last executing test programs: 5m31.46188861s ago: executing program 3 (id=348): openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x2) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x8) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) 5m28.163694703s ago: executing program 3 (id=352): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x44000004) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001e00210200000000fcdbdf2507000000cc0037e33bf4ad2b864500769009e5709f1ca743d59e"], 0x38}}, 0x4000080) 5m26.013104911s ago: executing program 3 (id=356): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000040)="b08667f81502c20a7fbcc802ac9b62bef1a51f068870fdddcca98255", 0x1c}, {&(0x7f0000000600)="0da3ad29d59dcb2015f1823a0bbc13c486f4148181cdf1f20a4307d5531924133aa635662e0434e66beba9df60ec5d4b3fe31e6d204b8654b5dd6472d51bb4eb414a421b318d1a583b1e3b2797a77124abe05f380b2e75598f1ed60421384cd68e000b8b4a30bdcaaa8db79c566a65705d15c57f542586f299562f8465fb94f8bf62e90ab9b7653143fb3a1d3da7ca3a40bc7ff0f77caa7697b5b324b37800d472f9548a2162ea788e9055d31c47478b972a97adfa0796709ae16b92bff2dee3e4f777a7dac122fcc0da662e847ca6fea3b0932c4e47d1e2fa8edf16e57109e9f54877", 0xe3}, {&(0x7f0000000700)="26c2df7b25e5299f60464cbf6d8689abe4a6145284544d98a2a788eedf3b2231f653b7d942d22c928c7949642e286fb247e192a8a49ffa2ece486ccf2c186efc869cdf8bcb6da50d8ffdce7d73741b6c9132ba848e03fa72ff9e6847d729449e986355b6155d", 0x66}, {&(0x7f0000000840)="a9cfc939c9bec0d6b51a1dc8d74f876575277dc2ffde11bcd61c6a372c7ba4567e24d86be78befffe783d300cc79a166b6950c337b5c537c27b59c8afb393839ad940d6444293a5e8907ef9042a8dddeb0c4f32645540612c8d81c6b9179a063d49da284e97541e9cdba9a4b97ecc9c5054fac97b7549e2f02a74fa6b850b8d3f61aa0c0ca68b6f297a45368a1a89b5aa503ec7d9387907c27184502e28f146e66cfc999fae6e4651b70e6529a1220370b76a692bae1ec90206fda8da3003dad2ce3bca5e434f3a92f14c75dc53da83a695ff4057ba06324a5d994673357dff06bbf72dfa919cc", 0xe7}, {&(0x7f0000000940)="4783e06f68180fba96801f107d2a83d7da8a1774f84fcb48eb9d6a71c8aaea4e1ac87b", 0x23}, {&(0x7f0000000980)="f44c7df30f6789e0eca69c58d494634beb693bff44cdd003c71a23408a45a0b89125593f9aebc0d66ad22cb360b9d7eca69ab47a54c7e2a731041a0e6016ee237bf8d62896d1449399a8431628ea1a018990", 0x52}, {&(0x7f0000000a00)="74c95fa1e7af208cc9c577f1d4a92ece1a330c945a7136a2015239221a152cecdcda90c858d6d30bb3e4b1925803ab7a81", 0x31}, {&(0x7f0000000a40)="93df70a64872d69a6282dc750f310613ddcc69b55b8fe9e1602453bb5dd05cf4abc5ba6fe259accf350e548dc1775d2b02da6d4c95", 0x35}], 0x8, &(0x7f0000000b00)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6a, "0a7bf6e141e3a7de1af22053c372451e34b9aa4ca461c9e6b4367f5010408f01b2482cad7fd0ae65ce271d09caf4243fd65b2ed7af169fd7ba2826bf9c681c61c490edf40dfca39b597ba662c1ae6b73954a3c520263abb8bb96546d40536de352e591e698d59e870e98"}], 0x98, 0x10}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m23.578359227s ago: executing program 3 (id=360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 5m22.943580327s ago: executing program 3 (id=363): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1, 0xfffffff6, 0x9) 5m21.485124423s ago: executing program 3 (id=367): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc080) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2076) ppoll(&(0x7f0000001040)=[{r2, 0xfae83c30bf5f62f}, {r2, 0x4}], 0x2, 0x0, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 5m21.023619437s ago: executing program 32 (id=367): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc080) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2076) ppoll(&(0x7f0000001040)=[{r2, 0xfae83c30bf5f62f}, {r2, 0x4}], 0x2, 0x0, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 1m30.162011796s ago: executing program 0 (id=736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) listen(r0, 0x7) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) 1m29.275225124s ago: executing program 0 (id=738): syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="1f", 0x1, 0x20004044, 0x0, 0xb3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @local, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f00000002c0)=0xad) socket$nl_netfilter(0x10, 0x3, 0xc) 1m25.516220452s ago: executing program 0 (id=740): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="050f5600030a1083000a00010701000b10010c8900ff070500d53c1007914d2af4a9f829d1edefff0508a64d5207caae6dc1f883d8cb801d076f394f009a50443b1fe9b9d5cad1d2b441236f5155df2ed496921926a0122cf32b96997da48c60"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100004324"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 1m21.857143556s ago: executing program 0 (id=747): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x30010a9, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 1m21.333347333s ago: executing program 0 (id=748): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1m19.903088507s ago: executing program 0 (id=751): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) syz_clone(0x14010000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130000a2401100a000900000009040100000102300009040101010102"], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x200, 0x1, 0x1, 0x9, 0x3, [0x0, 0x3, 0x200, 0x5]}) 1m19.405772893s ago: executing program 33 (id=751): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) syz_clone(0x14010000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130000a2401100a000900000009040100000102300009040101010102"], 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x200, 0x1, 0x1, 0x9, 0x3, [0x0, 0x3, 0x200, 0x5]}) 13.678014691s ago: executing program 1 (id=877): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x40084) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x8, 0x5, 0x109, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x100000d, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x7, 0x4, 0x16, 0x8, 0x4, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x7ff, 0xf9a2, 0x80000001, 0xff, 0x1800, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x3ff, 0x9, 0x4, 0xc68, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x809, 0x4, 0xa7, 0x8, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x3, 0x1, 0xffff8001, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf0, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x83ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x437, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0xd, 0x1], [0xa776, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1c, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0xb, 0x140f2, 0x5396, 0x3, 0x80000001, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x110009, 0xc, 0x3, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x101, 0x3, 0x4, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13.614492433s ago: executing program 2 (id=878): rt_sigqueueinfo(0x0, 0x21, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) 12.43711516s ago: executing program 1 (id=880): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="9f04dcff0e3290a8362c00b30069935f66000000005b8aa6823b2badb585fff1d6b6b31f21a64bc21483140600000000000000aa5a95ec", @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x14e8, &(0x7f0000002a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 12.405279571s ago: executing program 2 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "52572303f285f09c357249da15f0a4ba8c5cb37d7d6f66a27dcc8c3bb7502c97ee85931f3f9d2d8ad3d2f5ffe65c29f118b5a9fb0d05890cb16f098818e0a3ea980d4c2d8ef125db3876b4ad0231cba4e5243cdce59e1bcc68aa926120848957b04764d5a6bea25517602dd599ab", ["", "", "", "", "", "", ""]}, 0x80}}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008044) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r8, 0x1, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x800000000000000, 0x0, 0x4145}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 11.119327572s ago: executing program 4 (id=882): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) syz_io_uring_complete(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x248000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r4, 0x0, 0x1, 0x4}}, 0x20) 10.647099887s ago: executing program 2 (id=883): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48851) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0xee00, 0x0) r1 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 10.53845695s ago: executing program 4 (id=884): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10.503378861s ago: executing program 1 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.561069192s ago: executing program 5 (id=887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000040)="b08667f81502c20a7fbcc802ac9b62bef1a51f068870fdddcca982559248840b52eac41165", 0x25}, {&(0x7f0000000600)="0da3ad29d59dcb2015f1823a0bbc13c486f4148181cdf1f20a4307d5531924133aa635662e0434e66beba9df60ec5d4b3fe31e6d204b8654b5dd6472d51bb4eb414a421b318d1a583b1e3b2797a77124abe05f380b2e75598f1ed60421384cd68e000b8b4a30bdcaaa8db79c566a65705d15c57f542586f299562f8465fb94f8bf62e90ab9b7653143fb3a1d3da7ca3a40bc7ff0f77caa7697b5b324b37800d472f9548a2162ea788e9055d31c47478b972a97adfa0796709ae16b92bff2dee3e4f777a7dac122fcc0da662e847ca6fea3b0932c4e47d1e2fa8edf16e57109e9f54877", 0xe3}, {&(0x7f0000000700)="26c2df7b25e5299f60464cbf6d8689abe4a6145284544d98a2a788eedf3b2231f653b7d942d22c928c7949642e286fb247e192a8a49ffa2ece486ccf2c186efc869cdf8bcb6da50d8ffdce7d73741b6c9132ba848e03fa72ff9e6847d729449e986355b6155d", 0x66}, {&(0x7f0000000840)="a9cfc939c9bec0d6b51a1dc8d74f876575277dc2ffde11bcd61c6a372c7ba4567e24d86be78befffe783d300cc79a166b6950c337b5c537c27b59c8afb393839ad940d6444293a5e8907ef9042a8dddeb0c4f32645540612c8d81c6b9179a063d49da284e97541e9cdba9a4b97ecc9c5054fac97b7549e2f02a74fa6b850b8d3f61aa0c0ca68b6f297a45368a1a89b5aa503ec7d9387907c27184502e28f146e66cfc999fae6e4651b70e6529a1220370b76a692bae1ec90206fda8da3003dad2ce3bca5e434f3a92f14c75dc53da83a695ff4057ba06324a5d994673357dff06bbf72dfa919cc", 0xe7}, {&(0x7f0000000940)="4783e06f68180fba96801f107d2a83d7da8a1774f84fcb48eb9d6a71c8aaea4e1ac87b", 0x23}, {&(0x7f0000000980)="f44c7df30f6789e0eca69c58d494634beb693bff44cdd003c71a23408a45a0b89125593f9aebc0d66ad22cb360b9d7eca69ab47a54c7e2a731041a0e6016ee237bf8d62896d1449399a8431628ea1a018990", 0x52}, {&(0x7f0000000a00)="74c95fa1e7af208cc9c577f1d4a92ece1a330c945a7136a2015239221a152cecdcda90c858d6d30bb3e4b1925803ab7a81", 0x31}, {&(0x7f0000000a40)="93df70a64872d69a6282dc750f310613ddcc69b55b8fe9e1602453bb5dd05cf4abc5ba6fe259accf350e548dc1775d2b02da6d4c95", 0x35}], 0x8, &(0x7f0000000b00)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6a, "0a7bf6e141e3a7de1af22053c372451e34b9aa4ca461c9e6b4367f5010408f01b2482cad7fd0ae65ce271d09caf4243fd65b2ed7af169fd7ba2826bf9c681c61c490edf40dfca39b597ba662c1ae6b73954a3c520263abb8bb96546d40536de352e591e698d59e870e98"}], 0x98, 0x10}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8.329948819s ago: executing program 1 (id=888): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x8937e, 0xc1) fallocate(r0, 0x0, 0x0, 0x1001f0) 7.688333869s ago: executing program 5 (id=889): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x40084) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x8, 0x5, 0x109, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x100000d, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x7, 0x4, 0x16, 0x8, 0x4, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x7ff, 0xf9a2, 0x80000001, 0xff, 0x1800, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x3ff, 0x9, 0x4, 0xc68, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x809, 0x4, 0xa7, 0x8, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x3, 0x1, 0xffff8001, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf0, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x83ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x437, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0xd, 0x1], [0xa776, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1c, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0xb, 0x140f2, 0x5396, 0x3, 0x80000001, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x110009, 0xc, 0x3, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x101, 0x3, 0x4, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.013191s ago: executing program 5 (id=890): r0 = syz_open_dev$evdev(0x0, 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/52) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 6.37181987s ago: executing program 5 (id=891): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c7573726a71756f74613d6e6f696e6c696e650700000074727bbd0426b776aa2dd559defbabe1bb7c2990cf2327e9af29b6214ca1a0f50decac5eab7e9507cc6949f5ddd3e28e8b57ddee3b3e5d8d0f008c19753fb6357ce5402421cdf43ebd58fe035a2c7265737569643d", @ANYRES16, @ANYRESDEC], 0xfd, 0x554e, &(0x7f000000b080)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002140)={r0, 0x0, 0x4000000, 0x7fff}) 6.36305599s ago: executing program 2 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "52572303f285f09c357249da15f0a4ba8c5cb37d7d6f66a27dcc8c3bb7502c97ee85931f3f9d2d8ad3d2f5ffe65c29f118b5a9fb0d05890cb16f098818e0a3ea980d4c2d8ef125db3876b4ad0231cba4e5243cdce59e1bcc68aa926120848957b04764d5a6bea25517602dd599ab", ["", "", "", "", "", "", ""]}, 0x80}}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008044) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r8, 0x1, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x800000000000000, 0x0, 0x4145}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5.580927345s ago: executing program 4 (id=893): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) syz_io_uring_complete(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x248000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r4, 0x0, 0x1, 0x4}}, 0x20) 4.972641714s ago: executing program 2 (id=894): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="06475eec9a35627ecd07cb0cad9607b39ed2c9501f7bac07d531a14479421ebb198605ee3ec835915537b6d7156d7194931baa47123d8274e34df1228f8a8590b0b9793c7eb46c2c94e405cc94f1c7697b8a241de1a84ec76f75955df0f1d968b802cbe2554ad0fc1ae60e15943abf0d00bddca483e98d96f7c9883ee86da312c9460488eaae5e2ea77cd14b4f074b61b862b52256f79dfda5dff2a3062cb73716b6ef7c1c5d99e2be32f2ccb93e02f0e463e0bfa92d0626168c016d4503e504e55eb3c52d71f79f1e0e2f9bd267fb3fd257db6e2f47167b0e87b7ccd390df4e724b37ff6da2faabf3821ed7797792b3686dca28fc99cd30d07222a2a9c3ebde5c4d36cc4b6eabefce100a2ccd4d337eb47d726bf50f93ef6e1e5ea38dcf11469504d6012856ff5ff169bd4835b6bfff5ebf186dbd"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x145142, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x81, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r2, 0x8800000) accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x180800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x40000, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 4.894470886s ago: executing program 4 (id=895): syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="1f", 0x1, 0x20004044, 0x0, 0xb3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f00000002c0)=0xad) socket$nl_netfilter(0x10, 0x3, 0xc) 4.211254108s ago: executing program 1 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.021200494s ago: executing program 4 (id=897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000280)={0x2000, 0x0, 0x2}, 0x18, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000c25bb33e54015415a23a584ddbc836f7468b7c3ecb70830c58740accda21c574c1251d41ec0daf2d407ee82088e67e9b6730d971f4d9ca2c2cf6a2bd499ee2dc6c6be445d7e128fbbeeb008c4547b0612fa5b83710643da8aca1019f74f5c508000000000000001d95588a4ffa01e0cf45e9051805afcb4ea5cdfc5b0d3b35dc113b91dd45f994951355eb78a9f98b5f8470fac596aa5d9e8a5416cc6bd231", @ANYRES16=r5, @ANYBLOB="07006000000000000000020000000c0001800600010002000000"], 0x20}}, 0x4040) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000580)=""/190}], 0x1, 0x5fab, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000300, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_route(r0, 0x0, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c04, 