last executing test programs: 29m30.656197378s ago: executing program 0 (id=1157): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @b={0x8, 0x2, 0x0, 0x1, 0x3, 0x42, 0x6, {}, 0x7, 0x80, 0x12, 0xe2}}, 0x10) 29m30.456344768s ago: executing program 0 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 29m28.264427286s ago: executing program 0 (id=1167): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @b={0x8, 0x2, 0x0, 0x1, 0x3, 0x42, 0x6, {}, 0x7, 0x80, 0x12, 0xe2}}, 0x10) 29m28.123807482s ago: executing program 0 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x293b097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 29m27.943869772s ago: executing program 0 (id=1173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xe, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 29m27.56442398s ago: executing program 0 (id=1176): socket$isdn_base(0x22, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 29m27.129465052s ago: executing program 32 (id=1176): socket$isdn_base(0x22, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.0451198s ago: executing program 3 (id=6832): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.60343926s ago: executing program 3 (id=6837): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x80, 0x1, 0x3, "677903"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.200366827s ago: executing program 3 (id=6849): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x400808, &(0x7f0000000140)={[{@nojournal_checksum}, {@nolazytime}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@grpjquota}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) dup2(r0, r4) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 8.162423889s ago: executing program 1 (id=6850): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYBLOB="f8ca5ae5a9b3d315006e9b78cb6e79dc38b534bf72f9cffadb91892b39c533707825a4aa4c7a2f37612e2d686b5b7a6ba0ef33f871e764f4a631d733184aa8fafb1a3b14a49320371499addae4735d2d7f29a584580ea5e08b01417f260ed1af94c5511c4f31323343addbfc3a0e2bf456d447970591b88ee0d0aa10", @ANYRES32, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x1, 0xa7a, &(0x7f0000001400)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x7c20cd8b, 0x2, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x66, 0x0, 0x3b, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x2b, 0x2, [{0x1, 0x6, "3b17ad45"}, {0x6, 0x8, "8108f7e9d6e2"}, {0x7, 0x6, "fd475778"}, {0x7, 0x11, "24f6e0c688f16c988fee1dd05e0a73"}]}, @timestamp={0x44, 0xc, 0x25, 0x0, 0x7, [0x7, 0x0]}]}}}}}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000034c0)=@newtclass={0x10c0, 0x28, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xffff}, {0xe, 0xfffa}, {0x6, 0x12}}, [@c_cbq={{0x8}, {0x107c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x7, 0x6, 0xf, 0x846a, 0xa37, 0x4, 0xfffff983, 0x7, 0x1, 0x0, 0x1, 0xd68, 0x10001, 0x2, 0x3, 0xf, 0x7, 0xa0000, 0x4399, 0x2, 0x0, 0x1, 0x8000, 0x1, 0x2, 0x2ded5f17, 0xff, 0xe1ce284, 0x800, 0xf, 0x7, 0x5, 0x7fff, 0x4, 0x3, 0x7, 0x6, 0x0, 0x6, 0x8, 0x8001, 0xa, 0x9, 0x2, 0x5, 0x2a8, 0x8, 0x6, 0x7, 0x8, 0x4, 0xa, 0xda4c, 0xbc2, 0xfffffffc, 0x81, 0x2, 0xffffffff, 0x0, 0x4, 0x800, 0x2, 0x2, 0x1927, 0xe, 0x7, 0x2, 0xffff671e, 0x8, 0x2, 0x8, 0x8001, 0x9c30000, 0x3, 0x7fff, 0x48, 0x9, 0x7fff, 0x3, 0x80000001, 0x6, 0x6, 0xfc01, 0x7, 0x0, 0x6, 0x6dfad6b8, 0x5, 0x80, 0x0, 0xd, 0x4, 0x0, 0x7fff, 0x1, 0x2, 0x0, 0x3, 0x3, 0x9, 0x2500, 0x0, 0xfff, 0x1, 0x80, 0xffff, 0x0, 0x8, 0xe50, 0x10, 0x1, 0x3b, 0x5, 0x1, 0xa42, 0x8, 0x8, 0x812, 0xff62, 0x3, 0x34, 0xffff, 0x6496d8ca, 0x856, 0x5, 0x6, 0x40, 0x71e4, 0x1d50, 0xffffff33, 0x8f27, 0x200000, 0x6, 0x7, 0x8, 0x5, 0x4, 0x1ff, 0x8, 0x2, 0x4, 0x9, 0x8000, 0x5, 0xff, 0xc, 0xaa, 0x8, 0x2, 0x0, 0x10, 0x0, 0x2, 0x0, 0x1ff, 0x8, 0x0, 0x3, 0x0, 0xfff, 0x8, 0xcc11, 0x200000, 0x0, 0x5, 0x8, 0x5, 0x2, 0x6, 0x0, 0x3, 0x7, 0x1, 0x4, 0x8, 0x7, 0x92, 0x5, 0xfffffff8, 0x5, 0x6, 0x613, 0x3, 0xffffffff, 0x0, 0x8, 0x5, 0x279d, 0x2, 0xd7f0, 0x10, 0x2, 0x10000, 0x7fff, 0xd, 0x8, 0x9, 0xc36, 0x9, 0x268, 0x1, 0x6, 0x4, 0x13519fd2, 0x2, 0x5, 0x0, 0x4, 0xff, 0x400, 0x4, 0x7, 0x2, 0x7, 0x8, 0xffffffff, 0x8, 0x3, 0x9, 0xbf67, 0x4, 0x7ff, 0x9, 0x1d12, 0x608e8f0f, 0x0, 0x100, 0x7, 0x2, 0xb, 0x3, 0x9, 0xffffff80, 0x10000, 0x4, 0x40, 0x0, 0x40, 0x5, 0x5, 0xfed7, 0x8, 0x9, 0x3, 0x1000, 0x9, 0xfff, 0xe44, 0x8, 0x6b, 0x7, 0x101, 0xc, 0x7, 0x3]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x76, 0x2, 0xc, 0x80000001, 0x9, 0x0, 0x1, 0x4, 0x401, 0x7fffffff, 0xa374, 0xa, 0x6, 0x7748, 0xfffffffc, 0x1, 0x3, 0xb7b, 0x7, 0x800, 0x4, 0x4, 0xfffffff7, 0x8000, 0x6, 0xff, 0x80000000, 0xe, 0x4, 0x7, 0x3c, 0x1, 0x4, 0x7fff, 0x10001, 0x2, 0xe4, 0x2, 0x7, 0x401, 0xfffffffa, 0x8, 0x0, 0x200, 0x0, 0x47e, 0xf, 0x5, 0xfffffffe, 0x10001, 0x120e0cc2, 0x2, 0x1, 0x0, 0x800, 0x9, 0x7ff, 0xb, 0x3, 0x0, 0x8, 0x6, 0x40, 0x2, 0x2, 0x6, 0x4, 0xdf4, 0x1, 0x8, 0x5, 0xab6, 0x3, 0x5, 0xe7b4, 0x8bf, 0x7ff, 0x5, 0x8, 0x9, 0x971c, 0x4, 0x60000000, 0x2, 0x8, 0x5, 0x7ff, 0x9b, 0x8, 0x9, 0x52, 0x42e, 0x2, 0xa085, 0xf07, 0x4, 0x1, 0x401, 0x2, 0x800, 0x400, 0xffffffff, 0x84a, 0xffffff71, 0x2, 0xc7c5, 0x0, 0x5, 0x3, 0x1, 0x1, 0x1, 0x2, 0xd, 0x532b42ef, 0x7, 0x3, 0x10, 0x6, 0x2, 0x0, 0x7, 0x2, 0xd28, 0x1, 0xe00a, 0x5, 0x1, 0xd, 0xffff8000, 0x8, 0x2, 0xfff, 0xfffffff9, 0x8, 0x0, 0x1, 0x0, 0x81, 0x1, 0x1ff, 0x9, 0x6, 0x0, 0xaa, 0x8, 0x1, 0xd4, 0xcd, 0x8, 0x2, 0xaff, 0x1, 0xe4aa, 0x0, 0x2, 0xd436, 0x1ff, 0x5, 0x8001, 0x9, 0x8000, 0x1, 0x8, 0x200, 0x7fff, 0xffffffec, 0x10, 0x5, 0x8, 0x9, 0x2, 0xb, 0x51f, 0xffff, 0x1, 0x7, 0x6, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x957f, 0xbab, 0x101, 0x7, 0x2, 0x2, 0x10001, 0x3072, 0x5, 0xc770, 0x9, 0x800, 0xd, 0x3, 0x2000, 0x81, 0x2, 0x7e, 0x2, 0x7f07, 0x401, 0x8, 0x1, 0x7fff, 0x7ff, 0x8, 0x7, 0x4697, 0x4, 0x1, 0xe9e, 0x6, 0x6, 0x6, 0x6, 0x3, 0x9, 0x8, 0xa, 0x98, 0x8, 0x80000000, 0x9, 0xd70b, 0x1, 0x1, 0xdb5a, 0x0, 0x9, 0xffffffff, 0xbdd, 0x4, 0xd, 0x4, 0xbc54, 0xb, 0xf, 0x3, 0x1, 0x8, 0x0, 0x0, 0x4, 0x5, 0xb36, 0xd, 0x80000001, 0x7f, 0x7c63]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x0, 0x400, 0x9, 0x1, 0x6, 0x6, 0x1, 0x11, 0x3, 0x233, 0x100, 0x2, 0x2, 0x100, 0x2, 0x7, 0x6, 0x9, 0x4, 0x8, 0x925c, 0x5, 0x3, 0x7fffffff, 0x6, 0x7, 0x101, 0x8, 0x2, 0xffff, 0x2abb, 0x401, 0x9, 0x2b8, 0xfffffff7, 0x3, 0x8000, 0x2, 0x0, 0x3, 0x6, 0x625d, 0x647, 0xff, 0x7fff, 0x1000, 0x61b4a940, 0x10000, 0xdb, 0x3ff, 0x3ff, 0x3b2, 0x8, 0x40, 0x4, 0x3ff, 0xb4cd, 0x9, 0x8000, 0x7, 0x1, 0x8, 0x7, 0x2, 0x11, 0x1, 0x0, 0x3, 0x101, 0x61a529a, 0x8, 0x0, 0x2c3, 0x3, 0x2, 0x37f5, 0x1, 0xe, 0x829a, 0x3, 0x80, 0x6, 0x9, 0x7fffffff, 0xfffffffa, 0xafc, 0x6, 0x3, 0x2990d594, 0x20000000, 0x1ff, 0xfffffe00, 0xffffb9cb, 0x3, 0x8001, 0x4, 0x82, 0x9, 0x5, 0x10, 0x0, 0xd, 0x9, 0x2, 0x6d, 0x4, 0x6, 0x5, 0x26, 0x3, 0x0, 0xffffffff, 0x6e2, 0x2, 0x80000001, 0x80, 0x7, 0x1, 0xffff, 0xfff, 0x2, 0x3, 0x4, 0x9, 0x5, 0x8, 0x6, 0x7, 0x3, 0x5, 0xfff, 0x67, 0x2, 0x43e3, 0x7f, 0x101, 0x4, 0x7a0, 0x9, 0x6, 0xb, 0x6, 0x9, 0x152, 0xdc3, 0x8, 0x200, 0x2, 0x6, 0xba37, 0x6f46, 0x4, 0xab, 0x3, 0x8, 0x7f, 0xfffffff8, 0x6, 0xfe, 0x1000, 0x2, 0x8, 0x101, 0x40, 0xfffffff8, 0x0, 0x0, 0x9, 0x8, 0xc86, 0x6, 0x5, 0x8, 0xb50e, 0x4, 0x3, 0x1, 0x1, 0x5, 0x1, 0x1, 0x6, 0x3c, 0x8000, 0x9, 0xca, 0x0, 0x4, 0x8, 0x6, 0x5, 0x3, 0x7, 0x3, 0x3, 0x4, 0x1ff, 0x9, 0x7fffffff, 0x4, 0x9, 0x63f, 0x7, 0x0, 0x3, 0x80000000, 0xffff, 0x6, 0x2, 0x5, 0x2, 0x3, 0x6, 0x7fff, 0x9, 0x3, 0x2909, 0x3, 0x1, 0x0, 0xffff3f2b, 0x7fff, 0x5, 0x9, 0x0, 0x530b, 0xe284, 0x2, 0x2, 0x9, 0x6, 0x22f, 0xc6, 0x5, 0x1, 0x7fff, 0x100, 0x1, 0x4, 0x3, 0x6, 0x0, 0xffffff22, 0x3ff, 0xffff, 0xfffffffc, 0x4, 0x101, 0x4, 0xfffffff9, 0x9, 0x7, 0x68, 0x9, 0x4]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffff801, 0x8, 0x7, 0x5, 0x1, 0x5, 0x6, 0x80000000, 0x7fffffff, 0xcc, 0x5, 0xb, 0xffffffff, 0xffffffff, 0x3, 0x5, 0x8, 0x2, 0x6, 0x3, 0x4, 0x4, 0x1, 0x6, 0x10, 0x0, 0x4, 0x3, 0x3, 0x0, 0x7, 0x8, 0x7, 0x40, 0x0, 0x1ff, 0xfffffffb, 0x4, 0xfffffffc, 0x0, 0x2, 0xffffffc0, 0xba7a, 0x390e342e, 0x9, 0x1ffe0000, 0x0, 0x200, 0x17ed, 0x10, 0x8, 0x200, 0x1, 0xfffffff7, 0x8, 0x1, 0x9, 0x10000, 0xd, 0x5, 0xeef, 0x7, 0x69, 0x0, 0x6, 0x0, 0x7, 0x3, 0x2, 0x4, 0x4, 0x6774, 0x3ff, 0x10000, 0x2, 0x24309be5, 0x7fffffff, 0x0, 0x3, 0x7fffffff, 0x3, 0xf, 0xa, 0x8001, 0x191, 0xffff8000, 0x7fff, 0x2, 0x2, 0x80000000, 0x7, 0x0, 0x4, 0x5, 0x5, 0x9, 0x0, 0x80, 0xe25, 0x0, 0x0, 0x2, 0x8, 0x1, 0x80000000, 0x3, 0xf, 0x8, 0x40, 0x3, 0x1000, 0x9, 0x4, 0x8e5, 0x3, 0x0, 0xfffff0b4, 0x9, 0x4, 0x2d, 0xe31, 0x9, 0x4, 0xfff, 0x5, 0x6, 0xa, 0x1, 0x9, 0x1, 0x5, 0x3, 0x1000, 0x6, 0x8, 0xbbc, 0x8, 0x0, 0x10001, 0x2, 0x4, 0x8, 0x6, 0x8, 0x5, 0x0, 0xa5, 0x9, 0x85cd, 0x0, 0x6, 0x3, 0x10000, 0x1, 0x3, 0x3, 0x3, 0x5, 0x4, 0xaa13, 0x7, 0x9, 0x61, 0x8, 0x0, 0x4, 0x5, 0xd, 0x5, 0x0, 0x1, 0x70f0, 0x6, 0x8000, 0x9, 0xa4c, 0xffff3f46, 0x3, 0x2, 0xffffffda, 0xfff, 0x0, 0x0, 0xb8, 0x5, 0x9, 0x61, 0x0, 0x3, 0x1, 0x4, 0x3, 0x7f0, 0xffffff00, 0x7fffffff, 0x6dc, 0x1, 0x4, 0x2, 0xa, 0x8, 0xb2, 0x7e6, 0xc2, 0x7000, 0x9, 0xfffffffe, 0x7ff, 0x2, 0xb8, 0xd, 0x2, 0x5, 0x2a5c, 0x4, 0x4, 0xf36, 0x80000001, 0x6, 0x4, 0x8, 0x1, 0xffff, 0xa82, 0xe7fe, 0x6, 0x9, 0x4, 0x9, 0x4, 0x80000001, 0x7fff, 0x16, 0x2, 0x1, 0x6, 0x5, 0x35, 0x80, 0xfffffffb, 0xea1, 0x8c5c, 0x0, 0x3ff, 0x33, 0xfffff505, 0xfffffffc, 0x40, 0xfce, 0x4, 0x9, 0x6, 0x2, 0x6e7, 0x6, 0x400]}, @TCA_CBQ_RATE={0x10, 0x5, {0x96, 0x0, 0x21, 0x1, 0x9, 0x80}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x2, 0x5, 0x7fff, 0x0, 0x8001}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x6, 0xff01, 0x1, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x81, 0x7, 0x8, 0x2, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x1, 0x1f, 0x1, 0x0, 0x7, 0x2, 0x7ff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4c, 0x8, 0x8, 0x88, 0x4, 0xc0000000}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}]}, 0x10c0}}, 0x801) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d332c696f636861727365743d6370313235352c6572726f72733d72656d6f756e742d726f2c757466382c756d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d636f6e74696e75652c757466382c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c646d61736b3d30303030303030303030303030303030303030303030312c0028ca36087435e4cba391cd51c427d037bc8bc02d363f6d784fbc28b1a9b19157cab61f9027e908eb7e2dbc6995ae30519b65a4d54e4b6af517688d19c89d8c1c5874b56d30dd229f6d96913b8dda0250be036702e261ca85de1990b32f9260421048b1e81489f075b274a8a5d4a6f7fcbff36d937c44d9a9343e2cfcd21111b9534c67dfe9ee891eed3fbde668690843"], 0x4, 0x1534, &(0x7f0000001f80)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b80080002000100000020"], 0x150}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f0000000780)="f83949de2488da362de6a2471beded93cd76aff30f5a7a4143a895051789b65cdd6032b2ab337f467372bc143338daa9b71ee296bc8d343ec3d865471cbdeaee5f7e8a2a4aeb2420c326f5d231f32f3131073813618f5f15f9cc8bbb576c5b7b66237902392ab4d58ae7847cbefbdf4fa692c768a4cec03539795d5954662de12470ed8134e9bb2ea4a1b024162fb41ddf96cea4ed29f57e4a97feb95db4f5e89702e7e78e2e9a35640b94", &(0x7f0000000880)=""/151, &(0x7f0000000500)="fc4f5772a2928c040b739d86b7d16ad575dc43b455e0cb9d3aa9e2f61a052eee4579974734960eab11", &(0x7f0000000c40)="81e27fbbb3dae847bdd7911929ea2a1ff536393b76a5680676154caadb48688ced3864ca7d7fc88654828a0c93433be74a254cb8b06b0ca0200dd629fa05625cff3c9d075fb1ffbacac47989958f4fd12915fa145c6a7e8d0e11f0d60ff4b59a380c57a3d26f42b5d9dccc53a529927bd1267b4247c558161a6d0267b18ccc933945958a172d8737af7496911b29f00bbdc2c2a0b20ab984ff5044ae8bb9a512a994ae2506b8076b634c7343f2d7b16c7038b7537a", 0x2, r8, 0x4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f0000000000)="e2bed7ade52245215197b16653da0f321eff09442b1001dc2cb7a78aec", &(0x7f0000000280)=""/217}, 0x20) 7.482472932s ago: executing program 4 (id=6852): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="8fcf"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) r0 = syz_io_uring_setup(0xfd9, &(0x7f0000000640)={0x0, 0x4e826, 0x800, 0x401, 0xc0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.252918404s ago: executing program 2 (id=6853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0xfffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xfc}}}, 0x7) 6.764310088s ago: executing program 1 (id=6854): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) io_setup(0x9, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0x2}, {0x1, 0x7}}}, 0x24}}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) eventfd2(0x9, 0x0) r4 = socket(0x1d, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x80) r5 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x2c9}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x10) alarm(0x20000000000000b) alarm(0x100000000) close_range(r5, r5, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r7, 0x703, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.626298165s ago: executing program 3 (id=6855): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x42, 0x0, &(0x7f0000000140)) 5.216646734s ago: executing program 2 (id=6856): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x42, 0x0, &(0x7f0000000140)) 5.026018633s ago: executing program 3 (id=6857): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x80, 0x1, 0x3, "677903"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.004274914s ago: executing program 4 (id=6858): syz_open_dev$sndpcmp(0x0, 0x5c96, 0x207080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xa0, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0xee8, 0x10001, 0x8, 0x856, {0x4, 0x401, 0x1, 0x1ff, 0x5, 0xfffffffffffffff7, 0x9, 0x6, 0x3, 0x2000, 0xb266, 0x0, 0x0, 0x3, 0x100}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r1, &(0x7f0000000100)="ab", 0x1, 0x400c804, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r2 = getpid() r3 = syz_open_procfs(r2, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0xa01f, 0x100000000) 3.964859305s ago: executing program 2 (id=6859): close(0x3) socket(0x10, 0x803, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x14a900, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4042880}, 0x10) close(r0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_open_dev$loop(0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) 3.360307455s ago: executing program 2 (id=6860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3.311082518s ago: executing program 1 (id=6861): syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x0, 0x181000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRESOCT, @ANYRESHEX=r0], 0x50) close(0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r3, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fdb617c60d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dbe816b89f7cb81bff81a8b9482565856555ee923c6597385b3a682167c43dbf137115a40ebddcad74875"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.729416157s ago: executing program 2 (id=6862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x64000}, 0x0) 2.717870887s ago: executing program 4 (id=6863): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x400808, &(0x7f0000000140)={[{@nojournal_checksum}, {@nolazytime}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@grpjquota}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) dup2(r0, r4) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 2.662573419s ago: executing program 1 (id=6864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0xfffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xfc}}}, 0x7) 1.445126289s ago: executing program 2 (id=6865): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 1.123232105s ago: executing program 3 (id=6866): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="8fcf"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) r0 = syz_io_uring_setup(0xfd9, &(0x7f0000000640)={0x0, 0x4e826, 0x800, 0x401, 0xc0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 417.88752ms ago: executing program 