last executing test programs: 2m11.447914158s ago: executing program 3 (id=1159): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r1, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 2m11.278945151s ago: executing program 3 (id=1162): syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) creat(0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xfff2, 0xc}, {0x18, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x4a, 0x0, &(0x7f0000cab000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) select(0x40, &(0x7f0000000000)={0x1a, 0x6, 0x800004, 0x8, 0x0, 0xfffffffffffffff5, 0x200, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m7.844712717s ago: executing program 3 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0xa00000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") truncate(&(0x7f0000000180)='./file2\x00', 0x9) pwritev2(r1, &(0x7f0000002880)=[{&(0x7f00000027c0)}], 0x1, 0x6, 0x1, 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'syz_tun\x00', 0x2c0f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) getegid() ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x3d, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m5.62802524s ago: executing program 3 (id=1173): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES8=0x0, @ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x80, 0x10, 0x20, 0x2, 0x0, 0x2, 0xfd, 0x3, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080020b3064242481e5fe37ea7aba27fb62ac800b70400000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1a748d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000100)={0xa1, "e26c08b7cd72d60994fbdafed3ab9416e3ffd4ae3bd39d966ffba65774c82d2b2cb24b3876296701515dce3b18b2072241dc76674ba0f836144325d7765bbb36c7fb09249761b8f459c703b2eb2679a76fc1e1e337bcbc8bce54dc933f939461c7424ab48ea171c3233d0f07cd29a923a60178d6ae58f4566cedb619b5ee8e8810e8dd37cbda74fc6ae0563ead17531450cc3a5d052912f23986daf97199ff0e0b"}) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000040)) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000000c0)={0x7, "3aa057e1493020e2d9e815fe2b0f0401f04f4d0a6c2a08e207defde476fb0d920f23cc1194373a138beab7e0d919f0e9b9e3e42d80aaa151c5b1975fb614e8b4"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m2.636358888s ago: executing program 3 (id=1178): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0044159743df776a5de9392543da7d297b3dea"], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004a40)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x13}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="041606aaaafdf35fdeecb7aaaa125428abfb6d0ddeb47dfad9ebe38d65d67ac4d9291611b63efa4d7362311b308bc021ce5063161486ecc6bf477d6266ec332f498bd021fc1c54025ab1642953fb0368ec221bb3bd6401f7e4cfc796f71f4f14d0641a9cbcd535b611dfeb06ab9116f22a0019d17efa38da8096e7fdc83e9f0d0e30c4aeed5a4e7e56cb4ae80c86e6a1b2d5609720937a371d63b72bcc9d96fb1a5e0727b3f003984a13"], 0x9) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0xfc9687f6639a4570, 0x6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r4, r5, r6, 0xfffffffd, 0x7, 0x80000003, 0x0, 0x0, 0x1000005, 0xe, 0xd, 0x322}) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000005c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}], [], 0x2c}) 1m59.793647923s ago: executing program 3 (id=1186): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001340)) futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2070003ca00000f7f8907000020000600182e198f423916c2f9edc6d100000101ff0000000309ff5b0000", 0x46}], 0x1) 1m44.3530289s ago: executing program 32 (id=1186): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001340)) futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2070003ca00000f7f8907000020000600182e198f423916c2f9edc6d100000101ff0000000309ff5b0000", 0x46}], 0x1) 14.405638232s ago: executing program 5 (id=1445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000c5000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 14.249202925s ago: executing program 5 (id=1448): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 14.160714977s ago: executing program 5 (id=1449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 8.420115247s ago: executing program 5 (id=1473): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESOCT], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xf, 0xb1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x0, r2}, 0x10) 7.986998826s ago: executing program 1 (id=1476): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f0000000c80), 0x12) 7.913362377s ago: executing program 1 (id=1478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5.535592573s ago: executing program 1 (id=1486): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000300)=0x1) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031800dd5c980128"], 0xffdd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 5.398389106s ago: executing program 2 (id=1488): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x200000000000009a, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x20a40, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff"], 0x280) 5.16691393s ago: executing program 0 (id=1490): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r0, 0x31, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="1e00000000000000", @ANYRES32=r4, @ANYBLOB="7030896d76f22b44aa9d17b46b884fbef5529da5d31c78a10d32d0e56035c5e3d0b8e19474fd569fecfb5a88ff96074e3411908c48bf5f62a505436ff346168ff1325c6a5a2e35eb99a892bab973b55278783ba688eabf5c2126e59ed32409", @ANYRES32, @ANYBLOB="f5277e7b4da57932435dae82f73d3ffffb10717c660c20ef4d51779db4d2c6", @ANYRES64=r5], 0x20) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 5.000654223s ago: executing program 0 (id=1491): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0200", @ANYBLOB, @ANYRES64=0x0], 0x10) 4.837078316s ago: executing program 0 (id=1493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2aa40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 4.629318821s ago: executing program 4 (id=1494): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 4.434427964s ago: executing program 4 (id=1495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.696177018s ago: executing program 2 (id=1496): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.631352599s ago: executing program 2 (id=1497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x63) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 798.392214ms ago: executing program 1 (id=1498): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) 798.167704ms ago: executing program 0 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 776.373155ms ago: executing program 4 (id=1500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, 0x0}, 0x20) 712.052816ms ago: executing program 2 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc0189436, 0x2000141a) 558.352439ms ago: executing program 0 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 558.221489ms ago: executing program 4 (id=1503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 493.5959ms ago: executing program 2 (id=1504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x200000, &(0x7f0000000000)) 490.80821ms ago: executing program 5 (id=1505): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000b000000420000003c"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 471.481271ms ago: executing program 1 (id=1506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000004000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) 286.380704ms ago: executing program 4 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 286.062984ms ago: executing program 0 (id=1508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000009c0)="b9ff0300600d698cff9eab0668bfa7", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 172.576886ms ago: executing program 1 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 110.609988ms ago: executing program 4 (id=1510): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000003c0), &(0x7f0000000500)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) 54.509269ms ago: executing program 2 (id=1511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f065580f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=1512): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486"], 0x66) kernel console output (not intermixed with test programs): 00 audit(1757737083.258:61): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.851" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 484.037920][ T26] hid-steam 0003:28DE:1142.0025: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 484.136209][ T26] hid-steam 0003:28DE:1142.0026: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 484.258038][ T26] hid-steam 0003:28DE:1142.0025: Steam wireless receiver connected [ 484.289862][ T26] hid-steam 0003:28DE:1142.0025: No HID_FEATURE_REPORT submitted - nothing to read [ 484.318493][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 484.333424][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 484.375853][ T26] usb 4-1: USB disconnect, device number 11 [ 484.439289][ T26] hid-steam 0003:28DE:1142.0025: Steam wireless receiver disconnected [ 484.490778][ T8046] loop4: detected capacity change from 0 to 2048 [ 484.539968][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 484.545055][ T8046] NILFS (loop4): invalid segment: Magic number mismatch [ 484.553447][ T7] pwc: recv_control_msg error -71 req 02 val 2100 [ 484.584367][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 484.601277][ T8046] NILFS (loop4): trying rollback from an earlier position [ 484.608977][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 484.623342][ T8044] fido_id[8044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 484.644109][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 484.656413][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 484.665194][ T8046] NILFS (loop4): recovery complete [ 484.673848][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 484.683483][ T8049] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.714006][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 484.732443][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 484.743967][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 484.769062][ T7] pwc: Registered as video103. [ 484.777588][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 484.980086][ T7] usb 1-1: USB disconnect, device number 17 [ 485.166053][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'. [ 485.317929][ T8057] loop3: detected capacity change from 0 to 2048 [ 485.728607][ T8057] NILFS (loop3): invalid segment: Magic number mismatch [ 485.772518][ T8057] NILFS (loop3): trying rollback from an earlier position [ 485.830075][ T8061] loop2: detected capacity change from 0 to 64 [ 485.871608][ T8061] Trying to free block not in datazone [ 485.895843][ T8057] NILFS (loop3): recovery complete [ 485.944742][ T8061] Trying to free block not in datazone [ 485.997294][ T8065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.062617][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 488.397045][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 488.740435][ T8084] loop1: detected capacity change from 0 to 1024 [ 489.670412][ T8090] loop0: detected capacity change from 0 to 32768 [ 489.673157][ T8084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 489.714831][ T8090] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 489.758557][ T27] audit: type=1800 audit(1757737089.018:62): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.861" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 489.837435][ T8094] loop3: detected capacity change from 0 to 256 [ 489.978310][ T8080] loop4: detected capacity change from 0 to 32768 [ 490.811402][ T8080] XFS (loop4): Mounting V5 Filesystem [ 490.868812][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 490.929467][ T8080] XFS (loop4): Ending clean mount [ 490.935560][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 490.968530][ T8080] XFS (loop4): Quotacheck needed: Please wait. [ 491.023872][ T8107] loop0: detected capacity change from 0 to 64 [ 491.095898][ T8080] XFS (loop4): Quotacheck: Done. [ 491.134663][ T8107] Trying to free block not in datazone [ 491.144292][ T8107] Trying to free block not in datazone [ 493.726287][ T8127] loop1: detected capacity change from 0 to 40427 [ 493.757557][ T8127] F2FS-fs (loop1): invalid crc value [ 493.780284][ T4270] XFS (loop4): Unmounting Filesystem [ 493.789938][ T8127] F2FS-fs (loop1): Found nat_bits in checkpoint [ 493.827983][ T8127] F2FS-fs (loop1): Start checkpoint disabled! [ 493.880183][ T8127] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 494.035346][ T27] audit: type=1800 audit(1757737093.298:63): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.868" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 494.921411][ T4387] kworker/u4:11: attempt to access beyond end of device [ 494.921411][ T4387] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 495.118553][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 495.178086][ T8138] loop4: detected capacity change from 0 to 1024 [ 498.134209][ T26] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 498.484071][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 498.493178][ T26] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 498.520505][ T26] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 498.568462][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 498.585183][ T26] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 498.589956][ T8148] loop2: detected capacity change from 0 to 1024 [ 498.608149][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.638685][ T26] usb 5-1: config 0 descriptor?? [ 498.656704][ T4397] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 498.673736][ T8150] loop1: detected capacity change from 0 to 2048 [ 498.684879][ T8148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 498.697632][ T8150] NILFS (loop1): invalid segment: Magic number mismatch [ 498.705538][ T8150] NILFS (loop1): trying rollback from an earlier position [ 498.853377][ T8150] NILFS (loop1): recovery complete [ 498.866238][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 498.899034][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 498.967552][ T4397] usb 4-1: Using ep0 maxpacket: 16 [ 498.970035][ T4397] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.970058][ T4397] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.972136][ T4397] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.972173][ T4397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.972220][ T4397] usb 4-1: Product: syz [ 498.972234][ T4397] usb 4-1: Manufacturer: syz [ 498.972248][ T4397] usb 4-1: SerialNumber: syz [ 499.284232][ T8155] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.718532][ T26] usb 5-1: USB disconnect, device number 18 [ 499.836311][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 500.072810][ T4397] usb 4-1: 0:2 : does not exist [ 