 has no altsetting 0 [ 176.373090][ T5165] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.382533][ T7475] netlink: 'syz.3.517': attribute type 7 has an invalid length. [ 176.401425][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.410130][ T5165] usb 1-1: Product: syz [ 176.414327][ T5165] usb 1-1: Manufacturer: syz [ 176.414640][ T7475] netlink: 'syz.3.517': attribute type 8 has an invalid length. [ 176.419325][ T5165] usb 1-1: SerialNumber: syz [ 176.450338][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 176.482301][ T29] audit: type=1800 audit(1731474441.830:9): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.516" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 176.642402][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.738082][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 176.756379][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 176.908093][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 176.919195][ T25] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 176.940013][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.013364][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.053183][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.091820][ T25] usbtmc 5-1:16.0: bulk endpoints not found [ 177.872457][ T5828] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.404062][ T7522] loop2: detected capacity change from 0 to 256 [ 178.523924][ T7522] FAT-fs (loop2): Directory bread(block 64) failed [ 178.530945][ T7522] FAT-fs (loop2): Directory bread(block 65) failed [ 178.538331][ T7522] FAT-fs (loop2): Directory bread(block 66) failed [ 178.545357][ T7522] FAT-fs (loop2): Directory bread(block 67) failed [ 178.552902][ T7522] FAT-fs (loop2): Directory bread(block 68) failed [ 178.559859][ T7522] FAT-fs (loop2): Directory bread(block 69) failed [ 178.567098][ T7522] FAT-fs (loop2): Directory bread(block 70) failed [ 178.578066][ T7522] FAT-fs (loop2): Directory bread(block 71) failed [ 178.585503][ T7522] FAT-fs (loop2): Directory bread(block 72) failed [ 178.592384][ T7522] FAT-fs (loop2): Directory bread(block 73) failed [ 178.915571][ T5165] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 179.023030][ T5165] usb 1-1: USB disconnect, device number 13 [ 179.032567][ T5165] usblp0: removed [ 179.533644][ T5877] usb 5-1: USB disconnect, device number 16 [ 180.403030][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 180.504285][ T7550] netlink: 44 bytes leftover after parsing attributes in process `syz.3.533'. [ 181.602203][ T7564] loop0: detected capacity change from 0 to 512 [ 181.745650][ T7564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.765847][ T7564] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.886797][ T5165] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 182.049205][ T5165] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 182.060373][ T5165] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 182.146812][ T5165] usb 5-1: config 1 interface 0 has no altsetting 0 [ 182.164085][ T7570] loop3: detected capacity change from 0 to 256 [ 182.211202][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.624267][ T7573] loop2: detected capacity change from 0 to 8 [ 182.728780][ T5165] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.738815][ T5165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.787977][ T5165] usb 5-1: Product: syz [ 182.792239][ T5165] usb 5-1: Manufacturer: syz [ 182.796856][ T5165] usb 5-1: SerialNumber: syz [ 182.972464][ T7570] FAT-fs (loop3): Directory bread(block 64) failed [ 183.056986][ T7570] FAT-fs (loop3): Directory bread(block 65) failed [ 183.168634][ T7570] FAT-fs (loop3): Directory bread(block 66) failed [ 184.247953][ T7570] FAT-fs (loop3): Directory bread(block 67) failed [ 184.254630][ T7570] FAT-fs (loop3): Directory bread(block 68) failed [ 184.428072][ T7570] FAT-fs (loop3): Directory bread(block 69) failed [ 184.810773][ T7570] FAT-fs (loop3): Directory bread(block 70) failed [ 184.988712][ T7570] FAT-fs (loop3): Directory bread(block 71) failed [ 184.997139][ T7570] FAT-fs (loop3): Directory bread(block 72) failed [ 185.088010][ T7570] FAT-fs (loop3): Directory bread(block 73) failed [ 185.411605][ T5165] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 185.458227][ T5165] usb 5-1: USB disconnect, device number 17 [ 185.554930][ T5165] usblp0: removed [ 185.570641][ T7592] fuse: Bad value for 'fd' [ 185.678824][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 185.828264][ T7593] netlink: 44 bytes leftover after parsing attributes in process `syz.4.549'. [ 186.578949][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 186.585388][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 186.597395][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 186.608195][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 186.808877][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.859370][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 186.939097][ T7608] loop0: detected capacity change from 0 to 512 [ 187.158574][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'. [ 187.174362][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.190999][ T7608] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.360945][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.508435][ T8] usb 3-1: device descriptor read/64, error -71 [ 187.747964][ T95] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 187.755654][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.936339][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.949360][ T95] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 187.992768][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.045589][ T95] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 188.728089][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.747145][ T95] usb 4-1: config 1 interface 0 has no altsetting 0 [ 188.753892][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.763250][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.773047][ T95] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 188.782896][ T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.791667][ T95] usb 4-1: Product: syz [ 188.796070][ T95] usb 4-1: Manufacturer: syz [ 188.806310][ T95] usb 4-1: SerialNumber: syz [ 188.819160][ T8] usb 3-1: config 0 descriptor?? [ 188.912047][ T7633] fuse: Unknown parameter 'group_id00000000000000000000' [ 189.076408][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 189.122987][ T7636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.564'. [ 189.157604][ T7637] loop0: detected capacity change from 0 to 512 [ 189.196054][ T7637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.271058][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 189.280542][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.289392][ T7637] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.309306][ T8] usb 3-1: USB disconnect, device number 12 [ 190.339608][ T7658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.568'. [ 191.595073][ T95] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 191.619643][ T95] usb 4-1: USB disconnect, device number 14 [ 191.856275][ T95] usblp0: removed [ 191.985321][ T7685] loop4: detected capacity change from 0 to 8 [ 194.108887][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.580'. [ 194.275775][ T7708] loop4: detected capacity change from 0 to 8 [ 194.651599][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687694][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.344294][ T7718] loop2: detected capacity change from 0 to 1024 [ 195.379631][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.520722][ T7718] hfsplus: xattr searching failed [ 195.534191][ T7718] hfsplus: bad catalog folder thread [ 195.624326][ T7724] loop0: detected capacity change from 0 to 8 [ 198.373249][ T7749] binder: 7741:7749 ioctl c0306201 20000480 returned -14 [ 199.174291][ T7740] syzkaller0: entered promiscuous mode [ 199.211017][ T7740] syzkaller0: entered allmulticast mode [ 199.349963][ T7740] syzkaller0: create flow: hash 2139035222 index 1 [ 199.447332][ T7760] loop3: detected capacity change from 0 to 256 [ 199.468121][ T7761] loop0: detected capacity change from 0 to 2048 [ 199.554463][ T7739] syzkaller0: delete flow: hash 2139035222 index 1 [ 199.581114][ T7760] FAT-fs (loop3): Directory bread(block 64) failed [ 199.593338][ T7760] FAT-fs (loop3): Directory bread(block 65) failed [ 199.607558][ T7760] FAT-fs (loop3): Directory bread(block 66) failed [ 199.649430][ T7760] FAT-fs (loop3): Directory bread(block 67) failed [ 199.674210][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.706867][ T7760] FAT-fs (loop3): Directory bread(block 68) failed [ 199.736400][ T7760] FAT-fs (loop3): Directory bread(block 69) failed [ 199.753043][ T7760] FAT-fs (loop3): Directory bread(block 70) failed [ 199.761696][ T7760] FAT-fs (loop3): Directory bread(block 71) failed [ 199.774960][ T7760] FAT-fs (loop3): Directory bread(block 72) failed [ 199.783370][ T7760] FAT-fs (loop3): Directory bread(block 73) failed [ 200.132622][ T7771] FAT-fs (loop3): Filesystem has been set read-only [ 200.140037][ T7771] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000656c) [ 200.246987][ T29] audit: type=1800 audit(1731474465.510:10): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.600" name="cgroup.controllers" dev="loop3" ino=1048602 res=0 errno=0 [ 200.642227][ T7768] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 200.698248][ T7778] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.604' sets config #0 [ 200.858889][ T29] audit: type=1800 audit(1731474466.220:11): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.601" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 202.742107][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.910839][ T7793] binder: 7786:7793 ioctl c0306201 20000480 returned -14 [ 203.578100][ T46] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.079363][ T7809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.507064][ T46] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 206.515303][ T46] usb 4-1: config 0 has no interface number 0 [ 206.522118][ T46] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 206.532551][ T46] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.553688][ T46] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 