last executing test programs: 11m26.729228013s ago: executing program 0 (id=1287): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 11m26.355874163s ago: executing program 0 (id=1292): r0 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 11m26.107207249s ago: executing program 0 (id=1295): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 11m25.949550513s ago: executing program 0 (id=1297): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 11m25.644639101s ago: executing program 0 (id=1301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x3, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x20048040) sendto$packet(r4, 0x0, 0x0, 0x2400c054, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0xdb, 0x6, @multicast}, 0x14) 11m25.251802841s ago: executing program 0 (id=1305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f7881d8cc0000c744240028000000c744240200000000ff1c24c441f973d57e410f01cb470f3566bad104ec66ba4100b000f4bdbd025dacc50f01cf0f01ca", 0x3f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m24.715685874s ago: executing program 32 (id=1305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f7881d8cc0000c744240028000000c744240200000000ff1c24c441f973d57e410f01cb470f3566bad104ec66ba4100b000f4bdbd025dacc50f01cf0f01ca", 0x3f}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m28.245844026s ago: executing program 3 (id=3373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101180, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 3m28.07491279s ago: executing program 3 (id=3374): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) lstat(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3m27.741172418s ago: executing program 3 (id=3375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x4, 0x3ff, 0x3) 3m27.29338681s ago: executing program 3 (id=3377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000040)="0f1f44", 0x3) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 3m24.720932855s ago: executing program 3 (id=3383): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f000000c2c0)='./file0\x00', 0xc08, &(0x7f00000001c0)=ANY=[], 0x3, 0x242, &(0x7f0000000380)="$eJzsmL+LE0EUx7+zu5kkIqLNFTYKHhjRSy57KNeE8wTBysYTtdLgrceZvYskK5iA4mFjo52FYGPhP2BxxdV2/gOCFioIFqawEEQOVt7O7GbiJpdltfN9iuE7M2/m/ZjNKwKGYf5bPn/68fHJucWVUwD2YxZFvf7VBoRQ2jLsPzy/e/JZ4/yL1+9fvdk8cH/nz/voSBjuhuZCaQ//DoDKso0g8RTGZ3+RmNWTFRQTfRkWTmh9BQJVrW/AKsT3evgZKoDbELim19tkX63eWve96s22v0pinoY6DS4NI/lSfIMtgVU9pxuFsd/t9VtN3/c6hnD03pitXCJx1ppJ1a8AicGyhYaOluKj+K8+frRFK3Ft5mEl9avDQl0nsbCblAmLKMa1USUx8j/sDPO3i4l7etpW0x+brb4V05Is+b5nd3uN7/+kWKY4NJfveIXSOatXHgDQWweRJwwMTy3B6xQw3LLpSx0xPpr55jKADJ9OJBzjdTDeeEm/aI4EL6aymCCeZor570WuLGIxM9h5m976op9SMeZ4KKa7ECPfj9zLuJQ15jik/BUro9+yclZMTv51A++2Vf8IXwocB2TcPxyjf9WCjTu1bq8/t77RXPPWvE3XXTgjgIen3VrUiNSY6nvD/lyO+tM+oz8XJthKS+JeMwg6dTVKIVFGEHTcaO4aP5tL2+1v1/WxABcAHFMTapsyudFO+RBS2ViRLalK2ohhGIZhGIZhGIZhGIZhGCYrI394HoFAOB1XWf8OAAD//5X0aKk=") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000085f9", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4117, 0x1015}], 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) r3 = dup(r2) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) syz_emit_ethernet(0x4a, &(0x7f00000014c0)={@link_local, @link_local, @void, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x0, 0x8, 0x3c, 0x67, 0x0, 0x7, 0x6, 0x0, @loopback, @private=0xa010100, {[@timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x3, [{@multicast2, 0x23}]}, @ssrr={0x89, 0x3, 0xf8}]}}, @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x6, 0x1, 0x4e22, 0x4e20}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800089, &(0x7f0000001480)={[], [{@obj_user={'obj_user', 0x3d, '\\'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x63a02a4feff85682, 0x66, 0x33, 0x39, 0x61, 0x35, 0x32], 0x2d, [0x0, 0x65, 0x34, 0x66], 0x2d, [0x31, 0x36, 0x6a, 0x34], 0x2d, [0x66, 0x37, 0x63, 0x35], 0x2d, [0x35, 0x66, 0x66, 0x32, 0x65, 0x36, 0x34, 0x65]}}}]}, 0x2, 0xc04, &(0x7f00000024c0)="$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") read$FUSE(r3, 0x0, 0x0) syz_clone(0x1000200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENT(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m22.410550634s ago: executing program 3 (id=3390): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) 3m7.030136045s ago: executing program 33 (id=3390): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) 10.845203494s ago: executing program 4 (id=4043): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.087189634s ago: executing program 4 (id=4044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4095, 0xfff) 9.165719707s ago: executing program 5 (id=4045): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 7.8585342s ago: executing program 5 (id=4046): socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) pipe2$9p(&(0x7f0000000140), 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xd, 0x7fff, 0x4, 0x4006, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080), 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000440)={0x1, 0xf, 0x10001, 0xba, 0x16, "157c5822aa8cf432f02bf7a85c6de4011686dc"}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) 7.067646211s ago: executing program 4 (id=4049): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.103058345s ago: executing program 6 (id=4051): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x100000) fcntl$setpipe(r3, 0x407, 0x8005) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x7fffffff, 0x4) 5.728279314s ago: executing program 5 (id=4052): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 4.883270406s ago: executing program 4 (id=4054): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000bed000/0x1000)=nil) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x1, @ANYRESDEC, @ANYRES32, @ANYBLOB], 0x50) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0xfcd3, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x3}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4000000000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, 0x0) 4.487132466s ago: executing program 2 (id=4055): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) 4.194556014s ago: executing program 1 (id=4056): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 3.864073402s ago: executing program 1 (id=4057): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) writev(r0, &(0x7f0000001f40)=[{&(0x7f0000000140)='[', 0x1}], 0x1) 3.751168604s ago: executing program 6 (id=4058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 3.618135108s ago: executing program 1 (id=4059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000180)={0x0, 0x0, @pic={0xad, 0xc, 0x6, 0x4, 0x5, 0x9, 0x0, 0x3, 0x1, 0x0, 0x9a, 0x8, 0x4e, 0x2, 0x9, 0x6}}) 3.394219004s ago: executing program 5 (id=4060): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000240)={[{@uni_xlate}, {}, {@shortname_win95}, {@utf8no}, {@utf8}, {@numtail}, {@rodir}, {@utf8no}, {@fat=@check_normal}, {@shortname_win95}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) getgid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 3.393372074s ago: executing program 6 (id=4061): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) unshare(0x20060400) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.386477544s ago: executing program 2 (id=4062): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000002680)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8no}]}, 0x7c, 0x2c1, &(0x7f0000001240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b50, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) open(&(0x7f0000000a00)='./bus\x00', 0xc0800, 0x80) 3.13112192s ago: executing program 5 (id=4063): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/nofua\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)="107aed1c28", 0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) syz_kvm_add_vcpu$x86(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1eb, &(0x7f0000000300)="$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") r4 = socket$inet(0x2, 0xa, 0x4) getsockname$inet(r4, 0x0, &(0x7f0000000300)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) close_range(r5, 0xffffffffffffffff, 0x0) 3.13091278s ago: executing program 2 (id=4064): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.106579611s ago: executing program 1 (id=4065): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0], 0x3, 0x277, &(0x7f0000000180)="$eJzs289rHGUYB/Bn0pZuWtJd8RctiC96UC9Lk7OHFokgBpRqhCpIp2aja8bdkFkCK2Jy0qt/gmfx6E2QHr3k4l/gwVsuOfYgrkxmk2zSQhvQjdTP55A8zDtf3nfnXYZnlt3d17/7Ym21bK/mg5jJspi5EdtxP4tWzMSB7Xjtldu/vvDe7Q/fvrm01BgfXUgpXXnxl4+++vGle4PLH/x05eeLsdP6eHdv4Y+d53au7v71/mfdMnXL1OsPUp7u9vuD/G7RSSvdcq2d0rtFJy87qdsrOxvHxleL/vr6MOW9lblL6xudskx5b5jWOsM06KfBxjDln+bdXmq322nuUnAkO3Vi+Yf7o1HsjS5k2Wg0mv0+Lt+Lud+jGdlTKXv6Rvbsnez57ezq3mjUPBmd/adWzVka7/+dOO3+80QY39QXb6XUiCi+3VzeXK7/V6ONuLka3SiiE9djNv6M6m0yVtdvvrW0eD3ta8U3xdY4v7W5fOFgijo/H81oPTw/X+fTQf5iRFR/q7v74fwL0YxnHp5fOJGv52/Eqy9P5NvRjN8+iX4UsRJVNrbG61v8ej6lN95ZOpG/tn8eAMCTpp0OVf3bueqhsO5/ztXj7WPjE/1RnZ/oD5uP6A9P9Ffn49r5s33tRJTDL9fyouhsVA94+8Xhkf9rMTt5WR6nOPgo5N9b2MyxPXvgnFYURSMizvzSKSaKW+Pt+q+s55RFxOdTvxsxbUeb/shTG1NZEAAAAAAAAAAAAI9lGl8nPJrNj4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/R0AAP//+ai55w==") syz_mount_image$exfat(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1070425, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 2.870756067s ago: executing program 1 (id=4066): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000000), &(0x7f0000000000)=""/95}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.802663679s ago: executing program 4 (id=4067): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='usbip-vudc.0', 0xc) 2.801979209s ago: executing program 6 (id=4068): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x80071c, &(0x7f0000000000), 0xfb, 0x4ae, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 2.623242034s ago: executing program 5 (id=4069): socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) pipe2$9p(&(0x7f0000000140), 0x800) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xd, 0x7fff, 0x4, 0x4006, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xa688ee21e7d098e1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)="c1c03939be", &(0x7f0000001a40), 0x1000009, r5, 0x40000000}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r5}, 0x38) write(r4, &(0x7f0000000080)='4', 0x1) 2.525270136s ago: executing program 4 (id=4070): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x81, 0x14ff, &(0x7f0000002a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0) 2.269372343s ago: executing program 6 (id=4071): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/nofua\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)="107aed1c28", 0x5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) syz_kvm_add_vcpu$x86(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) 2.078132507s ago: executing program 2 (id=4072): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="1603d6"]}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@noblock_validity}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.638678968s ago: executing program 6 (id=4073): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000380)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[], 0x1, 0x105f5, &(0x7f000001d500)="$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") r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.067162713s ago: executing program 2 (id=4074): syz_usb_connect(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500225e0d008ad0406034ed50102030109021b0001040010037ce85a8001ea0c27f209050d000800040ff9"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 759.971941ms ago: executing program 1 (id=4075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xffffff79, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000000f4500001c000000000002907800000000e00000011102907800be0000"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read(r0, &(0x7f0000000840)=""/4096, 0x1000) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r6 = fsmount(r4, 0x0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xa5) lseek(r7, 0x100, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=4076): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x101000, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000940)={0x3ff}) kernel console output (not intermixed with test programs): ge from 0 to 128 [ 641.992699][T14814] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 642.072737][T14814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.746094][T14827] loop4: detected capacity change from 0 to 512 [ 642.810341][T14827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 642.894390][T14827] EXT4-fs (loop4): 1 truncate cleaned up [ 642.939366][T14827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 645.345806][T14621] EXT4-fs (loop1): unmounting filesystem. [ 646.631724][T14855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3226'. [ 646.772355][T14857] loop3: detected capacity change from 0 to 512 [ 646.792957][T13540] EXT4-fs (loop4): unmounting filesystem. [ 646.866647][T14857] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 646.887393][ T4292] Bluetooth: hci5: command 0x0406 tx timeout [ 646.933477][T14857] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 646.986408][T14857] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3229: invalid indirect mapped block 2683928664 (level 1) [ 647.024499][T14857] EXT4-fs (loop3): 1 truncate cleaned up [ 647.094747][T14857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 647.826471][T14857] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.3229: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 647.914570][T14870] loop1: detected capacity change from 0 to 512 [ 647.988499][T14870] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 1: comm syz.1.3233: invalid block [ 648.047854][T14877] loop4: detected capacity change from 0 to 512 [ 648.081867][T14877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 648.145496][T14870] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3233: couldn't read orphan inode 11 (err -117) [ 648.153002][T13263] EXT4-fs (loop3): unmounting filesystem. [ 648.180096][T14877] EXT4-fs (loop4): 1 truncate cleaned up [ 648.185831][T14877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 648.199367][T14870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 648.485421][T14621] EXT4-fs (loop1): unmounting filesystem. [ 649.950484][T14896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3241'. [ 650.224766][T14898] loop1: detected capacity change from 0 to 512 [ 650.259972][T14898] EXT4-fs: inline encryption not supported [ 650.295049][T14898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 650.322873][T14898] EXT4-fs (loop1): orphan cleanup on readonly fs [ 650.366341][T14898] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3242: inode #15: comm syz.1.3242: iget: illegal inode # [ 650.837406][T14898] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3242: couldn't read orphan inode 15 (err -117) [ 650.859806][T14898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 650.919305][T14898] EXT4-fs (loop1): shut down requested (2) [ 651.058131][T14621] EXT4-fs (loop1): unmounting filesystem. [ 652.667793][T13540] EXT4-fs (loop4): unmounting filesystem. [ 652.916788][T14922] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 