1 (id=6867): socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x20000000, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xda, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 331.297394ms ago: executing program 4 (id=6868): close(0x3) socket(0x10, 0x803, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x14a900, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4042880}, 0x10) close(r0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_open_dev$loop(0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) 204.451011ms ago: executing program 1 (id=6869): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) io_setup(0x9, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0x2}, {0x1, 0x7}}}, 0x24}}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) eventfd2(0x9, 0x0) r4 = socket(0x1d, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x80) r5 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x1000, 0x2, 0x2c9}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x10) alarm(0x20000000000000b) alarm(0x100000000) close_range(r5, r5, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r7, 0x703, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 77.171387ms ago: executing program 4 (id=6870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = syz_open_dev$vivid(0x0, 0x1, 0x2) socket(0x10, 0x803, 0x0) close_range(r0, r2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000"], 0x48) socket(0x1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0xd8, 0x700001b, 0x148, 0xd8, 0x148, 0x1d8, 0x206, 0x240, 0x1d8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0xd8, 0x0, {0x390, 0x8f00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x80000000, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {0x0}], 0x3}], 0x1, 0x40800) 0s ago: executing program 4 (id=6871): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xa0, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) stat(&(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0xee8, 0x10001, 0x8, 0x856, {0x4, 0x401, 0x1, 0x1ff, 0x5, 0xfffffffffffffff7, 0x9, 0x6, 0x3, 0x2000, 0xb266, 0x0, 0x0, 0x3, 0x100}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r1, &(0x7f0000000100)="ab", 0x1, 0x400c804, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r2 = getpid() r3 = syz_open_procfs(r2, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0xa01f, 0x100000000) kernel console output (not intermixed with test programs): 2.6217': attribute type 4 has an invalid length. [ 1825.199405][T28028] loop2: detected capacity change from 0 to 2048 [ 1825.223745][T28028] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1825.242192][ T787] rc_core: IR keymap rc-hauppauge not found [ 1825.261099][T28032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1825.273951][ T787] Registered IR keymap rc-empty [ 1825.291886][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1825.642629][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.135612][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1826.158656][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input89 [ 1826.306703][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.371974][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.408984][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.590221][T28038] loop2: detected capacity change from 0 to 32768 [ 1826.631874][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.661797][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.707357][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.802684][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.832856][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.862398][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.902731][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1826.903511][T28039] misc userio: Invalid payload size [ 1826.993258][ T787] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1827.011685][ T787] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1827.066829][ T787] usb 5-1: USB disconnect, device number 93 [ 1827.273891][T28038] 9pnet_fd: Insufficient options for proto=fd [ 1827.469588][T28041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1827.517633][T28041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1827.855854][T28044] loop4: detected capacity change from 0 to 16 [ 1828.005302][T28044] erofs: (device loop4): mounted with root inode @ nid 36. [ 1828.620273][T28061] netlink: 'syz.4.6227': attribute type 4 has an invalid length. [ 1828.732592][T28061] loop4: detected capacity change from 0 to 2048 [ 1828.776949][T28061] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1828.842052][ T28] audit: type=1326 audit(1774392390.986:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1828.879312][T28065] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1828.922082][ T28] audit: type=1326 audit(1774392390.986:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.173190][ T28] audit: type=1326 audit(1774392390.986:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.453523][T18882] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1829.489739][ T28] audit: type=1326 audit(1774392390.986:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.650572][ T28] audit: type=1326 audit(1774392390.986:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.673306][ T28] audit: type=1326 audit(1774392390.986:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.696115][ T28] audit: type=1326 audit(1774392390.986:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.718858][ T28] audit: type=1326 audit(1774392390.986:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.742124][ T28] audit: type=1326 audit(1774392390.986:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28063 comm="syz.3.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1829.771613][T18882] usb 3-1: Using ep0 maxpacket: 16 [ 1829.779887][T18882] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1829.792168][T18882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1829.863329][T18882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1829.910150][T18882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1829.941565][T18882] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1829.975067][T18882] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1829.984400][T18882] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1830.001459][T18882] usb 3-1: Manufacturer: syz [ 1830.056012][T18882] usb 3-1: config 0 descriptor?? [ 1830.156012][T28073] loop3: detected capacity change from 0 to 32768 [ 1830.702744][T28073] misc userio: Invalid payload size [ 1830.709176][T28073] 9pnet_fd: Insufficient options for proto=fd [ 1830.871743][T18882] rc_core: IR keymap rc-hauppauge not found [ 1830.908201][T18882] Registered IR keymap rc-empty [ 1830.928215][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1831.021647][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1831.442600][T18882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1831.494021][T18882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input90 [ 1831.561622][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1831.684225][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.131576][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.161520][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.221626][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.271561][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.343619][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.458450][T28095] sctp: [Deprecated]: syz.2.6236 (pid 28095) Use of int in max_burst socket option deprecated. [ 1832.458450][T28095] Use struct sctp_assoc_value instead [ 1832.824019][T28092] loop3: detected capacity change from 0 to 4096 [ 1832.840925][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.904267][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1832.991695][T18882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1833.064973][T18882] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1833.109767][T18882] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1833.305854][T18882] usb 3-1: USB disconnect, device number 99 [ 1833.791378][T14747] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1833.835669][ T28] audit: type=1326 audit(1774392395.976:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1833.932336][ T28] audit: type=1326 audit(1774392395.976:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1834.012483][T14747] usb 5-1: Using ep0 maxpacket: 16 [ 1834.169970][ T28] audit: type=1326 audit(1774392395.976:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1834.193239][T14747] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1834.201433][T14747] usb 5-1: config 0 has no interface number 0 [ 1834.226826][T14747] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1834.239972][T14747] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1834.249933][ T28] audit: type=1326 audit(1774392395.976:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1834.291583][T14747] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1834.311083][T14747] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1834.329708][ T28] audit: type=1326 audit(1774392395.976:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1834.356123][T14747] usb 5-1: Product: syz [ 1834.360378][T14747] usb 5-1: SerialNumber: syz [ 1834.442418][T14747] usb 5-1: config 0 descriptor?? [ 1834.878620][ T28] audit: type=1326 audit(1774392395.976:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1834.908723][T14747] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1834.955511][T14747] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input91 [ 1835.035086][ T28] audit: type=1326 audit(1774392395.976:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1835.160272][ T28] audit: type=1326 audit(1774392395.976:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1835.295271][ T28] audit: type=1326 audit(1774392395.976:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1835.399740][ T28] audit: type=1326 audit(1774392395.976:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1835.531043][ T28] audit: type=1326 audit(1774392395.976:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28102 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1836.612027][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1836.612818][T21827] usb 5-1: USB disconnect, device number 94 [ 1836.619497][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1836.681586][T21827] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1836.911347][ T5805] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1836.911601][T28133] sctp: [Deprecated]: syz.1.6246 (pid 28133) Use of int in max_burst socket option deprecated. [ 1836.911601][T28133] Use struct sctp_assoc_value instead [ 1837.101273][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 1837.142404][ T5805] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1837.153715][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1837.164774][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1837.174627][ T5805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1837.186471][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1837.235017][ T5805] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1837.244585][ T5805] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1837.254793][ T5805] usb 3-1: Manufacturer: syz [ 1837.412065][ T5805] usb 3-1: config 0 descriptor?? [ 1837.841133][ T5805] rc_core: IR keymap rc-hauppauge not found [ 1837.847096][ T5805] Registered IR keymap rc-empty [ 1837.886939][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1837.945836][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.032720][ T5805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1838.093658][ T5805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input92 [ 1838.576147][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.701085][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.761596][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.783157][T28147] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1838.811237][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.863867][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.931804][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.939447][T28148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1838.983334][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1839.011086][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1839.037496][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1839.104261][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1839.153703][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1839.245916][ T5805] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1839.335773][ T5805] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1839.429026][ T5805] usb 3-1: USB disconnect, device number 100 [ 1839.666289][T28149] team0: Port device team_slave_0 removed [ 1840.217008][T28163] usb usb8: usbfs: process 28163 (syz.4.6254) did not claim interface 0 before use [ 1841.131026][T28177] sctp: [Deprecated]: syz.3.6257 (pid 28177) Use of int in max_burst socket option deprecated. [ 1841.131026][T28177] Use struct sctp_assoc_value instead [ 1842.483226][T28184] loop4: detected capacity change from 0 to 4096 [ 1845.505287][T28215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6269'. [ 1845.591612][T28216] sctp: [Deprecated]: syz.2.6270 (pid 28216) Use of int in max_burst socket option deprecated. [ 1845.591612][T28216] Use struct sctp_assoc_value instead [ 1846.091443][T28218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6271'. [ 1846.100471][T28218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6271'. [ 1846.488998][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1846.489049][ T28] audit: type=1326 audit(1774392408.497:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28219 comm="syz.1.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1846.719888][T28218] loop4: detected capacity change from 0 to 16 [ 1846.731680][T28218] erofs: (device loop4): mounted with root inode @ nid 36. [ 1846.803973][ T28] audit: type=1326 audit(1774392408.507:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28219 comm="syz.1.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1846.876703][ T28] audit: type=1326 audit(1774392408.507:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28219 comm="syz.1.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1847.539484][ T28] audit: type=1326 audit(1774392408.507:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28219 comm="syz.1.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1847.830805][ T28] audit: type=1326 audit(1774392408.507:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28219 comm="syz.1.6272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1849.930641][ T5805] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1850.053246][T28256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6281'. [ 1850.130548][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 1850.142370][ T5805] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1850.187915][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1850.226242][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1850.243297][T28259] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1850.252530][T28259] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1850.261512][T28259] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1850.314414][ T5805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1850.356927][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1850.377808][T28262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1850.388399][T28262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1850.421989][ T5805] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1850.440636][ T5805] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1850.464511][ T5805] usb 2-1: Manufacturer: syz [ 1850.555064][ T5805] usb 2-1: config 0 descriptor?? [ 1850.694577][T28267] md: superblock version 12389 not known [ 1850.700416][T28267] md: couldn't set array info. -22 [ 1850.730164][T28266] loop2: detected capacity change from 0 to 512 [ 1850.739345][T28266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1851.312032][T28262] loop3: detected capacity change from 0 to 16 [ 1851.366936][T28262] erofs: (device loop3): mounted with root inode @ nid 36. [ 1852.660120][T28266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1852.866312][ T28] audit: type=1326 audit(1774392414.997:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28271 comm="syz.4.