0x80) renameat(r7, &(0x7f0000001400)='./file0/file0\x00', r7, 0x0) getdents64(r7, &(0x7f00000028c0)=""/4092, 0xffc) 2.22984325s ago: executing program 4 (id=898): syz_usb_connect(0x3, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xe7, 0x66, 0x6a, 0x8, 0x1004, 0x61aa, 0xcf6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x50, 0x4, "", [{{0x9, 0x4, 0x48, 0xff, 0x0, 0x2, 0x6, 0x0, 0xa}}]}}]}}, 0x0) socket(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000001c0)={0x2, 0x0, [{0x80000000, 0x8, 0x1, 0x7, 0x3, 0x1ff, 0x3}, {0x6, 0x8, 0x2, 0x80000001, 0x3ff, 0xffffff01, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0xee01, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000100)='R\x10ru\x84t\xe3c*:De \x00\x00Z_k\xa60\xf4\x0f\x13\xff\x18\xd3,v\x8a\x00\x00\x00', 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x800, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x28, 0x1, 0xd, 0x3, 0x7ff, 0x1}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]}) 1.923817229s ago: executing program 1 (id=899): recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 1.541223721s ago: executing program 5 (id=900): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000340)={0x2, 0x0, 0x7ff, 0x80000}) 981.349139ms ago: executing program 2 (id=901): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, 0x0, 0x80) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000040) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 0s ago: executing program 5 (id=902): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 2] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.568010][ T5915] usb 3-1: USB disconnect, device number 18 [ 233.699894][ T5822] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 233.730637][ T5822] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 234.499906][ T5822] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.716350][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 234.759313][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.809183][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.830146][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.852147][ T5822] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.874160][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.888275][ T5822] usb 4-1: config 0 descriptor?? [ 234.932015][ T788] usb 1-1: USB disconnect, device number 10 [ 234.945771][ T6974] loop1: detected capacity change from 0 to 40427 [ 234.984945][ T6974] F2FS-fs (loop1): invalid crc value [ 235.008420][ T6974] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.096870][ T5784] Bluetooth: hci0: unexpected event for opcode 0x007f [ 235.206981][ T6974] F2FS-fs (loop1): Start checkpoint disabled! [ 235.242404][ T6974] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 235.380727][ T5822] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input7 [ 235.549923][ T5822] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 235.610208][ T5822] usb 4-1: USB disconnect, device number 14 [ 235.720181][ T6997] Cannot find add_set index 0 as target [ 236.195290][ T6996] fido_id[6996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 238.104270][ T7015] usb usb9: check_ctrlrecip: process 7015 (syz.3.334) requesting ep 01 but needs 81 [ 238.113901][ T7015] usb usb9: usbfs: process 7015 (syz.3.334) did not claim interface 0 before use [ 238.808949][ T5784] Bluetooth: hci2: unexpected event for opcode 0x007f [ 238.829132][ T7022] loop1: detected capacity change from 0 to 512 [ 238.838188][ T7022] ext3: Unknown parameter 'subj_user' [ 240.241836][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 241.489851][ T5827] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 241.691824][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.715981][ T5827] usb 3-1: not running at top speed; connect to a high speed hub [ 241.751367][ T5827] usb 3-1: config 2 has an invalid interface number: 186 but max is 2 [ 241.773427][ T5827] usb 3-1: config 2 has an invalid interface number: 28 but max is 2 [ 241.829944][ T5827] usb 3-1: config 2 has an invalid interface number: 107 but max is 2 [ 241.838189][ T5827] usb 3-1: config 2 has no interface number 0 [ 241.844843][ T5827] usb 3-1: config 2 has no interface number 1 [ 241.851267][ T5827] usb 3-1: config 2 has no interface number 2 [ 241.857421][ T5827] usb 3-1: config 2 interface 186 has no altsetting 0 [ 241.864598][ T5827] usb 3-1: config 2 interface 28 has no altsetting 0 [ 241.871469][ T5827] usb 3-1: config 2 interface 107 has no altsetting 0 [ 241.901039][ T5827] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a8.c0 [ 241.935956][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.969849][ T5827] usb 3-1: Product: syz [ 241.980280][ T5827] usb 3-1: Manufacturer: syz [ 241.993795][ T5827] usb 3-1: SerialNumber: syz [ 242.336948][ T5827] ath10k_warn: 6 callbacks suppressed [ 242.338761][ T1321] usb 3-1: Failed to submit usb control message: -71 [ 242.352060][ T5827] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 242.395936][ T1321] usb 3-1: unable to send the bmi data to the device: -71 [ 242.403217][ T1321] usb 3-1: unable to get target info from device [ 242.409931][ T1321] usb 3-1: could not get target info (-71) [ 242.415863][ T1321] usb 3-1: could not probe fw (-71) [ 242.641199][ T5827] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 242.652445][ T2992] usb 3-1: Failed to submit usb control message: -71 [ 242.670171][ T5827] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 242.673756][ T2961] usb 3-1: Failed to submit usb control message: -71 [ 242.687158][ T2961] usb 3-1: unable to send the bmi data to the device: -71 [ 242.696733][ T2961] usb 3-1: unable to get target info from device [ 242.703226][ T2961] usb 3-1: could not get target info (-71) [ 242.709209][ T2961] usb 3-1: could not probe fw (-71) [ 242.714630][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.345'. [ 242.729875][ T2992] usb 3-1: could not get target info (-71) [ 242.735758][ T2992] usb 3-1: could not probe fw (-71) [ 242.845582][ T5827] usb 3-1: USB disconnect, device number 19 [ 244.846177][ T7071] Invalid option length (187) for dns_resolver key [ 246.318038][ T7073] batadv_slave_1: entered promiscuous mode [ 246.328890][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 246.469611][ T7068] batadv_slave_1: left promiscuous mode [ 248.900081][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 249.010002][ T5784] Bluetooth: hci1: unexpected event for opcode 0x007f [ 252.243534][ T7109] loop3: detected capacity change from 0 to 512 [ 252.264732][ T7109] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 252.300559][ T23] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 252.309886][ T7109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 252.382038][ T7109] EXT4-fs (loop3): 1 truncate cleaned up [ 252.389297][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.481143][ T7109] loop3: detected capacity change from 512 to 0 [ 252.506355][ C1] I/O error, dev loop3, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 252.516147][ T7114] EXT4-fs error (device loop3): __ext4_find_entry:1685: inode #2: comm syz.3.360: reading directory lblock 0 [ 252.541529][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.563052][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 252.588635][ T23] usb 2-1: config 2 has an invalid interface number: 186 but max is 2 [ 252.588761][ T7114] syz.3.360: attempt to access beyond end of device [ 252.588761][ T7114] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 252.609871][ T23] usb 2-1: config 2 has an invalid interface number: 28 but max is 2 [ 252.618860][ T23] usb 2-1: config 2 has an invalid interface number: 107 but max is 2 [ 252.635202][ T7114] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 252.644433][ T23] usb 2-1: config 2 has no interface number 0 [ 252.650815][ T7114] EXT4-fs (loop3): I/O error while writing superblock [ 252.663786][ T23] usb 2-1: config 2 has no interface number 1 [ 252.671865][ T23] usb 2-1: config 2 has no interface number 2 [ 252.678511][ T23] usb 2-1: config 2 interface 186 has no altsetting 0 [ 252.686054][ T23] usb 2-1: config 2 interface 28 has no altsetting 0 [ 252.696801][ T23] usb 2-1: config 2 interface 107 has no altsetting 0 [ 252.708834][ T23] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a8.c0 [ 252.720560][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.728618][ T23] usb 2-1: Product: syz [ 252.736319][ T23] usb 2-1: Manufacturer: syz [ 252.742513][ T23] usb 2-1: SerialNumber: syz [ 252.782483][ T5776] syz-executor: attempt to access beyond end of device [ 252.782483][ T5776] loop3: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 252.814453][ T5776] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 252.866157][ T5776] syz-executor: attempt to access beyond end of device [ 252.866157][ T5776] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 252.890292][ T5776] syz-executor: attempt to access beyond end of device [ 252.890292][ T5776] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 252.911339][ T5776] syz-executor: attempt to access beyond end of device [ 252.911339][ T5776] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 253.006637][ T5776] syz-executor: attempt to access beyond end of device [ 253.006637][ T5776] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 253.020750][ T5776] syz-executor: attempt to access beyond end of device [ 253.020750][ T5776] loop3: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 253.034346][ T5776] EXT4-fs error (device loop3): ext4_get_inode_loc:4634: inode #2: block 5: comm syz-executor: unable to read itable block [ 253.056006][ T5776] syz-executor: attempt to access beyond end of device [ 253.056006][ T5776] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 253.079835][ T5776] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 253.091772][ T23] ath10k_warn: 2 callbacks suppressed [ 253.091789][ T23] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 253.123125][ T2992] usb 2-1: Failed to submit usb control message: -71 [ 253.144971][ T5776] EXT4-fs (loop3): I/O error while writing superblock [ 253.155215][ T2992] usb 2-1: unable to send the bmi data to the device: -71 [ 253.179797][ T23] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 253.191429][ T2961] usb 2-1: Failed to submit usb control message: -71 [ 253.198395][ T2961] usb 2-1: unable to send the bmi data to the device: -71 [ 253.207200][ T5776] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: IO failure [ 253.208234][ T2961] usb 2-1: unable to get target info from device [ 253.228193][ T2992] usb 2-1: unable to get target info from device [ 253.231666][ T2961] usb 2-1: could not get target info (-71) [ 253.240849][ T5776] syz-executor: attempt to access beyond end of device [ 253.240849][ T5776] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 253.247107][ T2961] usb 2-1: could not probe fw (-71) [ 253.265598][ T2992] usb 2-1: could not get target info (-71) [ 253.273289][ T5776] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 253.287258][ T23] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 253.291978][ T2992] usb 2-1: could not probe fw (-71) [ 253.302478][ T5776] EXT4-fs (loop3): I/O error while writing superblock [ 253.309460][ T5776] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 253.322711][ T23] usb 2-1: USB disconnect, device number 9 [ 253.330535][ T5776] syz-executor: attempt to access beyond end of device [ 253.330535][ T5776] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 253.344159][ T5776] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 253.352792][ T5776] EXT4-fs (loop3): I/O error while writing superblock [ 253.361522][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 253.373615][ T2908] usb 2-1: Failed to submit usb control message: -71 [ 253.384470][ T2908] usb 2-1: could not get target info (-71) [ 253.390434][ T2908] usb 2-1: could not probe fw (-71) [ 253.471981][ T2961] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:12: unable to read itable block [ 253.501709][ T2961] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 253.513229][ T2961] EXT4-fs (loop3): I/O error while writing superblock [ 253.527492][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.550746][ T5776] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 253.560749][ T5776] EXT4-fs (loop3): I/O error while writing superblock [ 253.963238][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'. [ 254.387716][ T5784] Bluetooth: hci1: unexpected event for opcode 0x007f [ 254.496963][ T2908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.650139][ T2908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.754715][ T2908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.000081][ T2908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.407291][ T7152] batadv_slave_0: entered promiscuous mode [ 255.499697][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 255.690078][ T23] usb 3-1: device descriptor read/64, error -71 [ 255.825118][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.833273][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.916107][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.927296][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.938288][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.948949][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.961612][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.969262][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.030559][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 256.149865][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 256.221707][ T23] usb 3-1: device descriptor read/64, error -71 [ 256.340146][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 256.356827][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 256.357509][ T23] usb usb3-port1: attempt power cycle [ 256.380093][ T9] usb 1-1: config 0 has no interface number 0 [ 256.386288][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 256.420309][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 256.429426][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.443664][ T9] usb 1-1: Product: syz [ 256.450451][ T9] usb 1-1: Manufacturer: syz [ 256.455098][ T9] usb 1-1: SerialNumber: syz [ 256.462502][ T9] usb 1-1: config 0 descriptor?? [ 256.505749][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 256.683083][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.693641][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.703386][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.710990][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.719477][ T7156] bridge_slave_0: entered allmulticast mode [ 256.727271][ T7156] bridge_slave_0: entered promiscuous mode [ 256.760158][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.767374][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.775453][ T7156] bridge_slave_1: entered allmulticast mode [ 256.785960][ T7156] bridge_slave_1: entered promiscuous mode [ 256.800050][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 256.852138][ T23] usb 3-1: device descriptor read/8, error -71 [ 256.921934][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.937590][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.038197][ T7156] team0: Port device team_slave_0 added [ 257.053958][ T7156] team0: Port device team_slave_1 added [ 257.111345][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.118504][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.154014][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 257.165751][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.176280][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.184324][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.230636][ T23] usb 3-1: device descriptor read/8, error -71 [ 