652.923407][T14922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 652.949588][T14923] vhci_hcd: xmit failed -107 [ 652.953128][T14922] vhci_hcd vhci_hcd.0: Device attached [ 652.972896][T11573] vhci_hcd: stop threads [ 652.977210][T11573] vhci_hcd: release socket [ 652.998976][T11573] vhci_hcd: disconnect device [ 654.266251][T14943] loop1: detected capacity change from 0 to 1024 [ 655.752851][T14960] loop1: detected capacity change from 0 to 1024 [ 655.812192][T14960] nfs: Unknown parameter 'i_version' [ 657.236006][T14979] loop1: detected capacity change from 0 to 512 [ 657.280254][T14979] EXT4-fs: Ignoring removed nobh option [ 657.344163][T14979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 657.504863][T14985] Mass Storage Function, version: 2009/09/11 [ 657.513866][T14985] LUN: removable file: (no medium) [ 657.525988][ T26] audit: type=1800 audit(1785829526.939:68): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3270" name="nofua" dev="configfs" ino=120529 res=0 errno=0 [ 657.554194][T14979] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.3268: ea_inode file size=0 entry size=6 [ 657.631559][T14979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.3268: iget: bad extra_isize 90 (inode size 256) [ 657.663890][T14979] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3268: error while reading EA inode 11 err=-117 [ 657.704530][T14985] loop4: detected capacity change from 0 to 16 [ 657.718941][T14979] EXT4-fs (loop1): 1 orphan inode deleted [ 657.734771][T14985] erofs: Unknown parameter '' [ 657.757615][T14979] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 657.832699][T14979] binder: 14978:14979 ioctl c018620c 200000000000 returned -22 [ 658.038066][T14621] EXT4-fs (loop1): unmounting filesystem. [ 660.955959][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 661.011098][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 661.184023][T15018] netlink: 688 bytes leftover after parsing attributes in process `syz.5.3281'. [ 661.218495][T15018] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3281'. [ 662.688365][T15044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 662.694964][T15044] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 662.710932][T15045] vhci_hcd: xmit failed -107 [ 662.726773][T15044] vhci_hcd vhci_hcd.0: Device attached [ 662.740415][ T11] vhci_hcd: stop threads [ 662.744845][ T11] vhci_hcd: release socket [ 662.762181][ T11] vhci_hcd: disconnect device [ 663.090227][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 663.118276][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 664.049043][T15059] xt_hashlimit: size too large, truncated to 1048576 [ 664.622640][T15027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.558182][T15077] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3301'. [ 667.106020][T15075] loop1: detected capacity change from 0 to 40427 [ 667.196212][T15075] F2FS-fs (loop1): invalid crc value [ 667.221245][T15075] F2FS-fs (loop1): Found nat_bits in checkpoint [ 667.275374][T15104] loop4: detected capacity change from 0 to 256 [ 667.351962][ T26] audit: type=1800 audit(1785829536.769:69): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3311" name="file1" dev="loop4" ino=1048632 res=0 errno=0 [ 667.376008][T15075] F2FS-fs (loop1): Start checkpoint disabled! [ 667.475972][T15075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 667.639115][T15075] syz.1.3300: attempt to access beyond end of device [ 667.639115][T15075] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 667.906396][T15113] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3315'. [ 667.973212][T13254] kworker/u4:12: attempt to access beyond end of device [ 667.973212][T13254] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 668.040162][T13254] kworker/u4:12: attempt to access beyond end of device [ 668.040162][T13254] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 668.452905][T15122] loop4: detected capacity change from 0 to 512 [ 668.477202][T15122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 668.488399][T15122] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.3317: Unimplemented hash flags: 0x0001 [ 668.500024][T15122] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3317: Corrupt directory, running e2fsck is recommended [ 669.990218][T13540] EXT4-fs (loop4): unmounting filesystem. [ 670.025326][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 670.051297][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 670.477865][ T8371] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 670.677867][ T8371] usb 6-1: Using ep0 maxpacket: 32 [ 670.685174][ T8371] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.711300][ T8371] usb 6-1: config 0 has no interfaces? [ 670.727114][ T8371] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 670.756093][ T8371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.809656][ T8371] usb 6-1: config 0 descriptor?? [ 670.879048][T15158] netlink: 'syz.2.3332': attribute type 4 has an invalid length. [ 671.109046][ T7] usb 6-1: USB disconnect, device number 41 [ 671.632775][T15171] loop4: detected capacity change from 0 to 512 [ 671.665760][T15171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 671.677094][T15171] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.3335: Unimplemented hash flags: 0x0001 [ 671.689318][T15171] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3335: Corrupt directory, running e2fsck is recommended [ 671.755395][T15172] loop1: detected capacity change from 0 to 1024 [ 673.388726][T13540] EXT4-fs (loop4): unmounting filesystem. [ 673.953831][T15185] loop1: detected capacity change from 0 to 512 [ 674.111453][T15185] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.3341: iget: bad i_size value: 38620345925642 [ 674.207941][T15185] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3341: couldn't read orphan inode 15 (err -117) [ 674.326979][T15185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 674.480980][T15196] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3341: bg 0: block 5: invalid block bitmap [ 674.595360][T15196] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 460 with error 28 [ 674.655142][T15196] EXT4-fs (loop1): This should not happen!! Data will be lost [ 674.655142][T15196] [ 674.709728][T15196] EXT4-fs (loop1): Total free blocks count 0 [ 674.743119][T15196] EXT4-fs (loop1): Free/Dirty block details [ 674.763166][T15196] EXT4-fs (loop1): free_blocks=0 [ 674.782092][T15196] EXT4-fs (loop1): dirty_blocks=460 [ 674.793151][T15196] EXT4-fs (loop1): Block reservation details [ 674.812898][T15196] EXT4-fs (loop1): i_reserved_data_blocks=460 [ 676.331866][T14621] EXT4-fs (loop1): unmounting filesystem. [ 677.001753][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3351'. [ 678.374759][T15234] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3356'. [ 678.679728][ T4325] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 678.857324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 678.877306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 678.887295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 678.897300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 678.907293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 678.917295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 678.927900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 678.938011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 678.947311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 678.957314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 679.962400][T15246] loop4: detected capacity change from 0 to 256 [ 680.337898][T15239] loop1: detected capacity change from 0 to 1024 [ 680.345485][T15239] hfsplus: type requires a 4 character value [ 680.352143][T15239] hfsplus: unable to parse mount options [ 680.880631][T15246] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 682.181982][T13173] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 684.102545][T15283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.110663][T15283] IPv6: NLM_F_CREATE should be set when creating new route [ 684.426730][T15286] loop1: detected capacity change from 0 to 512 [ 684.450828][T15286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 684.461700][T15286] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.3365: Unimplemented hash flags: 0x0001 [ 684.473455][T15286] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3365: Corrupt directory, running e2fsck is recommended [ 685.670596][T15292] loop4: detected capacity change from 0 to 256 [ 685.677992][T15292] exfat: Bad value for 'uid' [ 685.777455][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.783837][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.331261][ T7229] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.027921][T14621] EXT4-fs (loop1): unmounting filesystem. [ 687.222170][T15295] event trace: Could not enable event p [ 688.424758][T15318] loop3: detected capacity change from 0 to 16 [ 688.542368][T15318] erofs: (device loop3): mounted with root inode @ nid 36. [ 688.827293][ T26] audit: type=1800 audit(1785829558.251:70): pid=15321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3384" name="nofua" dev="configfs" ino=122272 res=0 errno=0 [ 688.902471][T15321] loop4: detected capacity change from 0 to 16 [ 688.960734][T15321] erofs: Unknown parameter '' [ 688.993867][T15324] loop1: detected capacity change from 0 to 764 [ 689.178832][T15324] Symlink component flag not implemented [ 689.185439][T15324] Symlink component flag not implemented (15) [ 689.584509][T15331] loop4: detected capacity change from 0 to 128 [ 689.692444][T11619] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 689.858427][T15337] loop1: detected capacity change from 0 to 512 [ 689.886523][T15337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 689.949231][T15337] EXT4-fs (loop1): 1 truncate cleaned up [ 689.955135][T15337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 690.050978][T15345] netlink: 'syz.4.3393': attribute type 12 has an invalid length. [ 690.059020][T15345] netlink: 'syz.4.3393': attribute type 29 has an invalid length. [ 690.067127][T15345] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3393'. [ 690.334454][T15349] loop4: detected capacity change from 0 to 512 [ 690.416139][T15349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 690.458642][T15349] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.556385][T15349] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.3394: corrupted xattr block 13 [ 690.588417][T15352] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.3394: corrupted xattr block 13 [ 690.620571][ T26] audit: type=1800 audit(1785829560.041:71): pid=15349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3394" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 690.788549][ T26] audit: type=1326 audit(1785829560.211:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15354 comm="syz.2.3395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7683f9e019 code=0x0 [ 690.816733][T13540] EXT4-fs (loop4): unmounting filesystem. [ 691.614327][T15362] netlink: 'syz.4.3396': attribute type 16 has an invalid length. [ 691.622447][T15362] netlink: 'syz.4.3396': attribute type 17 has an invalid length. [ 691.659663][T15362] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 692.784024][T15375] loop4: detected capacity change from 0 to 256 [ 692.850755][T15375] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 694.957765][T15383] device bridge_slave_1 left promiscuous mode [ 694.964176][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.976953][T15383] device bridge_slave_0 left promiscuous mode [ 694.983346][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.709195][T14621] EXT4-fs (loop1): unmounting filesystem. [ 696.745356][T15397] event trace: Could not enable event p [ 696.832862][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 701.092013][T15437] loop4: detected capacity change from 0 to 256 [ 701.103909][T15437] exfat: Bad value for 'uid' [ 702.570253][ T26] audit: type=1800 audit(1785829571.991:73): pid=15453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3427" name="nofua" dev="configfs" ino=123262 res=0 errno=0 [ 702.714384][T15453] loop1: detected capacity change from 0 to 16 [ 702.777096][T15453] erofs: Unknown parameter '' [ 703.062836][T15463] loop4: detected capacity change from 0 to 512 [ 703.356109][T15463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 703.400273][T15463] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.967408][T15473] loop1: detected capacity change from 0 to 512 [ 704.050095][T15473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 704.136727][T15473] EXT4-fs (loop1): 1 truncate cleaned up [ 704.168913][T15473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 704.377133][T13540] EXT4-fs (loop4): unmounting filesystem. [ 705.074458][T14621] EXT4-fs (loop1): unmounting filesystem. [ 705.275608][T15493] loop4: detected capacity change from 0 to 256 [ 706.789459][ T26] audit: type=1800 audit(1785829576.202:74): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3444" name="nofua" dev="configfs" ino=122515 res=0 errno=0 [ 707.191744][T15513] mmap: syz.2.3447 (15513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 707.212367][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 707.224595][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 707.234326][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 707.245132][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 707.253524][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 707.261501][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.478550][ T4330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.812032][ T4330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.939664][ T4330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.075440][T15532] loop4: detected capacity change from 0 to 512 [ 708.111447][T15532] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 708.179889][ T4330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.214907][T15532] EXT4-fs (loop4): 1 truncate cleaned up [ 708.222349][T15532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 708.302969][T15534] loop1: detected capacity change from 0 to 8192 [ 708.368094][T15534] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 709.188469][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.201373][T15534] FAT-fs (loop1): Filesystem has been set read-only [ 709.208467][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.216699][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.227928][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.236032][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.247136][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.255181][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.263199][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.271196][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.279194][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.287188][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.295125][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.303347][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.311334][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.321168][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.330761][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.340716][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.352591][T13540] EXT4-fs (loop4): unmounting filesystem. [ 709.358593][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 709.361860][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.378050][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.386324][T15534] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 709.394852][ T26] audit: type=1800 audit(1785829578.792:75): pid=15534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3452" name="file2" dev="loop1" ino=1048634 res=0 errno=0 [ 709.543396][T15534] syz.1.3452 (15534) used greatest stack depth: 19616 bytes left [ 709.890648][ T26] audit: type=1800 audit(1785829579.312:76): pid=15558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3457" name="nofua" dev="configfs" ino=123398 res=0 errno=0 [ 710.084189][T15515] chnl_net:caif_netlink_parms(): no params data found [ 710.563178][T15515] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.570652][T15515] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.579535][T15515] device bridge_slave_0 entered promiscuous mode [ 710.589007][T15515] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.597076][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.606538][T15515] device bridge_slave_1 entered promiscuous mode [ 711.408129][T15515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.435629][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 711.631579][T15587] netlink: 'syz.1.3462': attribute type 16 has an invalid length. [ 711.639600][T15587] netlink: 'syz.1.3462': attribute type 17 has an invalid length. [ 711.658545][T15587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 711.666340][T15587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 711.674046][T15587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 711.707520][T15587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 711.898868][T15515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.131999][T15515] team0: Port device team_slave_0 added [ 712.208018][T15515] team0: Port device team_slave_1 added [ 712.422350][T15515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.446011][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.564987][T15515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.599028][T15515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.644620][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.735452][T15515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.056803][T15515] device hsr_slave_0 entered promiscuous mode [ 713.076557][T15515] device hsr_slave_1 entered promiscuous mode [ 713.097896][T15515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.118067][T15515] Cannot create hsr debugfs directory [ 713.515873][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 714.009938][T15614] loop1: detected capacity change from 0 to 1024 [ 714.156616][ T26] audit: type=1800 audit(1785829583.582:77): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3471" name="nofua" dev="configfs" ino=123481 res=0 errno=0 [ 714.732578][T15627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 714.740046][T15627] IPv6: NLM_F_CREATE should be set when creating new route [ 714.749251][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3474'. [ 714.826620][T15631] loop4: detected capacity change from 0 to 2048 [ 714.932598][T15633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 714.975497][T15633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 715.019831][T15633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.097854][T15631] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 715.206929][T15631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.595497][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 715.677518][T15654] netlink: 'syz.4.3481': attribute type 4 has an invalid length. [ 715.882293][ T4330] device hsr_slave_0 left promiscuous mode [ 715.908763][ T4330] device hsr_slave_1 left promiscuous mode [ 715.938578][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.962076][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.980981][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.014107][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.048293][ T4330] device bridge_slave_1 left promiscuous mode [ 716.059168][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.083322][ T26] audit: type=1800 audit(1785829585.502:78): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3483" name="nofua" dev="configfs" ino=123517 res=0 errno=0 [ 716.135813][ T4330] device bridge_slave_0 left promiscuous mode [ 716.146651][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.312441][ T4330] device veth1_macvtap left promiscuous mode [ 716.325834][ T4330] device veth0_macvtap left promiscuous mode [ 716.332295][ T4330] device veth1_vlan left promiscuous mode [ 716.338781][T15645] loop1: detected capacity change from 0 to 40427 [ 716.348292][T15645] F2FS-fs (loop1): invalid crc value [ 716.365771][ T4330] device veth0_vlan left promiscuous mode [ 716.376908][T15645] F2FS-fs (loop1): Found nat_bits in checkpoint [ 716.481120][T15645] F2FS-fs (loop1): Start checkpoint disabled! [ 716.568383][T15645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 716.914592][ T9476] kworker/u4:9: attempt to access beyond end of device [ 716.914592][ T9476] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 717.911518][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 717.979082][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 718.040012][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.111218][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.590837][ T4330] bond0 (unregistering): Released all slaves [ 718.893554][T15685] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3490'. [ 720.081618][T15515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 720.214351][T15515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 720.299566][T15515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 720.384251][T15515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.765397][T15515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.835897][T11573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 720.853484][T11573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 720.919137][T15515] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.963100][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 720.983273][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 721.001831][T15710] loop4: detected capacity change from 0 to 512 [ 721.020910][T14028] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.026058][ T8372] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 721.028314][T14028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.063021][T15710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 721.137700][T15710] EXT4-fs (loop4): 1 truncate cleaned up [ 721.143443][T15710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 721.182567][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 721.235898][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 721.238765][ T8372] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.267095][ T8372] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.276756][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 721.285653][ T8372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.304036][ T8372] usb 6-1: Product: syz [ 721.319762][ T8372] usb 6-1: Manufacturer: syz [ 721.341040][ T8372] usb 6-1: SerialNumber: syz [ 721.346384][T14028] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.353551][T14028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.415521][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 721.455787][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 721.474209][T15699] loop1: detected capacity change from 0 to 40427 [ 721.506405][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 721.538077][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 721.586441][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.595425][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 721.596576][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 721.613988][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.624230][T15699] F2FS-fs (loop1): invalid crc value [ 721.654103][ T8372] cdc_ether 6-1:1.0: skipping garbage [ 721.670707][ T8372] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 721.694389][T15699] F2FS-fs (loop1): Found nat_bits in checkpoint [ 721.698378][ T8372] usb 6-1: USB disconnect, device number 43 [ 721.756271][T15515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.806348][T15515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.857344][T15699] F2FS-fs (loop1): Start checkpoint disabled! [ 721.895590][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 721.926715][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 721.966138][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 721.974145][T15699] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 722.018309][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 722.056743][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 722.084756][T14028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 722.275179][ T8372] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 722.434196][T14296] kworker/u4:16: attempt to access beyond end of device [ 722.434196][T14296] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 722.465093][ T8372] usb 6-1: Using ep0 maxpacket: 8 [ 722.474312][ T8372] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 722.510318][ T8372] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 722.545471][ T8372] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 722.581153][ T8372] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 722.632246][ T8372] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 722.664943][ T8372] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.742458][ T8372] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 722.770194][ T8372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.048093][ T8372] usb 6-1: usb_control_msg returned -32 [ 723.059017][ T8372] usbtmc 6-1:16.0: can't read capabilities [ 723.270923][ T8372] usb 6-1: USB disconnect, device number 44 [ 723.877247][T14499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 723.899756][T14499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 723.943473][T15515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.189207][ T26] audit: type=1800 audit(1785829593.613:79): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3502" name="nofua" dev="configfs" ino=123882 res=0 errno=0 [ 726.307071][T13540] EXT4-fs (loop4): unmounting filesystem. [ 726.874845][ T7] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 726.961769][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.030767][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.103867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.121414][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.134580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.152627][ T7] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 727.165377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.173203][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.189334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.222235][ T7] usb 6-1: config 0 descriptor?? [ 727.231079][T15515] device veth0_vlan entered promiscuous mode [ 727.313563][T15515] device veth1_vlan entered promiscuous mode [ 727.432203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 727.448621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 727.468372][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 727.474442][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 727.501721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 727.523694][ T7] usb 6-1: USB disconnect, device number 45 [ 727.553352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 727.570662][T15792] loop4: detected capacity change from 0 to 1024 [ 727.590856][T15792] EXT4-fs: Ignoring removed orlov option [ 727.656676][T15515] device veth0_macvtap entered promiscuous mode [ 727.701808][T15515] device veth1_macvtap entered promiscuous mode [ 727.733980][T15792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 727.803302][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.915493][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.974737][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.024718][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.057034][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.068524][ T7] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 728.076515][T13981] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 728.574076][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.614012][T15515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.740250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.752508][T13540] EXT4-fs (loop4): unmounting filesystem. [ 728.766445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.781518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.794260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.810775][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.857146][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.904963][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.934704][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.947478][T13981] usb 2-1: Using ep0 maxpacket: 8 [ 728.954802][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 728.974519][T13981] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 728.982889][T13981] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.994583][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.010833][ T7] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 729.020058][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.028629][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.038564][T13981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.050237][ T26] audit: type=1800 audit(1785829598.473:80): pid=15805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3514" name="nofua" dev="configfs" ino=124952 res=0 errno=0 [ 729.059590][ T7] usb 6-1: config 0 descriptor?? [ 729.079772][T15515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.095667][T13981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.114527][T13981] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.133875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.147806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.158319][ T7] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 729.173161][T13981] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 729.179543][T15515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.201874][T15515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.213573][T15515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.214743][T13981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.233914][T15515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.346627][ C0] usb 6-1: unknown answer from device [ 729.353397][ C0] input input20: Pen battery low [ 729.467445][T13981] usb 2-1: usb_control_msg returned -32 [ 729.473142][T13981] usbtmc 2-1:16.0: can't read capabilities [ 729.513396][ T9476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.544622][ T9476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.565613][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 729.573653][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 729.581639][ T3624] usb 6-1: control msg error: -71 [ 729.595472][ C0] usb 6-1: pegasus_irq - urb shutting down with status: -2 [ 729.624519][T13254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.637897][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 729.645354][ T3624] usb 6-1: control msg error: -71 [ 729.651395][ T7] usb 6-1: USB disconnect, device number 46 [ 729.684933][ C0] usb 6-1: pegasus_irq - urb shutting down with status: -2 [ 729.695438][T13981] usb 2-1: USB disconnect, device number 34 [ 729.744100][T13254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.758880][T15814] loop4: detected capacity change from 0 to 1024 [ 729.772764][T13254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.805953][T14296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.046597][T15820] loop6: detected capacity change from 0 to 1024 [ 730.182864][T15820] hfsplus: invalid length 32517 has been corrected to 255 [ 730.538884][T15832] hfsplus: invalid length 32517 has been corrected to 255 [ 730.549476][T15832] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[15515] was attempted by ""[15832] [ 731.331614][T15843] loop4: detected capacity change from 0 to 1024 [ 731.355792][T15843] EXT4-fs: Ignoring removed orlov option [ 731.374617][T13981] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 731.457590][T15843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 731.757354][T13981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 731.777497][T13981] usb 2-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 731.791419][T13981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.801074][T13981] usb 2-1: Product: syz [ 731.822026][T13981] usb 2-1: Manufacturer: syz [ 731.871340][T13981] usb 2-1: SerialNumber: syz [ 732.213122][T13981] ark3116 2-1:1.0: ark3116 converter detected [ 732.322453][T13981] ark3116 ttyUSB0: using RS232 mode [ 732.372549][T13981] usb 2-1: ark3116 converter now attached to ttyUSB0 [ 732.435677][T13981] usb 2-1: USB disconnect, device number 35 [ 732.513451][T13981] ark3116 ttyUSB0: ark3116 converter now disconnected from ttyUSB0 [ 732.542640][T13981] ark3116 2-1:1.0: device disconnected [ 732.583896][T13540] EXT4-fs (loop4): unmounting filesystem. [ 733.494281][ T4379] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 733.564324][T13981] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 733.696103][ T4379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.745625][T13981] usb 2-1: not running at top speed; connect to a high speed hub [ 733.756114][ T4379] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.773552][T13981] usb 2-1: config 8 has an invalid interface number: 93 but max is 0 [ 733.795065][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.972166][T13981] usb 2-1: config 8 has no interface number 0 [ 733.980505][T13981] usb 2-1: config 8 interface 93 has no altsetting 0 [ 733.987321][ T4379] usb 5-1: Product: syz [ 733.991625][ T4379] usb 5-1: Manufacturer: syz [ 733.997521][ T4379] usb 5-1: SerialNumber: syz [ 734.005075][T13981] usb 2-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=bc.66 [ 734.017988][T13981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.028411][T13981] usb 2-1: Product: syz [ 734.033049][T13981] usb 2-1: Manufacturer: syz [ 734.038206][T13981] usb 2-1: SerialNumber: syz [ 734.369800][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.704257][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.716361][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.759027][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.801960][ T4379] cdc_ether 5-1:1.0: skipping garbage [ 734.827377][ T4379] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 734.850458][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.945440][ T4379] usb 5-1: USB disconnect, device number 26 [ 734.975266][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.119147][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.220429][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.313331][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.403538][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.464245][ T4379] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 735.496546][T13981] gspca_main: kinect-2.14.0 probing 045e:02ae [ 735.503226][T13981] videodev: could not get a free minor [ 735.534182][T13979] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 735.563108][T13981] gspca_main: video_register_device err -23 [ 735.583541][T13981] kinect: probe of 2-1:8.93 failed with error -23 [ 735.626718][T13981] usb 2-1: USB disconnect, device number 36 [ 735.684143][ T4379] usb 5-1: Using ep0 maxpacket: 8 [ 735.695862][ T4379] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 735.730929][ T4379] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 735.744469][T13979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.765565][T13979] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 735.783442][ T4379] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.793918][T13979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.813293][ T4379] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 735.845132][T13979] usb 6-1: config 0 descriptor?? [ 735.863531][ T4379] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 735.919624][ T4379] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.974241][ T4379] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 736.005783][ T4379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.060538][T13979] usbhid 6-1:0.0: can't add hid device: -71 [ 736.083439][T13979] usbhid: probe of 6-1:0.0 failed with error -71 [ 736.184909][T13979] usb 6-1: USB disconnect, device number 47 [ 736.243717][ T4379] usb 5-1: usb_control_msg returned -71 [ 736.249634][ T4379] usbtmc 5-1:16.0: can't read capabilities [ 736.290707][ T4379] usb 5-1: USB disconnect, device number 27 [ 736.563748][T11573] device hsr_slave_0 left promiscuous mode [ 736.570909][T11573] device hsr_slave_1 left promiscuous mode [ 736.578722][T11573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.589276][T11573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.598580][T11573] device bridge_slave_1 left promiscuous mode [ 736.605574][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.615033][T11573] device bridge_slave_0 left promiscuous mode [ 736.621419][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.634155][T11573] bond5 (unregistering): Released all slaves [ 736.714122][T13979] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 736.774213][ T4379] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 736.898180][T13979] usb 6-1: Using ep0 maxpacket: 32 [ 736.908679][T13979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.926337][T13979] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 736.940321][T13979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.967537][ T4379] usb 5-1: Using ep0 maxpacket: 16 [ 736.986633][ T4379] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.998667][T13979] usb 6-1: config 0 descriptor?? [ 737.003864][ T4379] usb 5-1: config 0 interface 0 has no altsetting 0 [ 737.014790][T13979] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 737.043095][ T4379] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 737.061724][T13979] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 737.071498][ T4379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.093189][ T4379] usb 5-1: Product: syz [ 737.099911][ T4379] usb 5-1: Manufacturer: syz [ 737.114071][ T4379] usb 5-1: SerialNumber: syz [ 737.136792][ T4379] usb 5-1: config 0 descriptor?? [ 737.188765][T11573] bond4 (unregistering): Released all slaves [ 737.390909][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 737.418158][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.669956][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.786775][ T8372] usb 6-1: USB disconnect, device number 48 [ 738.155688][ T8372] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 738.239493][ T4379] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 738.294451][ T4379] imon:send_packet: packet tx failed (-71) [ 738.325142][ T4379] imon 5-1:0.0: panel buttons/knobs setup failed [ 738.431763][T15921] loop1: detected capacity change from 0 to 512 [ 738.448261][T11573] bond3 (unregistering): Released all slaves [ 738.463267][T15923] loop6: detected capacity change from 0 to 512 [ 738.492663][T15921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 738.605386][T15923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 738.639738][T15921] EXT4-fs (loop1): 1 truncate cleaned up [ 738.664405][T15921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 738.675220][ T4379] rc_core: IR keymap rc-imon-pad not found [ 738.681111][ T4379] Registered IR keymap rc-empty [ 738.691742][ T4379] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 738.708074][T15923] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 738.723986][ T4379] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 738.737754][ T4379] imon:send_packet: packet tx failed (-71) [ 738.763230][T15923] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.768378][ T4379] imon 5-1:0.0: remote input dev register failed [ 738.790479][ T4379] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 738.841126][ T4379] imon 5-1:0.0: unable to initialize intf0, err 0 [ 738.848290][ T4379] imon:imon_probe: failed to initialize context! [ 738.855248][ T4379] imon 5-1:0.0: unable to register, err -19 [ 738.867293][ T4379] usb 5-1: USB disconnect, device number 28 [ 738.904040][T13981] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 739.106504][T13981] usb 6-1: Using ep0 maxpacket: 16 [ 739.128201][T13981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.140073][T13981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.150580][T13981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.164404][T13981] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 739.173539][T13981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.185194][T13981] usb 6-1: config 0 descriptor?? [ 739.263560][ T4379] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 739.299582][T11573] bond1 (unregistering): (slave bond2): Releasing backup interface [ 739.308645][T11573] device bond2 left promiscuous mode [ 739.316369][T11573] bond2 (unregistering): Released all slaves [ 739.616473][T13981] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 739.640384][T13981] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 739.663285][T13981] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input23 [ 739.683936][ T4379] usb 5-1: device not accepting address 29, error -71 [ 739.774896][T11573] bond1 (unregistering): Released all slaves [ 739.798755][T13981] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 739.831690][T15927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.849532][T15927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.999234][T13981] usb 6-1: USB disconnect, device number 49 [ 740.102315][T15939] fido_id[15939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 740.957963][T13981] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 741.056372][T11573] team0 (unregistering): Port device team_slave_1 removed [ 741.114239][T11573] team0 (unregistering): Port device team_slave_0 removed [ 741.169298][T13981] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.180883][T11573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.190945][T11573] device bond_slave_1 left promiscuous mode [ 741.197996][T13981] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.222874][T13981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.231030][T13981] usb 6-1: Product: syz [ 741.235584][T13981] usb 6-1: Manufacturer: syz [ 741.240249][T13981] usb 6-1: SerialNumber: syz [ 741.289878][T11573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.299413][T11573] device bond_slave_0 left promiscuous mode [ 741.465569][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.489075][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.525916][T13981] cdc_ether 6-1:1.0: skipping garbage [ 741.531468][T13981] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 741.559993][T13981] usb 6-1: USB disconnect, device number 50 [ 741.580266][T15515] EXT4-fs (loop6): unmounting filesystem. [ 741.989590][T11573] bond0 (unregistering): Released all slaves [ 742.133773][T13981] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 742.333925][T13981] usb 6-1: Using ep0 maxpacket: 8 [ 742.342564][T13981] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 742.373923][T13981] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 742.398060][T13981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.435961][T13981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.484090][T13981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 742.513822][T13981] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.550600][T13981] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.593798][T13981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.654614][T14621] EXT4-fs (loop1): unmounting filesystem. [ 742.820340][T13981] usb 6-1: usb_control_msg returned -32 [ 742.826372][T13981] usbtmc 6-1:16.0: can't read capabilities [ 742.872970][T13981] usb 6-1: USB disconnect, device number 51 [ 743.292828][T15977] loop6: detected capacity change from 0 to 256 [ 743.349877][T15977] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 744.401552][ T8371] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 745.231370][ T8371] usb 2-1: unable to get BOS descriptor or descriptor too short [ 745.247125][ T8371] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.427715][ T8371] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 745.481195][ T8371] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 745.612899][ T8371] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 745.686683][ T8371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.741001][ T8371] usb 2-1: Product: syz [ 745.764298][ T8371] usb 2-1: Manufacturer: syz [ 745.790333][ T8371] usb 2-1: SerialNumber: syz [ 745.900813][ T8371] usb 2-1: can't set config #1, error -71 [ 745.926145][ T8371] usb 2-1: USB disconnect, device number 37 [ 745.943726][T13981] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 746.133608][T13981] usb 5-1: Using ep0 maxpacket: 8 [ 746.140528][T13981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 746.200770][T13981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.232834][T13981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 746.273506][T13981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 746.329222][T13981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 746.353597][T13981] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 746.372967][T13981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.420953][T13981] usb 5-1: config 0 descriptor?? [ 746.434121][T15996] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 746.712017][ T4284] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 746.719715][ T4284] Bluetooth: hci4: Malformed Event: 0x02 [ 746.727053][ T4284] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 746.936992][ T4292] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 746.957242][ T127] usb 5-1: USB