last executing test programs: 9.571431299s ago: executing program 5 (id=1331): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x20, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8.724273436s ago: executing program 3 (id=1343): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'geneve0\x00', {0x2}, 0x108}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x4}, 0x3}) 8.590557982s ago: executing program 3 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @empty, 0x205}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/179, 0xb3, 0x40000062, &(0x7f0000000340)=@ethernet={0x6}, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x400f0}, 0x0) 6.464188904s ago: executing program 5 (id=1368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.15718773s ago: executing program 5 (id=1371): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, 0x0, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0x0, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "72df"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x7}, 0x0, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "1d02"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x7d}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x40}, 0x0, 0x0}) 6.088896152s ago: executing program 2 (id=1372): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) 6.043433712s ago: executing program 0 (id=1374): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x740, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f000001e9c0)={0x6000004, 0x0, 0x0, 0x8, 0xffff}) 5.906255987s ago: executing program 1 (id=1375): ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0x0, 0x20, 0x2, 0x20, 0x80000000, &(0x7f0000000080)=[0x7], 0x1, 0x0}) 5.906070966s ago: executing program 0 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5.763347024s ago: executing program 0 (id=1378): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0xf730ac4d9e9750df, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1) 5.692560776s ago: executing program 1 (id=1379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r0, 0x80140912, 0x8) 4.514005532s ago: executing program 0 (id=1380): io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000002140)=0x20) unshare(0x24060400) ppoll(&(0x7f00000003c0)=[{r1, 0x20}, {r1, 0x30b3}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) 4.480121205s ago: executing program 1 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r2, r5) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, 0x0) 4.427821576s ago: executing program 4 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000080) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xb}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7fff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8f5}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x4000000, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @remote}, 0x14) 4.218318739s ago: executing program 1 (id=1383): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x11, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 4.180466839s ago: executing program 4 (id=1384): futex(&(0x7f0000004000)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000080)=0x2, 0xa701fffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = getpid() prlimit64(r1, 0x8, &(0x7f0000000100)={0x3, 0x6}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r5, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r5, 0x1) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x5) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00003b4000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0xffffe000) 4.048468819s ago: executing program 1 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 3.162283636s ago: executing program 4 (id=1386): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r1, r0, 0x26, 0x0, @void}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 3.080498207s ago: executing program 3 (id=1387): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x3, {0x8000000000000, 0x0, 0x0, 0x94, 0x80002, 0xffff, {0xfffffffffffffffd, 0xf7fffffffffffffc, 0x0, 0x0, 0x80000000, 0xfffffffffffffffd, 0xfffffffb, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x1, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x5042, 0x136) 3.062524811s ago: executing program 4 (id=1388): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) utimes(&(0x7f0000000180)='./file0\x00', 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x7}}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) socket$inet6(0xa, 0x800000000000002, 0x0) 3.032711586s ago: executing program 2 (id=1389): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'sip-20000\x00'}}, @CTA_STATUS_MASK={0xfffffffffffffe4c, 0x1a, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000001010400000000141a000002000000240001801400018008000100e0000001080002000a0101000c00028005000100000000003000028014000180080001000000000008000200ac1e00010c00028005000100b558665aa5b4c6000000000c000280050001001100000008000740000000010c00170000000cd8ffff6ab006"], 0x84}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x24004054) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x200000000000000) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) 2.114509655s ago: executing program 3 (id=1390): bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.99788676s ago: executing program 1 (id=1391): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b4, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000400)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 1.383080468s ago: executing program 5 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000080) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xb}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7fff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8f5}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x4000000, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.333353208s ago: executing program 0 (id=1397): syz_usb_connect(0x2, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000040)={r0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=@newae={0x40, 0x1e, 0xd11, 0x70bd25, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d6, 0x8, 0x6c}, @in=@broadcast, 0x8}}, 0x40}, 0x1, 0x0, 0x0, 0x820}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.327621493s ago: executing program 3 (id=1398): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rtc(0xffffff9c, 0x0, 0xa000, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 1.222172329s ago: executing program 2 (id=1399): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000200)={0x1, 0x8001, 0x5, 0xff}) 1.09479145s ago: executing program 5 (id=1400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x100, 0x1200) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(0x0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00') 1.06288597s ago: executing program 2 (id=1401): getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 122.640553ms ago: executing program 4 (id=1402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 59.424805ms ago: executing program 2 (id=1403): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 0s ago: executing program 5 (id=1404): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_io_uring_setup(0x3bd4, &(0x7f0000000440)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x0, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fa, 0x7fff, 0x440, 0x3, 0xd, 0x3, {0x45, 0x80}, 0xcd, 0x9}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[], 0x404}, {&(0x7f00000010c0)={0x118, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x35, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2b"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @nested={0x8, 0x75, 0x0, 0x1, [@generic, @nested={0x4, 0x144}]}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x3f, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75"]}, 0x118}, {0x0}, {&(0x7f0000005480)={0x6d4, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, "", [@typed={0xe2, 0xbb, 0x0, 0x0, @binary="29b10366aabf6eb576cb6c12b15e182c726ad9d7e5daebf14eac869b7097169d4c24b77b1c51aab44054ef50f63de6f0998f4529a5ec8a4829e2042c3f71c0c1396c21576e7558c10492502814b506ec62d4d400caf02c29a4e60e446de7d8d8839f3bef4e8499f4e364ac5ca42f7771d8c34bb660de6668928178d57843a07e3a1663eb2bb66ce9128c8f278bdd096a77c14809c0d96f052fe6b9ee8e8fbe17c053b89996de5a61d893b6e1dae55fa8b0e7fe0be41ee61b15b3d83705845f0a85b4bfc6af26f6bfac655fd6e6329659edcd828576dd6ac846a7961b7212"}, @nested={0x514, 0x6f, 0x0, 0x1, [@nested={0x427, 0x81, 0x0, 0x1, [@generic="c46f0e7621faa2580f7458e7c7a67a75229b555c4f4621c074361ea1e83f6742e92208d8c9f2a52288f48402e520124f8ce97b1d9a", @generic="f58244bcdacef1d4db27795d3c1d5552f56d3c55ef16d4d0347ea3a5823891d007cc0b4cd022665ad50e4587e3cda21ee99791199334ba9f0bb72cd24afb7afc939cb104bdc4563388a04131e18483b6a95835706cf0fe9273e20e8277bf31d1f8004836400dff156b33111ef4a2e9fb2bdd3206866f731e1ddbf44f4f8800746d3ae7d568572e76c20b9628ff80fcf22da08a65f00d75104ac3c8d7d69b15dc1fc48b0a60f4b2dd9714647d3fa4a80094e97bf378275539051ff77fa2c61654a2", @generic="ef0817fcba41400b6ca7a14ec02bbfd127f3235e4aa28cfb9f973672118e35b39c1f9d1ea7ab9234ec72f36f3aaa1be14fad1291ee8434f24a21f60d839b272bed77defcb5a56965a5f9ff4afbee04f3f8dec41a2b0b559d8f540f3456b06ec9b6343301b1cccb236d51d77ea381f4c8261f03fb3db8a4b14bfdb956f27979ca312a48a2ed790fa092df66623352adc9c1ffd36e2cf50d6be09850a532", @generic="1e1d945c31ed03fbe666f3f12f814a963141a4edd8ad8c946bb6cda1d72e5d4f45449aafb3a981cf8e8b6c99a075425c2d40c572efd68b6252fda2038af0ff3161dc6971a564f90c7acdd6d09eaef4062707b6a06390e2e92f81b652d9c6237a0f63962895fe4936", @generic="e9e7b1a6c16410f65dacf1c7b8ec3bbfecff92fa968804c982ebf5cef787cda36a2e6df2f1913bfb58220b7d9c98e93bddce9d65505e4b19323de8c5248c37058fa065f83d0226d363e2aed14fa0a1157cf853819e4cc913888a3982769831ac1fa8af98366f30aa559d07291a6a8f114cb4c223dc088d61ec1d45916ea4f11f414a777b5fea4379d48c6996aa9a03a05be4780e8898b3d3ae95a553498936eb45126f2a3a7ff3eec9dad49386337737fbbd3bcd1ab8989c79fc1e3470610dd5b6396847f18400e3a667df7bccca0888ff35517a002184744d1331086de6d6b44c5cbf606b215f6edc54b4e670cbab9fcfd1e6e4", @nested={0x10c, 0xa2, 0x0, 0x1, [@typed={0xed, 0x2b, 0x0, 0x0, @binary="8281b303894d99bfacfa6124ce860f189287b868431ac639e82dec8d89f7eaa4fe151346b4cca4929da9c32eba7752e64418936c8788bd4040e9d0c64a91dd78b4851f52356768eba38ca71a8e02e84519228da422b93df742f0d5a8b725a89270275e2b1635210ecea4beaedd6234560d4f5101303b168d5eff4cf6d0a372891a1e50715138db909afea2dd72a269d6c9402e7af5cf3ca4994e9c4ae86b07665cceffbaeb43e29e986a42f68138e16eb3f5a096a6f800d70af6da7cb204f439bc93d932a1cf806d1a64c82fb333781bcda3d11f777f0eab316bbb52e31b3cfff4f2a043209de90536"}, @typed={0x4, 0x5b}, @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private0}]}, @generic="2b459ad7672bb450de05768ff4a56dc4dcecb8dc8cba58c60d6fbb773fc04672686d4871", @typed={0x4, 0xc1}]}, @nested={0xe5, 0x102, 0x0, 0x1, [@generic="498b1404103ce26086a225b63d1065b3a35827c803a8fcd51cfcaf102f4d9bf8281191de91325842969b507560a3a92d8146de4a0f8c10f01c5fbb6b2b2d9067dfcaa35726141a86b2875e6a", @typed={0x8, 0xfa, 0x0, 0x0, @fd}, @generic="b1b58bbd256232fca30c1a44f8d2bf118bfd11dc1256e6f950dccdf915f22634b8a235bd924139a7593b0b716108710bd48b4a4746b83a308e66", @generic="929b41bf4dc80a319c32854bec876cd2d5993c5d5eaa31ef400a71d25ba85e9d77719a4fb9d46f3da3d64d198b6baf6eb15da599080a8e9c7a92e51ffca055", @typed={0x8, 0xe7, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x4, 0xdf}]}, @generic]}, @generic, @generic, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x80}, @nested={0xb0, 0x102, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f4", @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x40}]}, @nested={0x10, 0x3d, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xf4}, @typed={0x4, 0xc1}]}]}, 0x6d4}, {&(0x7f0000002840)={0x10, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x10}, {&(0x7f0000000500)={0x10c, 0x2f, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0xfb, 0x2c, 0x0, 0x0, @binary="6d5242c9bc27daf7dac5069fe8f7d7ab61c2b2c00500d7272f8b49c10597b6dae7c4bf3a1cce0764dcee43773e155806b19ea708a479ea570439c04d3637aa2921b9afddd50821cbb855d249d419f734bb0d46d9fcf3d63aef82349234564082800d4eb81d4ab561c44e475fba247545953c41074e78a6c7267c90b550daeae69fce14b11cdfc92e482744f0911b559a06f75a55ea00ad8a9ba2173737cdfc287e8d7c095ad986ddc90e873f9884afabfee632ad033489c75764a4341fc2c3776d90023004c3f14c13051fcd757c6d4123413e0f0ecd40fbefcd620229cc85b9f1a6d7fe054ec7c0369599c8ad4c4b076ad438123fa4df"}]}, 0x10c}, {&(0x7f0000002ac0)={0x140, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x15, 0xaf, 0x0, 0x1, [@typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic, @generic="4d0741a1df181bb60f"]}, @nested={0x4, 0xec}, @nested={0x114, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="dabbd9ed6cf1f1cfa55d2bb46e3d3f478fbd38970bfc9b4a6ed70fa1dc848aeed45140b06555f27538f5b3e72294ef402807c09479fb6936b4c0c1107fd30db1a93f4c10957eed6e209ec1ceec2afc511c649c302a26806cd59a47022a938f0d5c580fc0720faaf2f94f50a7adbcca24e2d1539a91c27ad025b503054384b9", @nested={0x4, 0x71}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x140}, {&(0x7f0000000640)=ANY=[@ANYBLOB="500100003f0012042dbd7000ebdbdf25e44e6e092d15e25a0d1986d9f4ae12e7954914d017c12564e80dde669764361d6bd9689eaef669715acee8d87b09100b8505deb731e718683e124bd81d509041e6232ba0bae0d8c2cfccbe8cee8f372226d3e2dad7769dd3046b85f5316c867d62542ad7a87c87c0571593c2e6e67151d871f2adccad734f2d3050ff79886646f1aa32af9c8fb885f3a67a058b6987d665087384c725aacd75b3c68d3da4d49353ddf470ed5b0d724525e3aec299e638bb5632699894cf2a324f02371961ada6cd5759b333a63322e0a026a0cc3cda63a36fd60f76c6ee3a1179789008a050f717f0b3779fd92df5e8b7db3071da28adf382d63c75451b63d0b87a7234bc08164bcc82ffb3754d8230d2218eb698ea4d796509b5d048ccbdb4c4190c00230008000000000000001100b1002f6465762f7572616e646f6d0000000000b0a57c"], 0x150}], 0x8, &(0x7f0000005380)=[@cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r7]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5, r2]}}], 0x8c, 0xc000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r7}) sendto$inet6(r8, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2af233aeb1a35e9f7920ec64ef34bf5d89494dfa0097edc24159824dc22bb7db02801d3fbe2b3c958ba6db3f3be3992b08087558d86e43781480cb29fd210798c25ea6fbeb5bfb94193544a2f73bbbc28e307a1da7c2ed86f9ce84b14112aad8323afe1beb6ed25bf9293e2ce32ed2920f1bd3c621ee46b0378578e1"], 0xf0}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ibute type 10 has an invalid length. [ 280.407559][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.749'. [ 280.445186][ T9113] team0: Port device geneve1 added [ 280.847610][ T9119] loop3: detected capacity change from 0 to 16 [ 280.875155][ T9119] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 280.896046][ T9121] loop0: detected capacity change from 0 to 64 [ 280.926550][ T30] audit: type=1800 audit(1781800474.218:30): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.754" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 281.086397][ T5754] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 281.994868][ T5754] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.212768][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.222936][ T5754] usb 3-1: Product: syz [ 282.227355][ T5754] usb 3-1: Manufacturer: syz [ 282.231994][ T5754] usb 3-1: SerialNumber: syz [ 282.378077][ T9139] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 282.446002][ T9138] [U]  [ 282.542604][ T9144] Sensor B: ================= START STATUS ================= [ 282.550352][ T9144] Sensor B: Test Pattern: 75% Colorbar [ 282.555914][ T9144] Sensor B: Show Information: All [ 282.561051][ T9144] Sensor B: Vertical Flip: false [ 282.566296][ T9144] Sensor B: Horizontal Flip: false [ 282.571605][ T9144] Sensor B: Brightness: 128 [ 282.576304][ T9144] Sensor B: Contrast: 128 [ 282.580728][ T9144] Sensor B: Hue: 0 [ 282.584630][ T9144] Sensor B: Saturation: 128 [ 282.589193][ T9144] Sensor B: Pixel Rate: 160000000 [ 282.594543][ T9144] Sensor B: Horizontal Blanking: 800 [ 282.599959][ T9144] Sensor B: Vertical Blanking: 3223 [ 282.605445][ T9144] Sensor B: ================== END STATUS ================== [ 283.062697][ T5754] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 283.335454][ T9151] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 283.408370][ T9151] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 283.565324][ T9152] loop1: detected capacity change from 0 to 1024 [ 283.662633][ T5754] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 283.692524][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.738470][ T9152] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 283.762094][ T9152] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 283.794611][ T9152] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.766: Failed to acquire dquot type 0 [ 283.827258][ T9152] loop1: lost filesystem error report for type 5 error -5 [ 283.828866][ T5754] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 283.843388][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 283.854273][ C0] EXT4-fs (loop1): initial error at time 1781800477: ext4_acquire_dquot:7032 [ 283.863212][ C0] EXT4-fs (loop1): last error at time 1781800477: ext4_acquire_dquot:7032 [ 283.886290][ T9152] EXT4-fs (loop1): 1 truncate cleaned up [ 283.899933][ T9152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.924386][ T9161] loop0: detected capacity change from 0 to 1024 [ 283.950351][ T5754] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 