206.564454][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.573943][ T46] usb 4-1: Product: syz [ 206.578912][ T46] usb 4-1: Manufacturer: syz [ 206.583588][ T46] usb 4-1: SerialNumber: syz [ 207.085332][ T46] usb 4-1: config 0 descriptor?? [ 207.917982][ T46] usb 4-1: can't set config #0, error -71 [ 207.939866][ T46] usb 4-1: USB disconnect, device number 15 [ 208.150451][ T7846] binder: 7836:7846 ioctl c0306201 20000480 returned -14 [ 210.738942][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 210.837351][ T7874] loop0: detected capacity change from 0 to 8 [ 210.846892][ T7874] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 210.961895][ T7874] cramfs: Error -5 while decompressing! [ 210.968433][ T7874] cramfs: ffffffff9a4f2368(26)->ffff88807a6ca000(4096) [ 210.975501][ T7874] cramfs: Error -3 while decompressing! [ 210.981712][ T7874] cramfs: ffffffff9a4f2382(26)->ffff88805469b000(4096) [ 210.988739][ T7874] cramfs: Error -3 while decompressing! [ 210.994348][ T7874] cramfs: ffffffff9a4f239c(16)->ffff88804c037000(4096) [ 211.001749][ T7874] cramfs: Error -5 while decompressing! [ 211.007392][ T7874] cramfs: ffffffff9a4f2368(26)->ffff88807a6ca000(4096) [ 211.518182][ T5909] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 211.526338][ T5909] usb 4-1: config 0 has no interface number 0 [ 211.542974][ T5909] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 211.561406][ T5909] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.598223][ T5909] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 211.607427][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.616048][ T5909] usb 4-1: Product: syz [ 211.620623][ T5909] usb 4-1: Manufacturer: syz [ 211.643173][ T5909] usb 4-1: SerialNumber: syz [ 211.657331][ T5909] usb 4-1: config 0 descriptor?? [ 211.670132][ T7864] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.686869][ T5909] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 211.714987][ T5909] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 211.899345][ T5909] usb 4-1: USB disconnect, device number 16 [ 211.924951][ T5909] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 211.994129][ T5909] cyberjack 4-1:0.69: device disconnected [ 212.425256][ T7891] binder: 7887:7891 ioctl c0306201 20000480 returned -14 [ 213.972364][ T7903] loop0: detected capacity change from 0 to 8 [ 214.169284][ T7912] binder: 7904:7912 ioctl c0306201 20000480 returned -14 [ 214.392951][ T7915] loop2: detected capacity change from 0 to 256 [ 214.614425][ T7915] FAT-fs (loop2): Directory bread(block 64) failed [ 214.664755][ T7915] FAT-fs (loop2): Directory bread(block 65) failed [ 214.683394][ T7915] FAT-fs (loop2): Directory bread(block 66) failed [ 214.707158][ T7915] FAT-fs (loop2): Directory bread(block 67) failed [ 214.725157][ T7915] FAT-fs (loop2): Directory bread(block 68) failed [ 214.744337][ T7915] FAT-fs (loop2): Directory bread(block 69) failed [ 214.760277][ T7915] FAT-fs (loop2): Directory bread(block 70) failed [ 214.766962][ T7915] FAT-fs (loop2): Directory bread(block 71) failed [ 214.824279][ T7915] FAT-fs (loop2): Directory bread(block 72) failed [ 214.868287][ T7915] FAT-fs (loop2): Directory bread(block 73) failed [ 215.137212][ T7915] FAT-fs (loop2): Filesystem has been set read-only [ 215.144963][ T7915] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000656c) [ 215.145821][ T29] audit: type=1800 audit(1731474480.520:12): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.646" name="cgroup.controllers" dev="loop2" ino=1048603 res=0 errno=0 [ 215.201107][ T5877] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 215.414368][ T5877] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 215.425580][ T5877] usb 4-1: config 0 has no interface number 0 [ 215.439213][ T5877] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 215.452644][ T5877] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.467106][ T7940] loop0: detected capacity change from 0 to 8 [ 215.480006][ T7940] SQUASHFS error: Failed to read block 0x4de: -5 [ 215.487124][ T7940] SQUASHFS error: Failed to read block 0x4de: -5 [ 215.498009][ T29] audit: type=1800 audit(1731474480.870:13): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.655" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 215.507111][ T5877] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 216.067764][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.077733][ T5877] usb 4-1: Product: syz [ 216.084598][ T5877] usb 4-1: Manufacturer: syz [ 216.089712][ T5877] usb 4-1: SerialNumber: syz [ 216.100242][ T7940] SQUASHFS error: Failed to read block 0x4de: -5 [ 216.107231][ T7940] SQUASHFS error: Failed to read block 0x4de: -5 [ 216.113947][ T7940] SQUASHFS error: Failed to read block 0x4de: -5 [ 216.121761][ T7940] SQUASHFS error: Failed to read block 0x4de: -5 [ 216.149961][ T5877] usb 4-1: config 0 descriptor?? [ 216.156352][ T7926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.165303][ T5877] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 216.183018][ T5877] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 216.515264][ T5877] usb 4-1: USB disconnect, device number 17 [ 217.218266][ T5909] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.369460][ T5877] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 217.380268][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 217.387085][ T5909] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 217.397204][ T5877] cyberjack 4-1:0.69: device disconnected [ 217.403720][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.650754][ T7964] overlayfs: failed to resolve './file1': -2 [ 218.247953][ T5909] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 218.283342][ T5909] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 218.327930][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.464631][ T7969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.663'. [ 218.496562][ T5909] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.506007][ T5909] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.527046][ T5909] usb 5-1: Product: syz [ 218.535448][ T5909] usb 5-1: Manufacturer: syz [ 218.550800][ T5909] usb 5-1: SerialNumber: syz [ 218.595997][ T5909] usb 5-1: config 0 descriptor?? [ 218.646749][ T5909] ldusb 5-1:0.0: Interrupt in endpoint not found [ 219.150508][ T7989] loop0: detected capacity change from 0 to 128 [ 219.544286][ T7989] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 219.555597][ T7989] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 219.789022][ T46] usb 5-1: USB disconnect, device number 18 [ 221.419053][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 221.709384][ T7995] loop3: detected capacity change from 0 to 256 [ 221.754438][ T7995] FAT-fs (loop3): Directory bread(block 64) failed [ 221.761190][ T7995] FAT-fs (loop3): Directory bread(block 65) failed [ 221.767745][ T7995] FAT-fs (loop3): Directory bread(block 66) failed [ 221.774338][ T7995] FAT-fs (loop3): Directory bread(block 67) failed [ 221.781059][ T7995] FAT-fs (loop3): Directory bread(block 68) failed [ 221.787586][ T7995] FAT-fs (loop3): Directory bread(block 69) failed [ 221.794302][ T7995] FAT-fs (loop3): Directory bread(block 70) failed [ 221.800922][ T7995] FAT-fs (loop3): Directory bread(block 71) failed [ 221.807492][ T7995] FAT-fs (loop3): Directory bread(block 72) failed [ 221.814078][ T7995] FAT-fs (loop3): Directory bread(block 73) failed [ 222.532549][ T8033] loop0: detected capacity change from 0 to 2048 [ 222.581215][ T8033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.595045][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.115122][ T8052] binder: 8048:8052 ioctl c0306201 20000480 returned -14 [ 226.233700][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.693'. [ 227.305278][ T8073] loop3: detected capacity change from 0 to 1024 [ 227.492859][ T8081] loop2: detected capacity change from 0 to 2048 [ 227.513153][ T5879] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 227.561552][ T8081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.633978][ T149] hfsplus: b-tree write err: -5, ino 4 [ 228.752266][ T5879] usb 5-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 228.762853][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.773183][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.787543][ T5879] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 228.797330][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.069513][ T5879] hub 5-1:1.0: bad descriptor, ignoring hub [ 229.075510][ T5879] hub 5-1:1.0: probe with driver hub failed with error -5 [ 229.084591][ T5879] cdc_wdm 5-1:1.0: skipping garbage [ 229.092988][ T5879] cdc_wdm 5-1:1.0: skipping garbage [ 229.102107][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.129249][ T8089] loop1: detected capacity change from 0 to 8 [ 229.137774][ T8089] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 229.263549][ T8089] cramfs: Error -5 while decompressing! [ 229.267935][ T5879] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 229.270794][ T8089] cramfs: ffffffff9a4f6368(26)->ffff88804cbde000(4096) [ 229.450975][ T8098] loop3: detected capacity change from 0 to 2048 [ 230.040346][ T8089] cramfs: Error -3 while decompressing! [ 230.045956][ T8089] cramfs: ffffffff9a4f6382(26)->ffff88804cbdd000(4096) [ 230.075527][ T8098] NILFS (loop3): Invalid checkpoint (checkpoint number=2) [ 230.084785][ T8098] NILFS (loop3): error -22 while loading last checkpoint (checkpoint number=2) [ 230.125595][ T8089] cramfs: Error -3 while decompressing! [ 230.131682][ T8089] cramfs: ffffffff9a4f639c(16)->ffff88804cbdc000(4096) [ 230.139642][ T8089] cramfs: Error -5 while decompressing! [ 230.146696][ T8089] cramfs: ffffffff9a4f6368(26)->ffff88804cbde000(4096) [ 230.676706][ T8107] overlayfs: failed to resolve './file0': -2 [ 231.010586][ T5879] usb 5-1: USB disconnect, device number 19 [ 231.206043][ T5839] Bluetooth: hci0: Malformed LE Event: 0x0b [ 232.843537][ T8125] loop3: detected capacity change from 0 to 1024 [ 233.137169][ T5879] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 233.177528][ T8125] EXT4-fs: Ignoring removed orlov option [ 233.234743][ T8125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.709897][ T8132] loop2: detected capacity change from 0 to 164 [ 233.767395][ T8125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.772005][ T5879] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 235.071125][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.081338][ T5879] usb 5-1: config 0 has no interface number 0 [ 235.087480][ T5879] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 235.098767][ T5879] usb 5-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 235.603044][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.705898][ T5879] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 235.715117][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.727986][ T5879] usb 5-1: Product: syz [ 235.752020][ T5879] usb 5-1: config 0 descriptor?? [ 235.757454][ T5879] usb 5-1: can't set config #0, error -71 [ 235.768529][ T5879] usb 5-1: USB disconnect, device number 20 [ 236.045734][ T5839] Bluetooth: hci2: Malformed LE Event: 0x0b [ 236.058052][ T25] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 236.219803][ T25] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 236.244875][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.274458][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.304670][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.353274][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.384377][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 236.415618][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 236.452550][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 236.478159][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 237.529280][ T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 238.015479][ T8175] loop0: detected capacity change from 0 to 1024 [ 238.072422][ T8175] EXT4-fs: Ignoring removed orlov option [ 238.081127][ T25] usb 3-1: USB disconnect, device number 13 [ 238.121040][ T8175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.461013][ T8175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.518602][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.582554][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 239.831837][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 239.871913][ T5909] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 239.883794][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.899404][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.428755][ T5909] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 241.443014][ T5909] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 241.467948][ T5909] usb 2-1: Product: syz [ 241.472193][ T5909] usb 2-1: Manufacturer: syz [ 241.476803][ T5909] usb 2-1: SerialNumber: syz [ 241.658900][ T5909] usb 2-1: config 0 descriptor?? [ 242.616786][ T5909] usb 2-1: can't set config #0, error -71 [ 242.625472][ T5909] usb 2-1: USB disconnect, device number 11 [ 242.718323][ T8212] overlayfs: failed to resolve './file0/../file0': -2 [ 242.845280][ T8214] loop1: detected capacity change from 0 to 1024 [ 242.854180][ T8214] EXT4-fs: Ignoring removed orlov option [ 242.860164][ T8214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.004445][ T8214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.579759][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.704631][ T8247] loop2: detected capacity change from 0 to 8 [ 244.864755][ T8251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.755'. [ 244.867706][ T8249] overlayfs: failed to resolve './file1': -2 [ 245.570162][ T5877] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 245.598675][ T8253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.755'. [ 245.619139][ T8253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.755'. [ 245.744115][ T8257] loop2: detected capacity change from 0 to 1024 [ 245.753007][ T8257] EXT4-fs: Ignoring removed orlov option [ 245.759802][ T8257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.777984][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 245.785520][ T5877] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 245.795039][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.815545][ T5877] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 245.829528][ T8257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.846906][ T5877] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 245.874543][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.010633][ T5877] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 246.355671][ T5877] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 246.364287][ T5877] usb 5-1: Product: syz [ 246.368513][ T5877] usb 5-1: Manufacturer: syz [ 246.373129][ T5877] usb 5-1: SerialNumber: syz [ 246.381062][ T5877] usb 5-1: config 0 descriptor?? [ 246.388783][ T5877] ldusb 5-1:0.0: Interrupt in endpoint not found [ 246.505157][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.693055][ T5877] usb 5-1: USB disconnect, device number 21 [ 247.431709][ T8284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 247.523786][ T8290] loop3: detected capacity change from 0 to 8 [ 247.578391][ T8290] overlayfs: failed to resolve './file1': -2 [ 247.637200][ T8294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'. [ 247.648210][ T8294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'. [ 247.657333][ T8294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.769'. [ 247.824588][ T8303] loop3: detected capacity change from 0 to 1024 [ 247.855693][ T8303] EXT4-fs: Ignoring removed orlov option [ 247.880683][ T8303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.983667][ T8303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.339250][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.383468][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'. [ 249.737338][ T8335] warning: `syz.4.781' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.395285][ T8338] loop0: detected capacity change from 0 to 8 [ 250.426791][ T8338] overlayfs: failed to resolve './file1': -2 [ 250.508247][ T29] audit: type=1326 audit(1731474515.870:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33597e719 code=0x7fc00000 [ 250.747677][ T29] audit: type=1326 audit(1731474516.080:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe33597e719 code=0x7fc00000 [ 251.657256][ T8362] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.787' sets config #0 [ 252.184789][ T8366] loop1: detected capacity change from 0 to 1024 [ 252.254643][ T8366] EXT4-fs: Ignoring removed orlov option [ 252.260467][ T8366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.650247][ T8366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.491627][ T8386] loop0: detected capacity change from 0 to 8 [ 254.518603][ T8390] loop4: detected capacity change from 0 to 8 [ 254.543756][ T8390] overlayfs: failed to resolve './file1': -2 [ 254.551071][ T8386] overlayfs: failed to resolve './file1': -2 [ 255.499141][ T8406] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.800' sets config #0 [ 255.679887][ T29] audit: type=1326 audit(1731474521.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9bb7e719 code=0x7fc00000 [ 256.000336][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.013741][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.070878][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.078625][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.804'. [ 256.187982][ T29] audit: type=1326 audit(1731474521.540:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b9bb7e719 code=0x7fc00000 [ 257.150896][ T8434] loop2: detected capacity change from 0 to 8 [ 257.323460][ T8434] overlayfs: failed to resolve './file1': -2 [ 257.324770][ T8443] loop1: detected capacity change from 0 to 8 [ 258.420237][ T8453] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.814' sets config #0 [ 258.807295][ T8455] loop1: detected capacity change from 0 to 1024 [ 258.883243][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 258.884803][ T8455] EXT4-fs: Ignoring removed orlov option [ 258.925225][ T8455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.050490][ T8455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.597673][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.664797][ T8482] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.847943][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 260.856041][ T95] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 261.108048][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 261.164754][ T5877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.174814][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.449575][ T95] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.489905][ T95] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.505897][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.531853][ T95] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.554982][ T5877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.587260][ T95] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.600828][ T5877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.616473][ T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.630024][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.664181][ T95] hub 3-1:1.0: bad descriptor, ignoring hub [ 261.698011][ T95] hub 3-1:1.0: probe with driver hub failed with error -5 [ 261.730101][ T95] cdc_wdm 3-1:1.0: skipping garbage [ 261.741886][ T95] cdc_wdm 3-1:1.0: skipping garbage [ 261.760359][ T95] cdc_wdm 3-1:1.0: skipping garbage [ 261.774289][ T95] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 261.884283][ T5877] usb 2-1: usb_control_msg returned -32 [ 261.897928][ T5877] usbtmc 2-1:16.0: can't read capabilities [ 261.972576][ T5877] usb 2-1: USB disconnect, device number 12 [ 262.028552][ T25] usb 3-1: USB disconnect, device number 14 [ 263.214027][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 263.250124][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 263.282849][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 263.345492][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.4.831'. [ 264.858040][ T25] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 265.096923][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.224738][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.388408][ T25] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 265.503071][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 265.580057][ T25] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 265.595785][ T8525] loop0: detected capacity change from 0 to 32768 [ 