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1852.889366][ C0] vkms_vblank_simulate: vblank timer overrun [ 1853.011157][T28266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.6285: invalid indirect mapped block 2683928664 (level 1) [ 1853.030560][ T28] audit: type=1326 audit(1774392414.997:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28271 comm="syz.4.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1853.210216][ T28] audit: type=1326 audit(1774392414.997:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28271 comm="syz.4.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1853.265628][T28276] loop3: detected capacity change from 0 to 4096 [ 1853.278545][T28266] EXT4-fs (loop2): Remounting filesystem read-only [ 1853.293908][T28266] EXT4-fs (loop2): 1 truncate cleaned up [ 1853.300629][ T28] audit: type=1326 audit(1774392414.997:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28271 comm="syz.4.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1853.324592][ T5805] rc_core: IR keymap rc-hauppauge not found [ 1853.331684][T28266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1853.334727][ T5805] Registered IR keymap rc-empty [ 1853.349361][ T28] audit: type=1326 audit(1774392415.007:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28271 comm="syz.4.6286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1853.354611][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.373174][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1853.387491][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.410404][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1853.445039][T28265] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.6285: directory missing '.' [ 1853.474212][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.522557][ T5805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1853.614269][ T5805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input93 [ 1853.661775][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1853.732046][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.061903][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.121696][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.150630][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.210339][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.260905][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.301029][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.331128][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.360246][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1854.435884][ T5805] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1854.462770][ T5805] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1854.506006][ T5805] usb 2-1: USB disconnect, device number 90 [ 1854.752193][T28292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6292'. [ 1855.007775][T28300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1855.039186][T28300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1855.843567][T28309] md: superblock version 12389 not known [ 1855.849298][T28309] md: couldn't set array info. -22 [ 1855.885794][T28309] loop3: detected capacity change from 0 to 512 [ 1855.895268][T28309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1856.554874][T28309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1856.571197][T28309] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.6297: invalid indirect mapped block 2683928664 (level 1) [ 1857.129725][T28309] EXT4-fs (loop3): Remounting filesystem read-only [ 1857.140955][T28309] EXT4-fs (loop3): 1 truncate cleaned up [ 1857.152045][T28309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1857.177845][T28309] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.6297: directory missing '.' [ 1857.620791][T23364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.167956][T28317] loop3: detected capacity change from 0 to 4096 [ 1858.279948][ T787] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1858.459898][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 1858.471793][ T787] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1858.507281][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1858.548903][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1858.576388][ T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1858.598203][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1858.631237][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1858.648425][ T787] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1858.664552][ T787] usb 3-1: Manufacturer: syz [ 1858.692429][ T787] usb 3-1: config 0 descriptor?? [ 1859.049933][ T787] rc_core: IR keymap rc-hauppauge not found [ 1859.093892][ T787] Registered IR keymap rc-empty [ 1859.121366][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.283139][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.292929][T28330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6303'. [ 1859.360927][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1859.460024][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94 [ 1859.515102][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.610004][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.662909][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.728365][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.813213][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.861245][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.890578][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.940424][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1859.980519][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1860.010920][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1860.011886][T28337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1860.028231][T28337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1860.050928][ T787] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1860.060254][ T787] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1860.112009][ T787] usb 3-1: USB disconnect, device number 101 [ 1860.520221][T28341] md: superblock version 12389 not known [ 1860.525931][T28341] md: couldn't set array info. -22 [ 1860.653849][T28341] loop3: detected capacity change from 0 to 512 [ 1860.660852][T28341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1861.340782][T28341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1861.394295][T28341] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.6307: invalid block [ 1861.412631][T28341] EXT4-fs (loop3): Remounting filesystem read-only [ 1861.419391][T28341] EXT4-fs (loop3): 1 truncate cleaned up [ 1861.427179][T28341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1861.451073][T28341] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.6307: directory missing '.' [ 1861.505637][T23364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.472563][T28361] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1862.504051][T28357] loop3: detected capacity change from 0 to 4096 [ 1862.662036][ T28] audit: type=1326 audit(1774392424.818:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28362 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1862.740048][ T28] audit: type=1326 audit(1774392424.818:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28362 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1862.802886][ T28] audit: type=1326 audit(1774392424.818:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28362 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1862.868538][ T28] audit: type=1326 audit(1774392424.818:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28362 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1862.895482][ T28] audit: type=1326 audit(1774392424.818:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28362 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1862.931720][ T28] audit: type=1326 audit(1774392424.818:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28362 comm="syz.2.6314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1864.186727][T18882] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1864.200970][T28375] md: superblock version 12389 not known [ 1864.206664][T28375] md: couldn't set array info. -22 [ 1864.225142][T28375] loop3: detected capacity change from 0 to 512 [ 1864.232365][T28375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1864.256765][T28375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1864.269351][T28375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.6319: invalid indirect mapped block 2683928664 (level 1) [ 1864.286129][T28375] EXT4-fs (loop3): Remounting filesystem read-only [ 1864.292911][T28375] EXT4-fs (loop3): 1 truncate cleaned up [ 1864.299258][T28375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1864.314299][T28375] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.6319: directory missing '.' [ 1864.398417][T23364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.439729][T18882] usb 5-1: Using ep0 maxpacket: 16 [ 1864.455143][T18882] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1864.478115][T18882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1864.496367][T18882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1864.533656][T18882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1864.556264][T18882] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1864.575495][T18882] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1864.763637][T18882] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1864.810104][T14747] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1864.854309][T18882] usb 5-1: Manufacturer: syz [ 1864.946407][T18882] usb 5-1: config 0 descriptor?? [ 1865.161318][T14747] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1865.177306][T14747] usb 2-1: config 0 has no interface number 0 [ 1865.198756][T14747] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1865.234640][T14747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.257146][T14747] usb 2-1: Product: syz [ 1865.274317][T14747] usb 2-1: Manufacturer: syz [ 1865.284207][T14747] usb 2-1: SerialNumber: syz [ 1865.308525][T14747] usb 2-1: config 0 descriptor?? [ 1865.489941][T18882] rc_core: IR keymap rc-hauppauge not found [ 1865.496496][T18882] Registered IR keymap rc-empty [ 1865.503605][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1865.534697][T14747] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 1865.549509][T14747] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 1865.560254][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1865.697938][T28398] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1865.777408][T14747] uvcvideo 2-1:0.64: Entity type for entity Output 65535 was not initialized! [ 1865.847456][T18882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1865.997974][T14747] usb 2-1: Failed to create links for entity 65535 [ 1866.064766][T14747] usb 2-1: Failed to register entities (-22). [ 1866.076565][T18882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input95 [ 1866.118658][T14747] usb 2-1: USB disconnect, device number 91 [ 1866.125188][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.169997][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.210430][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.253989][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.302707][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.351951][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.570102][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.600206][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.660434][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.729998][T18882] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1866.889754][T18882] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1867.258518][T18882] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1867.336986][T18882] usb 5-1: USB disconnect, device number 95 [ 1868.324636][T28419] md: superblock version 12389 not known [ 1868.330492][T28419] md: couldn't set array info. -22 [ 1869.188210][ T28] audit: type=1326 audit(1774392431.338:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.222142][T21827] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1869.449444][T21827] usb 3-1: Using ep0 maxpacket: 32 [ 1869.466500][T21827] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1869.475581][T21827] usb 3-1: config 0 has no interface number 0 [ 1869.482611][T21827] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1869.498908][ T28] audit: type=1326 audit(1774392431.368:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.578039][T21827] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1869.600320][T21827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.608558][T21827] usb 3-1: Product: syz [ 1869.613391][ T28] audit: type=1326 audit(1774392431.368:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.635930][T21827] usb 3-1: Manufacturer: syz [ 1869.640677][T21827] usb 3-1: SerialNumber: syz [ 1869.646605][ T28] audit: type=1326 audit(1774392431.368:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.680825][T21827] usb 3-1: config 0 descriptor?? [ 1869.705494][ T28] audit: type=1326 audit(1774392431.518:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.752145][ T28] audit: type=1326 audit(1774392431.538:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.793064][T28436] loop3: detected capacity change from 0 to 4096 [ 1869.799935][ T28] audit: type=1326 audit(1774392431.618:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.4.