283.985132][ T5754] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 284.106962][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 284.133493][ T801] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 284.534419][ T801] usb 4-1: device descriptor read/64, error -71 [ 284.549396][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 284.632412][ T9173] Sensor B: ================= START STATUS ================= [ 284.640286][ T9173] Sensor B: Test Pattern: 75% Colorbar [ 284.646118][ T9173] Sensor B: Show Information: All [ 284.651401][ T9173] Sensor B: Vertical Flip: false [ 284.656982][ T9173] Sensor B: Horizontal Flip: false [ 284.662892][ T9173] Sensor B: Brightness: 128 [ 284.667776][ T9173] Sensor B: Contrast: 128 [ 284.672598][ T9173] Sensor B: Hue: 0 [ 284.676933][ T9173] Sensor B: Saturation: 128 [ 284.681909][ T9173] Sensor B: Pixel Rate: 160000000 [ 284.687426][ T9173] Sensor B: Horizontal Blanking: 800 [ 284.910196][ T5754] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 285.091989][ T9173] Sensor B: Vertical Blanking: 3223 [ 285.093558][ T5754] usb 3-1: USB disconnect, device number 46 [ 285.122932][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.132919][ T9176] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.197179][ T9176] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.242051][ T9173] Sensor B: ================== END STATUS ================== [ 285.244074][ T801] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 285.261678][ T9178] loop4: detected capacity change from 0 to 1024 [ 285.325498][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.351627][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.359102][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.384804][ T801] usb 4-1: device descriptor read/64, error -71 [ 285.395524][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.402940][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.410381][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.421988][ T9181] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.430311][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.439902][ T9181] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.447705][ T9161] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.464037][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.479159][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.499619][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.514140][ T801] usb usb4-port1: attempt power cycle [ 285.533555][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.564844][ T9181] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.588965][ T9181] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.645889][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.665096][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.695781][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 285.719054][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.242439][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.264704][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.304935][ T801] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 286.341283][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.383753][ T801] usb 4-1: device descriptor read/8, error -71 [ 286.385845][ T9178] hfsplus: request for non-existent node 33423360 in B*Tree [ 286.408225][ T9192] loop1: detected capacity change from 0 to 1024 [ 286.560685][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.037655][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.074208][ T801] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 287.121683][ T9199] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.132016][ T9199] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.254895][ T801] usb 4-1: device descriptor read/8, error -71 [ 287.401784][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.439931][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.494948][ T801] usb usb4-port1: unable to enumerate USB device [ 287.515464][ T9208] syzkaller0: entered promiscuous mode [ 287.523467][ T9199] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.535071][ T9208] syzkaller0: entered allmulticast mode [ 287.544581][ T9199] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.563342][ T9206] loop3: detected capacity change from 0 to 1024 [ 287.591083][ T9206] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 287.612184][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.660643][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 287.687978][ T9206] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 287.721164][ T9199] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.605391][ T9199] hfsplus: request for non-existent node 33423360 in B*Tree [ 288.619325][ T9206] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.781: Failed to acquire dquot type 0 [ 289.098431][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.106178][ T9206] loop3: lost filesystem error report for type 5 error -5 [ 289.113407][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 289.126965][ C0] EXT4-fs (loop3): initial error at time 1781800482: ext4_acquire_dquot:7032 [ 289.135759][ C0] EXT4-fs (loop3): last error at time 1781800482: ext4_acquire_dquot:7032 [ 289.153484][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.218915][ T9206] EXT4-fs (loop3): 1 truncate cleaned up [ 289.225647][ T9206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.303052][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 289.889871][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 290.023828][ T9222] ALSA: mixer_oss: invalid OSS volume '' [ 290.133542][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 290.158693][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 290.215778][ T9234] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 290.311181][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 290.340753][ T9192] hfsplus: request for non-existent node 33423360 in B*Tree [ 292.465787][ T9251] [U]  [ 292.506112][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.697453][ T5754] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 292.953459][ T5857] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 293.107440][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 293.178836][ T5857] usb 1-1: device descriptor read/64, error -71 [ 293.231165][ T5754] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.499894][ T5754] usb 2-1: config 0 interface 0 has no altsetting 0 [ 293.596636][ T5857] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 293.833453][ T5754] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 293.861824][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.876329][ T5754] usb 2-1: Product: syz [ 293.975139][ T5754] usb 2-1: Manufacturer: syz [ 293.980212][ T5754] usb 2-1: SerialNumber: syz [ 293.989229][ T5754] usb 2-1: config 0 descriptor?? [ 293.995827][ T5754] gs_usb 2-1:0.0: Required endpoints not found [ 294.043471][ T5857] usb 1-1: device descriptor read/64, error -71 [ 294.275069][ T5857] usb usb1-port1: attempt power cycle [ 295.189628][ T5857] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 295.227196][ T5857] usb 1-1: device descriptor read/8, error -71 [ 295.390242][ T9278] ALSA: mixer_oss: invalid OSS volume '' [ 295.567754][ T5621] usb 2-1: USB disconnect, device number 30 [ 295.583441][ T5857] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 295.996895][ T5857] usb 1-1: device descriptor read/8, error -71 [ 296.710065][ T9302] netlink: 'syz.5.805': attribute type 10 has an invalid length. [ 296.717901][ T9302] netlink: 40 bytes leftover after parsing attributes in process `syz.5.805'. [ 297.088259][ T5857] usb usb1-port1: unable to enumerate USB device [ 297.271224][ T9300] loop0: detected capacity change from 0 to 1024 [ 297.495129][ T9298] loop1: detected capacity change from 0 to 1024 [ 297.553667][ T9298] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 297.685770][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 297.695528][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 297.702999][ T9298] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 297.706804][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 297.758835][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 297.759100][ T9298] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.808: Failed to acquire dquot type 0 [ 297.798444][ T9298] loop1: lost filesystem error report for type 5 error -5 [ 297.803385][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 297.817047][ C1] EXT4-fs (loop1): initial error at time 1781800491: ext4_acquire_dquot:7032 [ 297.825839][ C1] EXT4-fs (loop1): last error at time 1781800491: ext4_acquire_dquot:7032 [ 298.222762][ T9298] EXT4-fs (loop1): 1 truncate cleaned up [ 298.720375][ T9298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.858288][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 298.946111][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.077244][ T9320] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.216625][ T9320] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.273018][ T9321] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.306145][ T9321] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.515387][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 299.793474][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 300.151726][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 300.215292][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 300.247144][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.499270][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 300.606886][ T9300] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.087164][ T9336] loop5: detected capacity change from 0 to 1024 [ 301.295595][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.772805][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.828531][ T9345] hfsplus: request for non-existent node 33423360 in B*Tree [ 301.913001][ T9345] hfsplus: request for non-existent node 33423360 in B*Tree [ 302.368875][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 302.377316][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 302.644128][ T9359] netlink: 'syz.2.822': attribute type 10 has an invalid length. [ 302.651907][ T9359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.822'. [ 303.300542][ T9359] team0: Port device geneve1 added [ 303.331606][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 303.403319][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 303.651472][ T9345] hfsplus: request for non-existent node 33423360 in B*Tree [ 303.659872][ T9345] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.044261][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.053804][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.333454][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.368151][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.405420][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.447336][ T9336] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.466609][ T9374] loop0: detected capacity change from 0 to 1024 [ 304.527188][ T9374] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.547946][ T9374] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.592155][ T9374] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.628377][ T9374] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.661256][ T9376] loop3: detected capacity change from 0 to 1024 [ 304.690602][ T9374] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.781722][ T9374] hfsplus: request for non-existent node 33423360 in B*Tree [ 304.855172][ T9376] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 304.982641][ T9376] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 305.020366][ T9380] hfsplus: request for non-existent node 33423360 in B*Tree [ 305.971213][ T9376] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.829: Failed to acquire dquot type 0 [ 305.988509][ T9380] hfsplus: request for non-existent node 33423360 in B*Tree [ 306.106398][ T9376] loop3: lost filesystem error report for type 5 error -5 [ 306.113386][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 306.126964][ C1] EXT4-fs (loop3): initial error at time 1781800499: ext4_acquire_dquot:7032 [ 306.135760][ C1] EXT4-fs (loop3): last error at time 1781800499: ext4_acquire_dquot:7032 [ 306.521070][ T9376] EXT4-fs (loop3): 1 truncate cleaned up [ 306.567287][ T9376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.312445][ T9393] loop5: detected capacity change from 0 to 131072 [ 307.371301][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.390014][ T9393] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 307.404729][ T9393] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 307.581367][ T9401] loop0: detected capacity change from 0 to 8 [ 308.108007][ T9401] SQUASHFS error: Failed to read block 0x6de: -5 [ 308.191565][ T9401] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 308.453611][ T9401] SQUASHFS error: Unable to read inode 0x11f [ 308.832449][ T801] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 309.700735][ T801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.760282][ T801] usb 5-1: config 0 has no interfaces? [ 309.769736][ T801] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 309.790162][ T801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.956055][ T801] usb 5-1: config 0 descriptor?? [ 310.622532][ T9427] loop2: detected capacity change from 0 to 1024 [ 310.644255][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.657879][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.677304][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.728973][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.762944][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.770442][ T5747] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 310.787502][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.815353][ T9433] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.835239][ T9433] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.866683][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.883534][ T30] audit: type=1800 audit(1781800504.168:31): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.843" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 310.909313][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.917242][ T5747] usb 6-1: device descriptor read/64, error -71 [ 310.970789][ T9433] hfsplus: request for non-existent node 33423360 in B*Tree [ 310.993415][ T9433] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.051233][ T9435] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 311.059210][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.845'. [ 311.263701][ T5747] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 311.291451][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.310786][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.411244][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.451001][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.473806][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.483295][ T9438] loop3: detected capacity change from 0 to 4096 [ 311.487366][ T9427] hfsplus: request for non-existent node 33423360 in B*Tree [ 311.505343][ T5747] usb 6-1: device descriptor read/64, error -71 [ 311.555194][ T801] usb 5-1: USB disconnect, device number 30 [ 311.640696][ T5747] usb usb6-port1: attempt power cycle [ 312.687546][ T5747] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 312.822857][ T9449] loop2: detected capacity change from 0 to 1024 [ 313.152152][ T5747] usb 6-1: device descriptor read/8, error -71 [ 313.181926][ T9449] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.203566][ T9449] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.224158][ T9449] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.269511][ T9449] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.329851][ T9457] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.359824][ T9457] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.373835][ T801] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 313.382046][ T9449] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.391472][ T9449] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.564215][ T801] usb 1-1: Using ep0 maxpacket: 16 [ 313.587105][ T801] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.607903][ T801] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 313.640361][ T801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.666686][ T801] usb 1-1: config 0 descriptor?? [ 313.676782][ T9468] loop2: detected capacity change from 0 to 1024 [ 313.686562][ T801] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 313.811979][ T9470] loop3: detected capacity change from 0 to 1024 [ 313.828669][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 313.869949][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.296109][ T9473] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.312817][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.313702][ T9473] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.327556][ T5747] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 314.338069][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.348706][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.356476][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.357539][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.364232][ T5747] usb 6-1: device descriptor read/8, error -71 [ 314.371259][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.387110][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.394595][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.403091][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.410773][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.411240][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.425155][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.425946][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.433187][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.459705][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.467408][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.486903][ T5747] usb usb6-port1: unable to enumerate USB device [ 314.528665][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.536601][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.555352][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.555917][ T5754] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 314.569710][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.584471][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.600340][ T9468] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.610958][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.628612][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.649915][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 314.658084][ T9470] hfsplus: request for non-existent node 33423360 in B*Tree [ 315.257415][ T5754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.273409][ T5754] usb 2-1: config 0 has no interfaces? [ 315.282250][ T5754] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.302486][ T5754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.318960][ T5754] usb 2-1: config 0 descriptor?? [ 316.556976][ T9498] loop3: detected capacity change from 0 to 1024 [ 316.575991][ T5857] usb 1-1: USB disconnect, device number 34 [ 316.664979][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.703766][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.734790][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.758061][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.768881][ T9505] loop2: detected capacity change from 0 to 1024 [ 316.811729][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.826631][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 316.889528][ T9511] Sensor B: ================= START STATUS ================= [ 316.897253][ T9511] Sensor B: Test Pattern: 75% Colorbar [ 316.902834][ T9511] Sensor B: Show Information: All [ 316.908104][ T9511] Sensor B: Vertical Flip: false [ 316.913179][ T9511] Sensor B: Horizontal Flip: false [ 316.918520][ T9511] Sensor B: Brightness: 128 [ 316.923179][ T9511] Sensor B: Contrast: 128 [ 316.927699][ T9511] Sensor B: Hue: 0 [ 316.931539][ T9511] Sensor B: Saturation: 128 [ 316.936137][ T9511] Sensor B: Pixel Rate: 160000000 [ 316.941270][ T9511] Sensor B: Horizontal Blanking: 800 [ 316.946703][ T9511] Sensor B: Vertical Blanking: 3223 [ 316.952019][ T9511] Sensor B: ================== END STATUS ================== [ 317.043800][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.057985][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.133331][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.169881][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.359639][ T9514] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.397783][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.473875][ T9514] hfsplus: request for non-existent node 33423360 in B*Tree [ 317.509821][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.269853][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.277290][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.283291][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.295223][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.303661][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.314409][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.326156][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.347997][ T9519] loop0: detected capacity change from 0 to 64 [ 318.357216][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.372313][ T5747] usb 2-1: USB disconnect, device number 31 [ 318.407719][ T9514] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.416586][ T9514] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.429188][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.436828][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.451118][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.469505][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.486642][ T9505] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.508924][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.535443][ T9514] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.553476][ T9514] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.565358][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.639535][ T9498] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.687200][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 318.749818][ T9504] hfsplus: request for non-existent node 33423360 in B*Tree [ 319.513567][ T5747] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 319.653423][ T5747] usb 1-1: device descriptor read/64, error -71 [ 319.673415][ T990] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 319.703536][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 319.722729][ T9535] loop4: detected capacity change from 0 to 32768 [ 319.844296][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 319.854802][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 319.864295][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.865745][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 319.887744][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 319.900777][ T5747] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 319.902205][ T990] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 319.908775][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 319.931797][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 319.958412][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.958682][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.052562][ T990] usb 2-1: config 0 descriptor?? [ 320.063776][ T5747] usb 1-1: device descriptor read/64, error -71 [ 320.169451][ T990] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 320.281842][ T5747] usb usb1-port1: attempt power cycle [ 320.350628][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 320.402867][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 320.426812][ T9] usb 4-1: Product: syz [ 320.435710][ T9] usb 4-1: Manufacturer: syz [ 320.446134][ T9] usb 4-1: SerialNumber: syz [ 320.462729][ T9] usb 4-1: config 0 descriptor?? [ 320.478860][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 320.507299][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 320.748438][ T5747] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 321.454722][ T5747] usb 1-1: device descriptor read/8, error -71 [ 321.733313][ T5747] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 321.816819][ T5747] usb 1-1: device descriptor read/8, error -71 [ 321.851996][ T9] usb 4-1: USB disconnect, device number 36 [ 321.852048][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 321.896280][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 321.913163][ T30] audit: type=1800 audit(1781800515.198:32): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.887" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 321.933603][ T5747] usb usb1-port1: unable to enumerate USB device [ 322.303525][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 322.414038][ T9566] loop0: detected capacity change from 0 to 512 [ 322.426843][ T9566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 322.435331][ T9566] System zones: 1-12 [ 322.439373][ T9566] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.891: Directory hole found for htree index block 0 [ 322.451643][ T9566] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 322.451978][ T9566] EXT4-fs (loop0): Remounting filesystem read-only [ 322.461021][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 322.461039][ C1] EXT4-fs (loop0): initial error at time 1781800515: dx_probe:791: inode 2 [ 322.461067][ C1] EXT4-fs (loop0): last error at time 1781800515: dx_probe:791: inode 2 [ 322.490978][ T9566] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 322.499215][ T9566] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 322.508584][ T9566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.617773][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.739978][ T801] usb 2-1: USB disconnect, device number 32 [ 322.757270][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.905199][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.011354][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.171570][ T10] usb 6-1: config 0 descriptor?? [ 323.381587][ T9574] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 323.389337][ T9574] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 323.398922][ T9573] [U]  [ 323.699723][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.103985][ T9581] loop3: detected capacity change from 0 to 764 [ 324.391093][ T9590] loop2: detected capacity change from 0 to 764 [ 324.837354][ T9593] loop1: detected capacity change from 0 to 256 [ 325.042337][ T9593] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 325.257397][ T990] usb 6-1: USB disconnect, device number 30 [ 325.435013][ T9598] loop3: detected capacity change from 0 to 1024 [ 326.168328][ T9602] loop2: detected capacity change from 0 to 1024 [ 326.186716][ T9598] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.218184][ T9602] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.244091][ T9598] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.300235][ T9602] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.459964][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.472200][ T9606] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.515706][ T9606] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.524853][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.577868][ T9598] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.604323][ T9602] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.605656][ T9598] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.639718][ T9602] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.668942][ T9606] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.673513][ T5857] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 326.694447][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.709634][ T9606] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.713592][ T9607] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.783897][ T9618] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.797623][ T9617] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.806482][ T9618] hfsplus: request for non-existent node 33423360 in B*Tree [ 326.819417][ T9617] hfsplus: request for non-existent node 33423360 in B*Tree [ 327.222398][ T9627] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 327.230207][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'. [ 327.263435][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 327.320878][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.344717][ T9602] hfsplus: request for non-existent node 33423360 in B*Tree [ 327.353646][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.357111][ T9598] hfsplus: request for non-existent node 33423360 in B*Tree [ 327.364927][ T9602] hfsplus: request for non-existent node 33423360 in B*Tree [ 327.379232][ T9598] hfsplus: request for non-existent node 33423360 in B*Tree [ 327.387053][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 327.403736][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.441315][ T5857] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 327.465200][ T5857] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.487060][ T5857] usb 5-1: Manufacturer: syz [ 327.500276][ T5857] usb 5-1: config 0 descriptor?? [ 329.226486][ T9650] Sensor B: ================= START STATUS ================= [ 329.234189][ T9650] Sensor B: Test Pattern: 75% Colorbar [ 329.239828][ T9650] Sensor B: Show Information: All [ 329.245040][ T9650] Sensor B: Vertical Flip: false [ 329.250146][ T9650] Sensor B: Horizontal Flip: false [ 329.255349][ T9650] Sensor B: Brightness: 128 [ 329.260241][ T9650] Sensor B: Contrast: 128 [ 329.264754][ T9650] Sensor B: Hue: 0 [ 329.268615][ T9650] Sensor B: Saturation: 128 [ 329.273292][ T9650] Sensor B: Pixel Rate: 160000000 [ 329.278806][ T9650] Sensor B: Horizontal Blanking: 800 [ 329.284362][ T9650] Sensor B: Vertical Blanking: 3223 [ 329.289734][ T9650] Sensor B: ================== END STATUS ================== [ 330.112418][ T801] usb 5-1: USB disconnect, device number 31 [ 330.226951][ T9651] [U]  [ 330.398979][ T9658] loop4: detected capacity change from 0 to 1024 [ 330.492816][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.520263][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.576330][ T9642] loop3: detected capacity change from 0 to 32768 [ 330.658851][ T9663] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.681729][ T9665] loop1: detected capacity change from 0 to 764 [ 330.691130][ T9663] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.761674][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 330.842393][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.018346][ T9663] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.192657][ T9663] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.568370][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.677318][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.886180][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.911465][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 331.947078][ T9676] loop0: detected capacity change from 0 to 1024 [ 332.051533][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.059131][ T9658] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.079043][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.202413][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.613757][ T9679] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.621085][ T9679] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.693576][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 332.735948][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 333.273762][ T9679] hfsplus: request for non-existent node 33423360 in B*Tree [ 333.546144][ T9679] hfsplus: request for non-existent node 33423360 in B*Tree [ 333.666157][ T9689] hfsplus: request for non-existent node 33423360 in B*Tree [ 333.814771][ T9689] hfsplus: request for non-existent node 33423360 in B*Tree [ 333.887394][ T9691] loop3: detected capacity change from 0 to 1024 [ 333.901226][ T9696] loop5: detected capacity change from 0 to 512 [ 333.928080][ T9696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 334.141656][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.152947][ T9696] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.936: corrupted xattr entries [ 334.182020][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.190581][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.193462][ T9696] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 334.198304][ T9696] EXT4-fs (loop5): Remounting filesystem read-only [ 334.209073][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 334.209092][ C0] EXT4-fs (loop5): initial error at time 1781800527: xattr_find_entry:337: inode 15 [ 334.209126][ C0] EXT4-fs (loop5): last error at time 1781800527: xattr_find_entry:337: inode 15 [ 334.293116][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.306838][ T9696] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 334.306863][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.306877][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.320331][ T9696] EXT4-fs (loop5): 1 truncate cleaned up [ 334.341874][ T9699] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.351980][ T9699] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.412135][ T9696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.443222][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.451406][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.464614][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.490110][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.522073][ T9699] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.531731][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.568917][ T9676] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.705199][ T9699] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.735692][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 334.743153][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 335.259271][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 335.300445][ T9711] loop4: detected capacity change from 0 to 512 [ 335.332731][ T9691] hfsplus: request for non-existent node 33423360 in B*Tree [ 335.378123][ T9711] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.629328][ T9711] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.940: corrupted xattr entries [ 335.645216][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.810847][ T9711] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 335.813381][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 335.828978][ C0] EXT4-fs (loop4): initial error at time 1781800529: xattr_find_entry:337: inode 15 [ 335.838359][ C0] EXT4-fs (loop4): last error at time 1781800529: xattr_find_entry:337: inode 15 [ 335.893922][ T9719] xt_connbytes: Forcing CT accounting to be enabled [ 335.900820][ T9719] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 335.928244][ T9711] EXT4-fs (loop4): Remounting filesystem read-only [ 336.291129][ T9711] EXT4-fs (loop4): 1 truncate cleaned up [ 336.317243][ T9711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.335432][ T9721] loop5: detected capacity change from 0 to 1024 [ 336.965805][ T9721] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.030474][ T9721] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.088244][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.157461][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.226859][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.376401][ T9729] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.447325][ T9729] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.500347][ T9721] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.619586][ T9721] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.637181][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.637209][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.704982][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.763152][ T9728] hfsplus: request for non-existent node 33423360 in B*Tree [ 337.971134][ T9721] hfsplus: request for non-existent node 33423360 in B*Tree [ 338.046171][ T9721] hfsplus: request for non-existent node 33423360 in B*Tree [ 339.971987][ T801] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 340.205911][ T801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.219353][ T801] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.229691][ T801] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 340.304844][ T801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.315690][ T801] usb 4-1: config 0 descriptor?? [ 340.654621][ T9761] loop0: detected capacity change from 0 to 1024 [ 341.299843][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.319769][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.350373][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.371023][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.397566][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.408950][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.424046][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.439659][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.492451][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.519054][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.559010][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.573924][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.584714][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 341.592204][ T9761] hfsplus: request for non-existent node 33423360 in B*Tree [ 342.583540][ T9782] loop4: detected capacity change from 0 to 1024 [ 342.592916][ T990] usb 4-1: USB disconnect, device number 37 [ 342.642897][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 342.677934][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 342.717019][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 342.927929][ T9786] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.976137][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.976160][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.977266][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.977282][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.978654][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.978671][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.980852][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.980868][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.982264][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 343.982280][ T9782] hfsplus: request for non-existent node 33423360 in B*Tree [ 344.613281][ T9797] loop2: detected capacity change from 0 to 8 [ 344.617980][ T9797] SQUASHFS error: Failed to read block 0x6de: -5 [ 344.617998][ T9797] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 344.618012][ T9797] SQUASHFS error: Unable to read inode 0x11f [ 345.524549][ T9805] loop4: detected capacity change from 0 to 1024 [ 345.721149][ T9810] loop0: detected capacity change from 0 to 512 [ 345.741910][ T9810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 345.750057][ T9810] System zones: 1-12 [ 345.754225][ T9810] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.969: Directory hole found for htree index block 0 [ 345.766537][ T9810] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 345.773352][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 345.788848][ C0] EXT4-fs (loop0): initial error at time 1781800539: dx_probe:791: inode 2 [ 345.797489][ C0] EXT4-fs (loop0): last error at time 1781800539: dx_probe:791: inode 2 [ 345.814737][ T9810] EXT4-fs (loop0): Remounting filesystem read-only [ 345.821321][ T9810] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 345.829566][ T9810] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 345.838595][ T9810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.864614][ T9805] hfsplus: request for non-existent node 33423360 in B*Tree [ 345.872707][ T9805] hfsplus: request for non-existent node 33423360 in B*Tree [ 345.884487][ T9805] hfsplus: request for non-existent node 33423360 in B*Tree [ 345.892771][ T9805] hfsplus: request for non-existent node 33423360 in B*Tree [ 346.099468][ T9813] hfsplus: request for non-existent node 33423360 in B*Tree [ 346.246770][ T9813] hfsplus: request for non-existent node 33423360 in B*Tree [ 346.796393][ T9817] loop5: detected capacity change from 0 to 1024 [ 346.835790][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.567930][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.589567][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.592233][ T9828] loop0: detected capacity change from 0 to 1024 [ 347.758094][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.786149][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.829964][ T9830] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.888652][ T9828] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.894240][ T9830] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.927389][ T9828] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.970986][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 347.983820][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.006912][ T9832] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.117317][ T9832] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.148539][ T9831] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.235248][ T9831] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.288158][ T9828] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.515313][ T9828] hfsplus: request for non-existent node 33423360 in B*Tree [ 348.967794][ T9837] ALSA: mixer_oss: invalid OSS volume '' [ 348.978212][ T9828] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.001751][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.033396][ T9828] hfsplus: request for non-existent node 33423360 in B*Tree [ 349.057720][ T9817] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.384964][ T9852] loop1: detected capacity change from 0 to 1024 [ 350.693240][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.758976][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 350.917984][ T9861] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.026112][ T9861] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.413963][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.549866][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.698326][ T9861] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.718544][ T9861] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.737450][ T9863] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.749658][ T9863] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.769274][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.769293][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.770794][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.770832][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.773985][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 351.774007][ T9852] hfsplus: request for non-existent node 33423360 in B*Tree [ 353.244660][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 353.370247][ T9878] [U]  [ 353.494180][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 353.532933][ T10] usb 4-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 353.574714][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.606667][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 225, changing to 11 [ 353.628469][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25453, setting to 1024 [ 353.705848][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.858461][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 354.058368][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 354.123392][ T10] usb 4-1: Manufacturer: syz [ 354.143582][ T10] usb 4-1: config 0 descriptor?? [ 355.489075][ T10] rc_core: IR keymap rc-hauppauge not found [ 355.495456][ T10] Registered IR keymap rc-empty [ 355.500654][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 355.523737][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 355.708029][ T9907] loop4: detected capacity change from 0 to 2048 [ 355.942073][ T9907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.965800][ T9907] EXT4-fs (loop4): shut down requested (2) [ 356.002364][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 356.015586][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 356.044486][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 356.138024][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 356.206456][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 356.343639][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 356.351816][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.441726][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 356.567278][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 356.734032][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 357.046960][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 357.100246][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 357.141426][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 357.189011][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 357.264727][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 357.302192][ T10] usb 4-1: USB disconnect, device number 38 [ 357.597006][ T801] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 357.835103][ T801] usb 3-1: Using ep0 maxpacket: 16 [ 357.851638][ T801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.889780][ T801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.929495][ T801] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 357.970453][ T801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.027060][ T801] usb 3-1: config 0 descriptor?? [ 358.105464][ T9934] loop0: detected capacity change from 0 to 1024 [ 358.168589][ T9934] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.206617][ T9934] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.244762][ T9936] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.331257][ T9936] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.421493][ T9934] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.460208][ T9934] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.466111][ T9930] loop5: detected capacity change from 0 to 32768 [ 358.507372][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 358.515198][ T801] usbhid 3-1:0.0: can't add hid device: -32 [ 358.521210][ T801] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 358.536712][ T801] usb 3-1: USB disconnect, device number 47 [ 358.550294][ T9936] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.558446][ T9942] loop1: detected capacity change from 0 to 1024 [ 358.574228][ T9936] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.624221][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.646597][ T9934] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.647616][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.676709][ T9943] [U]  [ 358.693953][ T9934] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.823862][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.837077][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.910093][ T9951] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.958730][ T9951] hfsplus: request for non-existent node 33423360 in B*Tree [ 358.968426][ T9948] loop4: detected capacity change from 0 to 4096 [ 358.995402][ T9948] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 359.010213][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.038649][ T9948] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 359.039355][ T9953] loop3: detected capacity change from 0 to 1024 [ 359.076392][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.090432][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 359.112682][ T9951] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.121926][ T9953] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.146309][ T9953] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.239243][ T9959] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.288074][ T9951] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.424574][ T9959] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.693154][ T9960] loop0: detected capacity change from 0 to 2048 [ 359.809786][ T9960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.915304][ T9953] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.955685][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 359.979913][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.020935][ T9953] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.367206][ T9965] loop5: detected capacity change from 0 to 1024 [ 360.390421][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.400129][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.443013][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.450895][ T9942] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.484066][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.495206][ T9963] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 360.586849][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.680485][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 360.712785][ T9968] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.754011][ T9968] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.919283][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 360.953390][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 361.271731][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1019'. [ 361.295061][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 361.329237][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 361.570814][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 361.628363][ T9965] hfsplus: request for non-existent node 33423360 in B*Tree [ 362.309118][ T9989] loop0: detected capacity change from 0 to 64 [ 363.073577][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 363.229626][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 363.268271][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.290445][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.332237][ T24] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 363.367927][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.415216][ T24] usb 2-1: config 0 descriptor?? [ 363.610844][T10007] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 363.846045][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 363.856499][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 364.216139][ T24] usb 2-1: USB disconnect, device number 33 [ 366.523908][ T801] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 366.588956][T10037] loop1: detected capacity change from 0 to 1024 [ 366.668170][T10037] hfsplus: request for non-existent node 33423360 in B*Tree [ 366.685364][T10037] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.132014][ T801] usb 6-1: Using ep0 maxpacket: 32 [ 367.146815][T10040] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.164085][ T801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.186690][T10040] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.210038][ T801] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.238397][ T801] usb 6-1: config 0 interface 0 has no altsetting 0 [ 367.254794][T10037] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.256804][ T801] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 367.268437][T10037] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.287198][ T801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.325858][ T801] usb 6-1: Product: syz [ 367.327552][T10037] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.340062][ T801] usb 6-1: Manufacturer: syz [ 367.351576][ T801] usb 6-1: SerialNumber: syz [ 367.367153][ T801] usb 6-1: config 0 descriptor?? [ 367.373807][T10037] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.387046][ T801] gs_usb 6-1:0.0: Required endpoints not found [ 367.905479][T10048] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 369.034457][T10065] loop3: detected capacity change from 0 to 512 [ 369.050573][T10065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.053974][ T801] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 369.088584][T10065] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.1049: corrupted xattr entries [ 369.126814][T10065] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 369.127214][T10065] EXT4-fs (loop3): Remounting filesystem read-only [ 369.143347][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 369.149778][T10065] EXT4-fs (loop3): 1 truncate cleaned up [ 369.150153][ C1] EXT4-fs (loop3): initial error at time 1781800562: xattr_find_entry:337: inode 15 [ 369.157076][T10065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.165146][ C1] EXT4-fs (loop3): last error at time 1781800562: xattr_find_entry:337: inode 15 [ 369.225887][ T801] usb 1-1: Using ep0 maxpacket: 16 [ 369.494320][ T801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.662831][ T801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.035090][ T801] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 370.047039][ T801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.061642][ T801] usb 1-1: config 0 descriptor?? [ 370.072618][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.090979][ T990] usb 6-1: USB disconnect, device number 31 [ 370.491656][ T801] usbhid 1-1:0.0: can't add hid device: -71 [ 371.343392][ T801] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 371.352958][ T801] usb 1-1: USB disconnect, device number 39 [ 371.402696][T10087] loop0: detected capacity change from 0 to 8 [ 371.418609][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 371.478776][T10087] SQUASHFS error: Failed to read block 0x6de: -5 [ 371.524732][T10087] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 371.558558][T10087] SQUASHFS error: Unable to read inode 0x11f [ 372.712345][T10088] loop2: detected capacity change from 0 to 2048 [ 372.746742][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.981120][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.018934][T10097] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 374.084215][T10088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.871058][T10105] loop4: detected capacity change from 0 to 4096 [ 374.922705][T10105] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 374.939921][ T801] libceph: connect (1)[c::]:6789 error -99 [ 374.958544][T10105] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 374.968241][T10107] [U]  [ 374.989678][ T801] libceph: mon0 (1)[c::]:6789 connect error [ 375.068386][T10102] ceph: No mds server is up or the cluster is laggy [ 375.737298][T10115] loop2: detected capacity change from 0 to 131072 [ 375.871124][T10115] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 376.079600][T10115] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 376.291458][T10131] netlink: 'syz.5.1065': attribute type 10 has an invalid length. [ 376.930691][T10131] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1065'. [ 377.365251][T10123] loop4: detected capacity change from 0 to 4096 [ 377.505820][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 377.846284][T10139] netlink: 'syz.5.1070': attribute type 7 has an invalid length. [ 377.861314][T10123] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 377.883127][T10139] : entered promiscuous mode [ 377.933434][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 377.961980][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.025657][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.086247][T10138] loop1: detected capacity change from 0 to 131072 [ 378.087941][ T10] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 378.103837][T10123] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 378.169760][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.252896][T10138] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 378.265848][ T10] usb 4-1: config 0 descriptor?? [ 378.276056][T10138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 378.334326][T10149] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 379.859561][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 379.932636][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 379.999806][T10163] 9p: Bad value for 'wfdno' [ 380.288617][ T10] usb 4-1: USB disconnect, device number 39 [ 382.194756][T10189] 9p: Bad value for 'rfdno' [ 385.042294][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 385.083446][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 385.102104][T10219] netlink: 'syz.2.1069': attribute type 7 has an invalid length. [ 385.138456][T10219] : entered promiscuous mode [ 385.659440][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 385.685226][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.812643][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.843686][ T10] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 385.858668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.869440][ T10] usb 1-1: config 0 descriptor?? [ 385.916102][T10228] 9p: Bad value for 'wfdno' [ 387.045887][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 387.083469][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 387.130354][ T10] usb 1-1: USB disconnect, device number 40 [ 387.227147][T10242] loop4: detected capacity change from 0 to 512 [ 387.239561][T10242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022] [ 387.247569][T10242] System zones: 1-12 [ 387.251651][T10242] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1098: Directory hole found for htree index block 0 [ 387.264068][T10242] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 387.265216][T10242] EXT4-fs (loop4): Remounting filesystem read-only [ 387.274266][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 387.274283][ C1] EXT4-fs (loop4): initial error at time 1781800580: dx_probe:791: inode 2 [ 387.274309][ C1] EXT4-fs (loop4): last error at time 1781800580: dx_probe:791: inode 2 [ 387.304271][T10242] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 387.312476][T10242] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 387.331939][T10242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.912288][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.936552][T10250] loop5: detected capacity change from 0 to 1024 [ 389.072154][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.079611][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.092902][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.106841][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.227600][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.290627][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 389.393432][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.705946][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 389.794817][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 390.061557][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 390.174529][T10250] hfsplus: request for non-existent node 33423360 in B*Tree [ 390.519706][T10270] loop0: detected capacity change from 0 to 2048 [ 391.455663][T10262] loop2: detected capacity change from 0 to 4096 [ 391.497793][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 391.517391][T10262] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 391.525430][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 391.583135][T10281] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 391.591092][T10281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1107'. [ 391.853566][T10275] ceph: No mds server is up or the cluster is laggy [ 392.012923][T10262] ntfs3(loop2): volume is dirty and "force" flag is not set! [ 392.047111][T10270] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.404679][T10288] loop5: detected capacity change from 0 to 8 [ 392.502628][T10288] SQUASHFS error: Failed to read block 0x6de: -5 [ 392.570587][T10288] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 393.504770][T10288] SQUASHFS error: Unable to read inode 0x11f [ 395.434908][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 395.522188][T10309] netlink: 'syz.5.1115': attribute type 10 has an invalid length. [ 395.530341][T10309] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1115'. [ 395.623436][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 395.916269][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.944693][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.956627][ T9] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 395.970555][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.983795][ T9] usb 2-1: config 0 descriptor?? [ 396.247203][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 396.587138][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 396.594084][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 396.819845][T10326] netlink: 'syz.4.1121': attribute type 7 has an invalid length. [ 396.857969][T10326] : entered promiscuous mode [ 397.139570][ T9] usb 2-1: USB disconnect, device number 34 [ 400.551013][T10363] netlink: 'syz.2.1131': attribute type 7 has an invalid length. [ 400.953655][ T5747] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 401.273803][ T5747] usb 1-1: Using ep0 maxpacket: 32 [ 401.290719][ T5747] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 401.290749][ T5747] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.290773][ T5747] usb 1-1: config 0 has no interface number 0 [ 401.290810][ T5747] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.290845][ T5747] usb 1-1: config 0 interface 184 has no altsetting 0 [ 401.298116][ T5747] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 401.298148][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.298175][ T5747] usb 1-1: Product: syz [ 401.298193][ T5747] usb 1-1: Manufacturer: syz [ 401.298213][ T5747] usb 1-1: SerialNumber: syz [ 401.300243][ T5747] usb 1-1: config 0 descriptor?? [ 401.307545][ T5747] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 401.307687][ T5747] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 401.623417][ T5747] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 401.737571][T10375] loop4: detected capacity change from 0 to 1024 [ 401.805377][ T5747] usb 3-1: Using ep0 maxpacket: 16 [ 401.824642][ T5747] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.838650][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 401.855029][ T5747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.855961][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 401.903420][ T5747] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 401.935630][ T5747] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.948133][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 401.978518][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 401.999079][ T5747] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 402.001872][T10383] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.034353][ T5747] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 402.035320][T10383] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.070871][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.081252][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.156714][ T5747] usb 3-1: Manufacturer: syz [ 402.164132][ T5747] usb 3-1: config 0 descriptor?? [ 402.208724][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.223463][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.241448][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.256711][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.276067][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.284132][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.296663][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.312679][T10375] hfsplus: request for non-existent node 33423360 in B*Tree [ 402.411202][T10388] vivid-000: disconnect [ 402.816986][ T5754] usb 1-1: USB disconnect, device number 41 [ 402.906144][T10399] loop0: detected capacity change from 0 to 8 [ 402.960970][T10399] SQUASHFS error: Failed to read block 0x6de: -5 [ 402.983401][T10399] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 403.008130][T10399] SQUASHFS error: Unable to read inode 0x11f [ 403.030119][T10382] vivid-000: reconnect [ 403.263519][ T5754] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 403.473523][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 403.548341][ T5754] usb 4-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 403.660677][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.675736][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 225, changing to 11 [ 403.687170][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25453, setting to 1024 [ 403.702123][ T5754] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.720719][ T5754] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.729872][ T5754] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.774126][ T5754] usb 4-1: Manufacturer: syz [ 403.782739][ T5754] usb 4-1: config 0 descriptor?? [ 404.335216][ T5754] rc_core: IR keymap rc-hauppauge not found [ 404.351955][ T5754] Registered IR keymap rc-empty [ 404.362862][ T10] usb 3-1: USB disconnect, device number 48 [ 404.372071][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 404.413599][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 404.427980][T10409] loop5: detected capacity change from 0 to 1024 [ 404.453957][ T5754] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 404.592566][ T5754] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 404.616286][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 404.630230][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 404.639505][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 404.661322][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.205852][ T4931] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 405.218705][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.228226][ T4931] CPU: 0 UID: 0 PID: 4931 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.228263][ T4931] Tainted: [L]=SOFTLOCKUP [ 405.228272][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.228289][ T4931] Workqueue: hci1 hci_rx_work [ 405.228330][ T4931] Call Trace: [ 405.228339][ T4931] [ 405.228349][ T4931] dump_stack_lvl+0xe8/0x150 [ 405.228377][ T4931] sysfs_create_dir_ns+0x271/0x2a0 [ 405.228408][ T4931] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 405.228442][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228474][ T4931] ? do_raw_spin_unlock+0xf5/0x210 [ 405.228509][ T4931] kobject_add_internal+0x622/0xcd0 [ 405.228557][ T4931] kobject_add+0x163/0x240 [ 405.228591][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228624][ T4931] ? __pfx_kobject_add+0x10/0x10 [ 405.228661][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228691][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228722][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228750][ T4931] ? get_device_parent+0x366/0x3a0 [ 405.228786][ T4931] device_add+0x3fa/0xb80 [ 405.228821][ T4931] hci_conn_add_sysfs+0xd5/0x210 [ 405.228853][ T4931] le_conn_complete_evt+0xfef/0x1580 [ 405.228877][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228914][ T4931] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 405.228937][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.228965][ T4931] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 405.228999][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229027][ T4931] ? skb_pull_data+0xf0/0x200 [ 405.229068][ T4931] hci_le_conn_complete_evt+0x187/0x470 [ 405.229110][ T4931] hci_event_packet+0x67a/0xf10 [ 405.229146][ T4931] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 405.229184][ T4931] ? __pfx_hci_event_packet+0x10/0x10 [ 405.229217][ T4931] ? rcu_is_watching+0x15/0xb0 [ 405.229243][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229274][ T4931] ? rcu_is_watching+0x15/0xb0 [ 405.229299][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229326][ T4931] ? trace_pid_list_clear+0x300/0x5e0 [ 405.229357][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229385][ T4931] ? hci_send_to_monitor+0xe2/0x590 [ 405.229412][ T4931] hci_rx_work+0x3ee/0x1020 [ 405.229448][ T4931] ? process_scheduled_works+0xa20/0x14e0 [ 405.229481][ T4931] process_scheduled_works+0xa8e/0x14e0 [ 405.229533][ T4931] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.229563][ T4931] ? do_raw_spin_lock+0x12b/0x2f0 [ 405.229597][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229625][ T4931] ? assign_work+0x3cf/0x5d0 [ 405.229658][ T4931] worker_thread+0xa47/0xfb0 [ 405.229692][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229726][ T4931] ? __kthread_parkme+0x71/0x1f0 [ 405.229767][ T4931] kthread+0x388/0x470 [ 405.229791][ T4931] ? __pfx_worker_thread+0x10/0x10 [ 405.229822][ T4931] ? __pfx_kthread+0x10/0x10 [ 405.229846][ T4931] ret_from_fork+0x514/0xb70 [ 405.229872][ T4931] ? __pfx_ret_from_fork+0x10/0x10 [ 405.229895][ T4931] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.229923][ T4931] ? __switch_to+0xc89/0x1420 [ 405.229959][ T4931] ? __pfx_kthread+0x10/0x10 [ 405.229983][ T4931] ret_from_fork_asm+0x1a/0x30 [ 405.230024][ T4931] [ 405.232776][ T4931] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 405.253567][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.267810][ T4931] Bluetooth: hci1: failed to register connection device [ 405.433336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 405.707062][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 405.776065][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.809047][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 405.844129][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.858701][T10422] hfsplus: request for non-existent node 33423360 in B*Tree [ 405.893515][T10422] hfsplus: request for non-existent node 33423360 in B*Tree [ 405.902616][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.924927][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.945326][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 405.975975][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 405.982638][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.031342][T10427] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.043630][ T5754] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 406.068826][T10427] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.081084][ T5754] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 406.095121][ T5754] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 406.248969][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.260193][T10432] loop2: detected capacity change from 0 to 1024 [ 406.263429][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.278203][ T5754] usb 4-1: USB disconnect, device number 40 [ 406.341093][T10435] xt_connbytes: Forcing CT accounting to be enabled [ 406.348084][T10435] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 406.725139][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.743431][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.794435][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 406.954550][T10409] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.101215][T10436] 9p: Bad value for 'rfdno' [ 407.193633][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.203618][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.251078][T10439] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.292178][T10439] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.385384][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.417143][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.428827][T10439] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.462375][T10439] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.623639][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 407.649885][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.294753][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.346399][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.401407][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.431511][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.489558][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 408.540808][T10432] hfsplus: request for non-existent node 33423360 in B*Tree [ 409.688183][T10466] loop1: detected capacity change from 0 to 512 [ 409.705115][T10466] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 410.026017][T10466] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1163: corrupted xattr entries [ 410.154214][T10466] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 410.155281][T10466] EXT4-fs (loop1): Remounting filesystem read-only [ 410.164488][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 410.164509][ C0] EXT4-fs (loop1): initial error at time 1781800603: xattr_find_entry:337: inode 15 [ 410.164571][ C0] EXT4-fs (loop1): last error at time 1781800603: xattr_find_entry:337: inode 15 [ 410.499529][T10466] EXT4-fs (loop1): 1 truncate cleaned up [ 410.516676][T10466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.660453][T10453] syz.3.1159 (10453): drop_caches: 2 [ 410.683386][ T801] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 410.794591][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.865240][ T801] usb 3-1: Using ep0 maxpacket: 32 [ 411.127161][T10481] 9p: Bad value for 'wfdno' [ 411.787996][ T801] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 411.796289][ T801] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 411.807443][ T801] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 411.818675][ T801] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 411.876438][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'. [ 411.879147][ T801] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 411.925923][T10492] loop1: detected capacity change from 0 to 512 [ 411.933566][T10492] EXT4-fs: Ignoring removed orlov option [ 411.939257][T10492] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.948719][T10492] EXT4-fs: Ignoring removed nobh option [ 411.980964][T10492] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1172: corrupted in-inode xattr: e_value size too large [ 412.020689][ T801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 412.028513][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'. [ 412.044136][ T801] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 412.063272][T10492] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 412.065205][T10492] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1172: couldn't read orphan inode 15 (err -117) [ 412.073369][ T801] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 412.074379][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 412.093354][ T801] usb 3-1: Product: syz [ 412.094539][ C1] EXT4-fs (loop1): initial error at time 1781800605: ext4_iget_extra_inode:5128: inode 15 [ 412.111054][ T801] usb 3-1: Manufacturer: syz [ 412.114933][ C1] EXT4-fs (loop1): last error at time 1781800605: ext4_iget_extra_inode:5128: inode 15 [ 412.131541][ T801] usb 3-1: SerialNumber: syz [ 412.137917][ T801] usb 3-1: config 0 descriptor?? [ 412.158252][T10492] loop1: lost filesystem error report for type 5 error -117 [ 412.159436][T10492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.194950][ T801] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 412.207448][ T801] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 412.448047][T10469] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 412.457845][T10492] input input62: cannot allocate more than FF_MAX_EFFECTS effects [ 412.500051][ T5857] usb 3-1: USB disconnect, device number 49 [ 412.513593][ T5857] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 412.775698][T10495] loop5: detected capacity change from 0 to 2048 [ 412.803468][ T5747] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 412.851733][T10495] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.967347][ T5747] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 413.012589][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.035139][ T5747] usb 2-1: Product: syz [ 413.051329][ T5747] usb 2-1: Manufacturer: syz [ 413.076892][ T5747] usb 2-1: SerialNumber: syz [ 413.120239][ T5747] usb 2-1: config 0 descriptor?? [ 413.360992][T10516] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 413.535837][T10518] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1179'. [ 414.976704][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 415.028079][ T9] usb 2-1: USB disconnect, device number 35 [ 415.196415][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.279069][T10521] Process accounting resumed [ 415.946859][T10528] loop4: detected capacity change from 0 to 2048 [ 416.270138][T10528] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.492984][T10537] loop2: detected capacity change from 0 to 128 [ 416.855343][T10537] loop2: detected capacity change from 0 to 512 [ 417.020479][T10542] 9p: Bad value for 'wfdno' [ 417.343069][T10537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 417.412917][T10537] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1185: Invalid block bitmap block 0 in block_group 0 [ 417.530130][T10537] loop2: lost filesystem error report for type 5 error -117 [ 417.533338][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 417.547132][ C1] EXT4-fs (loop2): initial error at time 1781800610: ext4_read_block_bitmap_nowait:483 [ 417.556790][ C1] EXT4-fs (loop2): last error at time 1781800610: ext4_read_block_bitmap_nowait:483 [ 417.577591][T10537] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 417.690548][T10537] loop2: lost filesystem error report for type 5 error -117 [ 417.708418][T10537] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.1185: attempt to clear invalid blocks 983261 len 1 [ 417.959196][T10537] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.203867][T10537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.1185: Invalid inode table block 0 in block_group 0 [ 418.234373][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.306648][T10537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 418.306682][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.306995][T10537] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 418.307024][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.307288][T10537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.1185: Invalid inode table block 0 in block_group 0 [ 418.443422][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.466276][T10537] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 418.466303][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.466579][T10537] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.1185: mark_inode_dirty error [ 418.466611][T10537] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.466859][T10537] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 418.466884][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.467146][T10537] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.1185: Invalid inode table block 0 in block_group 0 [ 418.467179][T10537] loop2: lost filesystem error report for type 5 error -117 [ 418.467448][T10537] EXT4-fs (loop2): 1 truncate cleaned up [ 418.468384][T10537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.601520][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.688276][T10574] loop0: detected capacity change from 0 to 1024 [ 419.773521][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.796133][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.831950][T10578] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.852598][T10578] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.880285][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.911866][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.948105][T10578] hfsplus: request for non-existent node 33423360 in B*Tree [ 419.981926][T10578] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.062754][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.095790][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.105358][T10581] [U]  [ 420.141078][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.172056][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.210157][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.240105][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.280229][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 420.304490][T10574] hfsplus: request for non-existent node 33423360 in B*Tree [ 422.842052][T10616] loop5: detected capacity change from 0 to 512 [ 422.877132][T10616] EXT4-fs: Ignoring removed orlov option [ 422.913147][T10616] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.989554][T10616] EXT4-fs: Ignoring removed nobh option [ 423.041253][T10616] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1211: corrupted in-inode xattr: e_value size too large [ 423.087409][T10616] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 423.087809][T10616] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1211: couldn't read orphan inode 15 (err -117) [ 423.096965][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 423.096982][ C0] EXT4-fs (loop5): initial error at time 1781800616: ext4_iget_extra_inode:5128: inode 15 [ 423.097013][ C0] EXT4-fs (loop5): last error at time 1781800616: ext4_iget_extra_inode:5128: inode 15 [ 423.135106][T10616] loop5: lost filesystem error report for type 5 error -117 [ 423.136894][T10616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.457603][T10616] input input63: cannot allocate more than FF_MAX_EFFECTS effects [ 423.783402][ T5857] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 424.049247][ T5857] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 424.063762][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.071839][ T5857] usb 6-1: Product: syz [ 424.077986][ T5857] usb 6-1: Manufacturer: syz [ 424.086516][ T5857] usb 6-1: SerialNumber: syz [ 424.144325][T10636] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 424.152232][T10636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'. [ 424.513217][ T5857] usb 6-1: config 0 descriptor?? [ 425.294448][T10642] loop0: detected capacity change from 0 to 131072 [ 425.353400][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 425.373338][T10642] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 425.385167][T10642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 425.560594][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 425.585811][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 426.226688][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.242597][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.252767][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 426.264395][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.285981][ T9] usb 5-1: config 0 descriptor?? [ 427.108413][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 427.134278][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 427.232431][ T9] usb 5-1: USB disconnect, device number 32 [ 427.347165][ T5747] usb 6-1: USB disconnect, device number 32 [ 427.368192][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.417978][T10649] loop1: detected capacity change from 0 to 2048 [ 427.504509][T10649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.027561][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1224'. [ 428.494065][ T5747] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 428.748290][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 428.757427][ T5747] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 428.766128][ T5747] usb 3-1: config 0 has no interface number 0 [ 428.772265][ T5747] usb 3-1: config 0 interface 184 has no altsetting 0 [ 428.782403][ T5747] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 428.850934][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.861959][ T5747] usb 3-1: Product: syz [ 428.867588][ T5747] usb 3-1: Manufacturer: syz [ 428.874874][ T5747] usb 3-1: SerialNumber: syz [ 428.881630][ T5747] usb 3-1: config 0 descriptor?? [ 428.988940][T10689] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 429.453420][ T801] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 429.461044][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 429.530280][ T5747] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 429.554970][ T5747] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 429.643487][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 429.648644][ T801] usb 6-1: Using ep0 maxpacket: 16 [ 429.666787][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.683697][ T801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.703057][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.715621][ T801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.726707][ T9] usb 2-1: Product: syz [ 429.732004][ T5747] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 429.742854][ T9] usb 2-1: Manufacturer: syz [ 429.749749][ T801] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 429.760646][ T9] usb 2-1: SerialNumber: syz [ 429.765455][ T5747] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 429.777438][ T9] usb 2-1: config 0 descriptor?? [ 429.782455][ T801] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.795664][ T5747] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 429.808399][ T5747] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 429.819796][ T801] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.830269][ T801] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.842349][ T5747] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 429.852497][ T801] usb 6-1: Manufacturer: syz [ 429.904061][ T801] usb 6-1: config 0 descriptor?? [ 429.909814][ T5747] usb 3-1: USB disconnect, device number 50 [ 430.012249][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 430.080862][T10695] loop3: detected capacity change from 0 to 32768 [ 430.134623][T10695] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 430.179504][T10695] XFS (loop3): Ending clean mount [ 430.302149][ T5627] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 430.879168][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 430.892764][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 431.187725][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 431.293911][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 431.513710][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 431.729193][ T9] usb 2-1: USB disconnect, device number 36 [ 431.763128][T10710] ceph: No mds server is up or the cluster is laggy [ 432.209757][ T5747] usb 6-1: USB disconnect, device number 33 [ 432.324413][T10723] 9p: Bad value for 'wfdno' [ 432.607268][T10738] Sensor B: ================= START STATUS ================= [ 432.695217][T10738] Sensor