265.614032][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.620227][ T8525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.836 (8525) [ 265.658201][ T5879] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 265.670060][ T8538] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.690172][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 265.702983][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 265.720182][ T8525] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.728301][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 265.758040][ T8525] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 265.764446][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 265.767044][ T8525] BTRFS info (device loop0): using free-space-tree [ 265.782608][ T25] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 265.838047][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 265.844680][ T5879] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.864896][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.885639][ T5879] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.906031][ T5879] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.937990][ T5879] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.955164][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.998912][ T25] usb 5-1: USB disconnect, device number 22 [ 266.009745][ T8525] Process accounting resumed [ 266.084649][ T8525] syz.0.836 (8525) used greatest stack depth: 18624 bytes left [ 266.117704][ T5843] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.183270][ T5879] usb 4-1: usb_control_msg returned -32 [ 266.200409][ T5879] usbtmc 4-1:16.0: can't read capabilities [ 266.220779][ T5879] usb 4-1: USB disconnect, device number 18 [ 266.438875][ T8568] ipt_rpfilter: unknown options [ 266.485309][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 266.786498][ T8578] loop1: detected capacity change from 0 to 8 [ 266.802576][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 266.893908][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 267.053829][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 267.277722][ T8573] loop0: detected capacity change from 0 to 256 [ 270.467035][ T8612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.860'. [ 270.637104][ T8573] FAT-fs (loop0): Directory bread(block 64) failed [ 270.674840][ T8573] FAT-fs (loop0): Directory bread(block 65) failed [ 270.738411][ T8573] FAT-fs (loop0): Directory bread(block 66) failed [ 270.749312][ T8616] loop3: detected capacity change from 0 to 8 [ 270.756156][ T8573] FAT-fs (loop0): Directory bread(block 67) failed [ 270.777947][ T5877] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 270.821266][ T8573] FAT-fs (loop0): Directory bread(block 68) failed [ 270.869182][ T8573] FAT-fs (loop0): Directory bread(block 69) failed [ 270.888052][ T8573] FAT-fs (loop0): Directory bread(block 70) failed [ 270.894682][ T8573] FAT-fs (loop0): Directory bread(block 71) failed [ 270.932012][ T8573] FAT-fs (loop0): Directory bread(block 72) failed [ 270.950184][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 270.958060][ T8573] FAT-fs (loop0): Directory bread(block 73) failed [ 270.971672][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.006456][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.047032][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.065028][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 271.098098][ T5877] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.121642][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 271.139674][ T5877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.148905][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 272.085715][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.230549][ T8633] fuse: Unknown parameter 'user_id00000000000000000000' [ 272.320881][ T5877] usb 5-1: usb_control_msg returned -32 [ 272.326640][ T5877] usbtmc 5-1:16.0: can't read capabilities [ 272.343926][ T5877] usb 5-1: USB disconnect, device number 23 [ 272.580504][ T8646] loop2: detected capacity change from 0 to 8 [ 273.421855][ T95] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 273.480168][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.877'. [ 273.872350][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.877'. [ 273.891853][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.877'. [ 274.357201][ T8669] binder: BINDER_SET_CONTEXT_MGR already set [ 274.363397][ T8669] binder: 8668:8669 ioctl 4018620d 200001c0 returned -16 [ 274.430469][ T95] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.440816][ T95] usb 2-1: config 0 has no interfaces? [ 274.446333][ T95] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.493829][ T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.508834][ T8671] fuse: Unknown parameter 'user_id00000000000000000000' [ 274.661596][ T95] usb 2-1: config 0 descriptor?? [ 275.573532][ T8655] loop4: detected capacity change from 0 to 256 [ 275.657358][ T8655] FAT-fs (loop4): Directory bread(block 64) failed [ 275.684833][ T8655] FAT-fs (loop4): Directory bread(block 65) failed [ 275.693671][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.886'. [ 275.708080][ T8655] FAT-fs (loop4): Directory bread(block 66) failed [ 275.714665][ T8655] FAT-fs (loop4): Directory bread(block 67) failed [ 275.718214][ T8686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.886'. [ 275.734014][ T8655] FAT-fs (loop4): Directory bread(block 68) failed [ 275.750512][ T8655] FAT-fs (loop4): Directory bread(block 69) failed [ 275.763056][ T8655] FAT-fs (loop4): Directory bread(block 70) failed [ 275.770535][ T8655] FAT-fs (loop4): Directory bread(block 71) failed [ 275.777257][ T8655] FAT-fs (loop4): Directory bread(block 72) failed [ 275.785576][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.886'. [ 275.787561][ T8655] FAT-fs (loop4): Directory bread(block 73) failed [ 275.821828][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.886'. [ 275.938106][ T8692] loop4: detected capacity change from 0 to 8 [ 275.978108][ T8] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 276.141018][ T8] usb 4-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 276.177530][ T8] usb 4-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.213611][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 276.235772][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 276.256361][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.282039][ T8] usb 4-1: Product: syz [ 276.290598][ T8] usb 4-1: Manufacturer: syz [ 276.369256][ T8] usb 4-1: SerialNumber: syz [ 276.393269][ T8688] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 277.230936][ T5909] usb 2-1: USB disconnect, device number 13 [ 277.257443][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 277.318254][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 277.347252][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 277.407298][ T8] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 277.734064][ T5190] bcm5974 4-1:1.0: could not read from device [ 277.852269][ T8712] fuse: Unknown parameter 'user_id00000000000000000000' [ 278.521126][ T5190] bcm5974 4-1:1.0: could not read from device [ 278.521680][ T5909] usb 4-1: USB disconnect, device number 19 [ 278.603866][ T5190] bcm5974 4-1:1.0: could not read from device [ 278.627427][ T5190] bcm5974 4-1:1.0: could not read from device [ 279.508562][ T8726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.900'. [ 279.693822][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 279.818325][ T8726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.900'. [ 279.976159][ T8731] loop4: detected capacity change from 0 to 256 [ 281.289287][ T8731] FAT-fs (loop4): Directory bread(block 64) failed [ 281.504082][ T8731] FAT-fs (loop4): Directory bread(block 65) failed [ 282.341479][ T8731] FAT-fs (loop4): Directory bread(block 66) failed [ 282.358393][ T8731] FAT-fs (loop4): Directory bread(block 67) failed [ 282.508468][ T8731] FAT-fs (loop4): Directory bread(block 68) failed [ 282.536869][ T8746] __nla_validate_parse: 1 callbacks suppressed [ 282.536890][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.905'. [ 283.337156][ T8731] FAT-fs (loop4): Directory bread(block 69) failed [ 283.358198][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.905'. [ 283.368442][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.905'. [ 283.448122][ T8731] FAT-fs (loop4): Directory bread(block 70) failed [ 283.481783][ T8731] FAT-fs (loop4): Directory bread(block 71) failed [ 283.571377][ T8731] FAT-fs (loop4): Directory bread(block 72) failed [ 283.606415][ T8731] FAT-fs (loop4): Directory bread(block 73) failed [ 284.814340][ T8774] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 286.708018][ T5877] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 286.910114][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.657860][ T5877] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.668000][ T5877] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.677076][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.687938][ T5877] usb 3-1: config 0 descriptor?? [ 287.801619][ T8799] loop4: detected capacity change from 0 to 256 [ 287.818893][ T8799] vfat: Bad value for 'time_offset' [ 288.281597][ T8803] loop0: detected capacity change from 0 to 8 [ 288.302017][ T8803] overlayfs: missing 'lowerdir' [ 289.633042][ T8822] binder: 8821:8822 ioctl c0306201 0 returned -14 [ 289.653678][ T8822] binder: 8821:8822 unknown command 0 [ 289.667971][ T8822] binder: 8821:8822 ioctl c0306201 200001c0 returned -22 [ 289.668052][ T25] usb 3-1: USB disconnect, device number 15 [ 290.908292][ T5877] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 291.058018][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 291.079628][ T5877] usb 5-1: config 0 has no interfaces? [ 291.089066][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 291.106231][ T5877] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.065129][ T5877] usb 5-1: Manufacturer: syz [ 292.086027][ T5877] usb 5-1: config 0 descriptor?? [ 292.125924][ T8837] loop3: detected capacity change from 0 to 8 [ 292.215297][ T8837] overlayfs: missing 'lowerdir' [ 292.301031][ T5877] usb 5-1: USB disconnect, device number 24 [ 293.920387][ T8864] binder: 8863:8864 ioctl c0306201 0 returned -14 [ 293.960084][ T8864] binder: 8863:8864 unknown command 0 [ 