500.089722][ T4397] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 500.209415][ T8146] loop0: detected capacity change from 0 to 32768 [ 500.216272][ T4397] usb 4-1: USB disconnect, device number 12 [ 500.405678][ T8158] loop2: detected capacity change from 0 to 40427 [ 500.437547][ T8158] F2FS-fs (loop2): invalid crc value [ 500.540415][ T8158] F2FS-fs (loop2): Found nat_bits in checkpoint [ 500.586408][ T8158] F2FS-fs (loop2): Start checkpoint disabled! [ 500.650188][ T8158] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 500.856832][ T8146] XFS (loop0): Mounting V5 Filesystem [ 500.944249][ T8146] XFS (loop0): Ending clean mount [ 500.962651][ T8146] XFS (loop0): Quotacheck needed: Please wait. [ 501.022633][ T27] audit: type=1800 audit(1757737100.278:64): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.876" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 501.058246][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.082208][ T8175] syz.2.876: attempt to access beyond end of device [ 501.082208][ T8175] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 501.288741][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.297031][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.478257][ T4545] kworker/u4:16: attempt to access beyond end of device [ 501.478257][ T4545] loop2: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 501.493062][ T8146] XFS (loop0): Quotacheck: Done. [ 501.498954][ T4545] kworker/u4:16: attempt to access beyond end of device [ 501.498954][ T4545] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 501.516686][ T4545] kworker/u4:16: attempt to access beyond end of device [ 501.516686][ T4545] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 501.518499][ T8146] XFS (loop0): Unmounting Filesystem [ 501.830301][ T8182] loop4: detected capacity change from 0 to 64 [ 501.897509][ T8182] Trying to free block not in datazone [ 501.903116][ T8182] Trying to free block not in datazone [ 502.161989][ T4256] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 503.055689][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.104323][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.294012][ T4256] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 503.303098][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.364876][ T4256] usb 2-1: config 0 descriptor?? [ 504.416004][ T8200] loop0: detected capacity change from 0 to 64 [ 504.649040][ T8200] Trying to free block not in datazone [ 504.822917][ T4256] hid-steam 0003:28DE:1142.0027: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 504.887952][ T8200] Trying to free block not in datazone [ 505.156153][ T4256] hid-steam 0003:28DE:1142.0028: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 505.244085][ T4256] hid-steam 0003:28DE:1142.0027: Steam wireless receiver connected [ 505.263952][ T4256] hid-steam 0003:28DE:1142.0027: No HID_FEATURE_REPORT submitted - nothing to read [ 505.275567][ T4256] usb 2-1: USB disconnect, device number 14 [ 505.290181][ T4256] hid-steam 0003:28DE:1142.0027: Steam wireless receiver disconnected [ 505.329044][ T8209] loop4: detected capacity change from 0 to 256 [ 505.403204][ T8209] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 505.484334][ T8209] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 505.536428][ T8210] fido_id[8210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 506.381672][ T8198] loop2: detected capacity change from 0 to 32768 [ 506.621169][ T8217] loop1: detected capacity change from 0 to 40427 [ 506.652862][ T8217] F2FS-fs (loop1): invalid crc value [ 506.659477][ T8198] XFS (loop2): Mounting V5 Filesystem [ 506.673576][ T8217] F2FS-fs (loop1): Found nat_bits in checkpoint [ 506.719496][ T8217] F2FS-fs (loop1): Start checkpoint disabled! [ 506.755449][ T8217] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 506.840166][ T8198] XFS (loop2): Ending clean mount [ 506.988081][ T27] audit: type=1800 audit(1757737106.248:65): pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.889" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 507.024269][ T8198] XFS (loop2): Quotacheck needed: Please wait. [ 507.039089][ T8232] syz.1.889: attempt to access beyond end of device [ 507.039089][ T8232] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 507.404018][ T8198] XFS (loop2): Quotacheck: Done. [ 507.528033][ T4275] XFS (loop2): Unmounting Filesystem [ 507.762490][ T4359] kworker/u4:6: attempt to access beyond end of device [ 507.762490][ T4359] loop1: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 507.824889][ T4359] kworker/u4:6: attempt to access beyond end of device [ 507.824889][ T4359] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 507.897957][ T4359] kworker/u4:6: attempt to access beyond end of device [ 507.897957][ T4359] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 508.080044][ T8235] loop2: detected capacity change from 0 to 2048 [ 508.166431][ T8235] NILFS (loop2): invalid segment: Magic number mismatch [ 508.173520][ T8235] NILFS (loop2): trying rollback from an earlier position [ 508.219796][ T8235] NILFS (loop2): recovery complete [ 508.284221][ T8236] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.684045][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 508.884127][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 508.927310][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.106985][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.240688][ T7] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 509.318466][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.388071][ T8243] loop1: detected capacity change from 0 to 2048 [ 509.393075][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 509.437542][ T8243] NILFS (loop1): invalid segment: Magic number mismatch [ 509.444384][ T7] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 509.469192][ T7] usb 4-1: Manufacturer: syz [ 509.489408][ T8243] NILFS (loop1): trying rollback from an earlier position [ 509.509838][ T7] usb 4-1: config 0 descriptor?? [ 509.535216][ T8243] NILFS (loop1): recovery complete [ 509.580301][ T8246] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.862235][ T8270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 513.017879][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 513.096680][ T7720] usb 4-1: USB disconnect, device number 13 [ 513.245418][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.537824][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.137131][ T7] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 514.146536][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.157100][ T7] usb 3-1: config 0 descriptor?? [ 514.171302][ T7] usb 3-1: can't set config #0, error -71 [ 514.178164][ T7] usb 3-1: USB disconnect, device number 14 [ 514.206404][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 514.224514][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 515.384829][ T8288] loop4: detected capacity change from 0 to 64 [ 515.422192][ T8288] Trying to free block not in datazone [ 515.459470][ T8290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'. [ 515.616259][ T8288] Trying to free block not in datazone [ 517.245228][ T8299] loop3: detected capacity change from 0 to 40427 [ 517.269739][ T8299] F2FS-fs (loop3): invalid crc value [ 517.288912][ T8299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 517.331369][ T8299] F2FS-fs (loop3): Start checkpoint disabled! [ 517.344690][ T8299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 517.505914][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 517.516242][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 517.937450][ T27] audit: type=1800 audit(1757737117.198:66): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.907" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 517.977439][ T8304] syz.3.907: attempt to access beyond end of device [ 517.977439][ T8304] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 518.354649][ T8306] loop0: detected capacity change from 0 to 1024 [ 518.397449][ T4387] kworker/u4:11: attempt to access beyond end of device [ 518.397449][ T4387] loop3: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 518.411927][ T4387] kworker/u4:11: attempt to access beyond end of device [ 518.411927][ T4387] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 518.446211][ T4387] kworker/u4:11: attempt to access beyond end of device [ 518.446211][ T4387] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 518.476844][ T8306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 518.603974][ T4397] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 519.552274][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 519.574137][ T4397] usb 2-1: Using ep0 maxpacket: 16 [ 519.580901][ T4397] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.609237][ T4397] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.636115][ T4397] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.664026][ T4397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.677303][ T4397] usb 2-1: Product: syz [ 519.681501][ T4397] usb 2-1: Manufacturer: syz [ 519.704933][ T4397] usb 2-1: SerialNumber: syz [ 519.927832][ T8319] loop3: detected capacity change from 0 to 64 [ 519.940346][ T4397] usb 2-1: 0:2 : does not exist [ 519.960028][ T4397] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 519.978397][ T8319] Trying to free block not in datazone [ 519.986716][ T8313] loop2: detected capacity change from 0 to 32768 [ 519.996388][ T8319] Trying to free block not in datazone [ 520.022848][ T4397] usb 2-1: USB disconnect, device number 15 [ 520.182113][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 520.248098][ T8313] XFS (loop2): Mounting V5 Filesystem [ 520.287990][ T8313] XFS (loop2): Ending clean mount [ 520.397330][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.954689][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.982030][ T8313] XFS (loop2): Quotacheck needed: Please wait. [ 521.034049][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.913'. [ 521.312321][ T8313] XFS (loop2): Quotacheck: Done. [ 521.546246][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 521.555335][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 521.820031][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.833512][ T26] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 521.864593][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.884847][ T26] usb 1-1: config 0 descriptor?? [ 521.925750][ T4275] XFS (loop2): Unmounting Filesystem [ 522.318289][ T26] hid-steam 0003:28DE:1142.0029: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 522.433569][ T8338] loop4: detected capacity change from 0 to 64 [ 522.440856][ T26] hid-steam 0003:28DE:1142.002A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 522.477709][ T8338] hfs: unable to open catalog tree [ 522.483004][ T8338] hfs: can't find a HFS filesystem on dev loop4 [ 523.176174][ T8340] loop1: detected capacity change from 0 to 32768 [ 523.338539][ T8340] XFS (loop1): Mounting V5 Filesystem [ 523.365310][ T8350] loop4: detected capacity change from 0 to 1024 [ 523.429732][ T4726] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 523.578489][ T26] hid-steam 0003:28DE:1142.0029: Steam wireless receiver connected [ 523.586509][ T26] hid-steam 0003:28DE:1142.0029: No HID_FEATURE_REPORT submitted - nothing to read [ 523.598993][ T26] usb 1-1: USB disconnect, device number 18 [ 523.637180][ T26] hid-steam 0003:28DE:1142.0029: Steam wireless receiver disconnected [ 523.650148][ T8340] XFS (loop1): Ending clean mount [ 523.726200][ T8340] XFS (loop1): Quotacheck needed: Please wait. [ 523.751909][ T8356] fido_id[8356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 524.043781][ T8358] loop3: detected capacity change from 0 to 32768 [ 524.060618][ T8355] loop2: detected capacity change from 0 to 2048 [ 524.150621][ T8355] NILFS (loop2): invalid segment: Magic number mismatch [ 524.154399][ T8340] XFS (loop1): Quotacheck: Done. [ 524.195352][ T8355] NILFS (loop2): trying rollback from an earlier position [ 524.246480][ T8358] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 524.272168][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 524.336034][ T27] audit: type=1800 audit(1757737123.598:67): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.914" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 524.658862][ T8355] NILFS (loop2): recovery complete [ 524.666639][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 524.726687][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 524.735672][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'. [ 525.081836][ T8369] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.584299][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 525.609760][ T4266] ocfs2: Unmounting device (7,3) on (node local) [ 525.645412][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.674215][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 525.683131][ T7] usb 5-1: too many endpoints for config 1 interface 0 altsetting 247: 248, using maximum allowed: 30 [ 525.784010][ T7] usb 5-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 525.828034][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 525.846930][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 525.998368][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.204846][ T7] usb 5-1: Product: syz [ 526.209077][ T7] usb 5-1: Manufacturer: syz [ 526.804275][ T7] usb 5-1: SerialNumber: syz [ 526.816231][ T4265] XFS (loop1): Unmounting Filesystem [ 527.048139][ T7] smsusb:smsusb_probe: board id=8, interface number 0 [ 527.064192][ T7] smsusb:smsusb_probe: Device initialized with return code -19 [ 527.264187][ T7] usb 5-1: USB disconnect, device number 19 [ 527.388381][ T8390] loop3: detected capacity change from 0 to 40427 [ 527.412687][ T8390] F2FS-fs (loop3): invalid crc value [ 527.434712][ T8390] F2FS-fs (loop3): Found nat_bits in checkpoint [ 527.473567][ T8390] F2FS-fs (loop3): Start checkpoint disabled! [ 527.484113][ T8390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 527.523167][ T8398] loop0: detected capacity change from 0 to 16 [ 527.567116][ T8398] erofs: (device loop0): mounted with root inode @ nid 36. [ 527.602137][ T8398] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 527.867099][ T8398] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 527.956050][ T8398] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 528.018874][ T8402] loop4: detected capacity change from 0 to 2048 [ 528.039922][ T8402] NILFS (loop4): invalid segment: Magic number mismatch [ 528.134578][ T8402] NILFS (loop4): trying rollback from an earlier position [ 528.184193][ T8402] NILFS (loop4): recovery complete [ 528.213236][ T8403] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 528.324801][ T11] kworker/u4:1: attempt to access beyond end of device [ 528.324801][ T11] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 529.899493][ T4397] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 530.102188][ T4397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.184144][ T4397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.316404][ T4397] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 530.402885][ T4397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.509667][ T8413] loop2: detected capacity change from 0 to 64 [ 530.520033][ T8413] hfs: unable to open catalog tree [ 530.525358][ T8413] hfs: can't find a HFS filesystem on dev loop2 [ 530.540403][ T4397] usb 1-1: config 0 descriptor?? [ 530.579128][ T4259] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 530.746829][ T8416] loop2: detected capacity change from 0 to 1024 [ 531.161548][ T4397] hid-steam 0003:28DE:1142.002B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 531.224047][ T26] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 531.291448][ T4397] hid-steam 0003:28DE:1142.002C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 531.363358][ T8419] loop3: detected capacity change from 0 to 256 [ 531.370776][ T8422] loop2: detected capacity change from 0 to 2048 [ 531.377631][ T4397] hid-steam 0003:28DE:1142.002B: Steam wireless receiver connected [ 531.386669][ T4397] hid-steam 0003:28DE:1142.002B: No HID_FEATURE_REPORT submitted - nothing to read [ 531.398234][ T4397] usb 1-1: USB disconnect, device number 19 [ 531.406977][ T4397] hid-steam 0003:28DE:1142.002B: Steam wireless receiver disconnected [ 531.413390][ T8419] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 531.437004][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.451874][ T8423] loop4: detected capacity change from 0 to 2048 [ 531.467391][ T8419] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 531.490157][ T8422] NILFS (loop2): invalid segment: Magic number mismatch [ 531.524824][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.565511][ T8422] NILFS (loop2): trying rollback from an earlier position [ 531.629265][ T26] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.673775][ T8423] NILFS (loop4): invalid segment: Magic number mismatch [ 531.691182][ T26] usb 2-1: config 1 has no interface number 1 [ 531.701289][ T8423] NILFS (loop4): trying rollback from an earlier position [ 531.720302][ T8422] NILFS (loop2): recovery complete [ 531.728543][ T8424] fido_id[8424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 531.736119][ T26] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.759937][ T8425] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.784881][ T26] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.794793][ T8423] NILFS (loop4): recovery complete [ 531.833541][ T8427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 532.069803][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.194051][ T26] usb 2-1: Product: syz [ 532.200658][ T26] usb 2-1: Manufacturer: syz [ 532.244959][ T26] usb 2-1: SerialNumber: syz [ 533.018503][ T26] usb 2-1: USB disconnect, device number 16 [ 535.730629][ T8447] loop2: detected capacity change from 0 to 64 [ 535.742524][ T8447] Trying to free block not in datazone [ 535.748817][ T8447] Trying to free block not in datazone [ 535.805676][ T8446] loop4: detected capacity change from 0 to 2048 [ 535.854542][ T8449] loop0: detected capacity change from 0 to 256 [ 535.886599][ T8446] NILFS (loop4): invalid segment: Magic number mismatch [ 535.893624][ T8446] NILFS (loop4): trying rollback from an earlier position [ 535.921858][ T8451] loop1: detected capacity change from 0 to 2048 [ 536.096681][ T8449] 9pnet_fd: Insufficient options for proto=fd [ 536.713944][ T8446] NILFS (loop4): recovery complete [ 536.740523][ T8451] NILFS (loop1): invalid segment: Magic number mismatch [ 536.789937][ T8451] NILFS (loop1): trying rollback from an earlier position [ 536.811057][ T8454] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.848325][ T8451] NILFS (loop1): recovery complete [ 536.986066][ T8455] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.914909][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 538.409962][ T8467] loop2: detected capacity change from 0 to 1024 [ 538.489353][ T8469] loop3: detected capacity change from 0 to 64 [ 538.497483][ T8469] hfs: unable to open catalog tree [ 538.503193][ T8469] hfs: can't find a HFS filesystem on dev loop3 [ 538.564689][ T4257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 538.728106][ T8471] loop3: detected capacity change from 0 to 1024 [ 539.512789][ T8473] loop4: detected capacity change from 0 to 64 [ 539.639227][ T8473] Trying to free block not in datazone [ 539.678342][ T8473] Trying to free block not in datazone [ 539.814030][ T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 539.862765][ T8481] loop1: detected capacity change from 0 to 2048 [ 540.004387][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 540.050389][ T8481] NILFS (loop1): invalid segment: Magic number mismatch [ 540.248758][ T26] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 540.251969][ T8481] NILFS (loop1): trying rollback from an earlier position [ 540.268731][ T26] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 540.282032][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.288828][ T26] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 540.298111][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.319577][ T26] usb 3-1: config 0 descriptor?? [ 540.369354][ T8481] NILFS (loop1): recovery complete [ 540.431546][ T8483] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.835062][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 540.841069][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 540.866994][ T8485] loop3: detected capacity change from 0 to 2048 [ 540.881397][ T26] usb 3-1: USB disconnect, device number 15 [ 540.931374][ T8485] NILFS (loop3): invalid segment: Magic number mismatch [ 541.012259][ T8485] NILFS (loop3): trying rollback from an earlier position [ 541.401614][ T8485] NILFS (loop3): recovery complete [ 541.433948][ T8487] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.521751][ T8490] loop0: detected capacity change from 0 to 256 [ 541.576642][ T8490] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 541.694249][ T8490] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 541.820175][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.947'. [ 542.569683][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 542.578948][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 545.061578][ T8518] loop1: detected capacity change from 0 to 256 [ 545.062970][ T8520] loop0: detected capacity change from 0 to 256 [ 545.080004][ T8516] loop2: detected capacity change from 0 to 64 [ 545.093038][ T8516] hfs: unable to open catalog tree [ 545.098416][ T8516] hfs: can't find a HFS filesystem on dev loop2 [ 546.289770][ T8526] loop2: detected capacity change from 0 to 1024 [ 546.484583][ T8518] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 546.498948][ T8520] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 546.598734][ T8518] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 546.702587][ T8520] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 548.375816][ T8540] loop4: detected capacity change from 0 to 64 [ 548.426395][ T8540] Trying to free block not in datazone [ 548.431979][ T8540] Trying to free block not in datazone [ 549.029483][ T8548] loop3: detected capacity change from 0 to 256 [ 549.071469][ T8548] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 549.089653][ T8548] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 550.136094][ T4397] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 550.997091][ T8559] loop2: detected capacity change from 0 to 32768 [ 551.037439][ T8559] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 551.037523][ T4397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.120843][ T4397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.136096][ T4397] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 551.366539][ T4397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.580694][ T4397] usb 2-1: config 0 descriptor?? [ 551.664238][ T8566] loop4: detected capacity change from 0 to 1024 [ 551.906594][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 552.044923][ T8566] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 552.077083][ T8578] loop0: detected capacity change from 0 to 1024 [ 552.158043][ T4397] hid-steam 0003:28DE:1142.002D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 552.225592][ T4397] hid-steam 0003:28DE:1142.002E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 552.282650][ T8578] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 554.415549][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 554.513150][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 554.676298][ T4397] hid-steam 0003:28DE:1142.002D: Steam wireless receiver connected [ 554.685301][ T4397] hid-steam 0003:28DE:1142.002D: No HID_FEATURE_REPORT submitted - nothing to read [ 554.703469][ T4397] usb 2-1: USB disconnect, device number 17 [ 554.712134][ T4397] hid-steam 0003:28DE:1142.002D: Steam wireless receiver disconnected [ 555.443831][ T8599] loop4: detected capacity change from 0 to 1024 [ 555.474371][ T8595] fido_id[8595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 555.640805][ T8604] loop0: detected capacity change from 0 to 256 [ 555.664869][ T8599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 555.971435][ T8604] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 557.204369][ T8604] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 557.249180][ T8614] loop1: detected capacity change from 0 to 256 [ 557.341890][ T8614] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 557.388934][ T8614] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 557.396044][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 558.630371][ T8626] loop4: detected capacity change from 0 to 1024 [ 558.746223][ T8626] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 558.991742][ T8619] loop2: detected capacity change from 0 to 32768 [ 559.167312][ T8619] XFS (loop2): Mounting V5 Filesystem [ 559.385871][ T8619] XFS (loop2): Ending clean mount [ 559.413860][ T8619] XFS (loop2): Quotacheck needed: Please wait. [ 559.463034][ T8619] XFS (loop2): Quotacheck: Done. [ 559.644134][ T4256] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 559.854100][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 559.868770][ T4256] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.880100][ T4256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.894748][ T4256] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 559.957627][ T4256] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.971907][ T26] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 560.027142][ T4256] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 560.037416][ T4256] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 560.045819][ T4256] usb 1-1: Manufacturer: syz [ 560.078059][ T4256] usb 1-1: config 0 descriptor?? [ 560.183121][ T4275] XFS (loop2): Unmounting Filesystem [ 560.249728][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.262372][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.279611][ T26] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 560.310029][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.340804][ T26] usb 4-1: config 0 descriptor?? [ 560.875058][ T26] hid-steam 0003:28DE:1142.002F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 561.200230][ T26] hid-steam 0003:28DE:1142.0030: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 561.355102][ T26] hid-steam 0003:28DE:1142.002F: Steam wireless receiver connected [ 561.366608][ T26] hid-steam 0003:28DE:1142.002F: No HID_FEATURE_REPORT submitted - nothing to read [ 561.396703][ T26] usb 4-1: USB disconnect, device number 14 [ 561.425924][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 561.440154][ T26] hid-steam 0003:28DE:1142.002F: Steam wireless receiver disconnected [ 561.603371][ T8664] loop4: detected capacity change from 0 to 256 [ 561.623685][ T8659] fido_id[8659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 561.706524][ T8664] 9pnet_fd: Insufficient options for proto=fd [ 562.126358][ T8668] loop4: detected capacity change from 0 to 2048 [ 562.494387][ T8668] NILFS (loop4): invalid segment: Magic number mismatch [ 562.610666][ T8668] NILFS (loop4): trying rollback from an earlier position [ 562.717441][ T8668] NILFS (loop4): recovery complete [ 562.728666][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.805140][ T4308] usb 1-1: USB disconnect, device number 20 [ 562.831174][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.878449][ T8671] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 563.921515][ T8661] loop1: detected capacity change from 0 to 32768 [ 564.269385][ T8661] XFS (loop1): Mounting V5 Filesystem [ 564.322389][ T8683] loop0: detected capacity change from 0 to 256 [ 564.432706][ T8683] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 564.476093][ T8661] XFS (loop1): Ending clean mount [ 564.484489][ T8683] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 564.498043][ T8661] XFS (loop1): Quotacheck needed: Please wait. [ 564.674222][ T8661] XFS (loop1): Quotacheck: Done. [ 565.465064][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.990'. [ 565.660282][ T4265] XFS (loop1): Unmounting Filesystem [ 565.729194][ T8700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'. [ 566.112323][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 566.655407][ T8704] loop2: detected capacity change from 0 to 256 [ 566.730172][ T8704] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 566.769934][ T8704] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 567.293498][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.995'. [ 568.326407][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 569.355574][ T8718] loop3: detected capacity change from 0 to 1024 [ 569.428924][ T8727] loop4: detected capacity change from 0 to 2048 [ 569.468754][ T8718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 569.648675][ T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 569.909312][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.930060][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.942267][ T7] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 569.956649][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.970044][ T8727] NILFS (loop4): invalid segment: Magic number mismatch [ 569.998007][ T7] usb 1-1: config 0 descriptor?? [ 570.005301][ T8727] NILFS (loop4): trying rollback from an earlier position [ 570.060117][ T8727] NILFS (loop4): recovery complete [ 570.097532][ T8738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 570.642175][ T7] hid-steam 0003:28DE:1142.0031: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 570.677134][ T7] hid-steam 0003:28DE:1142.0032: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 570.763986][ T7] hid-steam 0003:28DE:1142.0031: Steam wireless