257.252308][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.259344][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.298363][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.370919][ T23] usb usb3-port1: unable to enumerate USB device [ 257.387916][ T2908] hsr_slave_0: left promiscuous mode [ 257.399042][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.417840][ T2908] hsr_slave_1: left promiscuous mode [ 257.423885][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.441061][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.448592][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.464918][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.474208][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.483392][ T2908] bridge_slave_1: left allmulticast mode [ 257.489137][ T2908] bridge_slave_1: left promiscuous mode [ 257.496409][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.515696][ T2908] bridge_slave_0: left allmulticast mode [ 257.522990][ T2908] bridge_slave_0: left promiscuous mode [ 257.528851][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.565226][ T2908] veth1_macvtap: left promiscuous mode [ 257.571381][ T2908] veth0_macvtap: left promiscuous mode [ 257.662520][ T7155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.681590][ T7155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.704569][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 257.724288][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 257.740754][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 257.748429][ T9] f81534: probe of 1-1:0.12 failed with error -71 [ 257.784446][ T9] usb 1-1: USB disconnect, device number 11 [ 258.073310][ T5784] Bluetooth: hci2: command tx timeout [ 259.358286][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 259.446210][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 259.494489][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.541777][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.162457][ T5784] Bluetooth: hci2: command tx timeout [ 262.220214][ T5784] Bluetooth: hci2: command tx timeout [ 262.430506][ T2908] bond0 (unregistering): Released all slaves [ 262.898189][ T7152] batadv_slave_0: left promiscuous mode [ 263.241168][ T7156] hsr_slave_0: entered promiscuous mode [ 263.250725][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.376'. [ 264.349956][ T5784] Bluetooth: hci2: command tx timeout [ 264.422427][ T7156] hsr_slave_1: entered promiscuous mode [ 264.492154][ T5784] Bluetooth: hci0: unexpected event for opcode 0x007f [ 264.642266][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.380'. [ 265.111729][ T5915] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 265.121399][ T7156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.136424][ T7156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.171173][ T7156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.227466][ T7156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.320620][ T5915] usb 3-1: no configurations [ 265.325376][ T5915] usb 3-1: can't read configurations, error -22 [ 265.500346][ T5915] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 265.543555][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.600780][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.654809][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.662522][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.713993][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.721227][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.721724][ T5915] usb 3-1: no configurations [ 265.739704][ T5915] usb 3-1: can't read configurations, error -22 [ 265.774622][ T5915] usb usb3-port1: attempt power cycle [ 266.199885][ T5915] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 266.241679][ T5915] usb 3-1: no configurations [ 266.246568][ T5915] usb 3-1: can't read configurations, error -22 [ 266.402523][ T5915] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 267.489377][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.897931][ T5915] usb 3-1: device descriptor read/all, error -71 [ 270.010366][ T5915] usb usb3-port1: unable to enumerate USB device [ 270.770187][ T5915] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 270.950048][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 271.442581][ T5915] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 271.466045][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.496420][ T5915] usb 3-1: Product: syz [ 271.511034][ T5915] usb 3-1: Manufacturer: syz [ 271.515698][ T5915] usb 3-1: SerialNumber: syz [ 271.573992][ T5915] usb 3-1: config 0 descriptor?? [ 271.696241][ T5915] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 271.725858][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 271.763433][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.810811][ T7156] veth0_vlan: entered promiscuous mode [ 271.837016][ T5915] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 271.851989][ T7156] veth1_vlan: entered promiscuous mode [ 271.871244][ T5915] usb 3-1: media controller created [ 271.951544][ T7156] veth0_macvtap: entered promiscuous mode [ 271.966176][ T7156] veth1_macvtap: entered promiscuous mode [ 271.976028][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.165438][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.191169][ T5915] dvb-usb: bulk message failed: -22 (1/0) [ 272.806086][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.908406][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.961485][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.976735][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.995489][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.005712][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.022877][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.051485][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.089876][ T5915] DVB: Unable to find symbol mt352_attach() [ 273.109834][ T5915] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 273.120578][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.135332][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.149388][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.160748][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.185213][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.211834][ T5926] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 273.220798][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.253017][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.285428][ T7156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.294763][ T7156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.300396][ T5915] rc_core: IR keymap rc-dvico-portable not found [ 273.304696][ T7156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.319474][ T7156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.349167][ T5915] Registered IR keymap rc-empty [ 273.368705][ T5915] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 273.417051][ T5915] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 273.467995][ T5915] dvb-usb: schedule remote query interval to 100 msecs. [ 273.491160][ T5915] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 273.568049][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.599574][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.610988][ T5915] usb 3-1: USB disconnect, device number 28 [ 273.669925][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.679070][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.077424][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.091507][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 275.092427][ T5915] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 275.099125][ T5926] usb 1-1: can't read configurations, error -71 [ 277.889945][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 279.090006][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 279.120369][ T5915] usb 5-1: config 2 has an invalid interface number: 72 but max is 0 [ 279.128530][ T5915] usb 5-1: config 2 has no interface number 0 [ 280.700573][ T5915] usb 5-1: config 2 interface 72 has no altsetting 0 [ 280.838845][ T5915] usb 5-1: string descriptor 0 read error: -71 [ 281.010560][ T5915] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f [ 281.019689][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.155781][ T5915] usb 5-1: can't set config #2, error -71 [ 281.244187][ T5915] usb 5-1: USB disconnect, device number 2 [ 282.326467][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 282.430280][ T7375] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 282.438368][ T7375] macvtap1: entered allmulticast mode [ 282.444095][ T7375] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 282.525873][ T7375] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 282.534620][ T7375] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 285.944255][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.407'. [ 291.387098][ T7440] Cannot find add_set index 0 as target [ 297.274863][ T7467] Invalid option length (187) for dns_resolver key [ 298.520884][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 298.777803][ T7466] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 298.790238][ T7466] macvtap1: entered allmulticast mode [ 298.795801][ T7466] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 299.259194][ T7466] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 299.267235][ T7466] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 301.900413][ T7494] Cannot find add_set index 0 as target [ 306.267416][ T7518] Invalid option length (187) for dns_resolver key [ 312.190041][ T5778] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 312.567025][ T5778] usb 2-1: device descriptor read/64, error -71 [ 313.720180][ T5778] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 313.900049][ T5778] usb 2-1: device descriptor read/64, error -71 [ 314.032605][ T5778] usb usb2-port1: attempt power cycle [ 317.264008][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.271028][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.880978][ T7606] Invalid option length (187) for dns_resolver key [ 321.110672][ T5778] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 322.710661][ T5778] usb 2-1: device descriptor read/64, error -71 [ 324.923445][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 325.863427][ T7655] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 325.899354][ T7655] macvtap1: entered allmulticast mode [ 325.915031][ T7655] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 326.160006][ T7673] Invalid option length (187) for dns_resolver key [ 326.280192][ T7655] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 326.529443][ T7655] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 327.308991][ T5784] Bluetooth: hci0: unexpected event for opcode 0x007f [ 330.549964][ T5778] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 330.729972][ T5778] usb 2-1: device descriptor read/64, error -71 [ 331.030065][ T5778] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 331.315802][ T5778] usb 2-1: device descriptor read/64, error -71 [ 331.710759][ T5778] usb usb2-port1: attempt power cycle [ 332.159934][ T5778] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 332.190806][ T5778] usb 2-1: device descriptor read/8, error -71 [ 333.307564][ T7726] Invalid option length (187) for dns_resolver key [ 340.096709][ T5784] Bluetooth: hci1: unexpected event for opcode 0x007f [ 340.220358][ T788] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 340.832722][ T788] usb 3-1: device descriptor read/64, error -71 [ 341.129943][ T788] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 341.309870][ T788] usb 3-1: device descriptor read/64, error -71 [ 341.665125][ T788] usb usb3-port1: attempt power cycle [ 341.816561][ T7792] Invalid option length (187) for dns_resolver key [ 344.389033][ T5784] Bluetooth: hci3: unexpected event for opcode 0x007f [ 347.280156][ T5827] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 347.800027][ T5827] usb 3-1: device descriptor read/64, error -71 [ 348.289983][ T5827] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 348.490475][ T5827] usb 3-1: device descriptor read/64, error -71 [ 348.610608][ T5827] usb usb3-port1: attempt power cycle [ 348.682487][ T7868] Invalid option length (187) for dns_resolver key [ 349.239842][ T5827] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 349.270785][ T5827] usb 3-1: device descriptor read/8, error -71 [ 354.089842][ T5827] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 354.250004][ T5827] usb 1-1: device descriptor read/64, error -71 [ 354.539889][ T5827] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 354.726524][ T5827] usb 1-1: device descriptor read/64, error -71 [ 354.903592][ T5827] usb usb1-port1: attempt power cycle [ 355.420019][ T5827] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 355.586754][ T5827] usb 1-1: device descriptor read/8, error -71 [ 355.670211][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.503'. [ 355.996771][ T5827] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 356.219780][ T5827] usb 1-1: device not accepting address 17, error -71 [ 356.245881][ T5827] usb usb1-port1: unable to enumerate USB device [ 358.288315][ T5784] Bluetooth: hci1: unexpected event for opcode 0x4889 [ 360.209977][ T7977] batadv_slave_0: entered promiscuous mode [ 361.297166][ T7982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.515'. [ 362.609869][ T5926] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 362.735081][ T7973] batadv_slave_0: left promiscuous mode [ 363.993884][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.003373][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 364.037865][ T5926] usb 3-1: can't read configurations, error -71 [ 368.184590][ T5784] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 368.937468][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.525'. [ 370.269779][ T5822] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 373.068285][ T5822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 373.083962][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 373.110178][ T5822] usb 1-1: can't read configurations, error -71 [ 375.326145][ T8052] batadv_slave_0: entered promiscuous mode [ 376.388295][ T8059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.534'. [ 377.986029][ T8050] batadv_slave_0: left promiscuous mode [ 378.729880][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 378.750722][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.757112][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.129997][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 380.227272][ T8082] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 380.238761][ T8082] macvtap1: entered allmulticast mode [ 380.780029][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 381.202704][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 382.199867][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 382.207563][ T8] usb 5-1: can't read configurations, error -71 [ 382.238356][ T8082] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 382.336052][ T8082] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 382.345722][ T8082] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 383.547841][ T5784] Bluetooth: hci2: unexpected event for opcode 0x007f [ 384.181800][ T8116] batadv_slave_0: entered promiscuous mode [ 386.776764][ T8111] batadv_slave_0: left promiscuous mode [ 389.159941][ T5827] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 390.359878][ T5784] Bluetooth: hci2: unexpected event for opcode 0x007f [ 390.503721][ T5827] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.512567][ T5827] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 390.521605][ T5827] usb 2-1: can't read configurations, error -71 [ 390.735673][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 