293.997441][ T8864] binder: 8863:8864 ioctl c0306201 200001c0 returned -22 [ 294.542635][ T8877] loop1: detected capacity change from 0 to 512 [ 294.555213][ T8877] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 295.526868][ T8877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 295.815122][ T8891] loop3: detected capacity change from 0 to 8 [ 295.853932][ T8888] overlayfs: missing 'lowerdir' [ 295.862490][ T8895] binder: BINDER_SET_CONTEXT_MGR already set [ 295.871487][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 295.878057][ T8895] binder: 8894:8895 ioctl 4018620d 20000540 returned -16 [ 295.898955][ T8895] binder: BINDER_SET_CONTEXT_MGR already set [ 295.907898][ T8895] binder: 8894:8895 ioctl 4018620d 200001c0 returned -16 [ 295.932655][ T8877] EXT4-fs (loop1): 1 truncate cleaned up [ 295.948794][ T8877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.098398][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.140107][ T8867] loop2: detected capacity change from 0 to 32768 [ 296.222554][ T8867] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 296.237986][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 296.242225][ T8867] dlm: no local IP address has been set [ 296.256360][ T8867] dlm: cannot start dlm midcomms -107 [ 296.276345][ T8867] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 296.407977][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 296.435973][ T25] usb 5-1: config 0 has no interfaces? [ 297.195690][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.205217][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 297.214585][ T25] usb 5-1: Manufacturer: syz [ 297.242853][ T25] usb 5-1: config 0 descriptor?? [ 297.973895][ T25] usb 5-1: USB disconnect, device number 25 [ 298.049814][ T8921] netlink: 'syz.3.961': attribute type 10 has an invalid length. [ 298.163195][ T8925] binder: BINDER_SET_CONTEXT_MGR already set [ 298.170907][ T8925] binder: 8924:8925 ioctl 4018620d 20000540 returned -16 [ 298.239778][ T8927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 298.246584][ T8927] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 298.305048][ T8927] vhci_hcd vhci_hcd.0: Device attached [ 298.317309][ T8932] Bluetooth: MGMT ver 1.23 [ 298.368051][ T5877] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 298.478275][ T25] vhci_hcd: vhci_device speed not set [ 298.538004][ T25] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 298.710712][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.723536][ T5877] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.741426][ T5877] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.760208][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.809365][ T5877] usb 1-1: config 0 descriptor?? [ 299.802566][ T8931] loop3: detected capacity change from 0 to 40427 [ 299.816839][ T8931] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 299.826915][ T8931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 299.871127][ T8931] F2FS-fs (loop3): invalid crc value [ 299.902751][ T8931] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.981701][ T8931] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 299.997306][ T8931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 300.035143][ T8928] vhci_hcd: connection reset by peer [ 300.051569][ T149] vhci_hcd: stop threads [ 300.069389][ T149] vhci_hcd: release socket [ 300.076435][ T149] vhci_hcd: disconnect device [ 301.124107][ T5877] usb 1-1: USB disconnect, device number 14 [ 301.325423][ T8982] binder: BINDER_SET_CONTEXT_MGR already set [ 301.331814][ T8982] binder: 8980:8982 ioctl 4018620d 200001c0 returned -16 [ 301.345643][ T8982] binder_alloc: 8980: binder_alloc_buf, no vma [ 301.578072][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 301.677069][ T8989] netlink: 112 bytes leftover after parsing attributes in process `syz.3.975'. [ 301.737938][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 301.756550][ T5909] usb 2-1: config 0 has no interfaces? [ 301.763548][ T5909] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.775361][ T5909] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.793028][ T5909] usb 2-1: Manufacturer: syz [ 301.805213][ T5909] usb 2-1: config 0 descriptor?? [ 302.025816][ T5909] usb 2-1: USB disconnect, device number 14 [ 302.239232][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 304.203697][ T25] vhci_hcd: vhci_device speed not set [ 305.061505][ T9019] netlink: 112 bytes leftover after parsing attributes in process `syz.3.991'. [ 306.894239][ T9050] bond1: entered promiscuous mode [ 306.923907][ T9050] bond1: entered allmulticast mode [ 306.946882][ T9050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.080461][ T9059] loop1: detected capacity change from 0 to 128 [ 307.442461][ T9050] bond1 (unregistering): Released all slaves [ 307.467715][ T9057] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1005'. [ 307.543888][ T9064] loop2: detected capacity change from 0 to 64 [ 308.009626][ T9074] loop2: detected capacity change from 0 to 64 [ 308.952209][ T9090] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1017'. [ 311.108304][ T5909] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 311.194134][ T9082] loop2: detected capacity change from 0 to 64 [ 311.207548][ T9082] minix: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 311.230943][ T9082] random: crng reseeded on system resumption [ 311.508015][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 311.667385][ T5909] usb 1-1: config 0 has no interfaces? [ 311.695427][ T5909] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.798454][ T5909] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.951997][ T5909] usb 1-1: Manufacturer: syz [ 312.151736][ T5909] usb 1-1: config 0 descriptor?? [ 312.342152][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.074499][ T9126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.086576][ T5909] usb 1-1: USB disconnect, device number 15 [ 313.211492][ T9133] loop2: detected capacity change from 0 to 4096 [ 313.250584][ T9135] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.281803][ T9137] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1033'. [ 313.354224][ T9139] fuse: Unknown parameter 'group_i00000000000000000000' [ 315.433429][ T9175] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1046'. [ 315.572873][ T9177] fuse: Unknown parameter 'group_id00000000000000000000' [ 315.958012][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 316.145854][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 316.162338][ T8] usb 2-1: config 0 has no interfaces? [ 316.182994][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.197341][ T9192] loop2: detected capacity change from 0 to 8 [ 316.213247][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.269653][ T8] usb 2-1: Manufacturer: syz [ 316.303750][ T8] usb 2-1: config 0 descriptor?? [ 316.545361][ T5877] usb 2-1: USB disconnect, device number 15 [ 317.446674][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459024][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.930672][ T9207] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1059'. [ 318.050165][ T9211] fuse: Unknown parameter 'group_id00000000000000000000' [ 319.470447][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 319.752421][ T9220] pim6reg: entered allmulticast mode [ 319.794237][ T9220] pim6reg: left allmulticast mode [ 320.158319][ T5877] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 320.327767][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.354693][ T5877] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.387950][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.538035][ T6091] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 320.719558][ T6091] usb 4-1: Using ep0 maxpacket: 16 [ 320.763641][ T6091] usb 4-1: config 0 has no interfaces? [ 320.795863][ T6091] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.876409][ T6091] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.028434][ T6091] usb 4-1: Manufacturer: syz [ 321.037485][ T9242] fuse: Unknown parameter 'group_id00000000000000000000' [ 321.059907][ T6091] usb 4-1: config 0 descriptor?? [ 321.156412][ T5877] usb 5-1: config 0 descriptor?? [ 321.189861][ T5877] pwc: Askey VC010 type 2 USB webcam detected. [ 321.300618][ T8] usb 4-1: USB disconnect, device number 20 [ 321.464779][ T9232] loop2: detected capacity change from 0 to 32768 [ 321.581910][ T5877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 321.590995][ T5877] pwc: recv_control_msg error -32 req 02 val 2700 [ 321.607103][ T5877] pwc: recv_control_msg error -32 req 02 val 2c00 [ 321.631979][ T5877] pwc: recv_control_msg error -32 req 04 val 1000 [ 321.641973][ T5877] pwc: recv_control_msg error -32 req 04 val 1300 [ 321.649797][ T5877] pwc: recv_control_msg error -32 req 04 val 1400 [ 321.658849][ T5877] pwc: recv_control_msg error -71 req 02 val 2000 [ 321.668614][ T5877] pwc: recv_control_msg error -71 req 02 val 2100 [ 321.675385][ T5877] pwc: recv_control_msg error -71 req 04 val 1500 [ 321.706992][ T5877] pwc: recv_control_msg error -71 req 02 val 2500 [ 321.717719][ T5877] pwc: recv_control_msg error -71 req 02 val 2400 [ 321.725250][ T5877] pwc: recv_control_msg error -71 req 02 val 2600 [ 321.732782][ T5877] pwc: recv_control_msg error -71 req 02 val 2900 [ 321.740155][ T5877] pwc: recv_control_msg error -71 req 02 val 2800 [ 321.747225][ T5877] pwc: recv_control_msg error -71 req 04 val 1100 [ 321.754692][ T5877] pwc: recv_control_msg error -71 req 04 val 1200 [ 321.764472][ T5877] pwc: Registered as video103. [ 321.775509][ T5877] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 321.808147][ T5877] usb 5-1: USB disconnect, device number 26 [ 321.851037][ T9232] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 322.090170][ T9261] loop3: detected capacity change from 0 to 1024 [ 322.138352][ T9232] syz.2.1066 (9232) used greatest stack depth: 17048 bytes left [ 322.343285][ T5827] ocfs2: Unmounting device (7,2) on (node local) [ 323.422813][ T9272] fuse: Bad value for 'user_id' [ 323.427989][ T9272] fuse: Bad value for 'user_id' [ 323.838844][ T9282] loop4: detected capacity change from 0 to 8 [ 324.858002][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 324.897977][ T5877] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 325.098020][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 