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4f79c799 code=0x7ffc0000 [ 1869.929350][T14747] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1870.269746][T14747] usb 2-1: Using ep0 maxpacket: 16 [ 1870.284278][T14747] usb 2-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1870.316757][T14747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1870.332738][T21827] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1870.335014][T14747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1870.363589][T21827] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1870.365211][T14747] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1870.386042][T14747] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1870.399272][T21827] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1870.399360][T21827] f81534: probe of 3-1:0.12 failed with error -71 [ 1870.403695][T21827] usb 3-1: USB disconnect, device number 102 [ 1870.481616][T14747] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1870.494179][T14747] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1870.516678][T14747] usb 2-1: Manufacturer: syz [ 1870.535279][T14747] usb 2-1: config 0 descriptor?? [ 1870.733556][T28447] loop4: detected capacity change from 0 to 512 [ 1870.838067][T28447] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1870.870650][T28447] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1870.880013][T14747] rc_core: IR keymap rc-hauppauge not found [ 1870.927292][T14747] Registered IR keymap rc-empty [ 1870.942832][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.009304][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.048171][T14747] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1871.076581][T14747] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input96 [ 1871.111690][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.179359][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.239622][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.299536][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.349264][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.407470][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.448011][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.489400][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.529216][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.588619][T14747] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1871.610875][T28455] md: superblock version 12389 not known [ 1871.616568][T28455] md: couldn't set array info. -22 [ 1871.630810][T28455] loop2: detected capacity change from 0 to 512 [ 1871.637737][T28455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1871.661149][T28455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1871.673451][T28455] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.6343: invalid block [ 1871.686267][T28455] EXT4-fs (loop2): Remounting filesystem read-only [ 1871.693183][T28455] EXT4-fs (loop2): 1 truncate cleaned up [ 1871.699608][T28455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1871.716867][T14747] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1871.722804][T28455] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.6343: directory missing '.' [ 1871.780640][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.799257][T14747] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1871.856124][T14747] usb 2-1: USB disconnect, device number 92 [ 1872.659295][ T28] audit: type=1326 audit(1774392434.798:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28462 comm="syz.1.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1872.697507][ T28] audit: type=1326 audit(1774392434.798:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28462 comm="syz.1.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1872.760214][ T28] audit: type=1326 audit(1774392434.798:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28462 comm="syz.1.6346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1873.259137][T28476] loop4: detected capacity change from 0 to 16 [ 1873.333504][T28476] erofs: (device loop4): mounted with root inode @ nid 36. [ 1874.712393][ T5805] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1874.860818][T28504] loop3: detected capacity change from 0 to 512 [ 1874.898502][T28504] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1874.930733][ T5805] usb 5-1: Using ep0 maxpacket: 16 [ 1874.953211][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.983008][T28504] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1874.995993][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1875.012400][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1875.038471][ T5805] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1875.092003][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1875.131515][ T5805] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1875.150607][ T5805] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1875.163922][ T5805] usb 5-1: Manufacturer: syz [ 1875.187433][ T5805] usb 5-1: config 0 descriptor?? [ 1875.559520][ T5805] rc_core: IR keymap rc-hauppauge not found [ 1875.609651][ T5805] Registered IR keymap rc-empty [ 1875.615706][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1875.669159][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1875.710307][ T5805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1875.763834][ T5805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97 [ 1875.815025][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1875.859143][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1875.919791][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1875.944918][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1875.945013][ T28] audit: type=1326 audit(1774392438.098:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1875.979714][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.070278][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.099665][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.129567][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.159712][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.200323][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.219994][ T28] audit: type=1326 audit(1774392438.098:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.250174][ T5805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.323455][ T5805] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1876.332787][ T5805] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1876.396496][ T5805] usb 5-1: USB disconnect, device number 96 [ 1876.510179][ T28] audit: type=1326 audit(1774392438.098:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.568137][ T28] audit: type=1326 audit(1774392438.098:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.627976][ T28] audit: type=1326 audit(1774392438.098:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.724339][ T28] audit: type=1326 audit(1774392438.098:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.827067][ T28] audit: type=1326 audit(1774392438.098:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.885496][ T28] audit: type=1326 audit(1774392438.098:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.975703][ T28] audit: type=1326 audit(1774392438.098:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1876.998411][ T28] audit: type=1326 audit(1774392438.098:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28506 comm="syz.1.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1877.619260][ T787] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1877.662080][T28531] sctp: [Deprecated]: syz.3.6368 (pid 28531) Use of int in max_burst socket option deprecated. [ 1877.662080][T28531] Use struct sctp_assoc_value instead [ 1877.869403][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 1877.924389][ T787] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1877.933589][ T787] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1877.942825][ T787] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1877.954565][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1877.967468][ T787] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1877.977470][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1878.022588][ T787] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1878.041327][ T787] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1878.082257][ T787] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1878.097705][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.119104][ T787] usb 5-1: config 0 descriptor?? [ 1878.539560][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6367'. [ 1878.963954][T28541] can: request_module (can-proto-0) failed. [ 1879.026252][ T787] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1879.250781][T21827] usb 5-1: USB disconnect, device number 97 [ 1879.288425][T21827] usblp0: removed [ 1879.443048][T28548] loop2: detected capacity change from 0 to 4096 [ 1881.071613][T28569] sctp: [Deprecated]: syz.1.6379 (pid 28569) Use of int in max_burst socket option deprecated. [ 1881.071613][T28569] Use struct sctp_assoc_value instead [ 1882.851621][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1882.851632][ T28] audit: type=1326 audit(1774392444.909:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.025317][T28588] loop2: detected capacity change from 0 to 1024 [ 1883.028722][ T28] audit: type=1326 audit(1774392444.919:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.138863][ T28] audit: type=1326 audit(1774392444.919:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.161495][ T28] audit: type=1326 audit(1774392444.919:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.226007][ T28] audit: type=1326 audit(1774392444.929:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.290910][ T28] audit: type=1326 audit(1774392444.929:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.380218][ T28] audit: type=1326 audit(1774392444.929:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.429391][ T28] audit: type=1326 audit(1774392444.929:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.454150][ T28] audit: type=1326 audit(1774392444.929:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1883.516957][ T28] audit: type=1326 audit(1774392444.939:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28573 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1885.263404][T28618] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 1889.608310][T14747] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1890.038433][T14747] usb 2-1: Using ep0 maxpacket: 32 [ 1890.098383][T14747] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1890.106760][T14747] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1890.220105][T14747] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1890.241918][T14747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1890.554298][ T28] audit: type=1326 audit(1774392452.689:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1890.651762][T14747] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1890.783712][ T28] audit: type=1326 audit(1774392452.709:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1890.930654][T14747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1890.935051][ T28] audit: type=1326 audit(1774392452.709:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1890.963851][T14747] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1890.989431][T14747] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1891.007458][ T28] audit: type=1326 audit(1774392452.709:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.074905][T14747] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1891.125564][T14747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.133905][ T28] audit: type=1326 audit(1774392452.709:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.133950][ T28] audit: type=1326 audit(1774392452.709:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.133987][ T28] audit: type=1326 audit(1774392452.709:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.134022][ T28] audit: type=1326 audit(1774392452.709:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.255035][T14747] usb 2-1: config 0 descriptor?? [ 1891.281560][ T28] audit: type=1326 audit(1774392452.709:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.309105][ T28] audit: type=1326 audit(1774392452.709:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28670 comm="syz.3.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a719c799 code=0x7ffc0000 [ 1891.408104][ T27] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1891.515218][T28660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6408'. [ 1891.588096][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 1891.595423][ T27] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1891.606103][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1891.623646][T28660] can: request_module (can-proto-0) failed. [ 1891.627511][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1891.652644][T14747] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1891.668436][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1891.708522][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1891.743004][ T27] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1891.762773][ T27] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1891.783029][ T27] usb 5-1: Manufacturer: syz [ 1891.813880][ T27] usb 5-1: config 0 descriptor?? [ 1891.898545][ T787] usb 2-1: USB disconnect, device number 93 [ 1891.909496][ T787] usblp0: removed [ 1892.938057][ T27] rc_core: IR keymap rc-hauppauge not found [ 1892.956244][ T27] Registered IR keymap rc-empty [ 1892.970309][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.018264][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.069061][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1893.110180][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input98 [ 1893.161754][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.228131][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.470894][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.508426][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.548045][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.588049][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.602260][T28701] sctp: [Deprecated]: syz.2.6419 (pid 28701) Use of int in max_burst socket option deprecated. [ 1893.602260][T28701] Use struct sctp_assoc_value instead [ 1893.628609][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.667827][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.700364][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.738016][ T27] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1893.779703][ T27] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1893.803647][ T27] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1893.838539][ T27] usb 5-1: USB disconnect, device number 98 [ 1894.747763][T28711] loop4: detected capacity change from 0 to 32768 [ 1895.040194][T28708] loop3: detected capacity change from 0 to 4096 [ 1895.314130][T28711] misc userio: Invalid payload size [ 1895.358766][T28711] 9pnet_fd: Insufficient options for proto=fd [ 1895.735025][T28714] loop2: detected capacity change from 0 to 32768 [ 1895.780321][T28714] (syz.2.6424,28714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1895.794163][T28714] (syz.2.6424,28714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1895.838284][T28714] JBD2: Ignoring recovery information on journal [ 1895.885512][T28714] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1896.720720][T23083] ocfs2: Unmounting device (7,2) on (node local) [ 1896.834111][T28726] sctp: [Deprecated]: syz.3.6428 (pid 28726) Use of int in max_burst socket option deprecated. [ 1896.834111][T28726] Use struct sctp_assoc_value instead [ 1896.858558][T18882] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1897.048223][T18882] usb 5-1: Using ep0 maxpacket: 32 [ 1897.063318][T18882] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1897.073484][T18882] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1897.112415][T18882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1897.152044][T18882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1897.210643][T18882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1897.231973][T18882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1897.254503][T18882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1897.280605][T18882] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1897.324758][T18882] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1897.349212][T18882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.381103][T18882] usb 5-1: config 0 descriptor?? [ 1897.705671][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1897.705702][ T28] audit: type=1326 audit(1774392459.760:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1897.948819][ T28] audit: type=1326 audit(1774392459.760:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1897.978550][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6425'. [ 1897.998405][ T28] audit: type=1326 audit(1774392459.770:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1898.068274][ T28] audit: type=1326 audit(1774392459.770:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1898.304157][T28741] loop3: detected capacity change from 0 to 32768 [ 1898.358725][ T28] audit: type=1326 audit(1774392459.780:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1898.388898][T18882] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 99 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1898.425968][T28721] can: request_module (can-proto-0) failed. [ 1898.697394][ T28] audit: type=1326 audit(1774392459.780:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1899.017405][ T28] audit: type=1326 audit(1774392459.780:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1899.047661][ T28] audit: type=1326 audit(1774392459.780:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1899.078761][T18882] usb 5-1: USB disconnect, device number 99 [ 1899.122452][T18882] usblp0: removed [ 1899.123396][ T28] audit: type=1326 audit(1774392459.840:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1899.174430][T28741] misc userio: Invalid payload size [ 1899.217825][ T28] audit: type=1326 audit(1774392459.840:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.2.