disconnect, device number 31 [ 747.006705][T16024] netlink: 'syz.1.3572': attribute type 39 has an invalid length. [ 747.200040][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.213025][T16035] netlink: 'syz.6.3577': attribute type 29 has an invalid length. [ 747.223540][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.233998][T16035] netlink: 'syz.6.3577': attribute type 3 has an invalid length. [ 747.241780][T16035] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3577'. [ 747.693631][ T127] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 747.723712][T16046] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 747.731914][T16046] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 747.742057][T16046] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 749.401933][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 749.518120][ T127] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 749.546320][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.596976][ T127] usb 6-1: Product: syz [ 749.614058][ T127] usb 6-1: Manufacturer: syz [ 749.677267][ T127] usb 6-1: SerialNumber: syz [ 749.750857][T16058] netlink: 'syz.4.3585': attribute type 29 has an invalid length. [ 749.845639][T16058] netlink: 'syz.4.3585': attribute type 29 has an invalid length. [ 749.860944][T16062] netlink: 'syz.4.3585': attribute type 29 has an invalid length. [ 750.111926][ T127] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 750.423412][T13979] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 751.055622][T13979] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 751.120332][T13979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.500640][T13979] usb 2-1: Product: syz [ 751.504944][T13979] usb 2-1: Manufacturer: syz [ 751.509623][T13979] usb 2-1: SerialNumber: syz [ 751.538178][ T26] audit: type=1800 audit(1785829620.954:81): pid=16097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3597" name="nofua" dev="configfs" ino=125418 res=0 errno=0 [ 751.758176][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.798543][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.813965][T16097] loop6: detected capacity change from 0 to 16 [ 751.821238][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.905818][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.935440][T16097] erofs: Unknown parameter '' [ 752.452130][ T4325] usb 6-1: USB disconnect, device number 52 [ 752.460591][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.515344][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.627507][ C1] usblp0: nonzero write bulk status received: -108 [ 753.721373][ T4325] usblp0: removed [ 753.845551][T13979] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:16:aa:9b:8d:06 [ 753.988154][T13979] rtl8150 2-1:1.0: eth9: rtl8150 is detected [ 754.082046][T13979] usb 2-1: USB disconnect, device number 38 [ 754.097159][T16127] loop1: detected capacity change from 0 to 512 [ 754.310401][T16127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 754.603693][T16127] EXT4-fs (loop1): 1 truncate cleaned up [ 754.765891][T16127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 755.185282][T11573] device hsr_slave_0 left promiscuous mode [ 756.466276][T14621] EXT4-fs (loop1): unmounting filesystem. [ 756.473477][T11573] device hsr_slave_1 left promiscuous mode [ 756.513389][T11573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.535403][T11573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.571329][T11573] device bridge_slave_1 left promiscuous mode [ 758.471002][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.958657][T11573] device bridge_slave_0 left promiscuous mode [ 759.060834][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.447239][T11573] bond18 (unregistering): Released all slaves [ 759.467813][T11573] bond17 (unregistering): Released all slaves [ 759.533305][T13979] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 759.749155][T13979] usb 2-1: Using ep0 maxpacket: 8 [ 759.767691][T13979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 759.781247][T11573] bond16 (unregistering): Released all slaves [ 759.796914][T11573] bond15 (unregistering): Released all slaves [ 759.802915][T13979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 759.838866][T13979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 759.848702][T13979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 759.860564][T13979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 759.881337][T13979] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 759.893896][T13979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.922407][T13979] usb 2-1: config 0 descriptor?? [ 759.929188][T16176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 760.169369][ C0] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 760.177938][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.185252][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.192131][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.199236][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.206160][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.213089][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.231031][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.238990][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.245974][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.254056][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.261053][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.268192][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.275406][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.282322][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.289363][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.297367][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.304359][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.313580][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.320938][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.327964][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.335032][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.342050][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.349165][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.356125][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.363161][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.370083][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.372515][ T127] usb 2-1: USB disconnect, device number 39 [ 760.377305][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.390018][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.397076][ T4292] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 760.406347][ T4284] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 760.434562][T11573] bond14 (unregistering): Released all slaves [ 760.711729][T11573] bond13 (unregistering): Released all slaves [ 760.911902][T11573] bond12 (unregistering): Released all slaves [ 761.194494][T11573] bond11 (unregistering): Released all slaves [ 761.371058][T11573] bond9 (unregistering): (slave bond10): Releasing backup interface [ 761.383338][T11573] bond10 (unregistering): Released all slaves [ 761.572051][T11573] bond9 (unregistering): Released all slaves [ 761.763357][T11573] bond7 (unregistering): (slave bond8): Releasing backup interface [ 761.772139][T11573] device bond8 left promiscuous mode [ 761.779512][T11573] bond8 (unregistering): Released all slaves [ 762.025147][T11573] bond7 (unregistering): Released all slaves [ 762.042343][T16190] loop1: detected capacity change from 0 to 256 [ 762.099174][T16190] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 762.443823][T11573] bond5 (unregistering): (slave bond6): Releasing backup interface [ 762.460675][T11573] device bond6 left promiscuous mode [ 762.470621][T11573] bond6 (unregistering): Released all slaves [ 762.884546][T11573] bond5 (unregistering): Released all slaves [ 763.304203][T11573] bond3 (unregistering): (slave bond4): Releasing backup interface [ 763.313206][T11573] device bond4 left promiscuous mode [ 763.320492][T11573] bond4 (unregistering): Released all slaves [ 763.489303][T11573] bond3 (unregistering): Released all slaves [ 763.664525][T11573] bond1 (unregistering): (slave bond2): Releasing backup interface [ 763.682357][T11573] device bond2 left promiscuous mode [ 763.689481][T11573] bond2 (unregistering): Released all slaves [ 763.849944][T11573] bond1 (unregistering): Released all slaves [ 764.504222][T11573] team0 (unregistering): Port device team_slave_1 removed [ 764.563336][T11573] team0 (unregistering): Port device team_slave_0 removed [ 764.626220][T11573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.689736][T11573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.125309][T11573] bond0 (unregistering): Released all slaves [ 765.969427][ T26] audit: type=1800 audit(1785829635.385:82): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3633" name="nofua" dev="configfs" ino=125608 res=0 errno=0 [ 774.777015][T16334] can0: slcan on ttyS3. [ 774.875220][T16341] usb usb8: usbfs: process 16341 (syz.4.3662) did not claim interface 0 before use [ 775.563432][T16347] loop6: detected capacity change from 0 to 512 [ 775.643609][T16334] loop1: detected capacity change from 0 to 40427 [ 775.693656][T16347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 775.819665][T16334] can0 (unregistered): slcan off ttyS3. [ 776.008145][T16354] loop4: detected capacity change from 0 to 512 [ 776.053650][T15515] EXT4-fs (loop6): unmounting filesystem. [ 776.072959][T16354] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 776.471997][T16364] input: syz1 as /devices/virtual/input/input24 [ 777.753345][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3669'. [ 778.127053][T16386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3673'. [ 778.327856][T16357] loop1: detected capacity change from 0 to 40427 [ 778.665349][T16357] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 779.481775][T16221] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 779.683631][T16221] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 779.715215][T16221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.753667][ T26] audit: type=1800 audit(1785829649.176:83): pid=16414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3680" name="nofua" dev="configfs" ino=126123 res=0 errno=0 [ 779.785839][T16221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.831946][T16221] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 779.859545][T16414] loop6: detected capacity change from 0 to 16 [ 779.900619][T16221] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 779.931248][T16414] erofs: Unknown parameter '' [ 779.958126][T16221] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 779.985940][T16221] usb 5-1: Manufacturer: syz [ 780.022201][T16221] usb 5-1: config 0 descriptor?? [ 780.562003][T16221] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 780.829250][T16221] appleir 0003:05AC:8243.000B: parse failed [ 780.967410][T16221] appleir: probe of 0003:05AC:8243.000B failed with error -22 [ 781.219927][T16221] usb 5-1: USB disconnect, device number 32 [ 781.452654][T16409] loop1: detected capacity change from 0 to 40427 [ 781.507678][T16409] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 781.564561][T16409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 781.575063][T16431] loop4: detected capacity change from 0 to 256 [ 781.610684][T16409] F2FS-fs (loop1): invalid crc value [ 781.632891][T16431] exfat: Deprecated parameter 'utf8' [ 781.638397][T16431] exfat: Deprecated parameter 'namecase' [ 781.689520][T16409] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 781.702838][T16431] exfat: Deprecated parameter 'namecase' [ 781.784312][T16431] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 781.890833][ T26] audit: type=1804 audit(1785829651.306:84): pid=16431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3684" name=2F6E6577726F6F742F3138302FE91F7189591E9233614B2F627573 dev="loop4" ino=1048640 res=1 errno=0 [ 781.971346][T16409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 782.004842][T16409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 782.240128][T16409] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 782.626938][T16454] loop6: detected capacity change from 0 to 8192 [ 782.673746][T16454] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 783.086261][T16465] loop1: detected capacity change from 0 to 512 [ 783.133061][T16465] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 783.220170][T16465] EXT4-fs (loop1): 1 truncate cleaned up [ 783.256409][T16465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 783.997581][T14621] EXT4-fs (loop1): unmounting filesystem. [ 785.616722][T16502] loop1: detected capacity change from 0 to 128 [ 787.237728][T16520] loop6: detected capacity change from 0 to 256 [ 787.265442][T16520] exfat: Deprecated parameter 'utf8' [ 787.270897][T16520] exfat: Deprecated parameter 'utf8' [ 787.337420][T16520] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 788.260621][ T26] audit: type=1800 audit(1785829657.676:85): pid=16549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3716" name="nofua" dev="configfs" ino=126329 res=0 errno=0 [ 788.361211][ T4325] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 788.557326][ T4325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.595604][ T4325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.644555][ T4325] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.684405][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.706473][ T4325] usb 6-1: Product: syz [ 788.718113][ T4325] usb 6-1: Manufacturer: syz [ 788.733772][ T4325] usb 6-1: SerialNumber: syz [ 788.835994][T16535] loop6: detected capacity change from 0 to 40427 [ 788.882010][T16535] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 788.920277][T16535] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 788.967775][T16535] F2FS-fs (loop6): invalid crc value [ 788.976946][ T4325] usb 6-1: 0:2 : does not exist [ 789.005567][ T4325] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 789.028563][T16535] F2FS-fs (loop6): Found nat_bits in checkpoint [ 789.084811][ T4325] usb 6-1: USB disconnect, device number 53 [ 789.212207][T16535] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 789.241135][T16535] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 789.383991][ T7229] udevd[7229]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.131890][ T8372] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 792.325126][ T8372] usb 2-1: Using ep0 maxpacket: 32 [ 792.335268][ T8372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.377192][ T8372] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=ff.f5 [ 792.404560][ T8372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.421774][ T8372] usb 2-1: Product: syz [ 792.430510][ T8372] usb 2-1: Manufacturer: syz [ 792.450114][ T8372] usb 2-1: SerialNumber: syz [ 792.700386][T16613] loop6: detected capacity change from 0 to 512 [ 792.745960][ T8372] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 792.771349][ T8372] usb 2-1: USB disconnect, device number 40 [ 792.783365][T16613] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.3727: iget: bad i_size value: 38620345925642 [ 792.825968][T13173] udevd[13173]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.857526][T16613] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3727: couldn't read orphan inode 15 (err -117) [ 792.911698][T16613] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 793.112091][T16613] EXT4-fs (loop6): shut down requested (0) [ 793.157963][T13254] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:12: bg 0: block 5: invalid block bitmap [ 793.227492][T13254] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 384 with error 28 [ 793.255158][T13254] EXT4-fs (loop6): This should not happen!! Data will be lost [ 793.255158][T13254] [ 793.277117][T13254] EXT4-fs (loop6): Total free blocks count 0 [ 793.293137][T13254] EXT4-fs (loop6): Free/Dirty block details [ 793.311646][T13254] EXT4-fs (loop6): free_blocks=0 [ 793.323508][T13254] EXT4-fs (loop6): dirty_blocks=384 [ 793.335824][T13254] EXT4-fs (loop6): Block reservation details [ 793.348956][T13254] EXT4-fs (loop6): i_reserved_data_blocks=384 [ 793.938794][T16642] loop1: detected capacity change from 0 to 1024 [ 794.895730][T16642] hfsplus: can't free extent [ 796.312162][T16221] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 796.564140][T16221] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 796.596702][T16221] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 796.666494][T16221] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 796.708762][T16221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 796.764383][T16221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 796.780732][ T26] audit: type=1326 audit(1785829666.107:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16674 comm="syz.6.3749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe38f19e019 code=0x0 [ 796.852586][T16221] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 796.905281][T16221] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 796.950084][T16221] usb 5-1: Product: syz [ 796.984979][T16221] usb 5-1: Manufacturer: syz [ 797.110192][T16221] cdc_wdm 5-1:1.0: skipping garbage [ 797.126207][T16221] cdc_wdm 5-1:1.0: skipping garbage [ 797.167604][T16221] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 797.205185][T16221] cdc_wdm 5-1:1.0: Unknown control protocol [ 797.390190][T16670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.454572][T16670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.554918][T16670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.632602][T16670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.841421][ T26] audit: type=1800 audit(1785829667.267:87): pid=16691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3754" name="nofua" dev="configfs" ino=127495 res=0 errno=0 [ 797.885421][T16691] loop6: detected capacity change from 0 to 16 [ 797.910369][T16691] erofs: Unknown parameter '' [ 797.961033][T16695] loop1: detected capacity change from 0 to 256 [ 798.063888][T13981] usb 5-1: USB disconnect, device number 33 [ 798.067964][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 798.079352][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 798.086324][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 798.092461][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 800.148442][ T26] audit: type=1800 audit(1785829669.567:88): pid=16745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3768" name="nofua" dev="configfs" ino=126561 res=0 errno=0 [ 800.210929][T16745] loop6: detected capacity change from 0 to 16 [ 800.258931][T16745] erofs: Unknown parameter '' [ 800.698952][ T26] audit: type=1326 audit(1785829670.117:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 800.784270][ T26] audit: type=1326 audit(1785829670.147:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 800.889937][ T26] audit: type=1326 audit(1785829670.147:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 801.008288][ T26] audit: type=1326 audit(1785829670.147:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 801.099595][ T26] audit: type=1326 audit(1785829670.147:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 801.200524][ T26] audit: type=1326 audit(1785829670.147:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 801.295731][ T26] audit: type=1326 audit(1785829670.147:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 801.991649][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 801.991666][ T26] audit: type=1326 audit(1785829671.417:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.135587][ T26] audit: type=1326 audit(1785829671.417:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.231143][ T26] audit: type=1326 audit(1785829671.447:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.320363][ T26] audit: type=1326 audit(1785829671.467:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.406014][ T26] audit: type=1326 audit(1785829671.467:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.502013][ T26] audit: type=1326 audit(1785829671.467:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5cbf9dd82 code=0x7ffc0000 [ 802.570351][ T26] audit: type=1326 audit(1785829671.827:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.650631][ T26] audit: type=1326 audit(1785829671.827:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 802.723221][ T26] audit: type=1326 audit(1785829671.827:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd5cbf9de17 code=0x7ffc0000 [ 802.819869][ T26] audit: type=1326 audit(1785829671.827:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.4.3772" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd5cbf5ad11 code=0x7ffc0000 [ 802.856596][T16770] loop1: detected capacity change from 0 to 40427 [ 802.908678][T16770] F2FS-fs (loop1): invalid crc value [ 802.939913][T16770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 802.953240][T16759] loop4: detected capacity change from 0 to 512 [ 802.984888][T16759] ext4: Unknown parameter 'fscontext' [ 803.106708][T16770] F2FS-fs (loop1): Start checkpoint disabled! [ 803.210768][T16770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 803.761949][ T4330] kworker/u4:6: attempt to access beyond end of device [ 803.761949][ T4330] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 804.565666][T16786] loop1: detected capacity change from 0 to 512 [ 804.600521][T16786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 804.694405][T16786] EXT4-fs (loop1): 1 truncate cleaned up [ 804.755585][T16786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 805.734181][T14621] EXT4-fs (loop1): unmounting filesystem. [ 807.329736][T16836] futex_wake_op: syz.6.3794 tries to shift op by 144; fix this program [ 807.383938][T16836] loop6: detected capacity change from 0 to 256 [ 807.485634][T16836] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 807.598788][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 807.606297][ T26] audit: type=1800 audit(1785829676.987:192): pid=16836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3794" name="file1" dev="loop6" ino=1048643 res=0 errno=0 [ 808.313408][T16841] loop4: detected capacity change from 0 to 512 [ 808.394353][T16841] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 808.506332][T16841] EXT4-fs (loop4): 1 truncate cleaned up [ 808.517458][T16841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 809.763584][T16848] loop6: detected capacity change from 0 to 512 [ 809.820954][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.033938][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.782552][T13540] EXT4-fs (loop4): unmounting filesystem. [ 810.973089][T16848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 811.648557][T15515] EXT4-fs (loop6): unmounting filesystem. [ 812.232256][T16869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 812.244854][T16869] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 812.283381][T16869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 812.291539][T16869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 812.798731][T16869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.794844][T16918] loop6: detected capacity change from 0 to 512 [ 817.812983][T16918] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 817.881318][T16918] EXT4-fs (loop6): 1 truncate cleaned up [ 817.898542][T16918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 819.104520][T15515] EXT4-fs (loop6): unmounting filesystem. [ 819.309214][T16936] loop6: detected capacity change from 0 to 256 [ 819.349085][T16936] exfat: Deprecated parameter 'utf8' [ 819.373431][T16936] exfat: Deprecated parameter 'utf8' [ 819.411107][T16936] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 820.059513][T16221] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 820.267391][T16221] usb 2-1: unable to get BOS descriptor or descriptor too short [ 820.312111][T16221] usb 2-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 820.413728][T16221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 820.427171][T16221] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.453365][T16221] usb 2-1: New USB device found, idVendor=4525, idProduct=a4a1, bcdDevice= 0.40 [ 820.463930][T16221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.525068][T16221] usb 2-1: Product: syz [ 820.544136][T16221] usb 2-1: Manufacturer: syz [ 820.560163][T16221] usb 2-1: SerialNumber: syz [ 820.709710][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3829'. [ 821.576975][T16953] loop6: detected capacity change from 0 to 512 [ 821.622959][T16953] EXT4-fs: Ignoring removed mblk_io_submit option [ 821.657195][T16953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 821.742524][T16953] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 821.757596][T16953] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 821.768303][T16953] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3831: Corrupt directory, running e2fsck is recommended [ 821.789024][T16953] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 821.798723][T16953] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.3831: corrupted in-inode xattr [ 821.811804][T16953] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.3831: couldn't read orphan inode 15 (err -117) [ 821.824751][T16953] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 821.843395][T16953] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 821.906243][T16953] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 821.939325][T16953] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3831: Corrupt directory, running e2fsck is recommended [ 821.972371][T16960] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 821.999744][T16960] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 822.018908][T16960] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3831: Corrupt directory, running e2fsck is recommended [ 822.082411][T16962] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 822.119498][T16962] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 822.150284][T16962] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3831: Corrupt directory, running e2fsck is recommended [ 822.201133][T16953] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 822.354476][T15515] EXT4-fs (loop6): unmounting filesystem. [ 822.548992][T16221] cdc_ncm 2-1:1.0: skipping garbage [ 822.561753][T16221] cdc_ncm 2-1:1.0: skipping garbage [ 822.575974][T16221] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 822.594566][T16221] cdc_ncm 2-1:1.0: bind() failure [ 822.669369][T16221] usb 2-1: USB disconnect, device number 41 [ 828.375897][ T26] audit: type=1800 audit(1785829697.798:193): pid=17025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3856" name="nofua" dev="configfs" ino=129104 res=0 errno=0 [ 829.616795][T17040] loop6: detected capacity change from 0 to 256 [ 830.059217][T17040] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 830.133601][T17040] syz.6.3860: attempt to access beyond end of device [ 830.133601][T17040] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 830.226090][T17040] syz.6.3860: attempt to access beyond end of device [ 830.226090][T17040] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 830.299787][ T26] audit: type=1800 audit(1785829699.728:194): pid=17040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3860" name="file1" dev="loop6" ino=1048644 res=0 errno=0 [ 830.619076][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3864'. [ 830.665859][T17052] device dummy0 entered promiscuous mode [ 830.693201][T17052] device macsec1 entered promiscuous mode [ 830.708264][T17052] device dummy0 left promiscuous mode [ 831.291720][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 831.991046][ T26] audit: type=1800 audit(1785829701.419:195): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3869" name="nofua" dev="configfs" ino=129126 res=0 errno=0 [ 832.336705][T17065] loop6: detected capacity change from 0 to 16 [ 832.351904][T17065] erofs: Unknown parameter '' [ 834.083986][T17084] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3875'. [ 834.128679][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3875'. [ 834.698918][ T8372] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 834.904017][ T8372] usb 5-1: Using ep0 maxpacket: 16 [ 834.911310][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.948601][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.009677][ T8372] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 835.053234][ T8372] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 835.103858][ T8372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.140813][ T8372] usb 5-1: config 0 descriptor?? [ 835.373939][T17101] loop6: detected capacity change from 0 to 40427 [ 835.418456][T17101] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 835.427357][T17101] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 835.452098][T17101] F2FS-fs (loop6): invalid crc value [ 835.508074][T17101] F2FS-fs (loop6): Found nat_bits in checkpoint [ 835.587613][ T8372] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 835.606423][ T8372] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 835.672604][ T8372] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input25 [ 835.717752][ T26] audit: type=1800 audit(1785829705.139:196): pid=17112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3882" name="nofua" dev="configfs" ino=128298 res=0 errno=0 [ 835.758500][T17101] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 835.765788][T17101] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 835.784709][T17094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.810659][T17094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.190295][T17121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 836.302819][ T8372] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 838.464369][ T8372] usb 5-1: USB disconnect, device number 34 [ 840.595460][T17150] loop4: detected capacity change from 0 to 256 [ 840.690096][T17150] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 840.723123][T17150] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 840.795222][T17136] fido_id[17136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 840.883094][T17152] loop6: detected capacity change from 0 to 1024 [ 841.012344][T17152] hfsplus: can't free extent [ 841.889977][ T4377] I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 842.498151][T16221] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 842.658875][T17166] loop4: detected capacity change from 0 to 40427 [ 842.667103][T17166] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 842.698170][T16221] usb 