325.111117][ T46] usb 2-1: config 0 has no interfaces? [ 325.124803][ T46] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.516480][ T46] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.777995][ T46] usb 2-1: Manufacturer: syz [ 325.913169][ T46] usb 2-1: config 0 descriptor?? [ 325.998045][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.012177][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.184192][ T5877] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 326.193817][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.204888][ T5877] usb 5-1: config 0 descriptor?? [ 326.226563][ T46] usb 2-1: USB disconnect, device number 16 [ 327.002768][ T5877] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 327.017059][ T5877] usb 5-1: USB disconnect, device number 27 [ 327.049003][ T9317] fuse: Bad value for 'user_id' [ 327.053917][ T9317] fuse: Bad value for 'user_id' [ 329.409330][ T46] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 330.067996][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 330.074837][ T46] usb 5-1: config 0 has no interfaces? [ 330.202731][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 330.226876][ T46] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 330.988009][ T46] usb 5-1: Manufacturer: syz [ 331.057756][ T46] usb 5-1: config 0 descriptor?? [ 331.071429][ T9367] fuse: Bad value for 'user_id' [ 331.076812][ T9367] fuse: Bad value for 'user_id' [ 331.382395][ T95] usb 5-1: USB disconnect, device number 28 [ 332.090057][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 332.390894][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.402043][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.412246][ T8] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 332.421619][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.468071][ T8] usb 2-1: config 0 descriptor?? [ 332.538320][ T29] audit: type=1326 audit(1731474597.880:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.578130][ T29] audit: type=1326 audit(1731474597.880:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.627985][ T29] audit: type=1326 audit(1731474597.880:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.653494][ T29] audit: type=1326 audit(1731474597.880:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.677437][ T29] audit: type=1326 audit(1731474597.880:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.700919][ T29] audit: type=1326 audit(1731474597.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.724518][ T29] audit: type=1326 audit(1731474597.880:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.747219][ T29] audit: type=1326 audit(1731474597.880:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.920117][ T29] audit: type=1326 audit(1731474597.880:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 332.943127][ T29] audit: type=1326 audit(1731474597.890:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9384 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6be597e719 code=0x7ffc0000 [ 333.470839][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 333.597319][ T8] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 333.608961][ T8] usb 2-1: USB disconnect, device number 17 [ 333.802515][ T9398] overlayfs: failed to resolve './file0/../file0': -2 [ 333.872228][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 333.896586][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.925485][ T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.941732][ T9404] fuse: Bad value for 'fd' [ 333.984395][ T46] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 333.994154][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.003083][ T46] usb 3-1: Product: syz [ 334.007401][ T46] usb 3-1: Manufacturer: syz [ 334.210912][ T46] usb 3-1: SerialNumber: syz [ 334.583613][ T46] usb 3-1: config 0 descriptor?? [ 336.778713][ T8] usb 3-1: USB disconnect, device number 16 [ 336.887996][ T6091] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 337.071772][ T6091] usb 2-1: Using ep0 maxpacket: 16 [ 337.083576][ T6091] usb 2-1: config 0 has no interfaces? [ 337.103026][ T6091] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.115446][ T6091] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.131117][ T6091] usb 2-1: Manufacturer: syz [ 337.143080][ T6091] usb 2-1: config 0 descriptor?? [ 337.538487][ T5909] usb 2-1: USB disconnect, device number 18 [ 337.924734][ T9451] fuse: Bad value for 'fd' [ 339.328116][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 339.599980][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.615443][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.631922][ T8] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 339.654649][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.688637][ T8] usb 3-1: config 0 descriptor?? [ 340.631872][ T9477] kvm: emulating exchange as write [ 340.644986][ T8] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 341.071273][ T8] usb 3-1: USB disconnect, device number 17 [ 341.135674][ T9486] fuse: Bad value for 'fd' [ 341.403388][ T46] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 342.416066][ T46] usb 2-1: device descriptor read/64, error -71 [ 342.647021][ T9500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.690166][ T46] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 342.777778][ T9502] loop2: detected capacity change from 0 to 8 [ 342.828061][ T46] usb 2-1: device descriptor read/64, error -71 [ 342.938290][ T46] usb usb2-port1: attempt power cycle [ 343.247984][ T8] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 343.370865][ T9504] loop4: detected capacity change from 0 to 32768 [ 343.387948][ T46] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 343.420452][ T46] usb 2-1: device descriptor read/8, error -71 [ 343.658211][ T46] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 343.746753][ T46] usb 2-1: device descriptor read/8, error -71 [ 343.843839][ T9504] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 344.029049][ T46] usb usb2-port1: unable to enumerate USB device [ 344.131866][ T9504] XFS (loop4): Starting recovery (logdev: internal) [ 344.182296][ T8] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 344.207156][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.309939][ T9532] loop1: detected capacity change from 0 to 512 [ 344.315742][ T9504] XFS (loop4): Ending recovery (logdev: internal) [ 344.321496][ T8] usb 3-1: config 0 has no interface number 0 [ 344.372149][ T8] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 344.407141][ T8] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 344.433333][ T8] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 344.444922][ T8] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 344.510692][ T8] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 344.526327][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.535409][ T8] usb 3-1: Product: syz [ 344.548966][ T8] usb 3-1: Manufacturer: syz [ 344.556788][ T9532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.569590][ T9504] netlink: 14072 bytes leftover after parsing attributes in process `syz.4.1150'. [ 344.580465][ T8] usb 3-1: SerialNumber: syz [ 344.588771][ T9532] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.608255][ T8] usb 3-1: config 0 descriptor?? [ 344.617257][ T8] symbolserial 3-1:0.175: symbol converter detected [ 344.627435][ T8] usb 3-1: symbol converter now attached to ttyUSB0 [ 345.191884][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 345.191949][ T29] audit: type=1800 audit(1731474610.550:68): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1159" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 345.324274][ T5840] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 345.337729][ T29] audit: type=1800 audit(1731474610.660:69): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1159" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 345.370924][ T8] usb 3-1: USB disconnect, device number 18 [ 345.384576][ T8] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 345.395634][ T8] symbolserial 3-1:0.175: device disconnected [ 345.467404][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.407022][ T9555] loop4: detected capacity change from 0 to 512 [ 348.246528][ T9555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.285465][ T9555] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.549202][ T29] audit: type=1800 audit(1731474613.900:70): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1161" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 348.664418][ T29] audit: type=1800 audit(1731474613.970:71): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1161" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 348.753809][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.309282][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.563419][ T9584] lo speed is unknown, defaulting to 1000 [ 349.709274][ T9584] lo speed is unknown, defaulting to 1000 [ 350.130156][ T9584] lo speed is unknown, defaulting to 1000 [ 350.243672][ T9584] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 350.928926][ T9584] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 351.179589][ T9584] lo speed is unknown, defaulting to 1000 [ 351.246096][ T9584] lo speed is unknown, defaulting to 1000 [ 351.254255][ T9584] lo speed is unknown, defaulting to 1000 [ 351.262659][ T9584] lo speed is unknown, defaulting to 1000 [ 351.270947][ T9584] lo speed is unknown, defaulting to 1000 [ 352.325337][ T9609] loop3: detected capacity change from 0 to 512 [ 353.795072][ T9609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.861851][ T9609] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.974246][ T29] audit: type=1800 audit(1731474619.290:72): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 354.025083][ T29] audit: type=1800 audit(1731474619.390:73): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 354.130046][ T9627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.059568][ T9633] loop4: detected capacity change from 0 to 2048 [ 355.093320][ T9633] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 355.315510][ T9633] syz.4.1185: attempt to access beyond end of device [ 355.315510][ T9633] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 355.330416][ T9640] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.098508][ T9643] syz.4.1185: attempt to access beyond