B: Test Pattern: 75% Colorbar [ 432.702933][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 432.714903][T10738] [ 432.736483][T10738] Sensor B: Show Information: All [ 432.792525][T10738] Sensor B: Vertical Flip: false [ 432.798666][T10738] Sensor B: Horizontal Flip: false [ 432.808145][T10738] Sensor B: Brightness: 128 [ 432.849261][T10738] Sensor B: Contrast: 128 [ 432.861015][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 432.876677][T10738] Sensor B: Hue: 0 [ 432.903594][T10738] Sensor B: Saturation: [ 432.909450][T10745] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 432.910562][T10738] 128 [ 432.938531][T10738] Sensor B: Pixel Rate: 160000000 [ 432.949764][T10738] Sensor B: Horizontal Blanking: 800 [ 432.956486][T10738] Sensor B: Vertical Blanking: 3223 [ 432.963082][T10738] Sensor B: ================== END STATUS ================== [ 433.123877][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 433.425440][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 433.500759][T10750] loop2: detected capacity change from 0 to 512 [ 433.512698][T10750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 433.532499][T10750] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1249: corrupted xattr entries [ 433.532524][T10750] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 433.533472][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 433.533542][ C1] EXT4-fs (loop2): initial error at time 1781800626: xattr_find_entry:337: inode 15 [ 433.533587][ C1] EXT4-fs (loop2): last error at time 1781800626: xattr_find_entry:337: inode 15 [ 433.540982][T10750] EXT4-fs (loop2): Remounting filesystem read-only [ 433.541038][T10750] EXT4-fs (loop2): 1 truncate cleaned up [ 433.541785][T10750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.814267][T10740] ceph: No mds server is up or the cluster is laggy [ 434.166363][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.166470][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.648775][ T990] libceph: connect (1)[c::]:6789 error -101 [ 434.648864][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 434.906138][ T990] libceph: connect (1)[c::]:6789 error -101 [ 434.906240][ T990] libceph: mon0 (1)[c::]:6789 connect error [ 435.064499][T10766] ceph: No mds server is up or the cluster is laggy [ 435.103387][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 435.318554][T10775] 9p: Bad value for 'wfdno' [ 435.323737][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 435.361839][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.403466][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.459103][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 435.508038][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.532291][ T9] usb 2-1: Product: syz [ 435.565771][ T9] usb 2-1: Manufacturer: syz [ 435.595951][ T9] usb 2-1: SerialNumber: syz [ 435.641504][ T9] usb 2-1: config 0 descriptor?? [ 435.781341][T10784] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 436.061479][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.823282][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 436.832862][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.832891][ T5622] Tainted: [L]=SOFTLOCKUP [ 436.832898][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.832912][ T5622] Workqueue: hci2 hci_rx_work [ 436.832943][ T5622] Call Trace: [ 436.832951][ T5622] [ 436.832959][ T5622] dump_stack_lvl+0xe8/0x150 [ 436.832983][ T5622] sysfs_create_dir_ns+0x271/0x2a0 [ 436.833008][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 436.833033][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833058][ T5622] ? do_raw_spin_unlock+0xf5/0x210 [ 436.833091][ T5622] kobject_add_internal+0x622/0xcd0 [ 436.833127][ T5622] kobject_add+0x163/0x240 [ 436.833156][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833180][ T5622] ? preempt_schedule_thunk+0x16/0x40 [ 436.833210][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 436.833238][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833263][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833292][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833325][ T5622] ? get_device_parent+0x366/0x3a0 [ 436.833363][ T5622] device_add+0x3fa/0xb80 [ 436.833392][ T5622] hci_conn_add_sysfs+0xd5/0x210 [ 436.833419][ T5622] le_conn_complete_evt+0xfef/0x1580 [ 436.833452][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 436.833483][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833515][ T5622] ? irqentry_exit+0x218/0x8f0 [ 436.833540][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833571][ T5622] hci_le_conn_complete_evt+0x187/0x470 [ 436.833606][ T5622] hci_event_packet+0x67a/0xf10 [ 436.833632][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833659][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 436.833688][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 436.833716][ T5622] ? hci_send_to_monitor+0x3a/0x590 [ 436.833736][ T5622] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 436.833764][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833787][ T5622] ? hci_send_to_monitor+0xe2/0x590 [ 436.833809][ T5622] hci_rx_work+0x3ee/0x1020 [ 436.833839][ T5622] ? process_scheduled_works+0xa20/0x14e0 [ 436.833865][ T5622] process_scheduled_works+0xa8e/0x14e0 [ 436.833905][ T5622] ? __pfx_process_scheduled_works+0x10/0x10 [ 436.833930][ T5622] ? do_raw_spin_lock+0x12b/0x2f0 [ 436.833959][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.833983][ T5622] ? assign_work+0x3cf/0x5d0 [ 436.834010][ T5622] worker_thread+0xa47/0xfb0 [ 436.834050][ T5622] kthread+0x388/0x470 [ 436.834074][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 436.834101][ T5622] ? __pfx_kthread+0x10/0x10 [ 436.834120][ T5622] ret_from_fork+0x514/0xb70 [ 436.834141][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 436.834159][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.834183][ T5622] ? __switch_to+0xc89/0x1420 [ 436.834213][ T5622] ? __pfx_kthread+0x10/0x10 [ 436.834231][ T5622] ret_from_fork_asm+0x1a/0x30 [ 436.834263][ T5622] [ 437.119704][ T5622] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 437.134162][ T5622] Bluetooth: hci2: failed to register connection device [ 437.555495][T10803] vivid-000: disconnect [ 438.197579][ T24] usb 2-1: USB disconnect, device number 37 [ 438.245318][T10801] vivid-000: reconnect [ 439.706770][T10822] 9p: Bad value for 'wfdno' [ 440.355516][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 440.543386][ T5747] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 441.235097][T10844] loop1: detected capacity change from 0 to 2048 [ 441.640370][T10844] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.063359][ T5747] usb 1-1: Using ep0 maxpacket: 32 [ 442.077320][ T5747] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.100626][ T5747] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 442.127468][ T5747] usb 1-1: config 0 interface 0 has no altsetting 0 [ 442.208958][ T5747] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 442.288653][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.363159][ T5747] usb 1-1: Product: syz [ 442.392780][ T5747] usb 1-1: Manufacturer: syz [ 442.424689][ T5747] usb 1-1: SerialNumber: syz [ 442.508969][ T5747] usb 1-1: config 0 descriptor?? [ 443.196327][T10863] vivid-000: disconnect [ 443.408376][ T5747] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 443.432587][ T5747] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 443.698975][ T5747] usb 1-1: USB disconnect, device number 42 [ 443.801944][T10860] vivid-000: reconnect [ 444.077922][T10877] syzkaller0: entered promiscuous mode [ 444.084930][T10877] syzkaller0: entered allmulticast mode [ 444.645969][T10905] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 444.748717][T10895] syzkaller1: entered promiscuous mode [ 444.787956][T10895] syzkaller1: entered allmulticast mode [ 444.805073][T10907] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 444.814539][T10907] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 445.141401][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1308'. [ 445.193177][T10931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.211952][T10938] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 445.233372][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 445.246247][T10938] bond1: (slave wlan0): Enslaving as an active interface with an up link [ 445.397805][ T4931] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 445.406835][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 445.433883][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 445.473610][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.497428][ T10] usb 4-1: Product: syz [ 445.513804][T10952] syzkaller0: entered promiscuous mode [ 445.520823][ T10] usb 4-1: Manufacturer: syz [ 445.532747][ T10] usb 4-1: SerialNumber: syz [ 445.542922][T10952] syzkaller0: entered allmulticast mode [ 445.552403][ T10] usb 4-1: config 0 descriptor?? [ 445.569703][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 445.582031][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 445.588514][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 445.599473][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 445.605823][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 445.636854][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.666400][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 445.690336][ T10] usb 4-1: media controller created [ 445.729464][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.781633][ T10] usb 4-1: selecting invalid altsetting 3 [ 445.799303][ T10] ttusb2: set interface to alts=3 failed [ 445.880620][ T10] DVB: Unable to find symbol tda10086_attach() [ 445.893060][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 445.911418][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 445.932680][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 445.955259][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 445.968760][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 445.979990][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 446.012179][ T10] usb 4-1: USB disconnect, device number 41 [ 446.077065][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 446.348310][T10984] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 446.754105][T11001] loop3: detected capacity change from 0 to 3583 [ 446.766599][ T5747] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 446.798756][T11006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 446.828420][T11006] block device autoloading is deprecated and will be removed. [ 446.938897][ T5747] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 446.963101][ T5747] usb 2-1: config 0 has no interface number 0 [ 446.988500][ T5747] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 447.024907][ T5747] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 447.061214][ T5747] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 447.112547][ T5747] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 447.132317][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 447.153262][ T5747] usb 2-1: Product: syz [ 447.157533][ T5747] usb 2-1: SerialNumber: syz [ 447.167403][ T5747] usb 2-1: config 0 descriptor?? [ 447.185347][ T5747] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 447.200805][ T5747] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input64 [ 447.408918][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 447.408939][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 447.779421][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.786727][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.793853][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.800969][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.808157][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.815300][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.822409][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.829522][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.836635][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.843776][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 447.866345][ T9] usb 2-1: USB disconnect, device number 38 [ 447.872285][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 447.902250][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 448.260292][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 448.517013][T11054] syzkaller1: entered promiscuous mode [ 448.535973][T11054] syzkaller1: entered allmulticast mode [ 448.829286][ T990] Process accounting resumed [ 449.130509][T11070] lo: entered allmulticast mode [ 449.197084][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 449.455307][T11076] syzkaller0: entered promiscuous mode [ 449.493371][T11076] syzkaller0: entered allmulticast mode [ 449.581490][T11080] input: syz1 as /devices/virtual/input/input65 [ 449.943354][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 450.009432][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 450.084612][ T4931] Bluetooth: hci4: command 0x0406 tx timeout [ 450.103367][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 450.110923][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 450.129449][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 451.255385][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.267095][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 451.292120][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.303251][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.323562][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.331833][ T24] usb 6-1: Product: syz [ 451.358840][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.366178][ T24] usb 6-1: Manufacturer: syz [ 451.396363][ T24] usb 6-1: SerialNumber: syz [ 451.405466][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.419264][ T24] usb 6-1: config 0 descriptor?? [ 451.425008][ T9] usb 3-1: config 0 descriptor?? [ 451.436918][T11084] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 451.440828][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 451.475710][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 451.860304][ T9] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 452.063416][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 452.306508][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 452.320711][ T9] usb 3-1: USB disconnect, device number 51 [ 452.423929][ T801] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 452.449244][T11118] fido_id[11118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 452.544745][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 452.586050][ T24] em28xx 6-1:0.0: board has no eeprom [ 452.603604][T11026] Set syz1 is full, maxelem 65536 reached [ 452.655065][ T801] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 452.673877][ T801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 452.690187][ T801] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.708348][ T801] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.730826][ T801] usb 2-1: Product: syz [ 452.750061][ T801] usb 2-1: Manufacturer: syz [ 452.764678][ T801] usb 2-1: SerialNumber: syz [ 452.776745][ T801] usb 2-1: config 0 descriptor?? [ 452.883713][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 452.908128][T11129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1389'. [ 452.919273][T11131] orangefs_devreq_open: device cannot be opened in blocking mode [ 452.940553][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 452.951088][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1389'. [ 452.985739][ T5857] em28xx 6-1:0.0: Binding DVB extension [ 453.107251][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 453.178219][ T24] usb 6-1: USB disconnect, device number 34 [ 453.207751][ T801] usb 2-1: selecting invalid altsetting 0 [ 453.320720][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 453.486096][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 453.673117][ T801] usb 2-1: USB disconnect, device number 39 [ 453.725385][ T5857] em28xx 6-1:0.0: Registering input extension [ 453.739214][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.801123][ T24] em28xx 6-1:0.0: Closing input extension [ 453.838478][T11139] loop7: detected capacity change from 0 to 16384 [ 453.859026][ T24] em28xx 6-1:0.0: Freeing device [ 454.485991][T11144] loop7: detected capacity change from 16384 to 0 [ 454.497739][ C1] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 454.603897][ T801] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 454.793598][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 455.431395][ T801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 455.489508][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 455.561291][ T801] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 455.570000][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.587897][ T801] usb 2-1: can't read configurations, error -71 [ 455.599372][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.614398][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 455.627918][ T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 455.637080][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.663273][ T9] usb 4-1: config 0 descriptor?? [ 455.757313][T11174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.788333][T11174] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 455.808170][T11174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.818899][T11174] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 455.846402][T11174] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 455.875112][T11174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.894522][T11174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 455.933772][T11174] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 455.949928][T11174] ================================================================== [ 455.949946][T11174] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 455.949987][T11174] Read of size 4 at addr ffff88805211858c by task syz.4.1402/11174 [ 455.950009][T11174] [ 455.950026][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.4.