receiver connected [ 570.897406][ T7] hid-steam 0003:28DE:1142.0031: No HID_FEATURE_REPORT submitted - nothing to read [ 570.918919][ T7] usb 1-1: USB disconnect, device number 21 [ 570.927791][ T7] hid-steam 0003:28DE:1142.0031: Steam wireless receiver disconnected [ 571.239198][ T8740] fido_id[8740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 571.748500][ T4308] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 571.954054][ T4308] usb 5-1: Using ep0 maxpacket: 16 [ 571.972876][ T4308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.132427][ T4308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.374607][ T4308] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 572.429337][ T4308] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.510869][ T4308] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 572.541247][ T4308] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 572.557130][ T8754] loop2: detected capacity change from 0 to 1024 [ 572.570902][ T4308] usb 5-1: Manufacturer: syz [ 572.603331][ T4308] usb 5-1: config 0 descriptor?? [ 572.604654][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 572.665396][ T8754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 573.693594][ T8762] loop1: detected capacity change from 0 to 2048 [ 573.717986][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 573.732538][ T8762] NILFS (loop1): invalid segment: Magic number mismatch [ 573.741116][ T8762] NILFS (loop1): trying rollback from an earlier position [ 573.803425][ T8762] NILFS (loop1): recovery complete [ 573.853541][ T8766] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 573.966951][ T8769] loop2: detected capacity change from 0 to 256 [ 574.085174][ T8769] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 574.150425][ T8769] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 574.886807][ T7] usb 5-1: USB disconnect, device number 20 [ 575.276326][ T8780] loop0: detected capacity change from 0 to 256 [ 575.337634][ T8780] 9pnet_fd: Insufficient options for proto=fd [ 576.538495][ T8790] loop1: detected capacity change from 0 to 256 [ 576.623125][ T8790] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 576.713721][ T8790] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 576.800510][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 576.820144][ T8795] loop4: detected capacity change from 0 to 1024 [ 576.921860][ T8798] loop3: detected capacity change from 0 to 1024 [ 577.024952][ T8798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 577.039477][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 577.144209][ T4308] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 577.329294][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'. [ 577.344303][ T4308] usb 5-1: Using ep0 maxpacket: 8 [ 577.379420][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.449677][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.556150][ T7] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 577.649349][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.771574][ T7] usb 1-1: config 0 descriptor?? [ 578.274973][ T4308] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 578.280588][ T7] hid-steam 0003:28DE:1142.0033: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 578.286382][ T4308] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 578.310894][ T4308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 578.317729][ T4308] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 578.327160][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.350049][ T7] hid-steam 0003:28DE:1142.0034: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 578.380215][ T4308] usb 5-1: config 0 descriptor?? [ 578.424178][ T7] hid-steam 0003:28DE:1142.0033: Steam wireless receiver connected [ 578.432672][ T7] hid-steam 0003:28DE:1142.0033: No HID_FEATURE_REPORT submitted - nothing to read [ 578.511054][ T7] usb 1-1: USB disconnect, device number 22 [ 578.552882][ T7] hid-steam 0003:28DE:1142.0033: Steam wireless receiver disconnected [ 578.594485][ T4308] usbhid 5-1:0.0: can't add hid device: -71 [ 578.610193][ T4308] usbhid: probe of 5-1:0.0 failed with error -71 [ 578.650210][ T8810] fido_id[8810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 578.663976][ T4308] usb 5-1: USB disconnect, device number 21 [ 578.777942][ T8812] loop2: detected capacity change from 0 to 256 [ 578.810337][ T8812] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 578.843066][ T8812] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 579.195776][ T8816] loop0: detected capacity change from 0 to 64 [ 579.210711][ T8816] hfs: unable to open catalog tree [ 579.216041][ T8816] hfs: can't find a HFS filesystem on dev loop0 [ 579.305259][ T8817] loop0: detected capacity change from 0 to 1024 [ 579.624185][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 579.816876][ T8819] loop4: detected capacity change from 0 to 1024 [ 579.906705][ T8819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 580.917968][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 580.958178][ T8832] loop0: detected capacity change from 0 to 1024 [ 581.066845][ T8832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 581.369640][ T8829] overlayfs: overlapping lowerdir path [ 582.797638][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 583.089226][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 584.172854][ T8850] loop1: detected capacity change from 0 to 256 [ 584.281338][ T8850] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 584.469992][ T8850] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 585.793869][ T8855] loop4: detected capacity change from 0 to 2048 [ 585.814052][ T8855] NILFS (loop4): invalid segment: Magic number mismatch [ 585.824696][ T8855] NILFS (loop4): trying rollback from an earlier position [ 585.856765][ T8855] NILFS (loop4): recovery complete [ 585.871331][ T8858] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.035764][ T8867] loop3: detected capacity change from 0 to 1024 [ 587.064479][ T8848] loop0: detected capacity change from 0 to 32768 [ 587.324985][ T8867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 587.430085][ T8872] loop1: detected capacity change from 0 to 256 [ 587.980963][ T8872] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 588.312315][ T8872] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 590.287436][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 590.658758][ T8899] loop3: detected capacity change from 0 to 128 [ 592.273795][ T8906] loop3: detected capacity change from 0 to 2048 [ 592.375576][ T8906] NILFS (loop3): invalid segment: Magic number mismatch [ 592.402387][ T8906] NILFS (loop3): trying rollback from an earlier position [ 592.475801][ T8906] NILFS (loop3): recovery complete [ 592.908194][ T8912] loop4: detected capacity change from 0 to 256 [ 592.918720][ T8910] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 592.943051][ T8912] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 593.025445][ T8912] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 593.223981][ T4397] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 594.889235][ T8921] loop1: detected capacity change from 0 to 128 [ 595.313311][ T4397] usb 3-1: device descriptor read/all, error -71 [ 595.362349][ T8926] loop2: detected capacity change from 0 to 1024 [ 595.453742][ T8926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 595.575439][ T8933] loop1: detected capacity change from 0 to 256 [ 595.616696][ T8933] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 595.695969][ T8935] overlayfs: overlapping lowerdir path [ 596.159441][ T8933] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 597.108021][ T8941] loop4: detected capacity change from 0 to 64 [ 597.116299][ T8941] hfs: unable to open catalog tree [ 597.121558][ T8941] hfs: can't find a HFS filesystem on dev loop4 [ 597.157675][ T8943] loop0: detected capacity change from 0 to 2048 [ 597.175682][ T8943] NILFS (loop0): invalid segment: Magic number mismatch [ 597.183661][ T8943] NILFS (loop0): trying rollback from an earlier position [ 597.205158][ T4553] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 597.235003][ T8943] NILFS (loop0): recovery complete [ 597.298847][ T8944] loop4: detected capacity change from 0 to 1024 [ 597.359226][ T8945] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.755651][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 599.353202][ T8963] loop4: detected capacity change from 0 to 2048 [ 599.372804][ T8963] NILFS (loop4): invalid segment: Magic number mismatch [ 599.427951][ T8963] NILFS (loop4): trying rollback from an earlier position [ 599.566137][ T8963] NILFS (loop4): recovery complete [ 600.154816][ T8968] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 600.167761][ T8966] loop1: detected capacity change from 0 to 2048 [ 600.245678][ T8966] NILFS (loop1): invalid segment: Magic number mismatch [ 600.274089][ T8966] NILFS (loop1): trying rollback from an earlier position [ 600.615670][ T8966] NILFS (loop1): recovery complete [ 601.333729][ T8974] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.704099][ T4308] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 602.238741][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.336164][ T4308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.495711][ T4308] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 602.564324][ T4308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.625480][ T4308] usb 3-1: config 0 descriptor?? [ 603.188307][ T8989] loop0: detected capacity change from 0 to 128 [ 603.765658][ T4308] hid-steam 0003:28DE:1142.0035: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 603.784306][ T4308] hid-steam 0003:28DE:1142.0036: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 603.962285][ T4308] hid-steam 0003:28DE:1142.0035: Steam wireless receiver connected [ 603.970396][ T4308] hid-steam 0003:28DE:1142.0035: No HID_FEATURE_REPORT submitted - nothing to read [ 604.044670][ T4308] usb 3-1: USB disconnect, device number 18 [ 604.062462][ T4308] hid-steam 0003:28DE:1142.0035: Steam wireless receiver disconnected [ 604.080703][ T8996] loop3: detected capacity change from 0 to 64 [ 604.095123][ T8996] hfs: unable to open catalog tree [ 604.100426][ T8996] hfs: can't find a HFS filesystem on dev loop3 [ 604.337835][ T9001] fido_id[9001]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 605.152644][ T9004] loop3: detected capacity change from 0 to 1024 [ 605.191739][ T9006] loop2: detected capacity change from 0 to 1024 [ 605.361306][ T9006] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 605.408926][ T8370] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 605.520590][ T9017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 608.868287][ T9036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.875629][ T9036] IPv6: NLM_F_CREATE should be set when creating new route [ 608.882860][ T9036] IPv6: NLM_F_CREATE should be set when creating new route [ 608.890106][ T9036] IPv6: NLM_F_CREATE should be set when creating new route [ 609.960300][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 610.280080][ T9055] loop1: detected capacity change from 0 to 256 [ 610.333418][ T9055] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 610.360333][ T9055] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 611.174952][ T7720] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 611.379787][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1079'. [ 611.401572][ T7720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.840431][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 611.849596][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 612.210955][ T7720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.238412][ T7720] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 612.259905][ T7720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.308078][ T7720] usb 3-1: config 0 descriptor?? [ 612.350959][ T9067] loop3: detected capacity change from 0 to 1024 [ 612.433252][ T9067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 613.436093][ T7720] hid-steam 0003:28DE:1142.0037: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 613.461325][ T7720] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 613.482889][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 613.526130][ T9075] loop4: detected capacity change from 0 to 64 [ 613.534295][ T7720] hid-steam 0003:28DE:1142.0037: Steam wireless receiver connected [ 613.550323][ T7720] hid-steam 0003:28DE:1142.0037: No HID_FEATURE_REPORT submitted - nothing to read [ 613.554873][ T9075] hfs: unable to open catalog tree [ 613.565533][ T9075] hfs: can't find a HFS filesystem on dev loop4 [ 613.635559][ T7720] usb 3-1: USB disconnect, device number 19 [ 613.646152][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 613.660374][ T7720] hid-steam 0003:28DE:1142.0037: Steam wireless receiver disconnected [ 613.711515][ T9083] loop4: detected capacity change from 0 to 1024 [ 613.732544][ T9078] loop1: detected capacity change from 0 to 1024 [ 614.085093][ T4397] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 614.202664][ T9085] fido_id[9085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 614.304159][ T4397] usb 2-1: Using ep0 maxpacket: 8 [ 614.315839][ T4397] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 615.004123][ T4397] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 615.038654][ T4397] usb 2-1: config 0 interface 0 has no altsetting 0 [ 615.045675][ T4397] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 615.074310][ T4397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.105405][ T4397] usb 2-1: config 0 descriptor?? [ 615.330594][ T9093] loop2: detected capacity change from 0 to 1024 [ 615.360856][ T4397] usbhid 2-1:0.0: can't add hid device: -71 [ 615.379015][ T4397] usbhid: probe of 2-1:0.0 failed with error -71 [ 615.454352][ T4397] usb 2-1: USB disconnect, device number 18 [ 615.505654][ T9082] loop3: detected capacity change from 0 to 32768 [ 615.555524][ T9093] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 615.924039][ T9082] XFS (loop3): Mounting V5 Filesystem [ 616.053847][ T9082] XFS (loop3): Ending clean mount [ 616.066710][ T9082] XFS (loop3): Quotacheck needed: Please wait. [ 616.157688][ T9082] XFS (loop3): Quotacheck: Done. [ 616.887493][ T9125] loop1: detected capacity change from 0 to 1024 [ 616.945715][ T9125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 617.033330][ T4266] XFS (loop3): Unmounting Filesystem [ 617.073955][ T4256] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 617.123045][ T9132] loop4: detected capacity change from 0 to 256 [ 618.086609][ T4256] usb 1-1: unable to get BOS descriptor or descriptor too short [ 618.105425][ T4256] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.107022][ T9132] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 618.123992][ T4256] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 