end of device [ 356.098508][ T9643] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 357.258376][ T9643] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 357.352108][ T9633] syz.4.1185: attempt to access beyond end of device [ 357.352108][ T9633] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 357.463255][ T9633] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3) [ 357.474184][ T9633] NILFS (loop4): error -5 reading inode: ino=12 [ 357.582421][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.990507][ T29] audit: type=1326 audit(1731474627.360:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.060806][ T29] audit: type=1326 audit(1731474627.380:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.110733][ T29] audit: type=1326 audit(1731474627.380:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.378134][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 362.607896][ T29] audit: type=1326 audit(1731474627.380:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.646818][ T29] audit: type=1326 audit(1731474627.380:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.693550][ T29] audit: type=1326 audit(1731474627.390:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.732343][ T9708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.739870][ T29] audit: type=1326 audit(1731474627.390:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.783230][ T29] audit: type=1326 audit(1731474627.390:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.814392][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 362.831049][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.871910][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.925570][ T29] audit: type=1326 audit(1731474627.390:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 362.958175][ T29] audit: type=1326 audit(1731474627.390:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9699 comm="syz.3.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febcb97e719 code=0x7ffc0000 [ 363.091723][ T9711] fuse: Invalid rootmode [ 363.259903][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 363.276605][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.299936][ T9] usb 4-1: Product: syz [ 363.324574][ T9] usb 4-1: Manufacturer: syz [ 363.339764][ T9] usb 4-1: SerialNumber: syz [ 363.379125][ T9] usb 4-1: config 0 descriptor?? [ 363.809554][ T9719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.424956][ T6091] usb 4-1: USB disconnect, device number 21 [ 366.772156][ T9734] pim6reg: entered allmulticast mode [ 366.779645][ T9734] pim6reg: left allmulticast mode [ 367.222543][ T9743] fuse: Invalid rootmode [ 369.435049][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 369.435066][ T29] audit: type=1326 audit(1731474634.800:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.154755][ T29] audit: type=1326 audit(1731474635.520:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.514144][ T29] audit: type=1326 audit(1731474635.550:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.697222][ T29] audit: type=1326 audit(1731474635.570:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.811016][ T29] audit: type=1326 audit(1731474635.570:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.894323][ T29] audit: type=1326 audit(1731474635.570:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.948152][ T29] audit: type=1326 audit(1731474635.600:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 370.997897][ T29] audit: type=1326 audit(1731474635.600:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 371.032819][ T9785] fuse: Invalid rootmode [ 371.047905][ T29] audit: type=1326 audit(1731474635.630:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 371.087909][ T29] audit: type=1326 audit(1731474635.630:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e97e719 code=0x7ffc0000 [ 373.541064][ T9820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.998317][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.005083][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.284238][ T9879] pim6reg: entered allmulticast mode [ 380.297334][ T9879] pim6reg: left allmulticast mode [ 384.435504][ T9904] loop3: detected capacity change from 0 to 32768 [ 384.588487][ T9904] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 384.750545][ T9904] XFS (loop3): Starting recovery (logdev: internal) [ 385.650113][ T9904] XFS (loop3): Ending recovery (logdev: internal) [ 387.116573][ T5835] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 396.348174][T10051] loop4: detected capacity change from 0 to 8192 [ 400.401259][ T6091] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 400.669730][ T6091] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 400.680580][ T6091] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.751262][ T6091] usb 2-1: config 0 has no interface number 0 [ 400.757595][ T6091] usb 2-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 400.795286][ T6091] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 400.804828][ T6091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.841216][ T6091] usb 2-1: Product: syz [ 400.912961][ T6091] usb 2-1: Manufacturer: syz [ 400.941921][ T6091] usb 2-1: SerialNumber: syz [ 400.992302][ T6091] usb 2-1: config 0 descriptor?? [ 401.043446][ T6091] symbolserial 2-1:0.175: required endpoints missing [ 401.172802][T10075] loop3: detected capacity change from 0 to 32768 [ 401.209849][T10075] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop3": -EINTR [ 401.254722][ T6091] usb 2-1: USB disconnect, device number 23 [ 407.100018][T10163] lo speed is unknown, defaulting to 1000 [ 413.638797][T10220] loop4: detected capacity change from 0 to 8 [ 418.351718][T10235] loop2: detected capacity change from 0 to 32768 [ 419.575727][T10235] read_mapping_page failed! [ 420.148464][T10235] diRead: diIAGRead returned -5 [ 423.837124][T10313] overlayfs: failed to resolve './file0': -2 [ 428.377677][T10353] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 433.089627][ T5839] Bluetooth: hci1: ACL packet for unknown connection handle 6 [ 434.590320][T10399] trusted_key: syz.1.1393 sent an empty control message without MSG_MORE. [ 436.533881][T10414] overlayfs: failed to resolve './file0': -2 [ 439.676948][T10433] binder: 10427:10433 ioctl 4018620d 0 returned -22 [ 440.390269][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.396775][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.901428][T10455] netlink: 257 bytes leftover after parsing attributes in process `syz.0.1409'. [ 444.606032][T10479] 9pnet_fd: Insufficient options for proto=fd [ 445.317950][T10479] ceph: No mds server is up or the cluster is laggy [ 446.689677][T10494] binder: 10492:10494 ioctl 4018620d 0 returned -22 [ 454.517997][ T8] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 454.684001][ T8] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 454.698019][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.759270][ T8] usb 4-1: config 0 has no interface number 0 [ 454.784499][ T8] usb 4-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 455.738339][ T8] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 455.757690][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.776134][ T8] usb 4-1: Product: syz [ 455.780834][ T8] usb 4-1: Manufacturer: syz [ 455.792109][ T8] usb 4-1: SerialNumber: syz [ 455.819010][ T8] usb 4-1: config 0 descriptor?? [ 455.827657][ T8] symbolserial 4-1:0.175: required endpoints missing [ 456.056086][ T95] usb 4-1: USB disconnect, device number 22 [ 459.599708][T10585] 9pnet_fd: Insufficient options for proto=fd [ 460.039871][T10585] ceph: No mds server is up or the cluster is laggy [ 466.441982][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 466.452313][T10641] netlink: 'syz.2.1457': attribute type 7 has an invalid length. [ 466.460566][T10641] netlink: 'syz.2.1457': attribute type 13 has an invalid length. [ 470.837518][T10673] loop7: detected capacity change from 0 to 16384 [ 471.217308][T10674] [ 471.219693][T10674] ====================================================== [ 471.226727][T10674] WARNING: possible circular locking dependency detected [ 471.233767][T10674] 6.12.0-rc6-next-20241108-syzkaller #0 Not tainted [ 471.240355][T10674] ------------------------------------------------------ [ 471.247392][T10674] syz.1.1466/10674 is trying to acquire lock: [ 471.253553][T10674] ffff888142f76870 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x287/0x9f0 [ 471.263697][T10674] [ 471.263697][T10674] but task is already holding lock: [ 471.271073][T10674] ffff888142f76228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 471.280857][T10674] [ 471.280857][T10674] which lock already depends on the new lock. [ 471.280857][T10674] [ 471.291253][T10674] [ 471.291253][T10674] the existing dependency chain (in reverse order) is: [ 471.300257][T10674] [ 471.300257][T10674] -> #6 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 471.308853][T10674] lock_acquire+0x1ed/0x550 [ 471.313875][T10674] blk_mq_submit_bio+0x1510/0x2490 [ 471.319494][T10674] __submit_bio+0x2c2/0x560 [ 471.324507][T10674] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 471.330671][T10674] mpage_readahead+0x7da/0x930 [ 471.335938][T10674] read_pages+0x17e/0x840 [ 471.340785][T10674] page_cache_ra_unbounded+0x797/0x8c0 [ 471.346767][T10674] filemap_get_pages+0x621/0x2540 [ 471.352302][T10674] filemap_splice_read+0x68e/0xef0 [ 471.357929][T10674] splice_direct_to_actor+0x4af/0xc80 [ 471.363804][T10674] do_splice_direct+0x289/0x3e0 [ 471.369163][T10674] do_sendfile+0x564/0x8a0 [ 471.374114][T10674] __se_sys_sendfile64+0x17c/0x1e0 [ 471.379742][T10674] do_syscall_64+0xf3/0x230 [ 471.384751][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.391150][T10674] [ 471.391150][T10674] -> #5 (mapping.invalidate_lock#2){++++}-{4:4}: [ 471.399677][T10674] lock_acquire+0x1ed/0x550 [ 471.404687][T10674] down_read+0xb1/0xa40 [ 471.409350][T10674] filemap_fault+0xd54/0x1950 [ 471.414535][T10674] __do_fault+0x135/0x460 [ 471.419369][T10674] handle_pte_fault+0x1139/0x66b0 [ 471.424913][T10674] handle_mm_fault+0x1106/0x1bb0 [ 471.430378][T10674] exc_page_fault+0x459/0x8c0 [ 471.435574][T10674] asm_exc_page_fault+0x26/0x30 [ 471.440944][T10674] [ 471.440944][T10674] -> #4 (&vma->vm_lock->lock){++++}-{4:4}: [ 471.448917][T10674] lock_acquire+0x1ed/0x550 [ 471.453941][T10674] down_write+0x99/0x220 [ 471.458691][T10674] vma_link+0x28c/0x500 [ 471.463381][T10674] insert_vm_struct+0x2f7/0x410 [ 471.468755][T10674] alloc_bprm+0xa57/0xe70 [ 471.473601][T10674] kernel_execve+0x99/0xa50 [ 471.478611][T10674] kernel_init+0xed/0x2b0 [ 471.483446][T10674] ret_from_fork+0x4b/0x80 [ 471.488367][T10674] ret_from_fork_asm+0x1a/0x30 [ 471.493638][T10674] [ 471.493638][T10674] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 471.501193][T10674] lock_acquire+0x1ed/0x550 [ 471.506198][T10674] __might_fault+0xc6/0x120 [ 471.511210][T10674] _copy_from_user+0x2a/0xc0 [ 471.516321][T10674] blk_trace_setup+0xd2/0x1e0 [ 471.521531][T10674] sg_ioctl+0xa46/0x2e80 [ 471.526290][T10674] __se_sys_ioctl+0xf5/0x170 [ 471.531387][T10674] do_syscall_64+0xf3/0x230 [ 471.536414][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.542821][T10674] [ 471.542821][T10674] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 471.550620][T10674] lock_acquire+0x1ed/0x550 [ 471.555812][T10674] __mutex_lock+0x1ac/0xee0 [ 471.560832][T10674] blk_mq_init_sched+0x3fa/0x830 [ 471.566274][T10674] elevator_init_mq+0x20e/0x320 [ 471.571634][T10674] add_disk_fwnode+0x10d/0xf80 [ 471.576925][T10674] sd_probe+0xba6/0x1100 [ 471.581676][T10674] really_probe+0x2b8/0xad0 [ 471.586686][T10674] __driver_probe_device+0x1a2/0x390 [ 471.592477][T10674] driver_probe_device+0x50/0x430 [ 471.598005][T10674] __device_attach_driver+0x2d6/0x530 [ 471.603881][T10674] bus_for_each_drv+0x24e/0x2e0 [ 471.609241][T10674] __device_attach_async_helper+0x22d/0x300 [ 471.615639][T10674] async_run_entry_fn+0xa8/0x420 [ 471.621206][T10674] process_scheduled_works+0xa63/0x1850 [ 471.627372][T10674] worker_thread+0x870/0xd30 [ 471.632474][T10674] kthread+0x2f0/0x390 [ 471.637070][T10674] ret_from_fork+0x4b/0x80 [ 471.642026][T10674] ret_from_fork_asm+0x1a/0x30 [ 471.647320][T10674] [ 471.647320][T10674] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 471.656182][T10674] lock_acquire+0x1ed/0x550 [ 471.661205][T10674] blk_queue_enter+0xe1/0x600 [ 471.666405][T10674] blk_mq_alloc_request+0x26b/0xab0 [ 471.672144][T10674] scsi_execute_cmd+0x177/0x1090 [ 471.677621][T10674] read_capacity_16+0x2b4/0x1450 [ 471.683077][T10674] sd_revalidate_disk+0x1019/0xbcf0 [ 471.688783][T10674] sd_probe+0x9fa/0x1100 [ 471.693529][T10674] really_probe+0x2b8/0xad0 [ 471.698562][T10674] __driver_probe_device+0x1a2/0x390 [ 471.704361][T10674] driver_probe_device+0x50/0x430 [ 471.709906][T10674] __device_attach_driver+0x2d6/0x530 [ 471.715796][T10674] bus_for_each_drv+0x24e/0x2e0 [ 471.721161][T10674] __device_attach_async_helper+0x22d/0x300 [ 471.727564][T10674] async_run_entry_fn+0xa8/0x420 [ 471.733020][T10674] process_scheduled_works+0xa63/0x1850 [ 471.739097][T10674] worker_thread+0x870/0xd30 [ 471.744202][T10674] kthread+0x2f0/0x390 [ 471.748795][T10674] ret_from_fork+0x4b/0x80 [ 471.753712][T10674] ret_from_fork_asm+0x1a/0x30 [ 471.758985][T10674] [ 471.758985][T10674] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 471.766614][T10674] validate_chain+0x18ef/0x5920 [ 471.771973][T10674] __lock_acquire+0x1397/0x2100 [ 471.777358][T10674] lock_acquire+0x1ed/0x550 [ 471.782370][T10674] __mutex_lock+0x1ac/0xee0 [ 471.787396][T10674] loop_reconfigure_limits+0x287/0x9f0 [ 471.793359][T10674] lo_ioctl+0x1351/0x1f50 [ 471.798193][T10674] blkdev_ioctl+0x57d/0x6a0 [ 471.803204][T10674] __se_sys_ioctl+0xf5/0x170 [ 471.808300][T10674] do_syscall_64+0xf3/0x230 [ 471.813315][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.819714][T10674] [ 471.819714][T10674] other info that might help us debug this: [ 471.819714][T10674] [ 471.829941][T10674] Chain exists of: [ 471.829941][T10674] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#24 [ 471.829941][T10674] [ 471.844794][T10674] Possible unsafe locking scenario: [ 471.844794][T10674] [ 471.852226][T10674] CPU0 CPU1 [ 471.857582][T10674] ---- ---- [ 471.862948][T10674] lock(&q->q_usage_counter(io)#24); [ 471.868327][T10674] lock(mapping.invalidate_lock#2); [ 471.876142][T10674] lock(&q->q_usage_counter(io)#24); [ 471.884031][T10674] lock(&q->limits_lock); [ 471.888439][T10674] [ 471.888439][T10674] *** DEADLOCK *** [ 471.888439][T10674] [ 471.896565][T10674] 3 locks held by syz.1.1466/10674: [ 471.901761][T10674] #0: ffff8880254c6b60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x606/0x1f50 [ 471.910715][T10674] #1: ffff888142f76228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 471.920899][T10674] #2: ffff888142f76260 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1344/0x1f50 [ 471.931236][T10674] [ 471.931236][T10674] stack backtrace: [ 471.937124][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.1.1466 Not tainted 6.12.0-rc6-next-20241108-syzkaller #0 [ 471.947345][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 471.957405][T10674] Call Trace: [ 471.960695][T10674] [ 471.963610][T10674] dump_stack_lvl+0x241/0x360 [ 471.968277][T10674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.973479][T10674] ? __pfx__printk+0x10/0x10 [ 471.978073][T10674] print_circular_bug+0x13a/0x1b0 [ 471.983113][T10674] check_noncircular+0x36a/0x4a0 [ 471.988077][T10674] ? __pfx_check_noncircular+0x10/0x10 [ 471.993547][T10674] validate_chain+0x18ef/0x5920 [ 471.998387][T10674] ? __pfx_validate_chain+0x10/0x10 [ 472.003574][T10674] ? __pfx_validate_chain+0x10/0x10 [ 472.008758][T10674] ? __pfx_validate_chain+0x10/0x10 [ 472.013942][T10674] ? lockdep_unlock+0x16a/0x300 [ 472.018775][T10674] ? __pfx_lockdep_unlock+0x10/0x10 [ 472.023958][T10674] ? mark_lock+0x9a/0x360 [ 472.028298][T10674] __lock_acquire+0x1397/0x2100 [ 472.033135][T10674] lock_acquire+0x1ed/0x550 [ 472.037621][T10674] ? loop_reconfigure_limits+0x287/0x9f0 [ 472.043520][T10674] ? __pfx_lock_acquire+0x10/0x10 [ 472.048530][T10674] ? __pfx___might_resched+0x10/0x10 [ 472.053802][T10674] ? mark_lock+0x9a/0x360 [ 472.058137][T10674] __mutex_lock+0x1ac/0xee0 [ 472.062634][T10674] ? loop_reconfigure_limits+0x287/0x9f0 [ 472.068256][T10674] ? loop_reconfigure_limits+0x287/0x9f0 [ 472.073891][T10674] ? __pfx___mutex_lock+0x10/0x10 [ 472.079007][T10674] loop_reconfigure_limits+0x287/0x9f0 [ 472.084462][T10674] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 472.090476][T10674] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 472.096553][T10674] ? lockdep_hardirqs_on+0x99/0x150 [ 472.101745][T10674] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 472.107631][T10674] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.113953][T10674] ? finish_wait+0xd4/0x1e0 [ 472.118451][T10674] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 472.124241][T10674] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 472.130299][T10674] ? __pfx_autoremove_wake_function+0x10/0x10 [ 472.136347][T10674] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 472.142241][T10674] ? lo_ioctl+0x1344/0x1f50 [ 472.146732][T10674] lo_ioctl+0x1351/0x1f50 [ 472.151049][T10674] ? mark_lock+0x9a/0x360 [ 472.155364][T10674] ? validate_chain+0x11e/0x5920 [ 472.160284][T10674] ? __pfx_lo_ioctl+0x10/0x10 [ 472.164945][T10674] ? mark_lock+0x9a/0x360 [ 472.169287][T10674] ? __lock_acquire+0x1397/0x2100 [ 472.174302][T10674] ? __pfx_lock_acquire+0x10/0x10 [ 472.179323][T10674] ? is_bpf_text_address+0x26/0x2a0 [ 472.184531][T10674] ? __pfx_lock_release+0x10/0x10 [ 472.189581][T10674] ? unwind_next_frame+0x18e6/0x22d0 [ 472.194854][T10674] ? preempt_count_add+0x93/0x190 [ 472.199955][T10674] ? 0xffffffffa0003b40 [ 472.204100][T10674] ? 0xffffffffa0003b40 [ 472.208251][T10674] ? is_bpf_text_address+0x285/0x2a0 [ 472.213522][T10674] ? is_bpf_text_address+0x26/0x2a0 [ 472.218703][T10674] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 472.224850][T10674] ? kernel_text_address+0xa7/0xe0 [ 472.229942][T10674] ? __kernel_text_address+0xd/0x40 [ 472.235137][T10674] ? unwind_get_return_address+0x4d/0x90 [ 472.240798][T10674] ? arch_stack_walk+0xfd/0x150 [ 472.245654][T10674] ? stack_trace_save+0x118/0x1d0 [ 472.250676][T10674] ? __pfx_stack_trace_save+0x10/0x10 [ 472.256056][T10674] ? stack_depot_save_flags+0x29/0x830 [ 472.261512][T10674] ? kasan_save_track+0x51/0x80 [ 472.266355][T10674] ? kasan_save_track+0x3f/0x80 [ 472.271198][T10674] ? kasan_save_free_info+0x40/0x50 [ 472.276392][T10674] ? __kasan_slab_free+0x59/0x70 [ 472.281322][T10674] ? kfree+0x196/0x420 [ 472.285487][T10674] ? tomoyo_path_number_perm+0x679/0x860 [ 472.291120][T10674] ? security_file_ioctl+0xc6/0x2a0 [ 472.296316][T10674] ? __se_sys_ioctl+0x46/0x170 [ 472.301071][T10674] ? do_syscall_64+0xf3/0x230 [ 472.305827][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.311890][T10674] ? do_vfs_ioctl+0xf07/0x2e40 [ 472.316650][T10674] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.321696][T10674] ? mark_lock+0x9a/0x360 [ 472.326035][T10674] ? tomoyo_path_number_perm+0x206/0x860 [ 472.331663][T10674] ? __pfx_lock_release+0x10/0x10 [ 472.336681][T10674] ? tomoyo_path_number_perm+0x679/0x860 [ 472.342312][T10674] ? tomoyo_path_number_perm+0x679/0x860 [ 472.347938][T10674] ? blkdev_common_ioctl+0xfca/0x2480 [ 472.353306][T10674] ? __lock_acquire+0x1397/0x2100 [ 472.358326][T10674] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 472.363975][T10674] ? tomoyo_path_number_perm+0x206/0x860 [ 472.369613][T10674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.375597][T10674] ? file_to_blk_mode+0xcc/0x140 [ 472.380535][T10674] ? __pfx_lo_ioctl+0x10/0x10 [ 472.385211][T10674] blkdev_ioctl+0x57d/0x6a0 [ 472.389715][T10674] ? __pfx_blkdev_ioctl+0x10/0x10 [ 472.394737][T10674] ? __pfx_blkdev_ioctl+0x10/0x10 [ 472.399761][T10674] __se_sys_ioctl+0xf5/0x170 [ 472.404346][T10674] do_syscall_64+0xf3/0x230 [ 472.408849][T10674] ? clear_bhb_loop+0x35/0x90 [ 472.413541][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.419429][T10674] RIP: 0033:0x7fe33597e719 [ 472.423835][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.443438][T10674] RSP: 002b:00007fe336731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.451859][T10674] RAX: ffffffffffffffda RBX: 00007fe335b36058 RCX: 00007fe33597e719 [ 472.459826][T10674] RDX: 0000000000000000 RSI: 0000000000004c09 RDI: 0000000000000003 [ 472.467819][T10674] RBP: 00007fe3359f1616 R08: 0000000000000000 R09: 0000000000000000 [ 472.475791][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.483843][T10674] R13: 0000000000000001 R14: 00007fe335b36058 R15: 00007ffde196b5a8 [ 472.491821][T10674]