6-1: Using ep0 maxpacket: 16 [ 842.705185][T16221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.715138][T17166] F2FS-fs (loop4): invalid crc value [ 842.742862][T17166] F2FS-fs (loop4): Found nat_bits in checkpoint [ 842.759917][T16221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.802185][T16221] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 842.849291][T16221] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 842.902444][T17166] F2FS-fs (loop4): recover fsync data on readonly fs [ 842.912021][T16221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.926507][T17166] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 842.952739][T16221] usb 6-1: config 0 descriptor?? [ 842.978260][T17166] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 843.025547][T17166] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 843.044785][T17176] loop1: detected capacity change from 0 to 512 [ 843.062991][T17176] EXT4-fs: Ignoring removed mblk_io_submit option [ 843.221294][T17176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 843.291453][T17176] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.367945][T16221] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 843.385694][T16221] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 843.468306][T16221] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input26 [ 843.547401][T14621] EXT4-fs (loop1): unmounting filesystem. [ 843.567887][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.583676][T16221] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 843.608516][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.719474][T16221] usb 6-1: USB disconnect, device number 54 [ 844.768741][T17182] fido_id[17182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 844.925337][T17181] loop6: detected capacity change from 0 to 40427 [ 844.984196][T17181] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 845.023546][T17181] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 845.054308][T17181] F2FS-fs (loop6): invalid crc value [ 845.136803][T17181] F2FS-fs (loop6): Found nat_bits in checkpoint [ 845.325207][T17181] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 845.341741][T17181] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 845.882098][T17208] xt_hashlimit: size too large, truncated to 1048576 [ 846.517877][ T4325] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 846.737995][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 846.745755][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 846.763198][T17216] loop6: detected capacity change from 0 to 4096 [ 846.779220][ T4325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.806299][T17216] EXT4-fs: inline encryption not supported [ 846.828303][T17216] EXT4-fs: Ignoring removed oldalloc option [ 846.835332][ T4325] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 846.855677][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.875851][ T4325] usb 5-1: Product: syz [ 846.883558][T17216] EXT4-fs (loop6): Test dummy encryption mode enabled [ 846.903245][ T4325] usb 5-1: Manufacturer: syz [ 846.909223][ T4325] usb 5-1: SerialNumber: syz [ 846.913976][T17216] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 846.927946][T17216] System zones: 0-5 [ 846.974436][T17216] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 847.159545][ T4325] usb 5-1: 1:1 : unsupported format bits 0x2004 [ 847.165943][ T4325] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 847.218082][ T4325] usb 5-1: unit 37 not found! [ 847.222842][ T4325] usb 5-1: unit 0 not found! [ 847.273033][ T4325] usb 5-1: MIDIStreaming interface descriptor not found [ 849.433283][T17222] overlayfs: failed to resolve './bus': -2 [ 850.158410][ T4275] kworker/dying (4275) used greatest stack depth: 16064 bytes left [ 850.172467][ T4325] usb 5-1: USB disconnect, device number 35 [ 850.290726][T15515] EXT4-fs (loop6): unmounting filesystem. [ 850.459205][T17242] udevd[17242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.337995][T16221] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 851.771435][T16221] usb 5-1: Using ep0 maxpacket: 16 [ 851.779337][T16221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.807580][T16221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.817413][T16221] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 851.869662][T16221] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 851.917106][T16221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.954866][T16221] usb 5-1: config 0 descriptor?? [ 852.302491][T17264] loop6: detected capacity change from 0 to 256 [ 852.376927][T16221] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 852.412609][T16221] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 852.493509][T16221] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000E/input/input27 [ 852.564464][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3918'. [ 852.651415][T16221] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 852.695344][T16221] usb 5-1: USB disconnect, device number 36 [ 853.015564][T17272] fido_id[17272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 854.283399][ T26] audit: type=1326 audit(1785829723.710:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 854.401873][ T26] audit: type=1326 audit(1785829723.710:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 854.529137][ T26] audit: type=1326 audit(1785829723.710:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 854.628855][ T26] audit: type=1326 audit(1785829723.710:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 854.779121][ T26] audit: type=1326 audit(1785829723.710:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 854.882229][ T26] audit: type=1326 audit(1785829723.710:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 854.952778][ T26] audit: type=1326 audit(1785829723.710:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 855.030213][ T26] audit: type=1326 audit(1785829723.740:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 855.126037][ T26] audit: type=1326 audit(1785829723.740:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 855.264045][ T26] audit: type=1326 audit(1785829723.740:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.4.3932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5cbf9e019 code=0x7ffc0000 [ 855.324295][T17329] loop4: detected capacity change from 0 to 256 [ 855.380586][T17329] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 855.430047][T17329] syz.4.3937: attempt to access beyond end of device [ 855.430047][T17329] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 855.486886][T17329] syz.4.3937: attempt to access beyond end of device [ 855.486886][T17329] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 855.690303][T17335] random: crng reseeded on system resumption [ 857.335232][T17357] device syzkaller0 entered promiscuous mode [ 857.374542][T17357] tipc: Started in network mode [ 857.408146][T17357] tipc: Node identity 821280166cc8, cluster identity 4711 [ 857.462260][T17357] tipc: Enabled bearer , priority 0 [ 857.504167][T17357] tipc: Resetting bearer [ 857.574943][T17356] tipc: Resetting bearer [ 857.664676][T17356] tipc: Disabling bearer [ 857.919340][ T4325] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 858.130813][ T4325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 858.150076][ T4325] usb 5-1: config 1 has no interface number 0 [ 858.156343][ T4325] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 858.188088][ T4325] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 858.207263][ T4325] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 858.228255][ T4325] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 858.239562][T13981] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 858.249671][ T4325] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.266472][ T4325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.278025][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.286755][ T4325] usb 5-1: Product: syz [ 858.295860][ T4325] usb 5-1: Manufacturer: syz [ 858.302821][ T4325] usb 5-1: SerialNumber: syz [ 858.337556][T17366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 858.447262][T13981] usb 6-1: Using ep0 maxpacket: 16 [ 858.456037][T13981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.467867][T13981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.478464][T13981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 858.494241][T13981] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 858.503906][T13981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.515876][T13981] usb 6-1: config 0 descriptor?? [ 858.558591][T17366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 858.770487][T17366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 858.934220][T13981] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 858.948847][T13981] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 858.997546][T13981] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input28 [ 859.103998][T13981] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 859.216072][T17366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 859.254676][ T4325] cdc_ncm 5-1:1.1: bind() failure [ 859.373220][ T4379] usb 6-1: USB disconnect, device number 55 [ 859.460221][ T4325] usb 5-1: USB disconnect, device number 37 [ 861.519924][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 861.519940][ T26] audit: type=1326 audit(1785829730.950:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 861.563597][T17415] loop4: detected capacity change from 0 to 128 [ 861.631624][T17415] ext3: Bad value for 'journal_ioprio' [ 861.663069][ T26] audit: type=1326 audit(1785829731.000:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 861.757440][ T26] audit: type=1326 audit(1785829731.000:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 861.859260][ T26] audit: type=1326 audit(1785829731.010:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 861.934799][ T26] audit: type=1326 audit(1785829731.010:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 862.002631][T17426] loop1: detected capacity change from 0 to 512 [ 862.043468][T17426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 862.053770][ T26] audit: type=1326 audit(1785829731.010:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 862.125449][ T26] audit: type=1326 audit(1785829731.010:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 862.140536][T17426] EXT4-fs (loop1): 1 truncate cleaned up [ 862.150861][ T26] audit: type=1326 audit(1785829731.010:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 862.180158][ T26] audit: type=1326 audit(1785829731.010:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 862.205183][ T26] audit: type=1326 audit(1785829731.010:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17412 comm="syz.5.3967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c05f9e019 code=0x7ffc0000 [ 862.260354][T17430] loop4: detected capacity change from 0 to 256 [ 862.282636][T17426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 862.330851][T17430] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 863.286268][T14621] EXT4-fs (loop1): unmounting filesystem. [ 863.601406][T17445] loop1: detected capacity change from 0 to 2048 [ 863.719539][T17445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 863.782317][T17445] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.183374][T14621] EXT4-fs (loop1): unmounting filesystem. [ 864.516904][ T8096] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 864.706948][ T8096] usb 5-1: Using ep0 maxpacket: 16 [ 864.714722][ T8096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.756867][ T8096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.817301][ T8096] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 864.860733][ T8096] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 864.891119][ T8096] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.918966][ T8096] usb 5-1: config 0 descriptor?? [ 865.438001][ T8096] usbhid 5-1:0.0: can't add hid device: -71 [ 865.444067][ T8096] usbhid: probe of 5-1:0.0 failed with error -71 [ 865.470222][ T8096] usb 5-1: USB disconnect, device number 38 [ 867.381620][T17488] loop6: detected capacity change from 0 to 4096 [ 867.393322][T17488] EXT4-fs: Ignoring removed mblk_io_submit option [ 867.450574][T17488] EXT4-fs (loop6): Test dummy encryption mode enabled [ 867.660471][T17488] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 868.366645][ T4325] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 869.508566][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.526558][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.536384][ T4325] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 869.549543][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.588981][T15515] EXT4-fs (loop6): unmounting filesystem. [ 869.597728][ T4325] usb 5-1: config 0 descriptor?? [ 870.017874][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.036865][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.079714][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.086575][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.354320][ T4325] usb 5-1: string descriptor 0 read error: -22 [ 870.366655][T13981] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 871.229877][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.249027][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.336486][T13981] usb 2-1: Using ep0 maxpacket: 16 [ 871.343724][T13981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.366045][T13981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.386290][T13981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 871.431513][ T4325] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 871.444754][T13981] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 871.464174][T13981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.522657][T13981] usb 2-1: config 0 descriptor?? [ 871.962687][T13981] usbhid 2-1:0.0: can't add hid device: -71 [ 871.977531][T13981] usbhid: probe of 2-1:0.0 failed with error -71 [ 872.058223][T13981] usb 2-1: USB disconnect, device number 42 [ 872.157901][ T4325] usb 5-1: USB disconnect, device number 39 [ 872.800288][T17529] fuse: blksize only supported for fuseblk [ 874.692565][T17532] loop1: detected capacity change from 0 to 40427 [ 874.754675][T17532] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 874.816341][T17532] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 874.825825][T17532] F2FS-fs (loop1): invalid crc value [ 874.850964][T17532] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 875.192439][T17532] F2FS-fs (loop1): Start checkpoint disabled! [ 875.529370][T17532] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 875.562797][T17532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 876.572729][T17568] syz.1.4009: attempt to access beyond end of device [ 876.572729][T17568] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 877.177811][ T9476] kworker/u4:9: attempt to access beyond end of device [ 877.177811][ T9476] loop1: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 878.720525][T17591] overlayfs: unrecognized mount option "/file0" or missing value [ 878.915208][T17594] mmap: syz.5.4030 (17594): VmData 54173696 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 879.242705][T17601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.264497][T17582] loop4: detected capacity change from 0 to 256 [ 879.323565][T17582] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 879.480176][T17604] xt_hashlimit: size too large, truncated to 1048576 [ 879.536315][T13981] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 879.736046][T13981] usb 6-1: Using ep0 maxpacket: 16 [ 879.743159][T13981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.795660][T13981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.826400][T13981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 879.870010][T13981] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 879.896030][T13981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.936979][T13981] usb 6-1: config 0 descriptor?? [ 880.093516][T17615] loop4: detected capacity change from 0 to 128 [ 880.236327][T17615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 880.278236][T17615] System zones: 1-3, 19-19, 35-36 [ 880.327742][T17615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 880.351911][T13981] usbhid 6-1:0.0: can't add hid device: -71 [ 880.368288][T13981] usbhid: probe of 6-1:0.0 failed with error -71 [ 880.376631][T17615] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 880.446175][T13981] usb 6-1: USB disconnect, device number 56 [ 880.475744][T17608] loop1: detected capacity change from 0 to 40427 [ 880.538601][T17608] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 880.565674][T17608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 880.596675][T17608] F2FS-fs (loop1): invalid crc value [ 880.634837][T17608] F2FS-fs (loop1): Found nat_bits in checkpoint [ 880.827091][T17608] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 880.872972][T17608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 880.924623][T17615] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 881.252999][T13540] EXT4-fs (loop4): unmounting filesystem. [ 883.317524][T17637] loop4: detected capacity change from 0 to 512 [ 883.482879][T17637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 885.007114][T17647] loop6: detected capacity change from 0 to 512 [ 885.029080][T13540] EXT4-fs (loop4): unmounting filesystem. [ 885.171788][T17647] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.4048: inode has both inline data and extents flags [ 885.247677][T17647] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.4048: couldn't read orphan inode 15 (err -117) [ 885.322636][T17647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 885.886910][T17657] loop1: detected capacity change from 0 to 512 [ 886.086022][T17657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 886.816893][T16216] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 887.029249][T16216] usb 6-1: Using ep0 maxpacket: 16 [ 887.048735][T16216] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.062571][T15515] EXT4-fs (loop6): unmounting filesystem. [ 887.170299][T16216] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.236327][T16216] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.308075][T16216] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 887.358156][T16216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.419253][T16216] usb 6-1: config 0 descriptor?? [ 887.512436][T17664] loop6: detected capacity change from 0 to 4096 [ 887.603430][T17664] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 887.775801][T16222] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 887.988950][T16216] usbhid 6-1:0.0: can't add hid device: -71 [ 887.995076][T16216] usbhid: probe of 6-1:0.0 failed with error -71 [ 888.002232][T14621] EXT4-fs (loop1): unmounting filesystem. [ 888.043535][T16216] usb 6-1: USB disconnect, device number 57 [ 888.147548][T16222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 888.165649][T16222] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 888.195918][T16222] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.229099][T16222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 888.265586][T16222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 888.289072][T16222] usb 5-1: Product: syz [ 888.293346][T16222] usb 5-1: Manufacturer: syz [ 888.298591][T16222] usb 5-1: SerialNumber: syz [ 888.309290][T15515] EXT4-fs (loop6): unmounting filesystem. [ 888.515927][T16222] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 888.717815][T16222] usb 5-1: USB disconnect, device number 40 [ 888.752630][T16222] usblp0: removed [ 888.986107][ T26] kauditd_printk_skb: 91 callbacks suppressed [ 888.986124][ T26] audit: type=1800 audit(1785829758.422:313): pid=17691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4063" name="nofua" dev="configfs" ino=130679 res=0 errno=0 [ 889.090890][T17696] loop1: detected capacity change from 0 to 128 [ 889.421122][T17700] loop6: detected capacity change from 0 to 512 [ 889.472652][T17700] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.4068: inode has both inline data and extents flags [ 889.515750][T17700] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.4068: couldn't read orphan inode 15 (err -117) [ 889.536511][T17700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 889.711228][T17554] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 889.932561][T17554] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 889.949739][T17554] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 889.977384][T15515] EXT4-fs (loop6): unmounting filesystem. [ 890.043204][T17554] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 890.083984][T17554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.118918][T17554] usb 2-1: Product: syz [ 890.123202][T17554] usb 2-1: Manufacturer: syz [ 890.143372][ T26] audit: type=1800 audit(1785829759.572:314): pid=17714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4071" name="nofua" dev="configfs" ino=130708 res=0 errno=0 [ 890.179004][T17554] usb 2-1: SerialNumber: syz [ 890.209666][T17554] usb 2-1: config 0 descriptor?? [ 890.225623][T17702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 890.233010][T17702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 890.234404][T17716] loop4: detected capacity change from 0 to 256 [ 890.337273][T17716] exfat: Bad value for 'uid' [ 890.702010][T17554] dm9601: probe of 2-1:0.0 failed with error -71 [ 890.750947][T17554] usb 2-1: USB disconnect, device number 43 [ 892.010274][T17723] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 997.089357][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 997.096401][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17719/1:b..l [ 997.105021][ C1] (detected by 1, t=10502 jiffies, g=113497, q=56 ncpus=2) [ 997.112321][ C1] task:syz.6.4073 state:R running task stack:23120 pid:17719 ppid:15515 flags:0x00004000 [ 997.124659][ C1] Call Trace: [ 997.127960][ C1] [ 997.130902][ C1] __schedule+0x107f/0x4030 [ 997.135614][ C1] ? __sched_text_start+0x8/0x8 [ 997.140492][ C1] ? lock_chain_count+0x20/0x20 [ 997.145377][ C1] ? stack_trace_save+0xa6/0xf0 [ 997.150242][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 997.155548][ C1] preempt_schedule_irq+0xbb/0x160 [ 997.160686][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 997.166463][ C1] ? rcu_is_watching+0x11/0xa0 [ 997.171272][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 997.177096][ C1] irqentry_exit+0x63/0x70 [ 997.181525][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 997.187535][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 997.193627][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 00 df 9e 0c 48 89 de 5b e9 77 62 50 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 14 41 80 7e 65 8b 15 15 41 80 7e 81 e2 00 [ 997.213256][ C1] RSP: 0018:ffffc900033a72f0 EFLAGS: 00000202 [ 997.219347][ C1] RAX: 0000000000000001 RBX: ffffffff81dd9aae RCX: cdb5a38c656f7400 [ 997.227384][ C1] RDX: ffff888030443c00 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 997.235375][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 997.243403][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 00fff00000000000 [ 997.251417][ C1] R13: dffffc0000000000 R14: ffffea0001090800 R15: ffffea0001090800 [ 997.259456][ C1] ? page_ext_get+0x1e/0x2a0 [ 997.264068][ C1] page_ext_get+0x60/0x2a0 [ 997.268499][ C1] __page_table_check_zero+0x134/0x4b0 [ 997.273973][ C1] get_page_from_freelist+0x206b/0x2180 [ 997.279537][ C1] ? __alloc_pages+0x130/0x4f0 [ 997.284357][ C1] __alloc_pages+0x1ec/0x4f0 [ 997.288960][ C1] ? zone_statistics+0x170/0x170 [ 997.293914][ C1] ? __lock_acquire+0x1465/0x7c40 [ 997.298950][ C1] ? verify_lock_unused+0x140/0x140 [ 997.304188][ C1] __folio_alloc+0xe/0x30 [ 997.308531][ C1] vma_alloc_folio+0x499/0x900 [ 997.313327][ C1] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 997.319162][ C1] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 997.324921][ C1] ? shmem_replace_folio+0xdc0/0xdc0 [ 997.330257][ C1] ? xas_load+0x127/0x140 [ 997.334617][ C1] ? __filemap_get_folio+0x10f/0xde0 [ 997.339935][ C1] ? __filemap_get_folio+0xb43/0xde0 [ 997.345256][ C1] ? __filemap_get_folio+0x10f/0xde0 [ 997.350556][ C1] ? page_cache_prev_miss+0x380/0x380 [ 997.355945][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 997.360990][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 997.366202][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 997.371412][ C1] shmem_get_folio_gfp+0x1439/0x35e0 [ 997.376732][ C1] shmem_write_begin+0xee/0x3f0 [ 997.381600][ C1] generic_perform_write+0x2fa/0x5c0 [ 997.386912][ C1] ? generic_file_direct_write+0x330/0x330 [ 997.392749][ C1] ? __file_remove_privs+0x5f0/0x5f0 [ 997.398045][ C1] ? rwsem_write_trylock+0x135/0x1c0 [ 997.403343][ C1] ? clear_nonspinnable+0x60/0x60 [ 997.408378][ C1] ? generic_write_checks_count+0x363/0x440 [ 997.414459][ C1] __generic_file_write_iter+0x148/0x2a0 [ 997.420143][ C1] generic_file_write_iter+0xab/0x2e0 [ 997.425565][ C1] vfs_write+0x482/0x9a0 [ 997.429863][ C1] ? file_end_write+0x250/0x250 [ 997.434740][ C1] ? __fget_files+0x3fc/0x460 [ 997.439458][ C1] ? __fdget_pos+0x1d4/0x360 [ 997.444065][ C1] ? ksys_write+0x70/0x260 [ 997.448510][ C1] ksys_write+0x14d/0x260 [ 997.452877][ C1] ? __ia32_sys_read+0x80/0x80 [ 997.457679][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 997.462916][ C1] do_syscall_64+0x4c/0xa0 [ 997.467358][ C1] ? clear_bhb_loop+0x60/0xb0 [ 997.472063][ C1] ? clear_bhb_loop+0x60/0xb0 [ 997.476792][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.482802][ C1] RIP: 0033:0x7fe38f15e84e [ 997.487226][ C1] RSP: 002b:00007fe390158da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 997.495664][ C1] RAX: ffffffffffffffda RBX: 00007fe3901596c0 RCX: 00007fe38f15e84e [ 997.503659][ C1] RDX: 0000000004000000 RSI: 00007fe384ff7000 RDI: 0000000000000003 [ 997.511652][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 997.519631][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 997.527617][ C1] R13: 00007fe390158ee0 R14: 00007fe390158ea0 R15: 00007fe384ff7000 [ 997.535603][ C1] [ 997.538628][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10539 jiffies! g113497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 997.551040][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=59906 [ 997.558926][ C1] rcu: rcu_preempt kthread starved for 10545 jiffies! g113497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 997.570393][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 997.580365][ C1] rcu: RCU grace-period kthread stack dump: [ 997.586270][ C1] task:rcu_preempt state:I stack:27888 pid:16 ppid:2 flags:0x00004000 [ 997.595482][ C1] Call Trace: [ 997.598768][ C1] [ 997.601709][ C1] __schedule+0x107f/0x4030 [ 997.606306][ C1] ? __sched_text_start+0x8/0x8 [ 997.611194][ C1] schedule+0xb9/0x180 [ 997.615300][ C1] schedule_timeout+0x184/0x2d0 [ 997.620250][ C1] ? console_conditional_schedule+0x40/0x40 [ 997.626155][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 997.632063][ C1] ? update_process_times+0x1b0/0x1b0 [ 997.637448][ C1] ? prepare_to_swait_event+0x340/0x360 [ 997.643274][ C1] rcu_gp_fqs_loop+0x303/0x1350 [ 997.648159][ C1] ? dump_blkd_tasks+0x820/0x820 [ 997.653106][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 997.658151][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 997.662932][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 997.667795][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 997.673004][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 997.678240][ C1] rcu_gp_kthread+0x99/0x3b0 [ 997.683021][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 997.688152][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 997.694054][ C1] ? __kthread_parkme+0x71/0x1c0 [ 997.699018][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 997.704079][ C1] kthread+0x29d/0x330 [ 997.708215][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 997.713343][ C1] ? kthread_blkcg+0xd0/0xd0 [ 997.717938][ C1] ret_from_fork+0x1f/0x30 [ 997.722398][ C1] [ 997.725426][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 997.731753][ C1] CPU: 1 PID: 17723 Comm: syz.1.4075 Not tainted syzkaller #0 [ 997.739211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 997.749295][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 997.755213][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae 45 2a f7 48 89 df e8 36 0d 2b f7 e8 21 5e 4e f7 fb bf 01 00 00 00 b6 88 1e f7 65 8b 05 27 3a c8 75 85 c0 74 02 5b c3 e8 34 4e c6 [ 997.774825][ C1] RSP: 0018:ffffc90003327b98 EFLAGS: 00000282 [ 997.780922][ C1] RAX: 248040582a902300 RBX: ffff88806283dc80 RCX: 248040582a902300 [ 997.788899][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 997.796890][ C1] RBP: 0000000000000000 R08: ffff88806283dc83 R09: 1ffff1100c507b90 [ 997.804889][ C1] R10: dffffc0000000000 R11: ffffed100c507b91 R12: 0000000000000021 [ 997.812871][ C1] R13: ffff88806283e118 R14: dffffc0000000000 R15: 000000001c000004 [ 997.820853][ C1] FS: 00007f9885f436c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 997.829801][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 997.836408][ C1] CR2: 0000200000000058 CR3: 000000002859d000 CR4: 00000000003506e0 [ 997.844417][ C1] Call Trace: [ 997.847735][ C1] [ 997.850694][ C1] get_signal+0x114a/0x1340 [ 997.855228][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 997.860873][ C1] ? __ia32_sys_rt_sigreturn+0x624/0x750 [ 997.866521][ C1] ? load_gs_index+0x130/0x130 [ 997.871317][ C1] ? get_sigframe_size+0x10/0x10 [ 997.876278][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 997.881784][ C1] exit_to_user_mode_loop+0x70/0x110 [ 997.887083][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 997.892653][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 997.898121][ C1] do_syscall_64+0x58/0xa0 [ 997.902552][ C1] ? clear_bhb_loop+0x60/0xb0 [ 997.907239][ C1] ? clear_bhb_loop+0x60/0xb0 [ 997.911949][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.917852][ C1] RIP: 0033:0x7f9884f9e017 [ 997.922340][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 997.941988][ C1] RSP: 002b:00007f9885f430e8 EFLAGS: 00000246 [ 997.948067][ C1] RAX: 00000000000000ca RBX: 00007f9885225fa8 RCX: 00007f9884f9e019 [ 997.956044][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9885225fa8 [ 997.964023][ C1] RBP: 00007f9885225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 997.972000][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.979977][ C1] R13: 00007f9885226038 R14: 00007ffef9f0e000 R15: 00007ffef9f0e0e8 [ 997.987968][ C1]