last executing test programs: 14.187926496s ago: executing program 4 (id=747): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400008, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480)) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'}) 14.183304875s ago: executing program 1 (id=757): clock_gettime(0xc, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 13.9076532s ago: executing program 1 (id=749): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 13.3113322s ago: executing program 1 (id=753): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b48, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x1, 0x1524, &(0x7f0000002ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 12.218887793s ago: executing program 4 (id=754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ftruncate(r1, 0x81ff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) 11.159284164s ago: executing program 3 (id=758): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="a5", 0x1) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xcea5, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0) 11.111131823s ago: executing program 1 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x1) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/pid\x00') 11.039070245s ago: executing program 4 (id=760): clock_gettime(0xc, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 9.820395009s ago: executing program 0 (id=762): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) close_range(r0, r1, 0x0) 9.78183788s ago: executing program 4 (id=763): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4", 0x86}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.433541798s ago: executing program 0 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2d01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x3c}]}}}}}}, 0x42) 9.217117647s ago: executing program 4 (id=765): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x8094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) connect$x25(r6, &(0x7f0000000a80), 0x12) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r8, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 7.455548823s ago: executing program 0 (id=766): syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0xfffffff3, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x100}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) unshare(0x40200) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f00000021c0)=[{0x3, 0xbbdd, 0x2000}, {0x0, 0x2, 0x1000}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x5, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 7.455379303s ago: executing program 3 (id=767): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.328967333s ago: executing program 2 (id=768): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="a5", 0x1) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xcea5, 0x6) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 6.738120365s ago: executing program 3 (id=769): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b48, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x1, 0x1524, &(0x7f0000002ac0)="$eJzs3AnYjtXWOPC19t43L0lPknmvvW6eZNgkSYaEjEmSJMmUkCRJEpIpUxKSkDnJHJIpJPM8ZU6SI0mSkJBk/y+d+tT/nO8M1+kc3/e963dd+7KX+1n7Xvte7/U+93Nf1/N+3X5QpbqVy9dmZviX4J//6QYAKQDQFwCuAYAIAIplKpbp0vF0Grv9aycRf6wHpl7pCsSVJP1P3aT/qZv0P3WT/qdu0v/UTfqfukn/UzfpvxCp2dZp2a+VkXqHPP9PzeT9//+Qw4VGf76+0PUd/okU6X/qJv1P3aT/qZv0P3WT/qdu0v//+8r9jWPS/9RN+i9EavZfz4IvhBD+BzyPlvGfHVf6508IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghROpwLlxmAODX+ZWuSwghhBBCCCGEEH+ckPZKVyCEEEIIIYQQQoh/PwQFGgxEkAbSQgqkg/RwFWSAqyEjXAMJuBYywXWQGa6HLJAVskF2yAE5IRdYIHDAEENuyANJuAHywo2QD/JDASgIHgpBYbgJisDNUBRugWJwKxSH26AElIRSUBpuhzJwB5SFclAe7oQKUBEqQWWoAlXhLqgGd0N1uAdqwL1QE+6DWnA/1IYHoA48CHXhIagHD0N9aAANoRE0/n3+2H8s/3noDC9AF+gK3aA79IAXoSf0gt7QB/rCS9APXob+8AoMgIEwCF6FwfAaDIHXYSgMg+HwBoyAkTAKRsMYGAvj4E0YD2/BBHgbJsIkmAxTYCpMg+nwDsyAmTAL3oXZ8B7MgbkwD+bDAngfFsIiWAwfwBL4EJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsJHsA22ww7YCbtgN+yBj2EvfAL74FPYD5/9k/ln/7/8DggIqFChQYNpMA2mYAqmx/SYATNgRsyICUxgJsyEmTEzZsEsmA2zYQ7MgbkwFxISMjLmxtyYxCTmxbyYD/NhASyAHj0WxsJYBG/GolgUi2ExLI7FsQSWxJJYGktjGSyDZbEslsfyWAErYCWshFWwCt6F1bAaVsfqWANrYE2sibWwFtbG2lgH62BdrIv1sB7Wx/rYEBtiY2yMTbAJNsWm2BybYwtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yIHfF5fB5fwBewK1ZQ3bEH9sCe2BN7Yx/sgy9hP3wZX8ZXcAAOxEH4Kr6Kr+EQPINDcRgOx+FYRo3EUTgaWY3FcTgOx+N4nIATcCJOwkk4BafiNJyO03EGzsSZ+C7OxvfwPZyLc3E+LsAFuBAX4WJcjEvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsGP8CPcjttxJ+7E3bgbP8aP8RP8BAfgftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfzfFlnd351w0AdYlRRqVRaVSKSlHpVXqVQWVQGVVGlVAJlUllUplVZpVFZVHZVDaVQ+VQuVQuRYoUq1jlVrlVUiVVXpVX5VP5VAFVQHnlVWFVWBVRRVRRVVQVU7eq4uo2VUKVVM18aVValVHNfVlVTpVX5VUFVVFVUpVVZVVVVVXVVDVVXVVXNVQNVVPdp2qp7tgbH1CXOlNXDcR6ahDWVw1UQ9VIvYaPqCZqCDZVzVRz9ZgahkOxpWriW6knVWs1Ctuop9VofEa1U2OxvXpOdVAdVSf1vOqsmvouqquaiN1VDzUFe6peqrfqo2ZgRXWpY5XUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/UgfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHek0Oq1O0el0en2VzqCv1hn1NTqhr9WZ9HU6s75eZ9FZdTadXefQOXUubTVpp1nHOrfOo5P6Bp1X36jz6fy6gC6ovS6kC+ubdBF9sy6qb9HF9K26uL5Nl9AldSldWt+uy+g7dFldTpfXd+oKuqKupCvrKrqqvktX03fr6voeXUPfq2vq+3Qtfb+urR/QdfSDuq5+SNfTD+v6uoFuWAV0Y/2IbqIf1U11M91cP6Zb6Md1S/2EbqWf1K31U7qNflq31c/odvpZ3V4/pzvojrqT/klf1EF30V11N91d99Av6p66l+6t++i++iXdT7+s++tX9AA9UA/Sr+rB+jU9RL+uh+pherh+Q4/QI/UoPVqP0WP1OP2mHq/f0hP023qinqQn6yl6qp6me/+y0qx/IP+tv5Lf/+ezb9Fb9Ud6m96ud+idepferffoPXqv3qv36X16v96vD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/ok/oH/Z0+rb/XZ/RZfVb/oM/r8/rCL9cADBpltDEmMmlMWpNi0pn05iqTwVxtMpprTMJcazKZ60xmc73JYrKabCa7yWFymlzGGjLOsIlNbpPHJM0NJq+50eQz+U0BU9B4U8gUNjf9y/l/r77GprFpYpqYpqapaW6amxamhWlpWppWppVpbVqbNqaNaWvamnamnWlv2psOpoPpZDqZzqaz6WK6mG6mm+lhXjQ9TS/T2/Qxfc1Lpp/pZ/qb/maAGWAGmUFmsBlshpghZqgZaoab4WaEGWFGmVFmjBljxplxZrwZbyaYCWaimWgmm8lmqplqppvpZoaZYWaZWWa2mW3mmDlmnplnFpgFZqFZaBabxWaJWWKWmmVmmVlhVphVZpVZY9aYdWad2WA2mE1mk1lqtpqtZpvZZnaYHWaX2WX2mD1mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmlDllTpvT5ow5Y86Zc+a8OW8umAvmorl46bYvUpGKTGSiNFGaKCVKidJH6aMMUYYoY5QxSkSJKFOUKcocXR9libJG2aLsUY4oZ5QrshFFLuIojnJHeaJkdEOUN7oxyhfljwpEBSMfFYoKRzdFRaKbo6LRLVGx6NaoeHRbVCIqGZWKSke3R2WiO6KyUbmofHRnVCGqGFWKKkdVoqrRXVG16O6oenRPVCO6N6oZ3RfViu6PakcPRHWiB6O60UNRvejhqH7UIGoYNYoa/6Hrh3Am66O+i+1qu9nutod90fa0vWxv28f2tS/ZfvZl29++YgfYgXaQfdUOtq/ZIfZ1O9QOs8PtG3aEHWlH2dF2jB1rx9k37Xj7lp1g37YT7SQ72U6xU+00O92+Y2fYmXaWfdfOtu/ZOXaunWfn2wX2fbvQLrKL7Qd2if3QLrXL7HK7wq60q+xqu8autevservBbrSb7Ga7xW61H6XZZrfbHXan3WV32z32Y7vXfmL32U/tfvuZPWD/ZA/az+0h+4U9bL+0R+xX9qj92h6z39jj9lt7wp60p+x39rT93p6xZ+05+4M9b3+0F+xP9qINl27uL729kyFDaSgNpVAKpaf0lIEyUEbKSAlKUCbKRJkpM2WhLJSNslEOykG5KBddwsSUm3JTkpKUl/JSPspHBagAefJUmApTESpCRakoFaNiVJyKUwkqQaWoFN1Ot9MddAeVo3J0J91JFakiVabKVJWqUjWqRtWpOtWgGlSTalItqkW1qTbVoTpUl+pSPapH9ak+NaSG1JgaUxNqQk2pKTWn5tSCWlBLakmtqBW1ptbUhtpQW2pL7agdtaf21IE6UCfqRJ2pM3WhLtSNulEP6kE9qSf1pt7Ul/pSP+pH/ak/DaABNIgG0WAaTENoCA2lYTSc3qARNJJG0WgaQ2NpHI2j8TSeJtAEmkgTaTJNpqk0labTdJpBM2gWzaLZNJvm0ByaR/NoAS2ghbSQFtNiWkJLaCktpeW0nFbSSlpNq2ktraX1tJ420kbaTJtpK22lbbSNdtAO2kW7aA/tob20l/bRPtpP++kAHaCDdJAO0SE6TIfpCB2ho3SUjtExOk7H6QSdoFN0ik7TaTpDZ+gcnaPz9CNdoJ/oIgVKcQrSu6tcBne1y+iucSkunfttnM1ldzlcTpfLWZfFZf1dTM65fC6/K+AKGu8KucLupl9j92tcwpV0pVxpd7sr4+5wZf8iruructXc3a66u8dVdlV+F9dw97qa7iFXyz3sarsGro5r5Oq6h1w997Cr7xq4hq6Ra+Eedy3dE66