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1899.249000][T28741] 9pnet_fd: Insufficient options for proto=fd [ 1900.815201][T28768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6439'. [ 1901.368135][T18882] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1901.778890][T18882] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1901.924567][T18882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1901.957579][T18882] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1901.987512][ T8] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1901.995631][T18882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.043522][T18882] usb 3-1: config 0 descriptor?? [ 1902.056994][T18882] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1902.167551][ T8] usb 5-1: device descriptor read/64, error -71 [ 1902.437523][ T8] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1902.617457][ T8] usb 5-1: device descriptor read/64, error -71 [ 1902.737478][T18882] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1902.745550][ T8] usb usb5-port1: attempt power cycle [ 1902.937529][T18882] usb 2-1: Using ep0 maxpacket: 16 [ 1902.950153][T18882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.971841][T18882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1902.986660][T18882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1903.003723][T18882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1903.013771][T18882] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1903.032797][T18882] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1903.042875][T18882] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1903.054595][T18882] usb 2-1: Manufacturer: syz [ 1903.063991][T18882] usb 2-1: config 0 descriptor?? [ 1903.177450][ T8] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1903.208235][ T8] usb 5-1: device descriptor read/8, error -71 [ 1903.377543][T18882] rc_core: IR keymap rc-hauppauge not found [ 1903.384927][T18882] Registered IR keymap rc-empty [ 1903.392434][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.431537][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.469517][T18882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1903.488522][T18882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input99 [ 1903.502610][ T8] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1903.517137][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.538704][ T8] usb 5-1: device descriptor read/8, error -71 [ 1903.564860][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.607617][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.647911][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.671618][ T8] usb usb5-port1: unable to enumerate USB device [ 1903.687863][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.731840][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.779838][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.807459][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.839109][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.880814][T18882] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1903.922368][T18882] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1903.933042][T18882] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1903.949793][T18882] usb 2-1: USB disconnect, device number 94 [ 1904.035859][ T5805] usb 3-1: USB disconnect, device number 103 [ 1905.821382][T28807] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6450'. [ 1905.914692][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1905.914707][ T28] audit: type=1326 audit(1774392468.070:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1905.944297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1905.963186][ T28] audit: type=1326 audit(1774392468.110:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1906.008839][ T28] audit: type=1326 audit(1774392468.110:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1906.053810][ T28] audit: type=1326 audit(1774392468.110:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1906.076333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1906.110055][ T28] audit: type=1326 audit(1774392468.110:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1906.162647][ T28] audit: type=1326 audit(1774392468.110:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28808 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1906.316194][T28815] loop4: detected capacity change from 0 to 8 [ 1906.350665][T28815] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 1906.373216][T28815] unable to read xattr id index table [ 1907.037582][ T5757] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1907.362729][ T5757] usb 5-1: device descriptor read/64, error -71 [ 1907.614819][T28833] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6460'. [ 1907.687465][ T5757] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1907.837181][ T5757] usb 5-1: device descriptor read/64, error -71 [ 1907.967504][ T5757] usb usb5-port1: attempt power cycle [ 1909.259287][ T5757] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1909.267679][ T8] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1909.305442][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1909.314619][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1909.323750][T28847] netlink: 'syz.2.6466': attribute type 11 has an invalid length. [ 1909.332304][ T5757] usb 5-1: device descriptor read/8, error -71 [ 1909.344116][T28847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.352977][T28847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.361877][T28847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.370639][T28847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.381887][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1909.391380][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1909.400496][T28847] netlink: 'syz.2.6466': attribute type 11 has an invalid length. [ 1909.474126][ T28] audit: type=1326 audit(1774392471.630:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28848 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1909.500652][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1909.505961][ T28] audit: type=1326 audit(1774392471.660:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28848 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1909.539277][ T8] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1909.548840][ T8] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1909.560207][ T28] audit: type=1326 audit(1774392471.660:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28848 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1909.586428][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1909.601480][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1909.612514][ T28] audit: type=1326 audit(1774392471.660:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28848 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72079c799 code=0x7ffc0000 [ 1909.612677][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1909.650183][ T5757] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1909.659936][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1909.673570][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1909.684710][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1909.705249][ T5757] usb 5-1: device descriptor read/8, error -71 [ 1909.712509][ T8] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1909.754152][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.782645][ T8] usb 2-1: config 0 descriptor?? [ 1909.827453][ T5757] usb usb5-port1: unable to enumerate USB device [ 1910.380148][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6463'. [ 1910.461480][T28853] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6469'. [ 1910.597008][ T8] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1910.655921][T28839] can: request_module (can-proto-0) failed. [ 1910.743297][T28866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6471'. [ 1910.767165][T28866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6471'. [ 1910.852297][T28866] loop3: detected capacity change from 0 to 16 [ 1910.860676][T28866] erofs: (device loop3): mounted with root inode @ nid 36. [ 1910.908923][T11224] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1910.966717][ T8] usb 2-1: USB disconnect, device number 95 [ 1911.022776][ T8] usblp0: removed [ 1912.260806][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1912.260822][ T28] audit: type=1326 audit(1774392474.420:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.1.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1912.316902][ T28] audit: type=1326 audit(1774392474.420:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.1.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1912.381075][ T28] audit: type=1326 audit(1774392474.420:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.1.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1912.415806][ T5757] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1912.435786][ T28] audit: type=1326 audit(1774392474.420:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.1.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1912.469762][ T28] audit: type=1326 audit(1774392474.420:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.1.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1912.496127][ T28] audit: type=1326 audit(1774392474.420:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28887 comm="syz.1.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1912.617497][ T5757] usb 3-1: Using ep0 maxpacket: 16 [ 1912.625128][ T5757] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1912.645818][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1912.667934][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1912.696847][ T5757] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1912.716897][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1912.738043][ T5757] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1912.756834][ T5757] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1912.776168][ T5757] usb 3-1: Manufacturer: syz [ 1912.792979][ T5757] usb 3-1: config 0 descriptor?? [ 1913.146825][ T5757] rc_core: IR keymap rc-hauppauge not found [ 1913.152858][ T5757] Registered IR keymap rc-empty [ 1913.163079][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.206888][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.257779][ T5757] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1913.298998][ T5757] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input100 [ 1913.396961][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.475671][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.567050][T28899] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6480'. [ 1913.607416][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.656956][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.807787][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.896914][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1913.966864][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1914.006849][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1914.039641][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1914.091419][ T5757] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1914.138538][ T5757] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1914.176831][ T5757] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1914.200968][ T5757] usb 3-1: USB disconnect, device number 104 [ 1914.793904][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.800477][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.466904][ T27] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1915.529762][T28925] loop4: detected capacity change from 0 to 512 [ 1915.542893][T28925] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1915.686982][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 1915.795639][ T27] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1915.942737][ T27] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1916.080138][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1916.191276][T11224] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1916.210164][T28923] loop2: detected capacity change from 0 to 4096 [ 1916.211806][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1916.275947][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1916.379320][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1916.452454][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1916.494196][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1916.566830][ T27] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1916.665564][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.788397][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1916.804108][ T27] usb 2-1: config 0 descriptor?? [ 1917.033043][T28930] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1917.070944][T28916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1917.187032][ T27] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1917.274931][T28916] can: request_module (can-proto-0) failed. [ 1917.441639][T21827] usb 2-1: USB disconnect, device number 96 [ 1917.478142][T21827] usblp0: removed [ 1917.909942][T28945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1917.949900][T28945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1918.156192][T28945] loop2: detected capacity change from 0 to 16 [ 1918.164302][T28945] erofs: (device loop2): mounted with root inode @ nid 36. [ 1918.231207][T11224] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1919.971593][T28966] loop4: detected capacity change from 0 to 4096 [ 1920.041532][T28971] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6500'. [ 1922.295682][T28995] batadv_slave_0: entered promiscuous mode [ 1922.750861][T28990] batadv_slave_0: left promiscuous mode [ 1924.131139][T29013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6512'. [ 1925.139847][T29027] loop3: detected capacity change from 0 to 4096 [ 1927.711547][T29056] sctp: [Deprecated]: syz.4.6526 (pid 29056) Use of int in max_burst socket option deprecated. [ 1927.711547][T29056] Use struct sctp_assoc_value instead [ 1928.120632][T29060] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6527'. [ 1928.506118][T29067] loop2: detected capacity change from 0 to 64 [ 1929.194766][T29074] atomic_op ffff888026006998 conn xmit_atomic 0000000000000000 [ 1931.880388][T29081] loop3: detected capacity change from 0 to 64 [ 1932.077449][T29079] loop2: detected capacity change from 0 to 4096 [ 1932.601696][T29083] loop4: detected capacity change from 0 to 32768 [ 1932.866221][T29083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.6536 (29083) [ 1932.914928][T29083] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1932.925210][T29083] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1932.934118][T29083] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1932.942578][T29083] BTRFS info (device loop4): enabling auto defrag [ 1932.949251][T29083] BTRFS info (device loop4): max_inline at 0 [ 1932.955268][T29083] BTRFS info (device loop4): using free space tree [ 1932.984554][T29083] BTRFS info (device loop4): auto enabling async discard [ 1933.114261][T29083] BTRFS info (device loop4): scrub: started on devid 1 [ 1933.136109][T29083] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 1933.143895][T29083] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 1933.154179][T29083] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 1933.167840][T29083] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 1933.177234][T29083] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 1933.184858][T29083] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 1933.192532][T29083] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 1933.200389][T29083] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 1933.266955][T29083] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 1933.844549][T22823] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1934.151177][T29113] loop2: detected capacity change from 0 to 512 [ 1934.326118][T29114] sctp: [Deprecated]: syz.3.6539 (pid 29114) Use of int in max_burst socket option deprecated. [ 1934.326118][T29114] Use struct sctp_assoc_value instead [ 1934.722119][T29113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1934.746379][T29121] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1934.785805][T29113] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1934.878861][T29123] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1935.277945][T29130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6541'. [ 1935.956591][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1936.725545][T29141] sctp: [Deprecated]: syz.2.6545 (pid 29141) Use of int in max_burst socket option deprecated. [ 1936.725545][T29141] Use struct sctp_assoc_value instead [ 1937.823304][T29157] sctp: [Deprecated]: syz.3.6551 (pid 29157) Use of int in max_burst socket option deprecated. [ 1937.823304][T29157] Use struct sctp_assoc_value instead [ 1938.945511][T21827] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1939.128332][T29168] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1939.205491][T21827] usb 2-1: Using ep0 maxpacket: 16 [ 1939.522694][T21827] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1939.537068][T21827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1939.736554][T29173] atomic_op ffff888025811198 conn xmit_atomic 0000000000000000 [ 1939.789754][T21827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1939.822544][T21827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1939.832461][T21827] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1939.875882][T21827] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1939.885016][T21827] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1939.947452][T21827] usb 2-1: Manufacturer: syz [ 1939.962651][T21827] usb 2-1: config 0 descriptor?? [ 1940.775366][T21827] rc_core: IR keymap rc-hauppauge not found [ 1940.835528][T21827] Registered IR keymap rc-empty [ 1940.875475][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1940.948426][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.017309][T21827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1941.075595][T21827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input101 [ 1941.168275][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.186767][T29193] sctp: [Deprecated]: syz.3.6563 (pid 29193) Use of int in max_burst socket option deprecated. [ 1941.186767][T29193] Use struct sctp_assoc_value instead [ 1941.207168][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.265725][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.316160][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.366063][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.396028][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.426287][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.475789][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.506065][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.536234][T21827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1941.579501][T21827] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1941.618866][T21827] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1941.706152][T21827] usb 2-1: USB disconnect, device number 97 [ 1941.939736][T29200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6566'. [ 1943.139817][T29228] sctp: [Deprecated]: syz.4.6576 (pid 29228) Use of int in max_burst socket option deprecated. [ 1943.139817][T29228] Use struct sctp_assoc_value instead [ 1943.283975][T29230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6577'. [ 1944.138410][T29240] netlink: 'syz.4.6580': attribute type 4 has an invalid length. [ 1944.241756][T29244] loop2: detected capacity change from 0 to 64 [ 1944.276148][T29240] loop4: detected capacity change from 0 to 2048 [ 1944.313091][T29240] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1944.344315][T29249] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1944.483412][T29250] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6580'. [ 1945.236420][T29254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6586'. [ 1945.468607][T29258] sctp: [Deprecated]: syz.4.6588 (pid 29258) Use of int in max_burst socket option deprecated. [ 1945.468607][T29258] Use struct sctp_assoc_value instead [ 1946.643036][T29277] loop4: detected capacity change from 0 to 64 [ 1946.738847][T29279] netlink: 'syz.4.6596': attribute type 10 has an invalid length. [ 1946.762747][T29279] team0: Failed to send options change via netlink (err -105) [ 1946.771737][T29279] team0: Port device netdevsim0 added [ 1947.110835][T29283] loop2: detected capacity change from 0 to 4096 [ 1947.350537][T29284] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6597'. [ 1948.048827][T29292] loop3: detected capacity change from 0 to 512 [ 1948.056294][T29292] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 1948.199210][T11231] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1948.390879][T29295] sctp: [Deprecated]: syz.2.6600 (pid 29295) Use of int in max_burst socket option deprecated. [ 1948.390879][T29295] Use struct sctp_assoc_value instead [ 1948.916557][T29298] loop2: detected capacity change from 0 to 64 [ 1950.184645][ T787] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1950.375903][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1950.396304][ T787] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1950.414819][ T787] usb 2-1: config 0 has no interface number 0 [ 1950.421004][ T787] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1950.494793][ T787] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1950.540841][ T787] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1950.574739][ T787] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1950.604097][T29315] loop2: detected capacity change from 0 to 4096 [ 1950.610768][ T787] usb 2-1: Product: syz [ 1950.634767][ T787] usb 2-1: SerialNumber: syz [ 1950.665589][ T787] usb 2-1: config 0 descriptor?? [ 1950.698597][ T787] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1950.743406][ T787] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input102 [ 1951.607215][T29321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1951.731077][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.740970][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.748736][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.755952][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.763308][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.770455][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.777799][ T787] usb 2-1: USB disconnect, device number 98 [ 1951.784073][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1951.784088][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1951.859750][ T787] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1952.530404][T29325] loop3: detected capacity change from 0 to 32768 [ 1952.546596][T29325] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6611 (29325) [ 1952.605838][T29325] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1952.616188][T29325] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1952.625029][T29325] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1952.633161][T29325] BTRFS info (device loop3): enabling auto defrag [ 1952.639665][T29325] BTRFS info (device loop3): max_inline at 0 [ 1952.645784][T29325] BTRFS info (device loop3): using free space tree [ 1952.885032][T29325] BTRFS info (device loop3): auto enabling async discard [ 1953.129315][T29346] sctp: [Deprecated]: syz.1.6613 (pid 29346) Use of int in max_burst socket option deprecated. [ 1953.129315][T29346] Use struct sctp_assoc_value instead [ 1953.503469][T29349] loop2: detected capacity change from 0 to 512 [ 1953.511141][T29349] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1954.639536][T23364] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1956.238985][T29373] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6620'. [ 1956.390711][T29372] loop4: detected capacity change from 0 to 4096 [ 1956.551864][T29375] loop2: detected capacity change from 0 to 2048 [ 1956.797584][T29378] sctp: [Deprecated]: syz.1.6622 (pid 29378) Use of int in max_burst socket option deprecated. [ 1956.797584][T29378] Use struct sctp_assoc_value instead [ 1957.106481][T29375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1957.277163][ T28] audit: type=1800 audit(1774392519.423:403): pid=29375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6621" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 1957.297998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1958.202558][T29390] netlink: 'syz.4.6626': attribute type 4 has an invalid length. [ 1958.390334][T29390] loop4: detected capacity change from 0 to 2048 [ 1958.401659][T29392] loop2: detected capacity change from 0 to 16 [ 1958.549821][T29390] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1958.602062][T29392] erofs: (device loop2): mounted with root inode @ nid 36. [ 1958.833316][T29395] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1961.058618][T29415] sctp: [Deprecated]: syz.2.6632 (pid 29415) Use of int in max_burst socket option deprecated. [ 1961.058618][T29415] Use struct sctp_assoc_value instead [ 1961.940457][T29422] atomic_op ffff888069b06198 conn xmit_atomic 0000000000000000 [ 1962.791135][T29428] loop3: detected capacity change from 0 to 4096 [ 1963.057244][T29433] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6639'. [ 1963.097691][T29421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.105130][T29421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.308924][T29449] sctp: [Deprecated]: syz.4.6642 (pid 29449) Use of int in max_burst socket option deprecated. [ 1965.308924][T29449] Use struct sctp_assoc_value instead [ 1965.751328][T29421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1965.814926][T29421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1966.592536][T29421] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.605818][T29421] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.616098][T29421] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.628209][T29421] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.888201][T29421] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1966.897279][T29421] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1966.906580][T29421] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1966.915838][T29421] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1967.716221][T29468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6648'. [ 1968.089746][T29475] loop2: detected capacity change from 0 to 512 [ 1968.810913][T29475] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1969.058882][T29477] loop3: detected capacity change from 0 to 4096 [ 1969.213670][T29481] sctp: [Deprecated]: syz.1.6652 (pid 29481) Use of int in max_burst socket option deprecated. [ 1969.213670][T29481] Use struct sctp_assoc_value instead [ 1971.053864][T29489] sctp: [Deprecated]: syz.1.6653 (pid 29489) Use of int in max_burst socket option deprecated. [ 1971.053864][T29489] Use struct sctp_assoc_value instead [ 1973.332690][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1973.454177][ T28] audit: type=1326 audit(1774392535.614:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1973.521298][ T28] audit: type=1326 audit(1774392535.624:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.009490][ T28] audit: type=1326 audit(1774392535.634:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.092880][ T28] audit: type=1326 audit(1774392535.634:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.173820][ T28] audit: type=1326 audit(1774392535.634:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.244796][ T28] audit: type=1326 audit(1774392535.634:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.271873][ T28] audit: type=1326 audit(1774392535.634:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.295071][ T28] audit: type=1326 audit(1774392535.634:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.325954][ T28] audit: type=1326 audit(1774392535.634:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.350012][ T28] audit: type=1326 audit(1774392535.634:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29508 comm="syz.1.