390.819881][ T5778] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 391.029852][ T5778] usb 3-1: Using ep0 maxpacket: 16 [ 391.799936][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.813863][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.830598][ T5778] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 391.845723][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.872268][ T5778] usb 3-1: config 0 descriptor?? [ 391.943108][ T8157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 392.060896][ T8157] macvtap1: entered allmulticast mode [ 392.066949][ T8157] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 392.114936][ T8157] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 392.137882][ T8157] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 392.319878][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.382535][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.460768][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.488493][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.521028][ T5778] usbhid 3-1:0.0: can't add hid device: -71 [ 392.541759][ T5778] usbhid: probe of 3-1:0.0 failed with error -71 [ 392.574517][ T5778] usb 3-1: USB disconnect, device number 38 [ 393.044685][ T8170] batadv_slave_0: entered promiscuous mode [ 395.957785][ T8170] batadv_slave_0: left promiscuous mode [ 398.315929][ T5784] Bluetooth: hci2: unexpected event for opcode 0x007f [ 398.551727][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 399.789795][ T5827] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 399.989957][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 400.002466][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.014385][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.024589][ T5827] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 400.033974][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.047861][ T5827] usb 1-1: config 0 descriptor?? [ 400.319296][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 400.384688][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 400.407598][ T9] usb 3-1: can't read configurations, error -71 [ 400.921028][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.958000][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 400.970241][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.042670][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.080030][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.126561][ T5827] usbhid 1-1:0.0: can't add hid device: -71 [ 401.167815][ T5827] usbhid: probe of 1-1:0.0 failed with error -71 [ 401.254693][ T5827] usb 1-1: USB disconnect, device number 20 [ 401.291977][ T8212] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 401.300954][ T8212] macvtap1: entered allmulticast mode [ 401.309796][ T8212] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 401.407655][ T8212] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 401.487035][ T8212] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 404.620336][ T5827] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 405.640207][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.090891][ T5823] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 406.392147][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.411160][ T5827] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 406.422215][ T8243] loop4: detected capacity change from 0 to 128 [ 406.438956][ T5827] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 406.447071][ T5827] usb 3-1: Manufacturer: syz [ 406.465607][ T5827] usb 3-1: config 0 descriptor?? [ 406.485061][ T8243] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.546089][ T8243] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.850765][ T7156] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.559450][ T5827] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 407.608366][ T5827] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 407.638432][ T5827] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 407.685353][ T5827] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 407.705498][ T5827] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 407.735861][ T5827] usb 3-1: USB disconnect, device number 41 [ 408.225879][ T8255] loop1: detected capacity change from 0 to 1024 [ 408.272931][ T8255] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 408.351760][ T8255] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 408.458704][ T8255] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 408.652029][ T5823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.189949][ T8255] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: inode #5: comm syz.1.584: unexpected bad inode w/o EXT4_IGET_BAD [ 409.285141][ T8255] EXT4-fs (loop1): no journal found [ 409.356258][ T8255] EXT4-fs (loop1): can't get journal size [ 409.789014][ T8255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.819980][ T5823] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 409.827768][ T5823] usb 1-1: can't read configurations, error -71 [ 410.242219][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.289972][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 414.383380][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 414.392789][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 414.401424][ T9] usb 5-1: can't read configurations, error -71 [ 414.802342][ T8308] loop2: detected capacity change from 0 to 512 [ 414.833875][ T8308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.917206][ T8308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 414.940276][ T8308] System zones: 1-12 [ 415.036526][ T8308] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 415.286329][ T8308] EXT4-fs (loop2): 1 truncate cleaned up [ 415.319905][ T8308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.488890][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.529960][ T5778] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 416.919913][ T5827] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 417.102148][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.129790][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.155329][ T5827] usb 3-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 417.177060][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.199863][ T5827] usb 3-1: config 0 descriptor?? [ 417.309298][ T8328] loop1: detected capacity change from 0 to 40427 [ 417.327634][ T8328] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 417.346144][ T8328] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 417.368058][ T8328] F2FS-fs (loop1): invalid crc value [ 417.394525][ T8328] F2FS-fs (loop1): Found nat_bits in checkpoint [ 417.536141][ T8328] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 417.544021][ T8328] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 417.644701][ T5827] hid-generic 0003:5443:0042.0006: hidraw0: USB HID v10.00 Device [HID 5443:0042] on usb-dummy_hcd.2-1/input0 [ 417.849385][ T8] usb 3-1: USB disconnect, device number 42 [ 419.004153][ T5778] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.014510][ T5778] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 419.022363][ T5778] usb 5-1: can't read configurations, error -71 [ 419.483756][ T8359] loop4: detected capacity change from 0 to 512 [ 421.541885][ T8359] EXT4-fs (loop4): 1 truncate cleaned up [ 421.559327][ T8359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.822490][ T7156] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 422.898664][ T7156] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 422.958087][ T7156] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 423.064366][ T8369] capability: warning: `syz.2.617' uses deprecated v2 capabilities in a way that may be insecure [ 423.081393][ T7156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.266962][ T8372] xt_hashlimit: size too large, truncated to 1048576 [ 423.748377][ T8382] loop0: detected capacity change from 0 to 512 [ 423.799485][ T8382] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 423.855149][ T8384] loop1: detected capacity change from 0 to 256 [ 423.867969][ T8382] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.620: bad orphan inode 16 [ 423.902416][ T8384] exfat: Deprecated parameter 'utf8' [ 423.924579][ T8384] exfat: Deprecated parameter 'namecase' [ 423.931154][ T8384] exfat: Deprecated parameter 'namecase' [ 423.960598][ T8382] ext4_test_bit(bit=15, block=4) = 0 [ 423.966052][ T8382] EXT4-fs (loop0): 1 orphan inode deleted [ 423.999592][ T8382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.033230][ T8384] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 424.310236][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.598442][ T8397] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.624'. [ 424.750115][ T788] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 424.952168][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.975381][ T788] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.998956][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 425.018563][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.039834][ T788] usb 3-1: config 0 descriptor?? [ 425.058399][ T8396] loop0: detected capacity change from 0 to 40427 [ 425.075230][ T8396] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 425.084259][ T8396] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 425.128799][ T8396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 425.215187][ T8396] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 425.231602][ T8396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 425.710103][ T5822] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 425.909920][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 425.922845][ T5822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.941506][ T5822] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 425.951158][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.959201][ T5822] usb 2-1: Product: syz [ 425.964132][ T5822] usb 2-1: Manufacturer: syz [ 425.969243][ T5822] usb 2-1: SerialNumber: syz [ 426.079966][ T5823] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 426.186874][ T5822] usb 2-1: unit 4 not found! [ 426.192045][ T5822] usb 2-1: unit 0 not found! [ 426.229916][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 426.279881][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 426.287621][ T5823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 426.298974][ T5823] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 426.308456][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.316707][ T5823] usb 1-1: Product: syz [ 426.320968][ T5823] usb 1-1: Manufacturer: syz [ 426.325631][ T5823] usb 1-1: SerialNumber: syz [ 426.430793][ T788] usb 5-1: Using ep0 maxpacket: 32 [ 426.442177][ T788] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 426.452818][ T788] usb 5-1: config 0 has no interface number 0 [ 426.458978][ T788] usb 5-1: config 0 interface 12 has no altsetting 0 [ 426.470487][ T788] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 426.479844][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.487874][ T788] usb 5-1: Product: syz [ 426.492302][ T788] usb 5-1: Manufacturer: syz [ 426.496945][ T788] usb 5-1: SerialNumber: syz [ 426.504885][ T788] usb 5-1: config 0 descriptor?? [ 426.594219][ T5822] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 426.602944][ T5823] usb 1-1: found format II with max.bitrate = 4, frame size=1 [ 426.613929][ T5823] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 426.629964][ T5823] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 426.657711][ T5822] usb 2-1: unit 4 not found! [ 426.669781][ T5822] usb 2-1: unit 0 not found! [ 426.674987][ T5823] usb 1-1: USB disconnect, device number 23 [ 426.697063][ T5822] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 426.722712][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.736336][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.748987][ T5822] usb 2-1: unit 4 not found! [ 426.757876][ T7550] udevd[7550]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.774789][ T5822] usb 2-1: unit 0 not found! [ 426.857218][ T5822] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 426.875585][ T5822] usb 2-1: USB disconnect, device number 21 [ 426.901461][ T8411] udevd[8411]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.199082][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.244550][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.476419][ T788] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 427.499352][ T788] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 427.512896][ T788] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 427.530984][ T788] f81534: probe of 5-1:0.12 failed with error -71 [ 427.596551][ T788] usb 5-1: USB disconnect, device number 9 [ 427.617505][ T5822] usb 3-1: USB disconnect, device number 43 [ 428.015053][ T8434] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.634'. [ 428.419882][ T5822] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 428.609867][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 428.619018][ T8441] xt_hashlimit: size too large, truncated to 1048576 [ 428.626861][ T5822] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 428.636291][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.644930][ T5822] usb 5-1: Product: syz [ 428.649300][ T5822] usb 5-1: Manufacturer: syz [ 428.655245][ T5822] usb 5-1: SerialNumber: syz [ 428.711986][ T5822] usb 5-1: config 0 descriptor?? [ 428.730483][ T5822] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 428.738915][ T5822] dvb-usb: bulk message failed: -22 (2/0) [ 428.842524][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 428.857353][ T5822] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 428.876181][ T5822] usb 5-1: media controller created [ 428.904412][ T8445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.121490][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.148036][ T5822] dvb-usb: bulk message failed: -22 (1/0) [ 429.197106][ T5822] DVB: Unable to find symbol mt352_attach() [ 429.236599][ T5822] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 429.321670][ T8451] loop1: detected capacity change from 0 to 512 [ 429.407164][ T8451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 429.510369][ T8451] EXT4-fs (loop1): 1 truncate cleaned up [ 429.524079][ T8451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.657565][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.210105][ T5822] rc_core: IR keymap rc-dvico-portable not found [ 430.216532][ T5822] Registered IR keymap rc-empty [ 430.246804][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.280820][ T5822] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 430.347785][ T5822] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9 [ 430.393528][ T5822] dvb-usb: schedule remote query interval to 100 msecs. [ 430.407620][ T5822] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 430.470875][ T5822] usb 5-1: USB disconnect, device number 10 [ 430.615427][ T5822] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 430.869757][ T5827] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 431.316949][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.401018][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 431.424056][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.446830][ T5827] usb 1-1: config 0 has no interfaces? [ 431.463475][ T5827] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.489724][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.512030][ T5827] usb 1-1: config 0 descriptor?? [ 431.719908][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 431.911848][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.935997][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.994106][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 