Ve9K1dk/9RbzQLXJr3Tq33m1we90n7pz7wR11X7vz7kfXxXV1fd1Lrp972fV3r7gBbuBfxMPdG26EG+lGudFujBv7F/FkN8VNddPcdIcww838TfyOuxQvcO+72Q5wjpvr5rn5P8eXalrsPnBL3IduqVvmlrsVbqVb5Va7Nf9V6wq3yW12W9we97Hb5ra7HW6n2+V2/xxf2sc+96nb7z5zR9xX7qD73B1yx9xh9+XP8aX9HXPfuOPuW3fCnXSn3HfutPvenXFnf97/pb1/535yF11wwMiKNRuOOA2n5RROx+n5Ks7AV3NGvoYTfC1n4us4M1/PWTgrZ+PsnINzci62TOyYOebcnIeTfAPn5Rs5H+fnAlyQPRfiwnwTF+GbuSjfwsX4Vi7Ot3EJLsmluDTfzmX4Di7L5bg838kVuCJX4spchavyXVyN7+bqfA/X4Hu5Jt/Htfh+rs0PcB1+kOvyQ1yPH+b63IAbciNuzI9wE36Um3Izbs6PcQt+nFvyE9yKn+TW/BS34ae5LT/D7fhZbs/PcQfuyJ34ee7ML3AX7srduDv34Be5J/fi3tyH+/JL3I9f5v78Cg/ggTyIX+XB/BoP4dd5KA/j4fwGj+CRPIpH8xgey+P4TR7Pb/EEfpsn8iSezFN4Kk/j6fwOz+CZPIvf5dn8Hs/huTyP5/MCfp8X8iJezB/wEv6Ql/IyXs4reCWv4tW8htfyOl7PG3gjb+LNvIW38ke8jbfzDt7Ju3g37+GPeS9/wvv4U97Pn/EB/hMf5M/5EH/Bh/lLPsJf8VH+mo/xN3ycv+UTfJJP8Xd8mr/nM3yWz/EPfJ5/5Av8E1/kwBBjrGIdmziK08Rp45Q4XZw+virOEF8dZ4yviRPxtXGm+Lo4c3x9nCXOGmeLs8c54pxxrtjGFLuY4zjOHeeJk/ENcd74xjhfnD8uEBeMfVwoLhzfFBeJb46LxrfExeJb4+LxbXGJuGT80D2l49vjMvEdcdm4XFw+vjOuEFeMK8WV4ypx1fiuuFp8d1w9vicuGt8b14zvi2vF98e14wfiOvGDcd34obhe/HBcP24QN4wbxY3jR+Im8aNx07hZ3Dx+LG4RPx63jJ+IW8VPxq3jp/7u8W5x97hH/GL8YhzC3Xpecn5yQfL95MLkouTi5AfJJckPk0uTy5LLkyuSK5OrkquTa5Jrk+vSQXJDcmNyU3JzcksyhMppwaNXXnvjI5/Gp/UpPp1P76/yGfzVPqO/xif8tT6Tv85n9tf7LD6rz+az+xw+p8/lrSfvPPvY5/Z5fNLf4PP6G30+n98X8AW994V8Yd/IN/aNfRP/qG/qm/nm/jH/mH/cP+6f8E/4J31r/5Rv45/2bf0zvp1/1j/rn/MdfEffyT/vO/sXfBff1Xfz3XwP38P39D19b9/b9/V9fT/fz/f3/f0AP8AP8oP8YD/YD/FD/FA/1A/3w/0IP8KP8qP8GD/Gj/Pj/Hg/3k/wE/xEP9FP9pP9VD/VT/fT/Qw/w8/ys/zsfLP9HD/Hz/Pz/AK/wC/0C/1iv9gv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+FP+y/9Ef8V/6o/9of89/44/5bf8Kf9Kf8d/60/96f8Wf9Of+DP+9/9Bf8T/6iD35c4s3E+MRbiQmJtxMTE5MSkxNTElMT0xLTE+8kZiRmJmYl3k3MTryXmJOYm5iXmJ9YkHg/sTCxKLE48UFiSeLDxNLEssTyxIrEysSqRAg5t8Uhd8gTkuGGkDfcGPKF/KFAKBh8KBQKh5tCkXBzKBpuCcXCraF4uC2UCCVDqfBwqB8ahIahUWgcHglNwqOhaWgWmofHQovweGgZngitwpOhdXgqtAlPh7bhmdAuPBvah+dCh9AxdArPh87hhdAldA3dQvfQI7wYeoZeoXfoE/qGl0K/8HLoH14JA8LAMCi8GgaH18KQ8HoYGoaF4eGNMCKMDKPC6DAmjA3jwpthfHgrTAhvh4lhUpgcpoSpYVqYHt4JM8LMMCu8G2aH98KcMDfMC/PDgvB+WBgWhcXhg7AkfBiWhmVheVgRVoZVYXVYE9aGdWF92BA2hk1hcwQA4aOwLWwPO8LOsCvsDnvCx2Fv+CTsC5+G/eGzcCD8KRwMn4dD4YtwOHwZjoSvwtHwdTgWvgnHw7fhRDgZToXvwunwfTgTzoZz4YdwPvwYLoSfwkX5zpoQQgghxD/k733Xv/tf+T/1y7ikBwBcvT37M789bgBgY5Y/z3upHC0SAPBk1/YP/DoqVOjWrdsvr12qIcozFwASl/PTwOV4GTSHx6EVNIMif7W+Xqrjef4b6+OJEJK3AqT/TU4KXI4vr3/zf7P+I48NX1g8Ppfp9+tf+OW6Xao/ORcgX57LOengcnx5/aL/zfpZm/yt+pdqSPf5OICmv8nJAJfjy+sXhkfhKWj1u1cKIYQQQgghhBB/1kuValvqH/h8nsNczkkLl+O/9/lcCCGEEEIIIYQQV94zHTs98UirVs3a/q+Z/Pog4o9cOQ1c+X39eya7frla/6GTqv8BW5bJHzK5gr+UhBBCCCGEEP8Wl2/6/4mkTvhvrEgIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEh9/hN/TuxK71EIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYS40v5fAAAA///0cjsa") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 