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f17bc79c799 code=0x7ffc0000 [ 1974.385660][T29519] md: superblock version 12389 not known [ 1974.391314][T29519] md: couldn't set array info. -22 [ 1974.419132][T29519] loop2: detected capacity change from 0 to 512 [ 1974.426053][T29519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1974.502312][T29519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1974.513312][T29519] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.6665: invalid block [ 1974.528148][T29519] EXT4-fs (loop2): Remounting filesystem read-only [ 1974.534897][T29519] EXT4-fs (loop2): 1 truncate cleaned up [ 1974.541202][T29519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1974.561547][T29519] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.6665: directory missing '.' [ 1974.650454][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1974.765235][T29525] sctp: [Deprecated]: syz.4.6666 (pid 29525) Use of int in max_burst socket option deprecated. [ 1974.765235][T29525] Use struct sctp_assoc_value instead [ 1976.225738][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.232086][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.606007][T29565] sctp: [Deprecated]: syz.4.6678 (pid 29565) Use of int in max_burst socket option deprecated. [ 1978.606007][T29565] Use struct sctp_assoc_value instead [ 1978.773760][ T787] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1978.963328][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 1979.105712][ T787] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1979.120515][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.131549][ T787] usb 3-1: config 0 has no interface number 0 [ 1979.141437][ T787] usb 3-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1979.157421][ T787] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1979.167332][ T787] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1979.178960][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.196527][ T787] usb 3-1: Product: syz [ 1979.201077][ T787] usb 3-1: Manufacturer: syz [ 1979.208542][ T787] usb 3-1: SerialNumber: syz [ 1979.221627][ T787] usb 3-1: config 0 descriptor?? [ 1979.231827][ T787] f81534 3-1:0.12: required endpoints missing [ 1979.728626][T29575] loop4: detected capacity change from 0 to 16 [ 1979.921607][T29575] erofs: (device loop4): mounted with root inode @ nid 36. [ 1981.517756][T29453] usb 3-1: USB disconnect, device number 105 [ 1981.567302][T29594] syzkaller0: entered promiscuous mode [ 1981.583075][T29594] syzkaller0: entered allmulticast mode [ 1981.893606][T29604] sctp: [Deprecated]: syz.3.6689 (pid 29604) Use of int in max_burst socket option deprecated. [ 1981.893606][T29604] Use struct sctp_assoc_value instead [ 1982.361105][T29610] loop2: detected capacity change from 0 to 2048 [ 1982.424279][T29610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1982.492755][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1982.492771][ T28] audit: type=1800 audit(1774392544.654:417): pid=29610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6691" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 1982.500462][T29612] loop4: detected capacity change from 0 to 64 [ 1984.593073][T29455] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1984.811797][T29631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.819190][T29631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.831498][T29455] usb 3-1: Using ep0 maxpacket: 16 [ 1984.842244][T29455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1984.873380][T29455] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1984.889352][T29455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.908669][T29455] usb 3-1: Product: syz [ 1984.919225][T29455] usb 3-1: Manufacturer: syz [ 1984.933425][T29455] usb 3-1: SerialNumber: syz [ 1984.947359][T29455] usb 3-1: config 0 descriptor?? [ 1984.975720][T29455] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1984.995465][T29455] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1985.473664][T29631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1985.537670][T29631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1985.584884][T29455] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1986.025487][T29455] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1986.055442][T29455] em28xx 3-1:0.0: board has no eeprom [ 1986.153948][T29631] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.212609][T29631] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.221687][T29631] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.265317][T29631] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.405858][T29455] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1986.407937][T29639] loop4: detected capacity change from 0 to 2048 [ 1986.432955][T29455] em28xx 3-1:0.0: dvb set to bulk mode. [ 1986.441744][T18330] em28xx 3-1:0.0: Binding DVB extension [ 1986.454732][T29639] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1986.476263][T29455] usb 3-1: USB disconnect, device number 106 [ 1986.496244][T29455] em28xx 3-1:0.0: Disconnecting em28xx [ 1986.508524][T29643] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1986.952553][T29638] netlink: 'syz.4.6700': attribute type 4 has an invalid length. [ 1987.394794][T18330] em28xx 3-1:0.0: Registering input extension [ 1987.473835][T29455] em28xx 3-1:0.0: Closing input extension [ 1988.782410][T29455] em28xx 3-1:0.0: Freeing device [ 1988.993327][T29656] sctp: [Deprecated]: syz.1.6703 (pid 29656) Use of int in max_burst socket option deprecated. [ 1988.993327][T29656] Use struct sctp_assoc_value instead [ 1989.456414][T29659] md: superblock version 12389 not known [ 1989.462077][T29659] md: couldn't set array info. -22 [ 1989.472106][T29659] loop4: detected capacity change from 0 to 512 [ 1989.479014][T29659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1989.591852][T29666] x_tables: duplicate underflow at hook 1 [ 1990.627379][T29659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1990.659164][T29659] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.6705: invalid indirect mapped block 2683928664 (level 1) [ 1990.674495][T29659] EXT4-fs (loop4): Remounting filesystem read-only [ 1990.681210][T29659] EXT4-fs (loop4): 1 truncate cleaned up [ 1990.687561][T29659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1990.702187][T29659] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.6705: directory missing '.' [ 1990.787064][T22823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1991.255605][T29673] misc userio: Invalid payload size [ 1991.328428][T29673] 9pnet_fd: Insufficient options for proto=fd [ 1991.989775][T29676] loop4: detected capacity change from 0 to 4096 [ 1993.397206][T29691] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6706'. [ 1995.646242][T29700] md: superblock version 12389 not known [ 1995.651896][T29700] md: couldn't set array info. -22 [ 1995.665781][T29702] sctp: [Deprecated]: syz.3.6717 (pid 29702) Use of int in max_burst socket option deprecated. [ 1995.665781][T29702] Use struct sctp_assoc_value instead [ 1995.696195][T29700] loop2: detected capacity change from 0 to 512 [ 1995.703197][T29700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1995.726546][T29700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1995.740272][T29700] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.6718: invalid indirect mapped block 2683928664 (level 1) [ 1995.756235][T29700] EXT4-fs (loop2): Remounting filesystem read-only [ 1995.763195][T29700] EXT4-fs (loop2): 1 truncate cleaned up [ 1995.769522][T29700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1995.784264][T29700] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.6718: directory missing '.' [ 1995.859424][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1996.017706][T29708] loop4: detected capacity change from 0 to 32768 [ 1996.696354][T29708] misc userio: Invalid payload size [ 1996.716490][T29708] 9pnet_fd: Insufficient options for proto=fd [ 1997.512006][T29721] loop3: detected capacity change from 0 to 4096 [ 1999.231529][T29739] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6727'. [ 1999.580945][T28912] Bluetooth: hci3: command 0x0406 tx timeout [ 2000.353518][T29743] sctp: [Deprecated]: syz.2.6729 (pid 29743) Use of int in max_burst socket option deprecated. [ 2000.353518][T29743] Use struct sctp_assoc_value instead [ 2000.811347][T29747] misc userio: Invalid payload size [ 2000.854426][T29747] 9pnet_fd: Insufficient options for proto=fd [ 2001.441336][T29755] loop2: detected capacity change from 0 to 64 [ 2001.649641][T29760] atomic_op ffff88806be6e198 conn xmit_atomic 0000000000000000 [ 2002.516676][T29766] loop2: detected capacity change from 0 to 512 [ 2002.572818][T29766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2002.602732][T29766] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2002.811691][T29775] sctp: [Deprecated]: syz.4.6739 (pid 29775) Use of int in max_burst socket option deprecated. [ 2002.811691][T29775] Use struct sctp_assoc_value instead [ 2003.105109][T29778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6736'. [ 2003.517970][T23083] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2004.509052][T29784] tipc: Cannot configure node identity twice [ 2006.237009][T29797] loop4: detected capacity change from 0 to 256 [ 2006.262682][T29797] exfat: Unknown parameter 'u‰a\5ð?Û000000Àc0000001' [ 2006.532527][T29802] atomic_op ffff888023f91998 conn xmit_atomic 0000000000000000 [ 2007.466666][T29813] loop2: detected capacity change from 0 to 128 [ 2007.484158][T29813] EXT4-fs: inline encryption not supported [ 2007.498715][T29813] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2007.525558][T29813] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2007.550808][T29813] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2008.033576][T29818] Device name cannot be null; rc = [-22] [ 2008.364482][T23083] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2009.416163][T29821] loop3: detected capacity change from 0 to 4096 [ 2009.445241][T29827] loop2: detected capacity change from 0 to 64 [ 2011.071730][T29455] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2011.272969][T29455] usb 3-1: Using ep0 maxpacket: 16 [ 2011.297036][T29455] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2011.320647][T29455] usb 3-1: config 0 has no interface number 0 [ 2011.343152][T29455] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2011.374579][T29455] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2011.391459][T29455] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2011.400088][T29455] usb 3-1: Product: syz [ 2011.411224][T29455] usb 3-1: SerialNumber: syz [ 2011.425434][T29455] usb 3-1: config 0 descriptor?? [ 2011.446179][T29455] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 2011.499042][T29849] loop3: detected capacity change from 0 to 4096 [ 2012.679866][ T5805] usb 3-1: USB disconnect, device number 107 [ 2015.461863][T29879] loop3: detected capacity change from 0 to 64 [ 2015.752667][T29883] loop2: detected capacity change from 0 to 4096 [ 2015.761178][T29455] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2015.981582][T29455] usb 5-1: Using ep0 maxpacket: 8 [ 2016.023994][T29455] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.061287][T29455] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 2016.111135][T29455] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2016.180352][T29455] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2016.885477][T29455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2016.893992][T29455] usb 5-1: Product: syz [ 2016.898256][T29455] usb 5-1: Manufacturer: syz [ 2016.909410][T29455] usb 5-1: SerialNumber: syz [ 2016.943079][T29455] usb 5-1: config 0 descriptor?? [ 2016.986164][T29455] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 2017.014891][T29455] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 2017.035022][T29455] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2017.230059][T29453] usb 5-1: USB disconnect, device number 108 [ 2017.476281][T29901] loop3: detected capacity change from 0 to 64 [ 2020.516130][T29918] loop2: detected capacity change from 0 to 4096 [ 2020.575092][T29921] loop3: detected capacity change from 0 to 2048 [ 2020.645152][T29921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2023.846754][T29955] loop4: detected capacity change from 0 to 4096 [ 2024.236106][T29958] Device name cannot be null; rc = [-22] [ 2025.297526][T29966] loop4: detected capacity change from 0 to 4096 [ 2026.590567][T29453] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2026.801199][T29453] usb 3-1: Using ep0 maxpacket: 32 [ 2026.816155][T29453] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2026.839633][T29453] usb 3-1: config 0 has no interface number 0 [ 2026.853567][T29453] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2026.881615][T29453] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2026.907513][T29453] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2026.932957][T29453] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2026.972593][T29453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.998579][T29453] usb 3-1: Product: syz [ 2027.011092][T29453] usb 3-1: Manufacturer: syz [ 2027.021160][T29453] usb 3-1: SerialNumber: syz [ 2027.041375][T29453] usb 3-1: config 0 descriptor?? [ 2027.056972][T29453] f81534 3-1:0.12: unsupported endpoint max packet size [ 2028.292960][T29990] Device name cannot be null; rc = [-22] [ 2029.340529][ T787] usb 3-1: USB disconnect, device number 108 [ 2029.548013][T30008] loop4: detected capacity change from 0 to 64 [ 2029.890568][T30006] loop2: detected capacity change from 0 to 4096 [ 2031.950268][T29455] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2032.141919][T29455] usb 2-1: Using ep0 maxpacket: 32 [ 2032.277130][T29455] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2032.394564][T29455] usb 2-1: config 0 has no interface number 0 [ 2032.430293][T29455] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2032.503366][T29455] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2032.565692][T29455] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2032.618139][T29455] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2032.663951][T29455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.702102][T29455] usb 2-1: Product: syz [ 2032.713773][T29455] usb 2-1: Manufacturer: syz [ 2032.725764][T29455] usb 2-1: SerialNumber: syz [ 2033.254369][T29455] usb 2-1: config 0 descriptor?? [ 2033.332689][T29455] f81534 2-1:0.12: unsupported endpoint max packet size [ 2033.818690][T30048] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6824'. [ 2033.938432][T30048] loop4: detected capacity change from 0 to 16 [ 2033.947069][T30048] erofs: (device loop4): mounted with root inode @ nid 36. [ 2034.800392][T11231] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2034.842538][ T5805] usb 2-1: USB disconnect, device number 99 [ 2034.962041][T30057] loop4: detected capacity change from 0 to 64 [ 2035.520317][T30059] tipc: Cannot configure node identity twice [ 2035.627846][T30062] Device name cannot be null; rc = [-22] [ 2036.132944][T30066] loop4: detected capacity change from 0 to 4096 [ 2037.663030][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.669461][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.371312][T30092] loop4: detected capacity change from 0 to 64 [ 2039.704923][T30100] loop4: detected capacity change from 0 to 1024 [ 2039.753618][T30100] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 2039.802659][T30100] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2039.880085][T30100] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 2039.901645][T29455] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2039.923457][T30100] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 2039.943336][T30100] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.6839: Failed to acquire dquot type 0 [ 2040.000153][T30100] EXT4-fs (loop4): 1 truncate cleaned up [ 2040.007347][T30100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2040.131058][T29455] usb 3-1: Using ep0 maxpacket: 16 [ 2040.138420][T29455] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.157353][T29455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2040.180036][T29455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2040.199855][T29455] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2040.220056][T29455] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2040.251352][T29455] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2040.260947][T29455] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2040.268971][T29455] usb 3-1: Manufacturer: syz [ 2040.292212][T29455] usb 3-1: config 0 descriptor?? [ 2040.539291][T22823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2040.847031][T29455] rc_core: IR keymap rc-hauppauge not found [ 2040.861655][T29455] Registered IR keymap rc-empty [ 2040.869082][T30109] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6842'. [ 2040.880941][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2040.909762][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2040.970929][T29455] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2041.001685][T29455] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input104 [ 2041.030964][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.088307][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.149851][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.187800][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.229929][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.316674][T30115] loop4: detected capacity change from 0 to 4096 [ 2041.349451][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.392519][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.444919][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.665217][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.713494][T29455] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2041.858451][T29455] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2042.048483][T29455] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2042.113222][T29455] usb 3-1: USB disconnect, device number 109 [ 2042.773987][T30129] loop3: detected capacity change from 0 to 128 [ 2042.801591][T30129] EXT4-fs: inline encryption not supported [ 2042.819817][T30129] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2042.873223][T30133] netlink: 'syz.1.6850': attribute type 4 has an invalid length. [ 2042.892563][T30129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2042.955599][T30129] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2043.039810][T30139] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6851'. [ 2043.709868][T30138] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6850'. [ 2044.005451][T30129] Device name cannot be null; rc = [-22] [ 2044.214111][T23364] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2044.329545][T18330] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2044.395481][T30151] loop3: detected capacity change from 0 to 4096 [ 2044.499782][T18330] usb 5-1: device descriptor read/64, error -71 [ 2044.569639][T29455] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2045.523198][T18330] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2045.559504][T29455] usb 2-1: Using ep0 maxpacket: 32 [ 2045.609781][T29455] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2045.630855][T29455] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2045.659781][T29455] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2045.678352][T29455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2045.688792][T29455] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2045.700189][T18330] usb 5-1: device descriptor read/64, error -71 [ 2045.707069][T29455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2045.722915][T29455] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2045.745032][T29455] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2045.773336][T29455] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2045.799501][T29455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.819694][T18330] usb usb5-port1: attempt power cycle [ 2045.843224][T29455] usb 2-1: config 0 descriptor?? [ 2045.900242][T30158] loop2: detected capacity change from 0 to 4096 [ 2046.231518][T29455] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2046.261869][T30148] can: request_module (can-proto-0) failed. [ 2046.279629][T18330] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2046.413654][T18330] usb 5-1: device descriptor read/8, error -71 [ 2046.652920][T29455] usb 2-1: USB disconnect, device number 100 [ 2046.694540][T29455] usblp0: removed [ 2046.779579][T18330] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2047.041270][T30168] sctp: [Deprecated]: syz.4.6858 (pid 30168) Use of int in max_burst socket option deprecated. [ 2047.041270][T30168] Use struct sctp_assoc_value instead [ 2047.058414][T18330] usb 5-1: device not accepting address 112, error -71 [ 2047.178549][T18330] usb usb5-port1: unable to enumerate USB device [ 2047.794090][T30177] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6861'. [ 2049.462623][T30183] loop4: detected capacity change from 0 to 128 [ 2049.600315][T30183] EXT4-fs: inline encryption not supported [ 2049.621291][T30183] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2049.699040][T30183] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2049.778138][T30183] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2050.002066][T30191] Device name cannot be null; rc = [-22] [ 2050.517015][T22823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2050.806096][T30199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2051.070564][T29455] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2051.278909][T30202] sctp: [Deprecated]: syz.4.6871 (pid 30202) Use of int in max_burst socket option deprecated. [ 2051.278909][T30202] Use struct sctp_assoc_value instead [ 2051.363562][T29455] usb 2-1: Using ep0 maxpacket: 32 [ 2051.392365][T29455] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2051.439360][T29455] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2051.448068][T29455] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2051.477130][T29455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2051.491689][T29455] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2051.524543][T30205] loop2: detected capacity change from 0 to 512 [ 2051.535086][T29455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2051.545267][T29455] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2051.559264][T29455] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2051.582656][T29455] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2051.595382][T29455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.602201][T30205] [ 2051.605408][T29455] usb 2-1: config 0 descriptor?? [ 2051.605720][T30205] ====================================================== [ 2051.617665][T30205] WARNING: possible circular locking dependency detected [ 2051.624701][T30205] syzkaller #0 Not tainted [ 2051.629206][T30205] ------------------------------------------------------ [ 2051.636235][T30205] syz.2.6865/30205 is trying to acquire lock: [ 2051.642390][T30205] ffff88807c51ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 2051.652496][T30205] [ 2051.652496][T30205] but task is already holding lock: [ 2051.659897][T30205] ffff8880552332c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 2051.669850][T30205] [ 2051.669850][T30205] which lock already depends on the new lock. [ 2051.669850][T30205] [ 2051.680236][T30205] [ 2051.680236][T30205] the existing dependency chain (in reverse order) is: [ 2051.689247][T30205] [ 2051.689247][T30205] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 2051.696820][T30205] down_write+0x97/0x200 [ 2051.701840][T30205] ext4_destroy_inline_data+0x28/0xe0 [ 2051.707759][T30205] ext4_do_writepages+0x4f0/0x3990 [ 2051.713410][T30205] ext4_writepages+0x1dd/0x350 [ 2051.718713][T30205] do_writepages+0x3b3/0x630 [ 2051.723970][T30205] filemap_fdatawrite_wbc+0x122/0x180 [ 2051.729901][T30205] file_write_and_wait_range+0x197/0x280 [ 2051.736235][T30205] generic_buffers_fsync_noflush+0x6f/0x160 [ 2051.742791][T30205] ext4_sync_file+0x454/0xc00 [ 2051.747983][T30205] ext4_buffered_write_iter+0x2c0/0x350 [ 2051.754042][T30205] ext4_file_write_iter+0x1d9/0x1880 [ 2051.759953][T30205] vfs_write+0x46c/0x990 [ 2051.764850][T30205] __x64_sys_pwrite64+0x19b/0x230 [ 2051.770416][T30205] do_syscall_64+0x55/0xa0 [ 2051.775435][T30205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2051.782295][T30205] [ 2051.782295][T30205] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 2051.790747][T30205] __lock_acquire+0x2df1/0x7d40 [ 2051.796179][T30205] lock_acquire+0x19e/0x420 [ 2051.801208][T30205] percpu_down_read+0x44/0x1a0 [ 2051.806503][T30205] ext4_writepages+0x1a4/0x350 [ 2051.811791][T30205] do_writepages+0x3b3/0x630 [ 2051.816899][T30205] __writeback_single_inode+0x153/0xec0 [ 2051.822963][T30205] writeback_single_inode+0x21f/0x760 [ 2051.828891][T30205] write_inode_now+0x183/0x210 [ 2051.834185][T30205] iput+0x5ae/0x920 [ 2051.838509][T30205] ext4_xattr_block_set+0x273f/0x32b0 [ 2051.844398][T30205] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 2051.850907][T30205] __ext4_expand_extra_isize+0x306/0x400 [ 2051.857049][T30205] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 2051.863019][T30205] ext4_evict_inode+0x7f3/0xea0 [ 2051.868560][T30205] evict+0x4ca/0x8d0 [ 2051.872969][T30205] ext4_orphan_cleanup+0xbec/0x1420 [ 2051.878681][T30205] ext4_fill_super+0x5ed0/0x6790 [ 2051.884130][T30205] get_tree_bdev+0x3f3/0x520 [ 2051.889327][T30205] vfs_get_tree+0x8c/0x280 [ 2051.894338][T30205] do_new_mount+0x24b/0xa40 [ 2051.899353][T30205] __se_sys_mount+0x2e7/0x3d0 [ 2051.904539][T30205] do_syscall_64+0x55/0xa0 [ 2051.909518][T30205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2051.916107][T30205] [ 2051.916107][T30205] other info that might help us debug this: [ 2051.916107][T30205] [ 2051.926323][T30205] Possible unsafe locking scenario: [ 2051.926323][T30205] [ 2051.933757][T30205] CPU0 CPU1 [ 2051.939107][T30205] ---- ---- [ 2051.944634][T30205] lock(&ei->xattr_sem); [ 2051.948984][T30205] lock(&sbi->s_writepages_rwsem); [ 2051.956706][T30205] lock(&ei->xattr_sem); [ 2051.963566][T30205] rlock(&sbi->s_writepages_rwsem); [ 2051.968849][T30205] [ 2051.968849][T30205] *** DEADLOCK *** [ 2051.968849][T30205] [ 2051.977067][T30205] 3 locks held by syz.2.6865/30205: [ 2051.982252][T30205] #0: ffff8880302e40e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x353/0x520 [ 2051.992453][T30205] #1: ffff8880302e4608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2bf/0xea0 [ 2052.001850][T30205] #2: ffff8880552332c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 2052.012116][T30205] [ 2052.012116][T30205] stack backtrace: [ 2052.018005][T30205] CPU: 1 PID: 30205 Comm: syz.2.6865 Not tainted syzkaller #0 [ 2052.025452][T30205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2052.035604][T30205] Call Trace: [ 2052.038920][T30205] [ 2052.041930][T30205] dump_stack_lvl+0x18c/0x250 [ 2052.046709][T30205] ? load_image+0x400/0x400 [ 2052.051242][T30205] ? show_regs_print_info+0x20/0x20 [ 2052.056455][T30205] ? print_circular_bug+0x12b/0x1a0 [ 2052.061654][T30205] check_noncircular+0x2fc/0x400 [ 2052.066586][T30205] ? look_up_lock_class+0x75/0x140 [ 2052.071759][T30205] ? print_deadlock_bug+0x5d0/0x5d0 [ 2052.076954][T30205] ? lockdep_lock+0xf5/0x230 [ 2052.081540][T30205] ? _find_first_zero_bit+0xd3/0x100 [ 2052.086903][T30205] __lock_acquire+0x2df1/0x7d40 [ 2052.091757][T30205] ? mark_lock+0x94/0x320 [ 2052.096174][T30205] ? verify_lock_unused+0x140/0x140 [ 2052.101368][T30205] ? __lock_acquire+0x1347/0x7d40 [ 2052.106394][T30205] ? verify_lock_unused+0x140/0x140 [ 2052.111590][T30205] lock_acquire+0x19e/0x420 [ 2052.116091][T30205] ? ext4_writepages+0x1a4/0x350 [ 2052.121113][T30205] ? __might_sleep+0xe0/0xe0 [ 2052.125727][T30205] ? read_lock_is_recursive+0x20/0x20 [ 2052.131090][T30205] ? mark_lock+0x94/0x320 [ 2052.135407][T30205] ? __lock_acquire+0x1347/0x7d40 [ 2052.140509][T30205] percpu_down_read+0x44/0x1a0 [ 2052.145274][T30205] ? ext4_writepages+0x1a4/0x350 [ 2052.150207][T30205] ext4_writepages+0x1a4/0x350 [ 2052.154984][T30205] ? ext4_read_folio+0x2f0/0x2f0 [ 2052.159930][T30205] ? __rwlock_init+0x150/0x150 [ 2052.164697][T30205] ? do_raw_spin_unlock+0x121/0x230 [ 2052.169897][T30205] ? ext4_read_folio+0x2f0/0x2f0 [ 2052.174888][T30205] do_writepages+0x3b3/0x630 [ 2052.179497][T30205] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 2052.185215][T30205] ? writeback_single_inode+0x214/0x760 [ 2052.190760][T30205] ? __lock_acquire+0x7d40/0x7d40 [ 2052.195774][T30205] ? do_raw_spin_lock+0x11f/0x2c0 [ 2052.200801][T30205] __writeback_single_inode+0x153/0xec0 [ 2052.206374][T30205] writeback_single_inode+0x21f/0x760 [ 2052.211829][T30205] ? write_inode_now+0x210/0x210 [ 2052.216776][T30205] write_inode_now+0x183/0x210 [ 2052.221539][T30205] ? bdi_split_work_to_wbs+0x910/0x910 [ 2052.227005][T30205] ? do_raw_spin_unlock+0x121/0x230 [ 2052.232203][T30205] iput+0x5ae/0x920 [ 2052.236056][T30205] ext4_xattr_block_set+0x273f/0x32b0 [ 2052.241425][T30205] ? __might_sleep+0xe0/0xe0 [ 2052.246014][T30205] ? xattr_find_entry+0x12b/0x2f0 [ 2052.251035][T30205] ? ext4_xattr_block_find+0x350/0x350 [ 2052.256485][T30205] ? ext4_xattr_block_find+0x2d4/0x350 [ 2052.261947][T30205] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 2052.267850][T30205] __ext4_expand_extra_isize+0x306/0x400 [ 2052.273485][T30205] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 2052.278944][T30205] ext4_evict_inode+0x7f3/0xea0 [ 2052.283796][T30205] ? _raw_spin_unlock+0x28/0x40 [ 2052.288644][T30205] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 2052.294527][T30205] ? do_raw_spin_unlock+0x121/0x230 [ 2052.299722][T30205] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 2052.305607][T30205] evict+0x4ca/0x8d0 [ 2052.309585][T30205] ? proc_nr_inodes+0x230/0x230 [ 2052.314529][T30205] ? do_raw_spin_unlock+0x121/0x230 [ 2052.319732][T30205] ? _raw_spin_unlock+0x28/0x40 [ 2052.324583][T30205] ? iput+0x706/0x920 [ 2052.328578][T30205] ext4_orphan_cleanup+0xbec/0x1420 [ 2052.333794][T30205] ? ext4_orphan_del+0xbf0/0xbf0 [ 2052.338829][T30205] ? ext4_register_li_request+0x183/0x940 [ 2052.344642][T30205] ? errseq_check_and_advance+0x66/0x120 [ 2052.350280][T30205] ext4_fill_super+0x5ed0/0x6790 [ 2052.355244][T30205] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 2052.361503][T30205] ? __might_sleep+0xe0/0xe0 [ 2052.366097][T30205] ? read_lock_is_recursive+0x20/0x20 [ 2052.371563][T30205] ? snprintf+0xe9/0x140 [ 2052.375879][T30205] ? down_read_killable+0x340/0x340 [ 2052.381075][T30205] ? setup_bdev_super+0x56b/0x660 [ 2052.386102][T30205] get_tree_bdev+0x3f3/0x520 [ 2052.390697][T30205] ? vfs_parse_fs_string+0x170/0x170 [ 2052.395977][T30205] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 2052.402214][T30205] ? setup_bdev_super+0x660/0x660 [ 2052.407321][T30205] ? apparmor_capable+0x137/0x1a0 [ 2052.412375][T30205] ? bpf_lsm_capable+0x9/0x10 [ 2052.417148][T30205] ? security_capable+0x89/0xb0 [ 2052.421993][T30205] vfs_get_tree+0x8c/0x280 [ 2052.426493][T30205] do_new_mount+0x24b/0xa40 [ 2052.430994][T30205] __se_sys_mount+0x2e7/0x3d0 [ 2052.435667][T30205] ? __x64_sys_mount+0xc0/0xc0 [ 2052.440419][T30205] ? lockdep_hardirqs_on+0x98/0x150 [ 2052.445633][T30205] ? __x64_sys_mount+0x20/0xc0 [ 2052.450409][T30205] do_syscall_64+0x55/0xa0 [ 2052.454836][T30205] ? clear_bhb_loop+0x40/0x90 [ 2052.459678][T30205] ? clear_bhb_loop+0x40/0x90 [ 2052.464350][T30205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2052.470236][T30205] RIP: 0033:0x7fa72079da0a [ 2052.474659][T30205] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2052.494268][T30205] RSP: 002b:00007fa7216f1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2052.502687][T30205] RAX: ffffffffffffffda RBX: 00007fa7216f1ee0 RCX: 00007fa72079da0a [ 2052.510762][T30205] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa7216f1ea0 [ 2052.518736][T30205] RBP: 0000200000000180 R08: 00007fa7216f1ee0 R09: 0000000000800700 [ 2052.526886][T30205] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 2052.534906][T30205] R13: 00007fa7216f1ea0 R14: 000000000000046f R15: 000000000000002c [ 2052.542884][T30205] [ 2052.553926][T30205] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.6865: iget: bad extra_isize 90 (inode size 256) [ 2052.676030][T30205] EXT4-fs (loop2): Remounting filesystem read-only [ 2052.688703][T30205] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 2052.721490][T30205] EXT4-fs (loop2): 1 orphan inode deleted [ 2052.728623][T30205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2052.744720][T30205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2052.856944][T30197] can: request_module (can-proto-0) failed. [ 2052.883922][T29455] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 101 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2053.104072][T29455] usb 2-1: USB disconnect, device number 101 [ 2053.121390][T29455] usblp0: removed