432.035532][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.048050][ T8] usb 2-1: config 0 descriptor?? [ 432.133740][ T8471] loop0: detected capacity change from 0 to 2048 [ 432.186539][ T8471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.216018][ T8471] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.313106][ T8471] fs-verity: sha512 using implementation "sha512-avx2" [ 433.726723][ T5778] usb 1-1: USB disconnect, device number 24 [ 433.769280][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.791596][ T8487] loop2: detected capacity change from 0 to 256 [ 433.867207][ T8487] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 434.049885][ T788] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 434.319880][ T8498] overlayfs: missing 'lowerdir' [ 434.360347][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 434.400442][ T8498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 435.714202][ T788] usb 5-1: Using ep0 maxpacket: 8 [ 435.742419][ T788] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 435.832496][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 435.841443][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.849472][ T788] usb 5-1: Product: syz [ 435.880035][ T8] usb 2-1: USB disconnect, device number 22 [ 435.925717][ T788] usb 5-1: Manufacturer: syz [ 435.940801][ T788] usb 5-1: SerialNumber: syz [ 435.981197][ T788] usb 5-1: config 0 descriptor?? [ 436.019044][ T788] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 436.069869][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 436.096320][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.144866][ T788] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 436.163534][ T788] usb 5-1: media controller created [ 436.176782][ T8502] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 436.187623][ T8502] macvtap1: entered allmulticast mode [ 436.193687][ T8502] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 436.225267][ T8502] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 436.234026][ T8502] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 436.273763][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.348806][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 436.449182][ T8512] loop0: detected capacity change from 0 to 512 [ 436.449274][ T788] DVB: Unable to find symbol mt352_attach() [ 436.462211][ T788] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 436.476289][ T8512] EXT4-fs: Ignoring removed oldalloc option [ 436.497273][ T8512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.504130][ T8] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 436.532478][ T8512] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 436.540611][ T8512] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 436.548983][ T8512] EXT4-fs (loop0): orphan cleanup on readonly fs [ 436.556489][ T8512] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 436.558157][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.571437][ T8512] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 436.598631][ T8512] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 436.637752][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.654330][ T8512] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.655: bg 0: block 40: padding at end of block bitmap is not set [ 436.673542][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.687388][ T8512] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 436.693961][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.707036][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 436.719853][ T788] rc_core: IR keymap rc-dvico-portable not found [ 436.726251][ T788] Registered IR keymap rc-empty [ 436.740378][ T8512] EXT4-fs (loop0): 1 truncate cleaned up [ 436.746929][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 436.756349][ T8512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 436.763942][ T788] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 436.793007][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 436.813131][ T788] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 436.824686][ T8] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 436.834789][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.848256][ T788] dvb-usb: schedule remote query interval to 100 msecs. [ 436.856681][ T788] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 436.875754][ T8] usb 2-1: config 0 descriptor?? [ 436.888613][ T8509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.933935][ T788] usb 5-1: USB disconnect, device number 11 [ 436.961192][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 437.107822][ T788] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 437.323256][ T8] hid-multitouch 0003:1FD2:6007.0007: ignoring exceeding usage max [ 437.363124][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.383985][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.431793][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.473811][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.496839][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.515024][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.535696][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.563215][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.581533][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.626305][ T8518] syz.0.655 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 437.636894][ T8] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0 [ 437.667471][ T8] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 437.682109][ T8512] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.655: bad symlink. [ 437.721270][ T8512] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.655: bad symlink. [ 437.735340][ T8] usb 2-1: USB disconnect, device number 23 [ 437.907974][ T8519] fido_id[8519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 438.052477][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.224810][ T8534] loop1: detected capacity change from 0 to 256 [ 439.776002][ T8537] loop2: detected capacity change from 0 to 512 [ 439.979857][ T8534] FAT-fs (loop1): Directory bread(block 64) failed [ 440.036950][ T8534] FAT-fs (loop1): Directory bread(block 65) failed [ 440.096023][ T8534] FAT-fs (loop1): Directory bread(block 66) failed [ 440.125202][ T8534] FAT-fs (loop1): Directory bread(block 67) failed [ 440.134562][ T8534] FAT-fs (loop1): Directory bread(block 68) failed [ 440.145110][ T8534] FAT-fs (loop1): Directory bread(block 69) failed [ 440.157679][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.164119][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.167362][ T8534] FAT-fs (loop1): Directory bread(block 70) failed [ 440.199036][ T8534] FAT-fs (loop1): Directory bread(block 71) failed [ 440.222377][ T8537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.239864][ T8534] FAT-fs (loop1): Directory bread(block 72) failed [ 440.268112][ T8534] FAT-fs (loop1): Directory bread(block 73) failed [ 440.279076][ T8537] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.640304][ T8553] tap0: tun_chr_ioctl cmd 1074025677 [ 440.645819][ T8553] tap0: linktype set to 8 [ 443.167796][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.091126][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 445.649781][ T5822] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 446.309440][ T8572] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 446.387769][ T8572] macvtap1: entered allmulticast mode [ 446.607579][ T8572] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 446.669565][ T8572] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 446.679205][ T8572] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 447.690089][ T5822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.713059][ T5822] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 447.732297][ T5822] usb 2-1: can't read configurations, error -71 [ 448.129889][ T5822] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 448.331051][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 448.355516][ T5822] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 448.376248][ T5822] usb 2-1: config 0 has no interface number 0 [ 448.386029][ T5822] usb 2-1: config 0 interface 12 has no altsetting 0 [ 448.411905][ T5822] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 448.437269][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.455021][ T5822] usb 2-1: Product: syz [ 448.476509][ T5822] usb 2-1: Manufacturer: syz [ 448.513306][ T5822] usb 2-1: SerialNumber: syz [ 448.643896][ T5822] usb 2-1: config 0 descriptor?? [ 449.135889][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.287916][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.029958][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 450.516485][ T5822] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 450.553350][ T5822] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 450.569774][ T5822] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 450.578669][ T5822] f81534: probe of 2-1:0.12 failed with error -71 [ 450.614638][ T5822] usb 2-1: USB disconnect, device number 25 [ 450.811463][ T8614] kvm: emulating exchange as write [ 451.130978][ T8622] loop2: detected capacity change from 0 to 256 [ 451.164448][ T8622] FAT-fs (loop2): Directory bread(block 64) failed [ 451.185334][ T8622] FAT-fs (loop2): Directory bread(block 65) failed [ 451.206669][ T8622] FAT-fs (loop2): Directory bread(block 66) failed [ 451.229766][ T8622] FAT-fs (loop2): Directory bread(block 67) failed [ 451.237226][ T8622] FAT-fs (loop2): Directory bread(block 68) failed [ 451.245343][ T8622] FAT-fs (loop2): Directory bread(block 69) failed [ 451.252401][ T8622] FAT-fs (loop2): Directory bread(block 70) failed [ 451.259205][ T8622] FAT-fs (loop2): Directory bread(block 71) failed [ 451.267564][ T8622] FAT-fs (loop2): Directory bread(block 72) failed [ 451.274460][ T8622] FAT-fs (loop2): Directory bread(block 73) failed [ 451.296107][ T8622] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 452.483475][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.849219][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 453.869764][ T23] usb 5-1: can't read configurations, error -71 [ 454.650054][ T8639] loop4: detected capacity change from 0 to 131072 [ 454.696753][ T8639] F2FS-fs (loop4): Found nat_bits in checkpoint [ 454.745413][ T8639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 455.879840][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 456.264601][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.304506][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 456.350793][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.398957][ T8] usb 2-1: config 0 descriptor?? [ 456.679965][ T5858] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 458.569806][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 459.412184][ T5858] usb 1-1: device descriptor read/all, error -71 [ 459.451452][ T8] usb 2-1: USB disconnect, device number 26 [ 459.580540][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 460.925194][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 462.650371][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 462.663870][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 462.673445][ T8] usb 2-1: can't read configurations, error -71 [ 464.349756][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 464.580742][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 464.608472][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 464.641675][ T9] usb 3-1: config 0 has no interface number 0 [ 464.668334][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 464.691537][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 464.728516][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.739701][ T9] usb 3-1: Product: syz [ 464.745237][ T9] usb 3-1: Manufacturer: syz [ 464.809815][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 464.817642][ T9] usb 3-1: SerialNumber: syz [ 464.865294][ T9] usb 3-1: config 0 descriptor?? [ 465.069071][ T8] usb 2-1: device descriptor read/64, error -71 [ 465.147554][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.189331][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.384103][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 465.422315][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 465.448178][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 465.475982][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 465.499926][ T9] f81534: probe of 3-1:0.12 failed with error -71 [ 465.559786][ T8] usb 2-1: device descriptor read/64, error -71 [ 465.567963][ T9] usb 3-1: USB disconnect, device number 44 [ 465.682405][ T8] usb usb2-port1: attempt power cycle [ 466.144833][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 466.202038][ T8] usb 2-1: device descriptor read/8, error -71 [ 466.559933][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 466.612247][ T8] usb 2-1: device descriptor read/8, error -71 [ 466.741190][ T8] usb usb2-port1: unable to enumerate USB device [ 467.669891][ T5926] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 468.226316][ T8736] kAFS: No cell specified [ 468.910971][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 470.708231][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 470.739914][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 470.753353][ T5926] usb 1-1: can't read configurations, error -71 [ 472.199071][ T8745] loop0: detected capacity change from 0 to 128 [ 472.248250][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.718'. [ 475.719858][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 475.989866][ T23] usb 1-1: device descriptor read/64, error -71 [ 476.040288][ T8763] kAFS: No cell specified [ 477.399842][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 477.799977][ T23] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 478.236367][ T23] usb 1-1: device descriptor read/64, error -71 [ 480.020457][ T23] usb usb1-port1: attempt power cycle [ 480.977302][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 481.007235][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 481.032841][ T9] usb 2-1: can't read configurations, error -71 [ 481.502647][ T8774] loop2: detected capacity change from 0 to 4096 [ 481.540793][ T8774] EXT4-fs: Ignoring removed orlov option [ 481.561208][ T8775] batadv_slave_0: entered promiscuous mode [ 481.630092][ T27] audit: type=1107 audit(1779310443.104:4): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='z' [ 481.654951][ T8774] EXT4-fs (loop2): Test dummy encryption mode enabled [ 481.700827][ T8774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.622954][ T8771] batadv_slave_0: left promiscuous mode [ 485.067029][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.373874][ T8793] kAFS: No cell specified [ 488.922280][ T8807] loop4: detected capacity change from 0 to 256 [ 488.967262][ T8807] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 489.460047][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 489.989615][ T8807] bio_check_eod: 7 callbacks suppressed [ 489.989634][ T8807] syz.4.733: attempt to access beyond end of device [ 489.989634][ T8807] loop4: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 490.099948][ T8807] syz.4.733: attempt to access beyond end of device [ 490.099948][ T8807] loop4: rw=34817, sector=256, nr_sectors = 32 limit=256 [ 490.629803][ T788] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 490.789994][ T788] usb 1-1: device descriptor read/64, error -71 [ 491.079821][ T788] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 491.239916][ T788] usb 1-1: device descriptor read/64, error -71 [ 491.347068][ T8816] loop4: detected capacity change from 0 to 40427 [ 491.358877][ T8816] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 491.360117][ T788] usb usb1-port1: attempt power cycle [ 491.373472][ T8816] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 491.477657][ T8816] F2FS-fs (loop4): Found nat_bits in checkpoint [ 491.591321][ T8816] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 491.598628][ T8816] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 491.789985][ T788] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 491.831424][ T788] usb 1-1: device descriptor read/8, error -71 [ 491.860541][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 491.873123][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 491.887223][ T9] usb 2-1: can't read configurations, error -71 [ 492.115466][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.127748][ T788] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 492.131458][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.153171][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.165948][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.186058][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.194780][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.206720][ T7156] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 492.214907][ T788] usb 1-1: device descriptor read/8, error -71 [ 492.339915][ T788] usb usb1-port1: unable to enumerate USB device [ 492.686280][ T8836] loop2: detected capacity change from 0 to 512 [ 492.796291][ T8836] EXT4-fs (loop2): 1 truncate cleaned up [ 492.809561][ T8836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.986374][ T8840] loop0: detected capacity change from 0 to 512 [ 494.025308][ T8840] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 494.094003][ T8840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 494.112671][ T8840] System zones: 1-12 [ 494.136711][ T8840] EXT4-fs (loop0): 1 truncate cleaned up [ 494.164694][ T8840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.405056][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /198/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 494.644385][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 494.672027][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 494.739313][ T8844] batadv_slave_0: entered promiscuous mode [ 494.780931][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /198/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 494.824694][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 494.838171][ T5777] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 494.858842][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /198/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 494.868983][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 494.903988][ T5777] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 494.904697][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /198/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 494.941099][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 494.946838][ T5777] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 494.955452][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.971601][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 494.991445][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.008912][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /198/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 495.032675][ T9] usb 2-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 495.036665][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 495.043505][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.076869][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.086127][ T9] usb 2-1: Product: syz [ 495.091899][ T9] usb 2-1: Manufacturer: syz [ 495.097605][ T9] usb 2-1: SerialNumber: syz [ 495.319256][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 495.340465][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 495.388471][ T9] usb 2-1: USB disconnect, device number 36 [ 495.562330][ T7575] udevd[7575]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.756377][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.848357][ T2908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.992552][ T2908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.171545][ T2908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.340577][ T2908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.050796][ T5926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 497.196295][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.207639][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.217895][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.240275][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.250398][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 497.256179][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 497.270431][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.281831][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.300421][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 497.339433][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 497.403294][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.464521][ T5926] usb 3-1: config 0 descriptor?? [ 497.478579][ T8843] batadv_slave_0: left promiscuous mode [ 497.502604][ T5926] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 497.722505][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.758082][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.815118][ T9] usb 3-1: USB disconnect, device number 45 [ 498.167860][ T8879] loop4: detected capacity change from 0 to 8192 [ 499.262580][ T8879] syz.4.755: attempt to access beyond end of device [ 499.262580][ T8879] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 499.275580][ T8879] F2FS-fs (loop9): Unable to read 1th superblock [ 499.282768][ T8879] syz.4.755: attempt to access beyond end of device [ 499.282768][ T8879] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 499.295617][ T8879] F2FS-fs (loop9): Unable to read 2th superblock [ 499.817936][ T5784] Bluetooth: hci0: command tx timeout [ 500.668501][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 501.050099][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 501.130221][ T5834] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 501.189108][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.215262][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.235013][ T8887] loop4: detected capacity change from 0 to 40427 [ 501.243797][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 501.254960][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.264526][ T8867] bridge_slave_0: entered allmulticast mode [ 501.264872][ T8887] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 501.278885][ T8887] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 501.290966][ T23] usb 2-1: config 0 descriptor?? [ 501.300104][ T23] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 501.301844][ T8867] bridge_slave_0: entered promiscuous mode [ 501.342564][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 501.352433][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.359597][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.377964][ T5834] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 501.391551][ T8887] F2FS-fs (loop4): Found nat_bits in checkpoint [ 501.406199][ T5834] usb 3-1: config 0 has no interface number 0 [ 501.417939][ T8867] bridge_slave_1: entered allmulticast mode [ 501.437893][ T5834] usb 3-1: config 0 interface 184 has no altsetting 0 [ 501.447235][ T8867] bridge_slave_1: entered promiscuous mode [ 501.466455][ T5834] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 501.490313][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.498372][ T5834] usb 3-1: Product: syz [ 501.521386][ T5834] usb 3-1: Manufacturer: syz [ 501.526144][ T5834] usb 3-1: SerialNumber: syz [ 501.562206][ T5834] usb 3-1: config 0 descriptor?? [ 501.576876][ T8887] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 501.596409][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.608992][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.611481][ T8887] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 501.628201][ T5834] smsc75xx v1.0.0 [ 501.737261][ T2908] hsr_slave_0: left promiscuous mode [ 501.753823][ T2908] hsr_slave_1: left promiscuous mode [ 501.766748][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.775994][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.789361][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.805752][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.817745][ T2908] bridge_slave_1: left allmulticast mode [ 501.842420][ T2908] bridge_slave_1: left promiscuous mode [ 501.848350][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.882703][ T2908] bridge_slave_0: left allmulticast mode [ 501.899892][ T5784] Bluetooth: hci0: command tx timeout [ 501.911104][ T2908] bridge_slave_0: left promiscuous mode [ 501.933381][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.043136][ T2908] veth1_macvtap: left promiscuous mode [ 502.048873][ T2908] veth0_macvtap: left promiscuous mode [ 502.068857][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 502.101347][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 502.159735][ T5834] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 502.182028][ T5834] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 502.200178][ T5834] usb 3-1: USB disconnect, device number 46 [ 502.755491][ T23] usb 2-1: USB disconnect, device number 37 [ 502.978845][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 503.058907][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 503.116902][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.192762][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.408688][ T8925] loop1: detected capacity change from 0 to 128 [ 503.452526][ T8925] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.465462][ T8925] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.515532][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.819505][ T2908] bond0 (unregistering): Released all slaves [ 503.948358][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.979558][ T8919] batadv_slave_0: entered promiscuous mode [ 503.981061][ T5784] Bluetooth: hci0: command tx timeout [ 503.993158][ T8918] batadv_slave_0: left promiscuous mode [ 504.021109][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.182519][ T8867] team0: Port device team_slave_0 added [ 504.264870][ T8867] team0: Port device team_slave_1 added [ 504.402702][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.418969][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.460199][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.493636][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.501333][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.712350][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.975827][ T8867] hsr_slave_0: entered promiscuous mode [ 505.000208][ T8867] hsr_slave_1: entered promiscuous mode [ 505.017446][ T8867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.035404][ T8867] Cannot create hsr debugfs directory [ 505.234782][ T5858] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 506.109824][ T5784] Bluetooth: hci0: command tx timeout [ 506.319859][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 506.328496][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.339087][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 506.363327][ T5858] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 506.372958][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.435989][ T5858] usb 3-1: config 0 descriptor?? [ 506.453846][ T5858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 506.543544][ T8867] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.577551][ T8867] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.645570][ T8867] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.669266][ T8867] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.680840][ T8939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.700733][ T8939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.720971][ T42] usb 3-1: USB disconnect, device number 47 [ 506.939964][ T8] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 507.006543][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.045310][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.074548][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.081828][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.115554][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.122823][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.162234][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.188731][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 507.223144][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 507.235590][ T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 236, changing to 4 [ 507.260723][ T8] usb 5-1: string descriptor 0 read error: -22 [ 507.272579][ T8] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 507.287460][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.304111][ T8] usb 5-1: unit 3 not found! [ 507.608420][ T42] usb 5-1: USB disconnect, device number 14 [ 507.792179][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.053156][ T8965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.068577][ T8965] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 508.100522][ T8965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.108181][ T8965] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 508.123391][ T8965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.135177][ T8965] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 508.164550][ T8965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.183637][ T8965] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 508.208796][ T8965] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 508.257212][ T8867] veth0_vlan: entered promiscuous mode [ 508.300471][ T8867] veth1_vlan: entered promiscuous mode [ 508.516432][ T8867] veth0_macvtap: entered promiscuous mode [ 508.598613][ T8867] veth1_macvtap: entered promiscuous mode [ 508.654971][ T8997] batadv_slave_0: entered promiscuous mode [ 508.683561][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.694520][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.704796][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.715459][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.725351][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.736060][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.753683][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.764315][ T8996] batadv_slave_0: left promiscuous mode [ 508.805687][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.825376][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.840631][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.854241][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.867429][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.881290][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.896417][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.910635][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 508.932184][ T8867] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.941696][ T8867] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.954112][ T8867] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.965018][ T8867] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.141700][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.182173][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.192951][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.229873][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.250930][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 509.263475][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.323205][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.386711][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 