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.950066][T11174] Tainted: [L]=SOFTLOCKUP [ 455.950077][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.950092][T11174] Call Trace: [ 455.950102][T11174] [ 455.950114][T11174] dump_stack_lvl+0xe8/0x150 [ 455.950144][T11174] print_address_description+0x55/0x1e0 [ 455.950171][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.950203][T11174] print_report+0x58/0x70 [ 455.950226][T11174] kasan_report+0x117/0x150 [ 455.950262][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.950296][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.950334][T11174] do_raw_spin_lock+0x28b/0x2f0 [ 455.950366][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.950396][T11174] ? lock_acquire+0x5f/0x350 [ 455.950436][T11174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 455.950470][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.950502][T11174] ? bt_accept_unlink+0x63/0x2c0 [ 455.950542][T11174] bt_accept_unlink+0x63/0x2c0 [ 455.950582][T11174] l2cap_sock_teardown_cb+0x17e/0x490 [ 455.950620][T11174] l2cap_chan_del+0x98/0x600 [ 455.950656][T11174] l2cap_conn_del+0x343/0x570 [ 455.950685][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.950715][T11174] l2cap_connect_cfm+0x132/0x16a0 [ 455.950742][T11174] ? hci_conn_failed+0x145/0x320 [ 455.950768][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.950797][T11174] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 455.950824][T11174] ? hci_pend_le_action_lookup+0x28/0x2c0 [ 455.950859][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.950892][T11174] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 455.950921][T11174] hci_conn_failed+0x1ae/0x320 [ 455.950947][T11174] ? hci_abort_conn_sync+0xa7b/0x1190 [ 455.950972][T11174] hci_abort_conn_sync+0xdd0/0x1190 [ 455.951002][T11174] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 455.951027][T11174] ? hci_disconnect_all_sync+0x2e/0x350 [ 455.951060][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.951090][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.951116][T11174] ? hci_disconnect_all_sync+0x2e/0x350 [ 455.951143][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.951173][T11174] ? lock_release+0x4b/0x3c0 [ 455.951213][T11174] ? hci_disconnect_all_sync+0x2e/0x350 [ 455.951242][T11174] hci_disconnect_all_sync+0x1b5/0x350 [ 455.951273][T11174] hci_suspend_sync+0x40f/0xca0 [ 455.951298][T11174] ? hci_suspend_dev+0x286/0x530 [ 455.951336][T11174] ? __pfx_hci_suspend_sync+0x10/0x10 [ 455.951361][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.951391][T11174] ? __entry_text_end+0x1020b5/0x1020b9 [ 455.951421][T11174] ? enable_work+0x1fd/0x230 [ 455.951461][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.951491][T11174] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 455.951528][T11174] hci_suspend_dev+0x28e/0x530 [ 455.951563][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.951595][T11174] ? __pfx_hci_suspend_dev+0x10/0x10 [ 455.951637][T11174] hci_suspend_notifier+0xf2/0x2f0 [ 455.951675][T11174] notifier_call_chain+0x1a5/0x3d0 [ 455.951721][T11174] blocking_notifier_call_chain_robust+0x85/0x100 [ 455.951767][T11174] pm_notifier_call_chain_robust+0x2c/0x60 [ 455.951808][T11174] snapshot_open+0x19c/0x280 [ 455.951833][T11174] ? __pfx_snapshot_open+0x10/0x10 [ 455.951857][T11174] misc_open+0x2d5/0x350 [ 455.951889][T11174] chrdev_open+0x4d9/0x600 [ 455.951929][T11174] ? __pfx_chrdev_open+0x10/0x10 [ 455.951967][T11174] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 455.952006][T11174] ? __pfx_chrdev_open+0x10/0x10 [ 455.952048][T11174] do_dentry_open+0x816/0x1380 [ 455.952081][T11174] vfs_open+0x3b/0x340 [ 455.952103][T11174] ? path_openat+0x2e2d/0x3830 [ 455.952138][T11174] path_openat+0x2e44/0x3830 [ 455.952175][T11174] ? kasan_save_track+0x3e/0x80 [ 455.952207][T11174] ? do_getname+0x2e/0x250 [ 455.952244][T11174] ? do_sys_openat2+0xcc/0x200 [ 455.952269][T11174] ? __x64_sys_openat+0x138/0x170 [ 455.952308][T11174] do_file_open+0x23e/0x4a0 [ 455.952344][T11174] ? __pfx_do_file_open+0x10/0x10 [ 455.952390][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.952420][T11174] ? _raw_spin_unlock+0x28/0x50 [ 455.952446][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.952476][T11174] ? alloc_fd+0x651/0x6c0 [ 455.952508][T11174] do_sys_openat2+0x115/0x200 [ 455.952533][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.952562][T11174] ? __se_sys_futex+0x3a8/0x450 [ 455.952592][T11174] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.952622][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.952649][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.952682][T11174] __x64_sys_openat+0x138/0x170 [ 455.952710][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.952737][T11174] do_syscall_64+0x174/0x580 [ 455.952768][T11174] ? trace_irq_disable+0x3b/0x140 [ 455.952809][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.952835][T11174] RIP: 0033:0x7f643e99ce59 [ 455.952858][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.952880][T11174] RSP: 002b:00007f643f8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.952908][T11174] RAX: ffffffffffffffda RBX: 00007f643ec15fa0 RCX: 00007f643e99ce59 [ 455.952928][T11174] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 455.952947][T11174] RBP: 00007f643ea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 455.952964][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.952981][T11174] R13: 00007f643ec16038 R14: 00007f643ec15fa0 R15: 00007ffdce7dc408 [ 455.953012][T11174] [ 455.953021][T11174] [ 455.953030][T11174] Allocated by task 11060: [ 455.953049][T11174] kasan_save_track+0x3e/0x80 [ 455.953080][T11174] __kasan_kmalloc+0x93/0xb0 [ 455.953111][T11174] __kmalloc_cache_noprof+0x318/0x660 [ 455.953144][T11174] io_wq_create+0x6b/0x7b0 [ 455.953174][T11174] io_uring_alloc_task_context+0x271/0x6c0 [ 455.953207][T11174] __io_uring_add_tctx_node+0x48d/0x630 [ 455.953232][T11174] io_uring_create+0x596/0x990 [ 455.953261][T11174] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 455.953289][T11174] do_syscall_64+0x174/0x580 [ 455.953320][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.953345][T11174] [ 455.953352][T11174] Freed by task 11060: [ 455.953365][T11174] kasan_save_track+0x3e/0x80 [ 455.953395][T11174] kasan_save_free_info+0x40/0x50 [ 455.953418][T11174] __kasan_slab_free+0x5c/0x80 [ 455.953450][T11174] kfree+0x1c5/0x640 [ 455.953474][T11174] io_wq_put_and_exit+0xa3d/0xaa0 [ 455.953506][T11174] io_uring_clean_tctx+0x12e/0x1b0 [ 455.953537][T11174] io_uring_cancel_generic+0x6c0/0x7d0 [ 455.953569][T11174] do_exit+0x39f/0x2360 [ 455.953592][T11174] do_group_exit+0x22d/0x2f0 [ 455.953617][T11174] get_signal+0x121b/0x12c0 [ 455.953648][T11174] arch_do_signal_or_restart+0xbb/0x860 [ 455.953685][T11174] exit_to_user_mode_loop+0x104/0x730 [ 455.953723][T11174] do_syscall_64+0x353/0x580 [ 455.953753][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.953779][T11174] [ 455.953786][T11174] The buggy address belongs to the object at ffff888052118000 [ 455.953786][T11174] which belongs to the cache kmalloc-2k of size 2048 [ 455.953808][T11174] The buggy address is located 1420 bytes inside of [ 455.953808][T11174] freed 2048-byte region [ffff888052118000, ffff888052118800) [ 455.953835][T11174] [ 455.953843][T11174] The buggy address belongs to the physical page: [ 455.953856][T11174] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888052119000 pfn:0x52118 [ 455.953881][T11174] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 455.953902][T11174] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 455.953927][T11174] page_type: f5(slab) [ 455.953951][T11174] raw: 00fff00000000240 ffff88813fe1e000 ffffea0000d1be10 ffffea0000a2dc10 [ 455.953975][T11174] raw: ffff888052119000 0000000800080007 00000000f5000000 0000000000000000 [ 455.954001][T11174] head: 00fff00000000240 ffff88813fe1e000 ffffea0000d1be10 ffffea0000a2dc10 [ 455.954025][T11174] head: ffff888052119000 0000000800080007 00000000f5000000 0000000000000000 [ 455.954055][T11174] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 455.954079][T11174] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 455.954095][T11174] page dumped because: kasan: bad access detected [ 455.954108][T11174] page_owner tracks the page as allocated [ 455.954119][T11174] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5633, tgid 5633 (syz-executor), ts 69482739674, free_ts 14201121635 [ 455.954163][T11174] post_alloc_hook+0x22d/0x280 [ 455.954193][T11174] get_page_from_freelist+0x24ae/0x2530 [ 455.954228][T11174] __alloc_frozen_pages_noprof+0x18d/0x380 [ 455.954264][T11174] allocate_slab+0x74/0x5d0 [ 455.954302][T11174] refill_objects+0x328/0x3c0 [ 455.954338][T11174] __pcs_replace_empty_main+0x2e0/0x6b0 [ 455.954362][T11174] __kmalloc_cache_noprof+0x388/0x660 [ 455.954400][T11174] rtnl_newlink+0x136/0x1bd0 [ 455.954431][T11174] rtnetlink_rcv_msg+0x802/0xc00 [ 455.954460][T11174] netlink_rcv_skb+0x226/0x4a0 [ 455.954493][T11174] netlink_unicast+0x7bb/0x940 [ 455.954523][T11174] netlink_sendmsg+0x813/0xb40 [ 455.954557][T11174] __sys_sendto+0x626/0x6c0 [ 455.954587][T11174] __x64_sys_sendto+0xde/0x100 [ 455.954617][T11174] do_syscall_64+0x174/0x580 [ 455.954646][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.954672][T11174] page last free pid 1 tgid 1 stack trace: [ 455.954686][T11174] __free_frozen_pages+0xc0d/0xd20 [ 455.954716][T11174] free_contig_range+0xb7/0x100 [ 455.954739][T11174] destroy_args+0x4e5/0x570 [ 455.954761][T11174] debug_vm_pgtable+0x3f8/0x410 [ 455.954796][T11174] do_one_initcall+0x250/0x870 [ 455.954823][T11174] do_initcall_level+0x10a/0x1a0 [ 455.954860][T11174] do_initcalls+0x59/0xa0 [ 455.954895][T11174] kernel_init_freeable+0x29d/0x3e0 [ 455.954931][T11174] kernel_init+0x1d/0x1d0 [ 455.954966][T11174] ret_from_fork+0x514/0xb70 [ 455.954990][T11174] ret_from_fork_asm+0x1a/0x30 [ 455.955019][T11174] [ 455.955027][T11174] Memory state around the buggy address: [ 455.955046][T11174] ffff888052118480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.955065][T11174] ffff888052118500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.955084][T11174] >ffff888052118580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.955098][T11174] ^ [ 455.955112][T11174] ffff888052118600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.955130][T11174] ffff888052118680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 455.955145][T11174] ================================================================== [ 455.955223][T11174] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 455.955242][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.4.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.955274][T11174] Tainted: [L]=SOFTLOCKUP [ 455.955284][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.955296][T11174] Call Trace: [ 455.955304][T11174] [ 455.955312][T11174] vpanic+0x56c/0xa60 [ 455.955335][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.955356][T11174] ? __pfx_vpanic+0x10/0x10 [ 455.955377][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.955400][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.955423][T11174] panic+0xc5/0xd0 [ 455.955444][T11174] ? __pfx_panic+0x10/0x10 [ 455.955466][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.955495][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.955519][T11174] check_panic_on_warn+0x89/0xb0 [ 455.955539][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.955565][T11174] end_report+0x73/0x170 [ 455.955591][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.955614][T11174] kasan_report+0x128/0x150 [ 455.955639][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.955664][T11174] ? do_raw_spin_lock+0x28b/0x2f0 [ 455.955691][T11174] do_raw_spin_lock+0x28b/0x2f0 [ 455.955715][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.955737][T11174] ? lock_acquire+0x5f/0x350 [ 455.955766][T11174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 455.955791][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.955815][T11174] ? bt_accept_unlink+0x63/0x2c0 [ 455.955844][T11174] bt_accept_unlink+0x63/0x2c0 [ 455.955881][T11174] l2cap_sock_teardown_cb+0x17e/0x490 [ 455.955914][T11174] l2cap_chan_del+0x98/0x600 [ 455.955947][T11174] l2cap_conn_del+0x343/0x570 [ 455.955969][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.955991][T11174] l2cap_connect_cfm+0x132/0x16a0 [ 455.956010][T11174] ? hci_conn_failed+0x145/0x320 [ 455.956029][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.956054][T11174] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 455.956074][T11174] ? hci_pend_le_action_lookup+0x28/0x2c0 [ 455.956100][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.956124][T11174] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 455.956144][T11174] hci_conn_failed+0x1ae/0x320 [ 455.956163][T11174] ? hci_abort_conn_sync+0xa7b/0x1190 [ 455.956182][T11174] hci_abort_conn_sync+0xdd0/0x1190 [ 455.956203][T11174] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 455.956222][T11174] ? hci_disconnect_all_sync+0x2e/0x350 [ 455.956242][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.956264][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.956283][T11174] ? hci_disconnect_all_sync+0x2e/0x350 [ 455.956302][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.956324][T11174] ? lock_release+0x4b/0x3c0 [ 455.956367][T11174] ? hci_disconnect_all_sync+0x2e/0x350 [ 455.956388][T11174] hci_disconnect_all_sync+0x1b5/0x350 [ 455.956411][T11174] hci_suspend_sync+0x40f/0xca0 [ 455.956429][T11174] ? hci_suspend_dev+0x286/0x530 [ 455.956458][T11174] ? __pfx_hci_suspend_sync+0x10/0x10 [ 455.956476][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.956498][T11174] ? __entry_text_end+0x1020b5/0x1020b9 [ 455.956520][T11174] ? enable_work+0x1fd/0x230 [ 455.956550][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.956572][T11174] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 455.956599][T11174] hci_suspend_dev+0x28e/0x530 [ 455.956624][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.956647][T11174] ? __pfx_hci_suspend_dev+0x10/0x10 [ 455.956678][T11174] hci_suspend_notifier+0xf2/0x2f0 [ 455.956706][T11174] notifier_call_chain+0x1a5/0x3d0 [ 455.956739][T11174] blocking_notifier_call_chain_robust+0x85/0x100 [ 455.956776][T11174] pm_notifier_call_chain_robust+0x2c/0x60 [ 455.956806][T11174] snapshot_open+0x19c/0x280 [ 455.956824][T11174] ? __pfx_snapshot_open+0x10/0x10 [ 455.956841][T11174] misc_open+0x2d5/0x350 [ 455.956866][T11174] chrdev_open+0x4d9/0x600 [ 455.956905][T11174] ? __pfx_chrdev_open+0x10/0x10 [ 455.956938][T11174] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 455.956966][T11174] ? __pfx_chrdev_open+0x10/0x10 [ 455.956993][T11174] do_dentry_open+0x816/0x1380 [ 455.957017][T11174] vfs_open+0x3b/0x340 [ 455.957034][T11174] ? path_openat+0x2e2d/0x3830 [ 455.957063][T11174] path_openat+0x2e44/0x3830 [ 455.957090][T11174] ? kasan_save_track+0x3e/0x80 [ 455.957113][T11174] ? do_getname+0x2e/0x250 [ 455.957140][T11174] ? do_sys_openat2+0xcc/0x200 [ 455.957158][T11174] ? __x64_sys_openat+0x138/0x170 [ 455.957187][T11174] do_file_open+0x23e/0x4a0 [ 455.957213][T11174] ? __pfx_do_file_open+0x10/0x10 [ 455.957247][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.957269][T11174] ? _raw_spin_unlock+0x28/0x50 [ 455.957287][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.957309][T11174] ? alloc_fd+0x651/0x6c0 [ 455.957332][T11174] do_sys_openat2+0x115/0x200 [ 455.957350][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.957372][T11174] ? __se_sys_futex+0x3a8/0x450 [ 455.957393][T11174] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.957415][T11174] ? rcu_is_watching+0x15/0xb0 [ 455.957435][T11174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 455.957459][T11174] __x64_sys_openat+0x138/0x170 [ 455.957480][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.957500][T11174] do_syscall_64+0x174/0x580 [ 455.957523][T11174] ? trace_irq_disable+0x3b/0x140 [ 455.957554][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.957573][T11174] RIP: 0033:0x7f643e99ce59 [ 455.957589][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.957605][T11174] RSP: 002b:00007f643f8fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.957624][T11174] RAX: ffffffffffffffda RBX: 00007f643ec15fa0 RCX: 00007f643e99ce59 [ 455.957639][T11174] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 455.957653][T11174] RBP: 00007f643ea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 455.957666][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.957678][T11174] R13: 00007f643ec16038 R14: 00007f643ec15fa0 R15: 00007ffdce7dc408 [ 455.957701][T11174] [ 455.958009][T11174] Kernel Offset: disabled