618.137121][ T9132] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 618.149030][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 618.164193][ T4256] usb 1-1: config 1 has no interface number 1 [ 618.301088][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 618.324506][ T4256] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.335963][ T4256] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 618.384554][ T4256] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.393632][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.069380][ T4256] usb 1-1: Product: syz [ 619.073601][ T4256] usb 1-1: Manufacturer: syz [ 619.078300][ T4256] usb 1-1: SerialNumber: syz [ 619.579888][ T4256] usb 1-1: USB disconnect, device number 23 [ 619.892975][ T4397] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 620.156510][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.305445][ T4397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.168668][ T4397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.178788][ T4397] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 621.188430][ T4397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.208156][ T4397] usb 2-1: config 0 descriptor?? [ 622.765118][ T4397] hid-steam 0003:28DE:1142.0039: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 622.938208][ T4397] hid-steam 0003:28DE:1142.003A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 623.218175][ T4397] hid-steam 0003:28DE:1142.0039: Steam wireless receiver connected [ 623.240117][ T4397] hid-steam 0003:28DE:1142.0039: No HID_FEATURE_REPORT submitted - nothing to read [ 624.200083][ T9185] loop2: detected capacity change from 0 to 1024 [ 624.224370][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.232109][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.315712][ T9185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 624.480037][ T4397] usb 2-1: USB disconnect, device number 19 [ 624.511754][ T9187] loop1: detected capacity change from 0 to 2048 [ 624.529357][ T9183] fido_id[9183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 624.548956][ T4397] hid-steam 0003:28DE:1142.0039: Steam wireless receiver disconnected [ 624.582483][ T9187] NILFS (loop1): invalid segment: Magic number mismatch [ 624.648266][ T9187] NILFS (loop1): trying rollback from an earlier position [ 624.672883][ T9194] loop0: detected capacity change from 0 to 256 [ 624.679586][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 624.717972][ T9194] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 624.770689][ T9187] NILFS (loop1): recovery complete [ 624.785133][ T9198] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 624.829156][ T9194] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 626.509810][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 626.574527][ T9221] loop3: detected capacity change from 0 to 1024 [ 629.735157][ T9234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.898319][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 629.946422][ T9240] loop3: detected capacity change from 0 to 1024 [ 630.074010][ T7720] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 631.489066][ T9242] loop4: detected capacity change from 0 to 2048 [ 631.530651][ T9242] NILFS (loop4): invalid segment: Magic number mismatch [ 631.535647][ T7720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.558873][ T7720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.574166][ T9242] NILFS (loop4): trying rollback from an earlier position [ 631.594604][ T7720] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 631.606506][ T9242] NILFS (loop4): recovery complete [ 631.624613][ T7720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.641576][ T9243] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 631.663997][ T4308] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 631.944675][ T7720] usb 1-1: config 0 descriptor?? [ 632.154073][ T4308] usb 4-1: Using ep0 maxpacket: 8 [ 632.397257][ T4308] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 632.487505][ T7720] hid-steam 0003:28DE:1142.003B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 632.505592][ T7720] hid-steam 0003:28DE:1142.003C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 632.544090][ T4308] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 632.593402][ T4308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 632.600715][ T4308] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 632.604005][ T7720] hid-steam 0003:28DE:1142.003B: Steam wireless receiver connected [ 632.616898][ T4308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.634275][ T7720] hid-steam 0003:28DE:1142.003B: No HID_FEATURE_REPORT submitted - nothing to read [ 632.661565][ T7720] usb 1-1: USB disconnect, device number 24 [ 632.685719][ T4308] usb 4-1: config 0 descriptor?? [ 632.696713][ T7720] hid-steam 0003:28DE:1142.003B: Steam wireless receiver disconnected [ 632.831521][ T4308] usbhid 4-1:0.0: can't add hid device: -71 [ 632.843265][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 632.855344][ T4308] usbhid: probe of 4-1:0.0 failed with error -71 [ 632.891063][ T9245] fido_id[9245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 632.902591][ T4308] usb 4-1: USB disconnect, device number 15 [ 633.101551][ T9250] loop2: detected capacity change from 0 to 64 [ 633.128607][ T9250] Trying to free block not in datazone [ 633.226168][ T9250] Trying to free block not in datazone [ 633.681475][ T9255] loop3: detected capacity change from 0 to 64 [ 633.702333][ T9255] hfs: unable to open catalog tree [ 633.707661][ T9255] hfs: can't find a HFS filesystem on dev loop3 [ 633.819016][ T9258] loop3: detected capacity change from 0 to 1024 [ 634.896224][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 634.911890][ T9265] loop0: detected capacity change from 0 to 1024 [ 635.244197][ T4256] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 635.326290][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 635.372592][ T9275] loop3: detected capacity change from 0 to 1024 [ 636.994046][ T4256] usb 1-1: Using ep0 maxpacket: 8 [ 637.660608][ T4256] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 637.672731][ T4256] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 637.686321][ T4256] usb 1-1: config 0 interface 0 has no altsetting 0 [ 637.693041][ T4256] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 637.702450][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.739530][ T4256] usb 1-1: config 0 descriptor?? [ 637.840424][ T4256] usbhid 1-1:0.0: can't add hid device: -71 [ 637.868088][ T4256] usbhid: probe of 1-1:0.0 failed with error -71 [ 637.914176][ T26] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 637.927425][ T4256] usb 1-1: USB disconnect, device number 25 [ 638.113961][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 638.124296][ T26] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 638.212068][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1132'. [ 638.320416][ T26] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 638.334701][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 638.342295][ T26] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 638.351951][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.366727][ T26] usb 4-1: config 0 descriptor?? [ 638.751806][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 638.761040][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 639.109621][ T26] usb 4-1: can't set config #0, error -71 [ 639.139930][ T26] usb 4-1: USB disconnect, device number 16 [ 640.136781][ T9297] loop3: detected capacity change from 0 to 2048 [ 640.217736][ T9297] NILFS (loop3): invalid segment: Magic number mismatch [ 640.258203][ T9297] NILFS (loop3): trying rollback from an earlier position [ 640.318264][ T9297] NILFS (loop3): recovery complete [ 640.362024][ T9301] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.869356][ T9303] loop4: detected capacity change from 0 to 64 [ 640.887651][ T9303] hfs: unable to open catalog tree [ 640.892912][ T9303] hfs: can't find a HFS filesystem on dev loop4 [ 641.354506][ T9304] loop4: detected capacity change from 0 to 1024 [ 641.646438][ T9307] loop3: detected capacity change from 0 to 64 [ 641.731326][ T9300] loop0: detected capacity change from 0 to 32768 [ 641.789146][ T9307] Trying to free block not in datazone [ 641.819151][ T9307] Trying to free block not in datazone [ 641.825419][ T9300] XFS (loop0): Mounting V5 Filesystem [ 642.751247][ T9300] XFS (loop0): Ending clean mount [ 642.770531][ T9300] XFS (loop0): Quotacheck needed: Please wait. [ 642.893669][ T9300] XFS (loop0): Quotacheck: Done. [ 643.081051][ T9324] loop1: detected capacity change from 0 to 2048 [ 643.187216][ T9331] loop2: detected capacity change from 0 to 256 [ 644.826002][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 646.680544][ T9331] FAT-fs (loop2): Directory bread(block 64) failed [ 646.687313][ T9331] FAT-fs (loop2): Directory bread(block 65) failed [ 646.694041][ T9331] FAT-fs (loop2): Directory bread(block 66) failed [ 646.700577][ T9331] FAT-fs (loop2): Directory bread(block 67) failed [ 646.707232][ T9331] FAT-fs (loop2): Directory bread(block 68) failed [ 646.713766][ T9331] FAT-fs (loop2): Directory bread(block 69) failed [ 646.717792][ T9324] NILFS (loop1): invalid segment: Magic number mismatch [ 646.720380][ T9331] FAT-fs (loop2): Directory bread(block 70) failed [ 646.733794][ T9331] FAT-fs (loop2): Directory bread(block 71) failed [ 646.740442][ T9331] FAT-fs (loop2): Directory bread(block 72) failed [ 646.747028][ T9331] FAT-fs (loop2): Directory bread(block 73) failed [ 646.763350][ T9324] NILFS (loop1): trying rollback from an earlier position [ 646.846407][ T9324] NILFS (loop1): recovery complete [ 647.059881][ T7] usb 5-1: device not accepting address 22, error -71 [ 647.077759][ T9324] NILFS (loop1): error -4 creating segctord thread [ 647.106827][ T4274] XFS (loop0): Unmounting Filesystem [ 647.125442][ T9334] loop3: detected capacity change from 0 to 256 [ 647.158388][ T9334] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 647.194429][ T9334] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 647.665726][ T9347] loop1: detected capacity change from 0 to 128 [ 648.716794][ T9349] loop1: detected capacity change from 0 to 64 [ 648.725065][ T9349] hfs: unable to open catalog tree [ 648.730312][ T9349] hfs: can't find a HFS filesystem on dev loop1 [ 648.795317][ T4259] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 648.938497][ T9353] loop1: detected capacity change from 0 to 1024 [ 649.335658][ T9357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.080428][ T9370] loop0: detected capacity change from 0 to 32768 [ 651.092828][ T9368] loop3: detected capacity change from 0 to 2048 [ 651.112037][ T9370] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 651.249880][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 651.258804][ T9368] NILFS (loop3): invalid segment: Magic number mismatch [ 651.313987][ T9368] NILFS (loop3): trying rollback from an earlier position [ 651.359875][ T9368] NILFS (loop3): recovery complete [ 651.390119][ T9376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.764052][ T26] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 652.015842][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.261258][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.352844][ T26] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 652.362752][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.402340][ T26] usb 2-1: config 0 descriptor?? [ 652.926058][ T9386] loop2: detected capacity change from 0 to 64 [ 652.947233][ T26] hid-steam 0003:28DE:1142.003D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 652.981227][ T9386] Trying to free block not in datazone [ 652.988158][ T26] hid-steam 0003:28DE:1142.003E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 653.004040][ T9386] Trying to free block not in datazone [ 653.186721][ T26] hid-steam 0003:28DE:1142.003D: Steam wireless receiver connected [ 653.196282][ T26] hid-steam 0003:28DE:1142.003D: No HID_FEATURE_REPORT submitted - nothing to read [ 653.239962][ T26] usb 2-1: USB disconnect, device number 20 [ 653.346432][ T26] hid-steam 0003:28DE:1142.003D: Steam wireless receiver disconnected [ 654.122921][ T9388] fido_id[9388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 655.101805][ T9404] loop2: detected capacity change from 0 to 2048 [ 655.184508][ T9404] NILFS (loop2): invalid segment: Magic number mismatch [ 655.194062][ T9404] NILFS (loop2): trying rollback from an earlier position [ 655.261135][ T9404] NILFS (loop2): recovery complete [ 655.289882][ T9406] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 657.022071][ T9421] loop1: detected capacity change from 0 to 2048 [ 657.118399][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1168'. [ 657.168362][ T9421] NILFS (loop1): invalid segment: Magic number mismatch [ 657.271147][ T9421] NILFS (loop1): trying rollback from an earlier position [ 657.478199][ T9421] NILFS (loop1): recovery complete [ 657.523998][ T9429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 657.939296][ T9432] loop0: detected capacity change from 0 to 32768 [ 658.004952][ T9432] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 658.021565][ T27] audit: type=1800 audit(1757737257.278:68): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1165" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 658.062642][ T9435] loop3: detected capacity change from 0 to 64 [ 658.266175][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 658.275344][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1168'. [ 659.089115][ T9435] Trying to free block not in datazone [ 659.123415][ T9435] Trying to free block not in datazone [ 659.783455][ T9445] loop2: detected capacity change from 0 to 64 [ 659.805715][ T9445] hfs: unable to open catalog tree [ 659.811026][ T9445] hfs: can't find a HFS filesystem on dev loop2 [ 660.000511][ T9450] loop2: detected capacity change from 0 to 1024 [ 660.291840][ T9454] loop2: detected capacity change from 0 to 1024 [ 660.329750][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 660.335518][ T9456] loop1: detected capacity change from 0 to 256 [ 660.358941][ T9456] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 660.424413][ T9456] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 660.555121][ T9454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 660.584006][ T4308] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 660.769810][ T4308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.825026][ T4308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.944637][ T4397] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 661.284320][ T4397] usb 1-1: Using ep0 maxpacket: 16 [ 661.309597][ T4397] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.401223][ T4308] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 661.410487][ T4308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.425544][ T4308] usb 4-1: config 0 descriptor?? [ 661.660785][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 661.904981][ T4308] hid-steam 0003:28DE:1142.003F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 661.912843][ T4397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.941918][ T4397] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.951124][ T4397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.959259][ T4397] usb 1-1: Product: syz [ 661.963494][ T4397] usb 1-1: Manufacturer: syz [ 661.977871][ T4397] usb 1-1: SerialNumber: syz [ 662.015539][ T4308] hid-steam 0003:28DE:1142.0040: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 662.188642][ T4308] hid-steam 0003:28DE:1142.003F: Steam wireless receiver connected [ 662.197046][ T4397] usb 1-1: 0:2 : does not exist [ 662.208948][ T4397] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 662.218358][ T4308] hid-steam 0003:28DE:1142.003F: No HID_FEATURE_REPORT submitted - nothing to read [ 662.232732][ T9449] loop4: detected capacity change from 0 to 32768 [ 662.257368][ T4397] usb 1-1: USB disconnect, device number 26 [ 662.460578][ T9468] loop2: detected capacity change from 0 to 32768 [ 662.488862][ T4308] usb 4-1: USB disconnect, device number 17 [ 662.494308][ T9449] XFS (loop4): Mounting V5 Filesystem [ 662.502058][ T9468] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 662.520240][ T27] audit: type=1800 audit(1757737261.778:69): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1177" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 662.544275][ T4308] hid-steam 0003:28DE:1142.003F: Steam wireless receiver disconnected [ 662.622679][ T9449] XFS (loop4): Ending clean mount [ 662.661563][ T9449] XFS (loop4): Quotacheck needed: Please wait. [ 662.705831][ T9479] fido_id[9479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 662.744755][ T9449] XFS (loop4): Quotacheck: Done. [ 662.883188][ T4270] XFS (loop4): Unmounting Filesystem [ 662.928749][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 663.108742][ T9481] loop3: detected capacity change from 0 to 2048 [ 663.151607][ T9481] NILFS (loop3): invalid segment: Magic number mismatch [ 663.587503][ T9481] NILFS (loop3): trying rollback from an earlier position [ 663.722497][ T9481] NILFS (loop3): recovery complete [ 663.744283][ T9488] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.265769][ T9493] loop0: detected capacity change from 0 to 64 [ 664.302530][ T9493] Trying to free block not in datazone [ 664.314376][ T9493] Trying to free block not in datazone [ 665.611670][ T9501] loop0: detected capacity change from 0 to 764 [ 665.636616][ T9501] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 665.653847][ T9503] loop4: detected capacity change from 0 to 1024 [ 665.684876][ T9499] loop1: detected capacity change from 0 to 64 [ 665.694015][ T9499] hfs: unable to open catalog tree [ 665.699254][ T9499] hfs: can't find a HFS filesystem on dev loop1 [ 666.629154][ T9503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 666.682751][ T9511] loop3: detected capacity change from 0 to 164 [ 666.694673][ T9515] loop2: detected capacity change from 0 to 1024 [ 666.720138][ T9515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 666.734023][ T9511] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 668.630420][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 668.754104][ T4308] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 668.772379][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 669.071422][ T7720] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 669.094196][ T4308] usb 2-1: Using ep0 maxpacket: 32 [ 669.130539][ T9532] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 669.140453][ T9532] Symlink component flag not implemented [ 669.146258][ T9532] Symlink component flag not implemented [ 669.151958][ T9532] Symlink component flag not implemented (7) [ 669.158104][ T9532] Symlink component flag not implemented (116) [ 669.265637][ T7720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.290922][ T7720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.327291][ T7720] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 669.353955][ T7720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.375585][ T9531] loop2: detected capacity change from 0 to 32768 [ 669.385879][ T4308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.623309][ T4308] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 669.966882][ T7720] usb 1-1: config 0 descriptor?? [ 670.046028][ T9531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 670.060955][ T4308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.090260][ T4308] usb 2-1: config 0 descriptor?? [ 670.106190][ T27] audit: type=1800 audit(1757737269.368:70): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1191" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 670.146733][ T4308] usb 2-1: can't set config #0, error -71 [ 670.157884][ T4308] usb 2-1: USB disconnect, device number 21 [ 670.166380][ T7720] usb 1-1: can't set config #0, error -71 [ 670.195218][ T7720] usb 1-1: USB disconnect, device number 27 [ 670.339451][ T9541] loop0: detected capacity change from 0 to 64 [ 670.342993][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 670.371687][ T9541] Trying to free block not in datazone [ 670.393703][ T9541] Trying to free block not in datazone [ 670.448221][ T9545] loop1: detected capacity change from 0 to 1024 [ 670.551116][ T9547] loop2: detected capacity change from 0 to 256 [ 670.602876][ T9545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 670.760105][ T9547] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 671.287432][ T9547] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 672.132880][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 672.423282][ T9559] loop1: detected capacity change from 0 to 1024 [ 672.576323][ T9563] loop0: detected capacity change from 0 to 256 [ 672.633843][ T9563] FAT-fs (loop0): Directory bread(block 64) failed [ 672.640643][ T9563] FAT-fs (loop0): Directory bread(block 65) failed [ 672.648460][ T9563] FAT-fs (loop0): Directory bread(block 66) failed [ 672.655326][ T9563] FAT-fs (loop0): Directory bread(block 67) failed [ 672.662229][ T9563] FAT-fs (loop0): Directory bread(block 68) failed [ 672.668908][ T9563] FAT-fs (loop0): Directory bread(block 69) failed [ 672.675756][ T9563] FAT-fs (loop0): Directory bread(block 70) failed [ 672.682429][ T9563] FAT-fs (loop0): Directory bread(block 71) failed [ 672.689256][ T9563] FAT-fs (loop0): Directory bread(block 72) failed [ 672.695932][ T9563] FAT-fs (loop0): Directory bread(block 73) failed [ 673.013545][ T9559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 674.425364][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 674.848727][ T9571] loop4: detected capacity change from 0 to 64 [ 674.867600][ T9571] hfs: unable to open catalog tree [ 674.872884][ T9571] hfs: can't find a HFS filesystem on dev loop4 [ 675.542544][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 675.870737][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 675.879891][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'. [ 677.878379][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 677.941841][ T9594] loop4: detected capacity change from 0 to 1024 [ 678.254155][ T4308] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 678.464164][ T4308] usb 5-1: Using ep0 maxpacket: 8 [ 678.472676][ T4308] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 678.622208][ T4308] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 679.686164][ T4308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 681.013820][ T4308] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 681.023650][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.045428][ T4308] usb 5-1: config 0 descriptor?? [ 681.138539][ T4308] usb 5-1: can't set config #0, error -71 [ 681.160018][ T4308] usb 5-1: USB disconnect, device number 24 [ 681.220558][ T9601] loop0: detected capacity change from 0 to 1024 [ 681.351190][ T9601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 682.955872][ T9612] loop1: detected capacity change from 0 to 32768 [ 683.068865][ T9612] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 683.143153][ T27] audit: type=1800 audit(1757737282.398:71): pid=9612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1206" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 683.163778][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.195188][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 683.459342][ T9622] loop0: detected capacity change from 0 to 2048 [ 683.460640][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 683.550283][ T9622] NILFS (loop0): invalid segment: Magic number mismatch [ 683.587663][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.596683][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.605062][ T9622] NILFS (loop0): trying rollback from an earlier position [ 683.608900][ T9626] loop2: detected capacity change from 0 to 2048 [ 683.618926][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.628700][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.644255][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 683.651578][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.852403][ T9622] NILFS (loop0): recovery complete [ 683.901359][ T9626] NILFS (loop2): invalid segment: Magic number mismatch [ 683.923362][ T9626] NILFS (loop2): trying rollback from an earlier position [ 683.927448][ T9633] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.070213][ T5338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.180771][ T9626] NILFS (loop2): recovery complete [ 685.452003][ T9636] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 685.824188][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 685.832879][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.839233][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.346392][ T5338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.448194][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 686.511045][ T9640] loop1: detected capacity change from 0 to 1024 [ 686.814155][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 687.664080][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 687.844072][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 688.022458][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 688.179740][ T7] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 688.211454][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 688.239007][ T7] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 688.271316][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.342117][ T7] usb 2-1: config 0 descriptor?? [ 689.233180][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 689.249407][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 690.058752][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 690.078033][ T7] usb 2-1: USB disconnect, device number 22 [ 690.175179][ T5338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.210351][ T9658] loop4: detected capacity change from 0 to 64 [ 690.212405][ T9627] chnl_net:caif_netlink_parms(): no params data found [ 690.254508][ T9658] Trying to free block not in datazone [ 690.263520][ T9651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 690.424147][ T9658] Trying to free block not in datazone [ 690.515918][ T5338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.808690][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.103713][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.142387][ T9627] device bridge_slave_0 entered promiscuous mode [ 691.166071][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.195223][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.204971][ T9627] device bridge_slave_1 entered promiscuous mode [ 691.394133][ T7720] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 691.408958][ T9627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.491000][ T9627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.567392][ T9673] loop0: detected capacity change from 0 to 256 [ 691.604297][ T7720] usb 2-1: Using ep0 maxpacket: 16 [ 691.613172][ T7720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.656424][ T9673] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 691.683592][ T7720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.723682][ T9673] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 691.745269][ T7720] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.809049][ T7720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.815247][ T9627] team0: Port device team_slave_0 added [ 691.847858][ T7720] usb 2-1: Product: syz [ 691.875160][ T7720] usb 2-1: Manufacturer: syz [ 691.875578][ T9627] team0: Port device team_slave_1 added [ 691.901999][ T7720] usb 2-1: SerialNumber: syz [ 692.084245][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 692.147388][ T7720] usb 2-1: 0:2 : does not exist [ 692.158139][ T7720] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 692.231236][ T7720] usb 2-1: USB disconnect, device number 23 [ 692.258305][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.271727][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.367944][ T9627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.397774][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.434051][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.508576][ T9627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.030957][ T9627] device hsr_slave_0 entered promiscuous mode [ 693.059155][ T9627] device hsr_slave_1 entered promiscuous mode [ 693.106867][ T9627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.119913][ T9627] Cannot create hsr debugfs directory [ 693.221989][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1221'. [ 693.704137][ T4397] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 693.904260][ T4397] usb 5-1: Using ep0 maxpacket: 16 [ 693.916704][ T4397] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.981310][ T4397] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.053714][ T4397] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.096035][ T4397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.108856][ T4397] usb 5-1: Product: syz [ 694.121480][ T4397] usb 5-1: Manufacturer: syz [ 694.130523][ T4397] usb 5-1: SerialNumber: syz [ 694.201321][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 694.210962][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 694.368913][ T4397] usb 5-1: 0:2 : does not exist [ 694.386753][ T4397] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 694.448069][ T4397] usb 5-1: USB disconnect, device number 25 [ 694.555913][ T9703] loop1: detected capacity change from 0 to 256 [ 694.597718][ T9703] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 694.624868][ T9703] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 694.704987][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.156322][ T9711] loop4: detected capacity change from 0 to 64 [ 695.744654][ T9713] loop0: detected capacity change from 0 to 764 [ 695.871915][ T9713] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 696.198951][ T9627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 696.423028][ T9627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 696.471721][ T9627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 696.770808][ T9627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 697.853506][ T5338] device hsr_slave_0 left promiscuous mode [ 697.887606][ T5338] device hsr_slave_1 left promiscuous mode [ 697.906569][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.926372][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.950907][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.968973][ T5338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.000113][ T5338] device bridge_slave_1 left promiscuous mode [ 698.054024][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.139030][ T5338] device bridge_slave_0 left promiscuous mode [ 698.146072][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.344736][ T5338] device veth1_macvtap left promiscuous mode [ 698.395250][ T5338] device veth0_macvtap left promiscuous mode [ 698.528034][ T5338] device veth1_vlan left promiscuous mode [ 698.695647][ T5338] device veth0_vlan left promiscuous mode [ 699.088078][ T9755] loop4: detected capacity change from 0 to 2048 [ 699.147590][ T9755] NILFS (loop4): invalid segment: Magic number mismatch [ 699.169472][ T9755] NILFS (loop4): trying rollback from an earlier position [ 699.216283][ T9755] NILFS (loop4): recovery complete [ 699.226673][ T9758] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.235048][ T9767] loop4: detected capacity change from 0 to 256 [ 700.271240][ T9767] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 700.285553][ T9767] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 700.320322][ T5338] team0 (unregistering): Port device team_slave_1 removed [ 700.485716][ T5338] team0 (unregistering): Port device team_slave_0 removed [ 700.591766][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.813209][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.034975][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 701.099862][ T9773] loop1: detected capacity change from 0 to 1024 [ 701.414078][ T7] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 701.614216][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 701.623286][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 701.708054][ T7] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 701.797049][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.841456][ T7] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 701.913528][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.020691][ T7] usb 2-1: config 0 descriptor?? [ 703.954459][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 703.960447][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 704.046287][ T7] usb 2-1: USB disconnect, device number 24 [ 704.072852][ T9775] loop4: detected capacity change from 0 to 1024 [ 704.155390][ T9775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 705.038828][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 705.241252][ T5338] bond0 (unregistering): Released all slaves [ 705.422998][ T9627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.493648][ T9627] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.575194][ T9787] loop1: detected capacity change from 0 to 32768 [ 705.590729][ T9752] device dummy0 entered promiscuous mode [ 705.597110][ T9752] device macsec1 entered promiscuous mode [ 705.611994][ T9752] device dummy0 left promiscuous mode [ 705.662904][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.671790][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.680316][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.689420][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 705.690364][ T9787] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 705.725020][ T27] audit: type=1800 audit(1757737304.978:72): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1238" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 705.751246][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.758474][ T9174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.782815][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 705.799879][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 705.808579][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.815717][ T9174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.826096][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 705.885971][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 705.931026][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 705.981662][ T9627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.121096][ T9627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.145798][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 706.307647][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 706.619857][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.715196][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 706.723855][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.770172][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.800277][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.855360][ T9799] loop2: detected capacity change from 0 to 256 [ 706.862495][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.907926][ T9800] loop4: detected capacity change from 0 to 1024 [ 706.936425][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 706.981199][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 707.068588][ T9799] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 707.144328][ T9799] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 707.159780][ T9800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 708.516654][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 709.681984][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.708493][ T9332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.728971][ T9627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.742976][ T9828] loop4: detected capacity change from 0 to 2048 [ 709.833179][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1245'. [ 709.991102][ T9828] NILFS (loop4): invalid segment: Magic number mismatch [ 710.024319][ T9828] NILFS (loop4): trying rollback from an earlier position [ 710.053345][ T9828] NILFS (loop4): recovery complete [ 710.094022][ T9834] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 710.744836][ T9838] loop2: detected capacity change from 0 to 32768 [ 710.844597][ T9838] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 710.872017][ T9838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 710.914059][ T27] audit: type=1800 audit(1757737310.178:73): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1247" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 711.508979][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 711.518032][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 711.601117][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 711.615336][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 711.903293][ T9852] loop0: detected capacity change from 0 to 1024 [ 713.638171][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1254'. [ 714.453640][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 714.462707][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 714.657585][ T9874] loop1: detected capacity change from 0 to 1024 [ 714.663504][ T9879] loop2: detected capacity change from 0 to 256 [ 714.683469][ T9879] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 714.714245][ T9879] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 714.735260][ T9873] loop4: detected capacity change from 0 to 2048 [ 714.776143][ T9873] NILFS (loop4): invalid segment: Magic number mismatch [ 714.794720][ T9874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 714.897397][ T9873] NILFS (loop4): trying rollback from an earlier position [ 715.005671][ T9873] NILFS (loop4): recovery complete [ 715.332140][ T9886] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 715.740870][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 716.506063][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 716.705261][ T9893] loop1: detected capacity change from 0 to 40427 [ 716.722612][ T9893] F2FS-fs (loop1): invalid crc value [ 716.729925][ T9893] F2FS-fs (loop1): Found nat_bits in checkpoint [ 716.762595][ T9174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 716.775557][ T9893] F2FS-fs (loop1): Start checkpoint disabled! [ 716.827679][ T9893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 716.889869][ T9627] device veth0_vlan entered promiscuous mode [ 716.906994][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 716.929343][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 716.977519][ T9627] device veth1_vlan entered promiscuous mode [ 717.015561][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 717.103870][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 717.264006][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 717.343094][ T9900] loop4: detected capacity change from 0 to 2048 [ 717.355945][ T9903] loop0: detected capacity change from 0 to 64 [ 717.372752][ T9903] Trying to free block not in datazone [ 717.393063][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 717.427431][ T9900] NILFS (loop4): invalid segment: Magic number mismatch [ 717.456122][ T9903] Trying to free block not in datazone [ 717.474490][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 717.483317][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 717.495242][ T9627] device veth0_macvtap entered promiscuous mode [ 717.507651][ T9900] NILFS (loop4): trying rollback from an earlier position [ 717.588152][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 717.601048][ T9627] device veth1_macvtap entered promiscuous mode [ 717.616474][ T9900] NILFS (loop4): recovery complete [ 717.707133][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.719519][ T9906] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 717.732668][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.890307][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.433946][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.538461][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.614141][ T4343] kworker/u4:5: attempt to access beyond end of device [ 718.614141][ T4343] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 718.624070][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.663986][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 718.694987][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.731244][ T9627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.054884][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 719.063763][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 719.142799][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.203229][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.229495][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.260383][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.271047][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.450341][ T9919] loop0: detected capacity change from 0 to 1024 [ 720.114012][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.142872][ T9627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.153457][ T9627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.200772][ T9627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.296846][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 720.318786][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 720.380525][ T9627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.432281][ T9627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.637763][ T9627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.658031][ T9627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.721706][ T9929] device dummy0 entered promiscuous mode [ 720.727560][ T9929] device macsec1 entered promiscuous mode [ 720.752781][ T9929] device dummy0 left promiscuous mode [ 721.437059][ T9939] loop0: detected capacity change from 0 to 1024 [ 721.499832][ T9939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 721.537372][ T6579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.728417][ T6579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.768425][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 722.696620][ T9950] loop4: detected capacity change from 0 to 256 [ 723.068136][ T9950] FAT-fs (loop4): Directory bread(block 64) failed [ 723.074923][ T9950] FAT-fs (loop4): Directory bread(block 65) failed [ 723.081903][ T9950] FAT-fs (loop4): Directory bread(block 66) failed [ 723.088638][ T9950] FAT-fs (loop4): Directory bread(block 67) failed [ 723.095638][ T9950] FAT-fs (loop4): Directory bread(block 68) failed [ 723.102257][ T9950] FAT-fs (loop4): Directory bread(block 69) failed [ 723.109306][ T9950] FAT-fs (loop4): Directory bread(block 70) failed [ 723.116077][ T9950] FAT-fs (loop4): Directory bread(block 71) failed [ 723.123017][ T9950] FAT-fs (loop4): Directory bread(block 72) failed [ 723.130352][ T9950] FAT-fs (loop4): Directory bread(block 73) failed [ 723.924687][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.950779][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.068762][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 724.785967][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 725.541737][ T9964] loop4: detected capacity change from 0 to 256 [ 725.698707][ T9964] FAT-fs (loop4): Directory bread(block 64) failed [ 725.705518][ T9964] FAT-fs (loop4): Directory bread(block 65) failed [ 725.712516][ T9964] FAT-fs (loop4): Directory bread(block 66) failed [ 725.719294][ T9964] FAT-fs (loop4): Directory bread(block 67) failed [ 725.726397][ T9964] FAT-fs (loop4): Directory bread(block 68) failed [ 725.733023][ T9964] FAT-fs (loop4): Directory bread(block 69) failed [ 725.740077][ T9964] FAT-fs (loop4): Directory bread(block 70) failed [ 725.746775][ T9964] FAT-fs (loop4): Directory bread(block 71) failed [ 725.753797][ T9964] FAT-fs (loop4): Directory bread(block 72) failed [ 725.760577][ T9964] FAT-fs (loop4): Directory bread(block 73) failed [ 726.672133][ T9972] loop2: detected capacity change from 0 to 1024 [ 726.783657][ T9972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 727.138317][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 727.335729][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.387030][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.464280][ T26] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 727.470340][ T9981] loop0: detected capacity change from 0 to 1024 [ 727.493759][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.549565][ T26] usb 6-1: config 0 descriptor?? [ 727.596962][ T9981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 727.837785][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 728.179299][ T26] hid-steam 0003:28DE:1142.0041: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 728.652332][ T9990] loop4: detected capacity change from 0 to 1024 [ 728.815470][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 728.914665][ T26] hid-steam 0003:28DE:1142.0042: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 729.094091][ T26] hid-steam 0003:28DE:1142.0041: Steam wireless receiver connected [ 729.102093][ T26] hid-steam 0003:28DE:1142.0041: No HID_FEATURE_REPORT submitted - nothing to read [ 729.463749][ T26] usb 6-1: USB disconnect, device number 2 [ 729.894482][T10005] loop5: detected capacity change from 0 to 40427 [ 729.904054][ T4397] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 729.905630][ T26] hid-steam 0003:28DE:1142.0041: Steam wireless receiver disconnected [ 729.927846][T10006] loop0: detected capacity change from 0 to 2048 [ 729.936468][T10005] F2FS-fs (loop5): invalid crc value [ 729.967975][T10005] F2FS-fs (loop5): Found nat_bits in checkpoint [ 729.977710][T10006] NILFS (loop0): invalid segment: Magic number mismatch [ 730.006453][T10005] F2FS-fs (loop5): Start checkpoint disabled! [ 730.013332][T10006] NILFS (loop0): trying rollback from an earlier position [ 730.034236][T10005] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 730.066913][ T9997] fido_id[9997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 730.124092][ T4397] usb 2-1: Using ep0 maxpacket: 16 [ 730.159499][T10006] NILFS (loop0): recovery complete [ 730.183981][ T4397] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.285680][T10014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.365668][T10018] loop2: detected capacity change from 0 to 256 [ 730.400664][ T27] audit: type=1800 audit(1757737329.588:74): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1279" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 730.471517][T10018] FAT-fs (loop2): Directory bread(block 64) failed [ 730.478262][T10018] FAT-fs (loop2): Directory bread(block 65) failed [ 730.485349][T10018] FAT-fs (loop2): Directory bread(block 66) failed [ 730.491963][T10018] FAT-fs (loop2): Directory bread(block 67) failed [ 730.498882][T10018] FAT-fs (loop2): Directory bread(block 68) failed [ 730.506266][T10018] FAT-fs (loop2): Directory bread(block 69) failed [ 730.513196][T10018] FAT-fs (loop2): Directory bread(block 70) failed [ 730.520082][T10018] FAT-fs (loop2): Directory bread(block 71) failed [ 730.527024][T10018] FAT-fs (loop2): Directory bread(block 72) failed [ 730.533666][T10018] FAT-fs (loop2): Directory bread(block 73) failed [ 731.851919][ T4397] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.093555][ T4397] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.113969][ T4397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.122011][ T4397] usb 2-1: Product: syz [ 732.128348][ T4397] usb 2-1: Manufacturer: syz [ 732.132972][ T4397] usb 2-1: SerialNumber: syz [ 732.624580][ T4397] usb 2-1: can't set config #1, error -71 [ 732.648416][ T4397] usb 2-1: USB disconnect, device number 25 [ 732.816676][ T4441] kworker/u4:12: attempt to access beyond end of device [ 732.816676][ T4441] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 733.908752][T10037] loop2: detected capacity change from 0 to 1024 [ 734.234027][ T26] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 736.404189][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 736.413355][ T26] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 737.086211][ T26] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 737.300336][T10047] loop4: detected capacity change from 0 to 1024 [ 737.454015][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 737.465640][ T26] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 738.258305][T10055] loop5: detected capacity change from 0 to 32768 [ 738.330243][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.373059][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 738.400011][T10055] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 738.413492][T10047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 738.565351][T10061] loop1: detected capacity change from 0 to 1024 [ 738.716904][ T26] usb 3-1: config 0 descriptor?? [ 739.074810][ T26] usb 3-1: can't set config #0, error -71 [ 739.090608][ T26] usb 3-1: USB disconnect, device number 20 [ 739.115678][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 739.151661][ T9627] ocfs2: Unmounting device (7,5) on (node local) [ 739.366453][T10073] loop4: detected capacity change from 0 to 256 [ 739.475300][ T4256] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 740.395203][T10073] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 740.434379][T10073] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 740.462538][T10082] loop5: detected capacity change from 0 to 1024 [ 740.734073][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 741.733978][ T4397] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 742.065121][ T4256] usb 2-1: device descriptor read/all, error -71 [ 742.963752][ T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 743.064189][ T4397] usb 6-1: Using ep0 maxpacket: 8 [ 743.186768][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.200435][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.213068][ T4397] usb 6-1: device descriptor read/all, error -71 [ 743.227693][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 743.246354][ T7] usb 3-1: too many endpoints for config 1 interface 0 altsetting 247: 248, using maximum allowed: 30 [ 743.263880][ T7] usb 3-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 743.277494][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 743.293347][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 743.305958][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.314207][ T7] usb 3-1: Product: syz [ 743.318456][ T7] usb 3-1: Manufacturer: syz [ 743.323128][ T7] usb 3-1: SerialNumber: syz [ 743.539662][ T7] smsusb:smsusb_probe: board id=8, interface number 0 [ 743.555242][ T7] smsusb:smsusb_probe: Device initialized with return code -19 [ 743.786491][ T7] usb 3-1: USB disconnect, device number 21 [ 743.827867][T10114] loop0: detected capacity change from 0 to 2048 [ 743.870896][T10114] NILFS (loop0): invalid segment: Magic number mismatch [ 743.896713][T10114] NILFS (loop0): trying rollback from an earlier position [ 743.934036][T10114] NILFS (loop0): recovery complete [ 743.975541][T10117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 745.095785][T10128] loop2: detected capacity change from 0 to 2048 [ 745.165445][T10128] NILFS (loop2): invalid segment: Magic number mismatch [ 745.172443][T10128] NILFS (loop2): trying rollback from an earlier position [ 745.230280][T10128] NILFS (loop2): recovery complete [ 745.248525][T10129] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 746.348984][ T126] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 746.576473][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 746.591435][ T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.601777][ T126] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 746.615838][ T126] usb 1-1: config 1 has no interface number 1 [ 746.621974][ T126] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 746.642046][ T126] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 746.651330][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.664493][ T126] usb 1-1: Product: syz [ 746.670651][ T126] usb 1-1: Manufacturer: syz [ 746.675421][ T126] usb 1-1: SerialNumber: syz [ 746.946419][ T126] usb 1-1: USB disconnect, device number 28 [ 747.047110][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.053864][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.178362][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.037725][T10167] loop0: detected capacity change from 0 to 2048 [ 749.064140][T10167] NILFS (loop0): invalid segment: Magic number mismatch [ 749.079426][T10167] NILFS (loop0): trying rollback from an earlier position [ 749.114343][T10167] NILFS (loop0): recovery complete [ 749.140522][T10178] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.110812][T10188] loop0: detected capacity change from 0 to 64 [ 750.137574][T10188] Trying to free block not in datazone [ 750.143237][T10188] Trying to free block not in datazone [ 753.089110][T10199] device pim6reg1 entered promiscuous mode [ 753.856139][T10217] loop1: detected capacity change from 0 to 256 [ 753.919745][T10217] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 754.004368][T10217] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 757.790856][T10289] loop0: detected capacity change from 0 to 2048 [ 757.847050][T10295] loop5: detected capacity change from 0 to 1024 [ 757.869932][T10289] NILFS (loop0): invalid segment: Magic number mismatch [ 757.895488][T10289] NILFS (loop0): trying rollback from an earlier position [ 757.951912][T10289] NILFS (loop0): recovery complete [ 757.977735][T10299] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 758.134928][T10295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 759.262297][ T9627] EXT4-fs (loop5): unmounting filesystem. [ 761.125046][T10348] device pim6reg1 entered promiscuous mode [ 762.682073][T10390] device pim6reg1 entered promiscuous mode [ 763.456644][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.253482][T10472] device wg2 entered promiscuous mode [ 769.560184][T10524] syz.0.1422[10524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.560328][T10524] syz.0.1422[10524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.896643][T10538] device pim6reg1 entered promiscuous mode [ 770.419672][T10553] device wg2 left promiscuous mode [ 770.463426][T10553] device wg2 entered promiscuous mode [ 770.938754][T10579] device pim6reg1 entered promiscuous mode [ 777.271539][T10678] device pim6reg1 entered promiscuous mode [ 778.142815][T10709] syz.0.1483[10709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 778.142916][T10709] syz.0.1483[10709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 778.165151][T10709] syz.0.1483[10709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 778.177254][T10709] syz.0.1483[10709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.794975][T10714] device pim6reg1 entered promiscuous mode [ 780.309381][T10720] ªªªªªª: renamed from vlan0 [ 785.512131][T10801] [ 785.514506][T10801] ============================================ [ 785.520660][T10801] WARNING: possible recursive locking detected [ 785.526825][T10801] syzkaller #0 Not tainted [ 785.531245][T10801] -------------------------------------------- [ 785.537395][T10801] syz.4.1510/10801 is trying to acquire lock: [ 785.543482][T10801] ffff888028bca238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 785.552361][T10801] [ 785.552361][T10801] but task is already holding lock: [ 785.559711][T10801] ffff888026946a38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 785.568588][T10801] [ 785.568588][T10801] other info that might help us debug this: [ 785.576634][T10801] Possible unsafe locking scenario: [ 785.576634][T10801] [ 785.584075][T10801] CPU0 [ 785.587354][T10801] ---- [ 785.590636][T10801] lock(&trie->lock); [ 785.594706][T10801] lock(&trie->lock); [ 785.598766][T10801] [ 785.598766][T10801] *** DEADLOCK *** [ 785.598766][T10801] [ 785.606898][T10801] May be due to missing lock nesting notation [ 785.606898][T10801] [ 785.615209][T10801] 3 locks held by syz.4.1510/10801: [ 785.620392][T10801] #0: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x375/0x670 [ 785.630311][T10801] #1: ffff888026946a38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 785.639616][T10801] #2: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420 [ 785.648924][T10801] [ 785.648924][T10801] stack backtrace: [ 785.654809][T10801] CPU: 0 PID: 10801 Comm: syz.4.1510 Not tainted syzkaller #0 [ 785.662252][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 785.672303][T10801] Call Trace: [ 785.675600][T10801] [ 785.678523][T10801] dump_stack_lvl+0x168/0x22e [ 785.683203][T10801] ? show_regs_print_info+0x12/0x12 [ 785.688388][T10801] ? load_image+0x3b0/0x3b0 [ 785.692889][T10801] __lock_acquire+0x122f/0x7c50 [ 785.697741][T10801] ? mark_lock+0x94/0x320 [ 785.702062][T10801] ? verify_lock_unused+0x140/0x140 [ 785.707250][T10801] ? __lock_acquire+0x12e5/0x7c50 [ 785.712263][T10801] ? mark_lock+0x94/0x320 [ 785.716586][T10801] lock_acquire+0x1b4/0x490 [ 785.721079][T10801] ? trie_delete_elem+0x90/0x690 [ 785.726021][T10801] ? read_lock_is_recursive+0x10/0x10 [ 785.731383][T10801] ? verify_lock_unused+0x140/0x140 [ 785.736574][T10801] _raw_spin_lock_irqsave+0xa4/0xf0 [ 785.741766][T10801] ? trie_delete_elem+0x90/0x690 [ 785.746696][T10801] ? _raw_spin_lock+0x40/0x40 [ 785.751369][T10801] trie_delete_elem+0x90/0x690 [ 785.756123][T10801] ? __cant_sleep+0x210/0x210 [ 785.760799][T10801] bpf_prog_8c8ab8634bca3061+0x3a/0x44 [ 785.766694][T10801] bpf_trace_run4+0x1f5/0x420 [ 785.771366][T10801] ? bpf_trace_run4+0xf9/0x420 [ 785.776123][T10801] ? bpf_trace_run3+0x400/0x400 [ 785.780966][T10801] ? percpu_ref_put+0x19/0x180 [ 785.785722][T10801] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 785.791175][T10801] __alloc_pages+0x49c/0x4e0 [ 785.795755][T10801] ? zone_statistics+0x170/0x170 [ 785.800684][T10801] ? __lock_acquire+0x7c50/0x7c50 [ 785.805787][T10801] ? __rwlock_init+0x140/0x140 [ 785.810547][T10801] __kmalloc_large_node+0x8c/0x1e0 [ 785.815655][T10801] ? bpf_map_kmalloc_node+0xb8/0x1a0 [ 785.820930][T10801] __kmalloc_node+0x10e/0x240 [ 785.825602][T10801] ? _raw_spin_lock+0x40/0x40 [ 785.830273][T10801] bpf_map_kmalloc_node+0xb8/0x1a0 [ 785.835374][T10801] trie_update_elem+0x160/0xe90 [ 785.840222][T10801] ? __lock_acquire+0x7c50/0x7c50 [ 785.845242][T10801] bpf_map_update_value+0x59e/0x670 [ 785.850432][T10801] map_update_elem+0x4d7/0x680 [ 785.855189][T10801] __sys_bpf+0x454/0x6d0 [ 785.859423][T10801] ? bpf_link_show_fdinfo+0x340/0x340 [ 785.864792][T10801] ? lock_chain_count+0x20/0x20 [ 785.869637][T10801] __x64_sys_bpf+0x78/0x90 [ 785.874046][T10801] do_syscall_64+0x4c/0xa0 [ 785.878450][T10801] ? clear_bhb_loop+0x60/0xb0 [ 785.883112][T10801] ? clear_bhb_loop+0x60/0xb0 [ 785.887801][T10801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.893688][T10801] RIP: 0033:0x7f4b7fd8eba9 [ 785.898090][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.917694][T10801] RSP: 002b:00007f4b80bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 785.926107][T10801] RAX: ffffffffffffffda RBX: 00007f4b7ffd5fa0 RCX: 00007f4b7fd8eba9 [ 785.934075][T10801] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 785.942043][T10801] RBP: 00007f4b7fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 785.950524][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.958487][T10801] R13: 00007f4b7ffd6038 R14: 00007f4b7ffd5fa0 R15: 00007ffe4938f1a8 [ 785.966455][T10801]