509.394891][ T8] usb 3-1: SerialNumber: syz [ 509.422496][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 509.644456][ T8] usb 3-1: 0:2 : does not exist [ 509.669707][ T8] usb 3-1: unit 48 not found! [ 509.710108][ T8] usb 3-1: USB disconnect, device number 48 [ 509.769146][ T8413] udevd[8413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.935766][ T9025] loop5: detected capacity change from 0 to 1024 [ 509.961881][ T9025] EXT4-fs: Ignoring removed i_version option [ 509.967996][ T9025] EXT4-fs: inline encryption not supported [ 510.043581][ T9025] EXT4-fs (loop5): Test dummy encryption mode enabled [ 510.113673][ T9025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.149811][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 510.155933][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 510.191109][ T9025] EXT4-fs (loop5): shut down requested (1) [ 510.220843][ T5087] Bluetooth: hci0: command 0x0c1a tx timeout [ 510.341445][ T8867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.900044][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 511.078411][ T9052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.783'. [ 511.500015][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 511.916472][ T9067] loop1: detected capacity change from 0 to 512 [ 511.995181][ T9067] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.031863][ T9067] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 512.057621][ T9048] loop2: detected capacity change from 0 to 40427 [ 512.110190][ T9067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 512.118467][ T9067] EXT4-fs (loop1): orphan cleanup on readonly fs [ 512.158402][ T9067] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.787: bg 0: block 361: padding at end of block bitmap is not set [ 512.175121][ T9048] F2FS-fs (loop2): invalid crc value [ 512.220366][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 512.226477][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 512.390390][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 512.684601][ T9067] EXT4-fs (loop1): Remounting filesystem read-only [ 512.697335][ T9048] F2FS-fs (loop2): Found nat_bits in checkpoint [ 512.745103][ T9067] EXT4-fs (loop1): 1 truncate cleaned up [ 512.815135][ T9067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 512.867739][ T9048] F2FS-fs (loop2): Start checkpoint disabled! [ 512.917171][ T9048] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 513.034198][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 513.249844][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 513.295831][ T9089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 513.355788][ T9089] loop4: detected capacity change from 0 to 256 [ 513.378249][ T9089] exfat: Deprecated parameter 'namecase' [ 513.393856][ T1144] kworker/u4:7: attempt to access beyond end of device [ 513.393856][ T1144] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 513.410592][ T9089] exfat: Deprecated parameter 'namecase' [ 513.416308][ T9089] exfat: Deprecated parameter 'namecase' [ 513.442190][ T1144] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 513.450122][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 513.464403][ T9089] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 513.486923][ T5858] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 513.496950][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.502310][ T1144] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 513.541263][ T5858] usb 6-1: config 0 descriptor?? [ 513.556349][ T5858] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 513.669730][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 513.697201][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.742626][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.770796][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.837895][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 513.913604][ T8] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 514.003944][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.144643][ T8] usb 2-1: Product: syz [ 514.177115][ T8] usb 2-1: Manufacturer: syz [ 514.211793][ T9102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 514.212632][ T8] usb 2-1: SerialNumber: syz [ 514.460490][ T9074] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.541665][ T8] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 514.556304][ T8] usb 2-1: 1:1 : unsupported format bits 0x2002 [ 514.564146][ T8] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 514.580816][ T8] usb 2-1: unit 37 not found! [ 514.588495][ T8] usb 2-1: unit 0 not found! [ 514.657196][ T8] usb 2-1: USB disconnect, device number 38 [ 514.719508][ T7483] udevd[7483]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.832333][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 514.989379][ T5858] usb 6-1: USB disconnect, device number 2 [ 515.011859][ T9] usb 3-1: device descriptor read/64, error -71 [ 515.339946][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 515.570080][ T9] usb 3-1: device descriptor read/64, error -71 [ 515.780974][ T9] usb usb3-port1: attempt power cycle [ 516.169354][ T9135] loop5: detected capacity change from 0 to 8192 [ 516.249775][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 517.210483][ T9] usb 3-1: device descriptor read/8, error -71 [ 518.419725][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 519.500096][ T9] usb 3-1: device not accepting address 52, error -71 [ 519.527659][ T9] usb usb3-port1: unable to enumerate USB device [ 519.562295][ T9138] loop2: detected capacity change from 0 to 512 [ 519.596733][ T9138] EXT4-fs (loop2): orphan cleanup on readonly fs [ 519.700378][ T9138] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.801: bad orphan inode 15 [ 519.813418][ T9138] ext4_test_bit(bit=14, block=18) = 1 [ 519.839766][ T9138] is_bad_inode(inode)=0 [ 519.866961][ T9138] NEXT_ORPHAN(inode)=1023 [ 519.886026][ T9138] max_ino=32 [ 519.892037][ T42] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 519.909347][ T9138] i_nlink=0 [ 519.943219][ T9138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.801: bg 0: block 161: padding at end of block bitmap is not set [ 520.030002][ T9138] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 520.066074][ T9138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 520.171941][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 520.256429][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.274050][ T42] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 520.294928][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.305816][ T42] usb 2-1: Product: syz [ 520.313612][ T42] usb 2-1: Manufacturer: syz [ 520.319220][ T42] usb 2-1: SerialNumber: syz [ 520.374146][ T42] usb 2-1: config 0 descriptor?? [ 520.397636][ T42] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 520.419135][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 520.491714][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.548646][ T42] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 520.573199][ T42] usb 2-1: media controller created [ 520.656514][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.739243][ T9156] kAFS: No cell specified [ 521.443459][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.479331][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.521458][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.549827][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.560645][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 521.789138][ T42] DVB: Unable to find symbol mt352_attach() [ 521.819338][ T42] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 522.551658][ T42] rc_core: IR keymap rc-dvico-portable not found [ 522.558085][ T42] Registered IR keymap rc-empty [ 522.618417][ T42] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 522.683940][ T9169] overlayfs: missing 'workdir' [ 522.688783][ T42] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 522.708453][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 522.717010][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 522.759021][ T42] usb 2-1: USB disconnect, device number 39 [ 522.799403][ T9173] loop2: detected capacity change from 0 to 256 [ 522.873880][ T9173] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 522.954124][ T9173] process 'syz.2.807' launched './file0' with NULL argv: empty string added [ 522.964829][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 523.041865][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.065402][ T9173] exFAT-fs (loop2): Filesystem has been set read-only [ 523.111458][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 0, err : -5) [ 523.180302][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.194907][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 0, err : -5) [ 523.234284][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.275963][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 1, err : -5) [ 523.301077][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.309429][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 2, err : -5) [ 523.333084][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.339474][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 3, err : -5) [ 523.357463][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.364968][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 4, err : -5) [ 523.389101][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.432496][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 5, err : -5) [ 523.463343][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.473484][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 6, err : -5) [ 523.510808][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.547374][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 7, err : -5) [ 523.577914][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.655464][ T9173] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c4707e0 iblock : 0, err : -5) [ 523.691972][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.707399][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.730659][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.759889][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.766057][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.806045][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 523.826250][ T9173] exFAT-fs (loop2): error, broken FAT chain. [ 524.872494][ T9187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.955375][ T9193] loop4: detected capacity change from 0 to 8192 [ 525.263052][ T9201] kAFS: No cell specified [ 525.519738][ T42] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 525.849826][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 525.985012][ T42] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 526.039823][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.047887][ T42] usb 2-1: Product: syz [ 526.125306][ T42] usb 2-1: Manufacturer: syz [ 526.155999][ T42] usb 2-1: SerialNumber: syz [ 526.182994][ T42] usb 2-1: config 0 descriptor?? [ 526.209454][ T42] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 526.291658][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 526.313706][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 526.348087][ T42] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 526.357552][ T42] usb 2-1: media controller created [ 526.527586][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.600089][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 526.712540][ T42] DVB: Unable to find symbol mt352_attach() [ 526.718760][ T42] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 526.751696][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.770283][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.804082][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.834589][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.881593][ T42] rc_core: IR keymap rc-dvico-portable not found [ 526.892400][ T42] Registered IR keymap rc-empty [ 526.914705][ T42] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 526.948476][ T42] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13 [ 526.970611][ T5858] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 526.999036][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 527.006426][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 527.031103][ T42] usb 2-1: USB disconnect, device number 40 [ 527.145530][ T42] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 527.184346][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.203537][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.217528][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.231547][ T5858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.255781][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.316035][ T5858] usb 6-1: config 0 descriptor?? [ 527.777741][ T5858] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 527.858078][ T5858] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 529.425115][ T9229] mmap: syz.1.820 (9229) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 529.585692][ T9236] loop2: detected capacity change from 0 to 256 [ 529.622037][ T9236] FAT-fs (loop2): Directory bread(block 64) failed [ 529.628834][ T9236] FAT-fs (loop2): Directory bread(block 65) failed [ 529.639053][ T9236] FAT-fs (loop2): Directory bread(block 66) failed [ 529.656096][ T9236] FAT-fs (loop2): Directory bread(block 67) failed [ 529.666293][ T9236] FAT-fs (loop2): Directory bread(block 68) failed [ 529.695558][ T9236] FAT-fs (loop2): Directory bread(block 69) failed [ 529.723857][ T9236] FAT-fs (loop2): Directory bread(block 70) failed [ 529.744115][ T9236] FAT-fs (loop2): Directory bread(block 71) failed [ 529.760567][ T9236] FAT-fs (loop2): Directory bread(block 72) failed [ 529.774782][ T9236] FAT-fs (loop2): Directory bread(block 73) failed [ 529.825739][ T9236] syz.2.822: attempt to access beyond end of device [ 529.825739][ T9236] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 529.839793][ T788] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 529.876328][ T9236] syz.2.822: attempt to access beyond end of device [ 529.876328][ T9236] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 529.897176][ T27] audit: type=1800 audit(1779310491.374:5): pid=9236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.822" name="file0" dev="loop2" ino=1048615 res=0 errno=0 [ 530.040164][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 530.058297][ T788] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 530.077349][ T788] usb 2-1: can't read configurations, error -71 [ 530.108138][ T9240] loop2: detected capacity change from 0 to 256 [ 530.118438][ T9240] exfat: Deprecated parameter 'utf8' [ 530.124421][ T9240] exfat: Deprecated parameter 'namecase' [ 530.131573][ T9240] exfat: Deprecated parameter 'namecase' [ 530.143416][ C0] plantronics 0003:047F:FFFF.0008: usb_submit_urb(ctrl) failed: -1 [ 530.183774][ T9240] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 530.514207][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.825'. [ 530.912515][ T9249] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 530.933696][ T9249] macvtap1: entered allmulticast mode [ 530.949557][ T9249] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 530.965257][ T9251] loop1: detected capacity change from 0 to 512 [ 531.005973][ T5834] usb 6-1: USB disconnect, device number 3 [ 531.030560][ T9251] EXT4-fs: inline encryption not supported [ 531.111429][ T9251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.150431][ T9249] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 531.158123][ T9251] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.234791][ T9249] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 531.415877][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.658028][ T9263] loop4: detected capacity change from 0 to 256 [ 531.677190][ T9263] FAT-fs (loop4): Unrecognized mount option "00000000000000000003" or missing value [ 533.960877][ T9272] loop4: detected capacity change from 0 to 1024 [ 533.993639][ T9272] EXT4-fs: Ignoring removed bh option [ 534.094170][ T9272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.258864][ T9272] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.831: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 534.356000][ T9283] loop1: detected capacity change from 0 to 256 [ 534.401936][ T9283] exfat: Deprecated parameter 'namecase' [ 534.419837][ T9272] EXT4-fs (loop4): Remounting filesystem read-only [ 534.472158][ T9283] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 534.610680][ T7156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.893845][ T9293] loop2: detected capacity change from 0 to 256 [ 535.042044][ T9298] afs: Unknown parameter 'dy' [ 535.980647][ T9293] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 538.694418][ T9326] loop5: detected capacity change from 0 to 8192 [ 542.005967][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 542.220164][ T9337] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 542.230304][ T9337] macvtap1: entered allmulticast mode [ 542.235838][ T9337] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 542.316084][ T9343] afs: Unknown parameter 'dy' [ 545.605822][ T9337] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 545.647391][ T9337] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 546.272669][ T9363] loop4: detected capacity change from 0 to 1024 [ 546.285767][ T9363] EXT4-fs: Ignoring removed mblk_io_submit option [ 546.305146][ T9363] EXT4-fs: Ignoring removed bh option [ 546.316452][ T9363] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 546.365308][ T9363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.549953][ T5834] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 546.634118][ T7156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.739948][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 546.774820][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.800910][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.843918][ T5834] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 546.869420][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.889286][ T5834] usb 3-1: config 0 descriptor?? [ 547.346556][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.382472][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.389794][ T5858] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 547.408412][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.424299][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.449014][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.482891][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.498417][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0xd [ 547.523834][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.546468][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.559397][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.576822][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.594858][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.615239][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.629739][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 547.630511][ T5834] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 547.643528][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.654572][ T5834] itetech 0003:06CB:73F4.0009: unbalanced collection at end of report description [ 547.656407][ T5834] itetech: probe of 0003:06CB:73F4.0009 failed with error -22 [ 547.701272][ T5834] usb 3-1: USB disconnect, device number 53 [ 547.755979][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 547.817038][ T5858] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 547.830038][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.877963][ T5858] usb 5-1: config 0 descriptor?? [ 548.110810][ T5858] usbhid 5-1:0.0: can't add hid device: -71 [ 548.116907][ T5858] usbhid: probe of 5-1:0.0 failed with error -71 [ 548.166623][ T5858] usb 5-1: USB disconnect, device number 15 [ 549.010686][ T9402] Cannot find add_set index 0 as target [ 550.979931][ T9407] batadv_slave_0: entered promiscuous mode [ 551.286324][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 551.509835][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 551.534902][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.547616][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.564600][ T23] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 551.575857][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.623100][ T23] usb 5-1: config 0 descriptor?? [ 551.771404][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 551.808084][ T9427] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 551.840740][ T9427] macvtap1: entered allmulticast mode [ 551.849484][ T9427] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 551.943159][ T9427] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 551.952991][ T9427] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 552.141360][ T9430] loop5: detected capacity change from 0 to 8192 [ 552.174501][ T9430] syz.5.862: attempt to access beyond end of device [ 552.174501][ T9430] loop11: rw=0, sector=0, nr_sectors = 8 limit=0 [ 552.216269][ T9430] F2FS-fs (loop11): Unable to read 1th superblock [ 552.232747][ T9430] syz.5.862: attempt to access beyond end of device [ 552.232747][ T9430] loop11: rw=0, sector=8, nr_sectors = 8 limit=0 [ 552.259044][ T9415] batadv_slave_0: left promiscuous mode [ 552.265128][ T9430] F2FS-fs (loop11): Unable to read 2th superblock [ 552.543611][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.580508][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.624711][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.679840][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.797116][ T9444] loop2: detected capacity change from 0 to 512 [ 552.833781][ T9444] EXT4-fs (loop2): 1 truncate cleaned up [ 552.897583][ T9444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.883635][ T27] audit: type=1800 audit(1779310515.344:6): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.864" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 553.920815][ T9444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.864: bg 0: block 465: padding at end of block bitmap is not set [ 555.465212][ T788] usb 5-1: USB disconnect, device number 16 [ 555.581355][ T9444] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 555.649740][ T9444] EXT4-fs (loop2): This should not happen!! Data will be lost [ 555.649740][ T9444] [ 555.690313][ T9444] EXT4-fs (loop2): Total free blocks count 0 [ 555.696396][ T9444] EXT4-fs (loop2): Free/Dirty block details [ 555.723773][ T9444] EXT4-fs (loop2): free_blocks=0 [ 555.728863][ T9444] EXT4-fs (loop2): dirty_blocks=4 [ 555.749683][ T9444] EXT4-fs (loop2): Block reservation details [ 555.776542][ T9444] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 556.000573][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.322033][ T9474] syz.4.871[9474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.322274][ T9474] syz.4.871[9474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.963932][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 559.025361][ T9485] batadv_slave_0: entered promiscuous mode [ 559.375027][ T9488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 559.413490][ T9488] macvtap1: entered allmulticast mode [ 559.435469][ T9488] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 559.478624][ T9488] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 559.516569][ T9488] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 562.567161][ T9485] batadv_slave_0: left promiscuous mode [ 563.026407][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.033441][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.406517][ T9538] loop1: detected capacity change from 0 to 256 [ 563.426978][ T9538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 565.433753][ T9553] loop5: detected capacity change from 0 to 16 [ 565.494114][ T9553] erofs: (device loop5): mounted with root inode @ nid 36. [ 565.555869][ T9553] overlayfs: failed to get redirect (-117) [ 567.014519][ T5823] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 567.251310][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 567.288710][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.328641][ T5823] usb 5-1: config 0 descriptor?? [ 567.348298][ T5823] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 569.007129][ T5823] usb 5-1: USB disconnect, device number 17 [ 569.465663][ T9590] loop1: detected capacity change from 0 to 256 [ 569.797098][ T9590] FAT-fs (loop1): Directory bread(block 64) failed [ 569.874130][ T9590] FAT-fs (loop1): Directory bread(block 65) failed [ 570.015798][ T9590] FAT-fs (loop1): Directory bread(block 66) failed [ 570.034715][ T9590] FAT-fs (loop1): Directory bread(block 67) failed [ 570.063194][ T9590] FAT-fs (loop1): Directory bread(block 68) failed [ 570.070926][ T9590] FAT-fs (loop1): Directory bread(block 69) failed [ 570.078166][ T9590] FAT-fs (loop1): Directory bread(block 70) failed [ 570.086443][ T9590] FAT-fs (loop1): Directory bread(block 71) failed [ 570.094761][ T9590] FAT-fs (loop1): Directory bread(block 72) failed [ 570.107575][ T9590] FAT-fs (loop1): Directory bread(block 73) failed [ 570.870706][ T9590] syz.1.888: attempt to access beyond end of device [ 570.870706][ T9590] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 570.934185][ T9590] syz.1.888: attempt to access beyond end of device [ 570.934185][ T9590] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 570.985713][ T27] audit: type=1800 audit(1779310532.464:7): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.888" name="file1" dev="loop1" ino=1048620 res=0 errno=0 [ 571.762168][ T9593] loop5: detected capacity change from 0 to 40427 [ 571.827027][ T9593] F2FS-fs (loop5): invalid crc value [ 573.829527][ T9593] F2FS-fs (loop5): Start checkpoint disabled! [ 573.879893][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 574.079969][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 574.102138][ T8] usb 5-1: config 2 has an invalid interface number: 72 but max is 0 [ 574.119421][ T8] usb 5-1: config 2 has no interface number 0 [ 574.139866][ T8] usb 5-1: config 2 interface 72 has no altsetting 0 [ 574.156954][ T8] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f [ 574.179463][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.199476][ T8] usb 5-1: Product: syz [ 574.229162][ T8] usb 5-1: Manufacturer: syz [ 574.250819][ T8] usb 5-1: SerialNumber: syz [ 575.294954][ T9633] loop2: detected capacity change from 0 to 128 [ 575.602428][ T9633] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 575.686061][ T9633] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 576.013338][ T9644] BUG: unable to handle page fault for address: ffffffffffffffec [ 576.021155][ T9644] #PF: supervisor read access in kernel mode [ 576.027165][ T9644] #PF: error_code(0x0000) - not-present page [ 576.033182][ T9644] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 576.039229][ T9644] Oops: 0000 [#1] PREEMPT SMP KASAN [ 576.044466][ T9644] CPU: 1 PID: 9644 Comm: syz.2.901 Not tainted syzkaller #0 [ 576.051775][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.061867][ T9644] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 576.067639][ T9644] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 576.087294][ T9644] RSP: 0018:ffffc9000c577638 EFLAGS: 00010246 [ 576.093399][ T9644] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 576.101401][ T9644] RDX: ffffc9000e1ff000 RSI: 0000000000012fcb RDI: ffffffffffffffec [ 576.109419][ T9644] RBP: ffffc9000c577758 R08: ffff88805c633e1f R09: 1ffff1100b8c67c3 [ 576.117445][ T9644] R10: dffffc0000000000 R11: ffffed100b8c67c4 R12: ffff88805c633eb0 [ 576.125458][ T9644] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 576.133475][ T9644] FS: 00007f350c9ef6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 576.142451][ T9644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.149077][ T9644] CR2: ffffffffffffffec CR3: 0000000025d0a000 CR4: 00000000003526e0 [ 576.157115][ T9644] Call Trace: [ 576.160434][ T9644] [ 576.163413][ T9644] finish_range+0x234/0x340 [ 576.167969][ T9644] ? update_tind_extent_range+0x3f0/0x3f0 [ 576.173739][ T9644] update_ind_extent_range+0x2e3/0x520 [ 576.179250][ T9644] ext4_ext_migrate+0xb07/0x1080 [ 576.184260][ T9644] ? mb_regenerate_buddy+0x510/0x510 [ 576.189579][ T9644] ? down_read_killable+0x340/0x340 [ 576.194907][ T9644] ? sb_start_write+0x110/0x1c0 [ 576.199790][ T9644] ? mnt_want_write_file+0x16a/0x200 [ 576.205101][ T9644] ext4_ioctl+0x1ee3/0x3b80 [ 576.209642][ T9644] ? ext4_fileattr_set+0x16d0/0x16d0 [ 576.214953][ T9644] ? mark_lock+0x94/0x320 [ 576.219316][ T9644] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 576.225315][ T9644] ? do_vfs_ioctl+0x1573/0x1cc0 [ 576.230189][ T9644] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 576.235845][ T9644] ? tomoyo_path_number_perm+0x217/0x620 [ 576.241513][ T9644] ? __lock_acquire+0x7d40/0x7d40 [ 576.246569][ T9644] ? slab_free_freelist_hook+0x130/0x1a0 [ 576.252218][ T9644] ? tomoyo_path_number_perm+0x500/0x620 [ 576.257879][ T9644] ? __kmem_cache_free+0xba/0x1e0 [ 576.262937][ T9644] ? tomoyo_path_number_perm+0x5b4/0x620 [ 576.268603][ T9644] ? tomoyo_path_number_perm+0x217/0x620 [ 576.274291][ T9644] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 576.279797][ T9644] ? __fget_files+0x28/0x4b0 [ 576.284407][ T9644] ? __fget_files+0x28/0x4b0 [ 576.289035][ T9644] ? bpf_lsm_file_ioctl+0x9/0x10 [ 576.293991][ T9644] ? security_file_ioctl+0x80/0xa0 [ 576.299143][ T9644] ? ext4_fileattr_set+0x16d0/0x16d0 [ 576.304451][ T9644] __se_sys_ioctl+0xfd/0x170 [ 576.309061][ T9644] do_syscall_64+0x55/0xb0 [ 576.313529][ T9644] ? clear_bhb_loop+0x40/0x90 [ 576.318284][ T9644] ? clear_bhb_loop+0x40/0x90 [ 576.322979][ T9644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.328914][ T9644] RIP: 0033:0x7f350bb9ce59 [ 576.333346][ T9644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.352975][ T9644] RSP: 002b:00007f350c9ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.361415][ T9644] RAX: ffffffffffffffda RBX: 00007f350be16090 RCX: 00007f350bb9ce59 [ 576.369412][ T9644] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000007 [ 576.377410][ T9644] RBP: 00007f350bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 576.385501][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.393508][ T9644] R13: 00007f350be16128 R14: 00007f350be16090 R15: 00007ffe1bcc2d88 [ 576.401528][ T9644] [ 576.404570][ T9644] Modules linked in: [ 576.408495][ T9644] CR2: ffffffffffffffec [ 576.412667][ T9644] ---[ end trace 0000000000000000 ]--- [ 576.418134][ T9644] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 576.423889][ T9644] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 576.443519][ T9644] RSP: 0018:ffffc9000c577638 EFLAGS: 00010246 [ 576.449618][ T9644] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 576.457612][ T9644] RDX: ffffc9000e1ff000 RSI: 0000000000012fcb RDI: ffffffffffffffec [ 576.465596][ T9644] RBP: ffffc9000c577758 R08: ffff88805c633e1f R09: 1ffff1100b8c67c3 [ 576.473585][ T9644] R10: dffffc0000000000 R11: ffffed100b8c67c4 R12: ffff88805c633eb0 [ 576.481592][ T9644] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 576.489589][ T9644] FS: 00007f350c9ef6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 576.498545][ T9644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.505141][ T9644] CR2: ffffffffffffffec CR3: 0000000025d0a000 CR4: 00000000003526e0 [ 576.513145][ T9644] Kernel panic - not syncing: Fatal exception [ 576.519845][ T9644] Kernel Offset: disabled [ 576.524193][ T9644] Rebooting in 86400 seconds..