6.03871258s ago: executing program 0 (id=770): io_setup(0x8, &(0x7f0000000100)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x73ebede493e81d72) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000080), 0x0) syz_emit_ethernet(0xbd5, &(0x7f0000001280)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xfe, 0xd4, "ca", "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"}}}}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x23, "3d91419da5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x0, 0x0, 0x0) 3.035050814s ago: executing program 2 (id=771): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$eJzs3U2MW0cBAOCxd73JJilxSkKXNLQJhbb8dNNslvATQVIlQiJqKsSlUsUlStMSEYJEkYCqEklO3GhVBYkTP+LUS1UQEr2gqCculWikCqmnwoEDURCVOEAgcRXvjNee2H22s+tnx98njcfz5j3PvOfn5/c7E4CpVW2+Li8vVEK4+PrLR//x4N/nbw451Bqj3nydbUvVQgiVmJ7NPu/dmZX4+nsvnOwWV8JS8zWlwxNXW9NuDiGcC7vDpVAPOy9efunNpcePnz92Yc9brxy8sj5zDwAA0+Xrlw4u7/jrn+/ddu3V+w6HDa3haf+8HtNb4n7/4bjjn/b/q6EzXWkL7eay8WZjqM53jjfTZbz2cmrZeLM9yp/Lyq/1GG9D+ODyZ9qGdZtvmGRpPa6HSnWxI12tLi6uHJOH5nH9XGXx7OkzzzxXUkWBNffv+0MIu9vCkQud6XELh8agDkOGxhjUYSLD4dGVda2xovR5HlFobC17CwSwIr9eeItz+ZmF29P6tNn+yr/6WLX79LAGRr3+D1T+XMnlB+X/5rwtDmvnTl2b0nyl39GWmM6vI+T3L/X+/eVXOjqH5tcjan3Ws9d1hEm5vtCrnjMjrsewetU/Xy/uVF+OcVoOX8ny238/+Xc6Kd8x0N1/8vP/giCMdwgd6drtfFaj5O0PML7y++Ya6fpolN/Xl+dvKMjfWJA/X5C/qSB/c0E+TLPfff+n4cXK6nF+fkw/6PnwdJ7trhh/aMD65OcjBy0/v+93ULdbfn4/MYyzP5x48tQXnn7q8sr9/5XW+n8jru/pcKMef1uX4gjpfGF+Xr1173+9s5xqj/HuzupzV5fxm++3d45X2b76OaFtO3NLPRY6p9vaa7xdnePVs/HmY9iY1TffP9mUTZf2P9J2NS2v2Wx+a9l8zGX1SNuVbTHO6wHDSOtjr/v/0/q5EGqVZ06fOfVoTKf19E8ztQ03h+8bcb2B29fv8z8LofP5ny2t4bVq+3Zh6+rwysp24bX4eZ3Dl1rldA7fH9Ppf+5bM/PN4Ysnv3vm6bWffZhqz/3o+W+fOHPm1Pe8GfrNV8ejGoO8SYct41Ifb8buTckbJmDd7f3xyk7AI6e/c+LZU8+eOrv/wIH9S0sHvrh/eW9zv35v+959u3Ml1BZYS6t/+mXXBAAAAAAAAAAAAOjXD44dvfz2G59/Z+X5/9Xn/9Lz/+nO3/T8/0+y5//z5+TTc/DpOcBtXfKb42QNrM5l49Vi+HBW3+1ZOTuy6T4S41Y/fvH5/1Rc3q5rqs892fBaj2TWnMAt7aXMZW2Q5P0FfjzGF2L86wAlqsx3Hxzjovat07qe2qdoa5eioX3gyZG+t7Q2pHZM0vPfXdt1avuyt42gjqy9UTxOWPY8At39c6ra//7X6oyXXhehd5gdbXk/n951otFzL73fHmwA1kbZ/X+m854pPvvHr228GdJoVx/r3F7m7ZfCIP7ydmd63PufXO/y8377Rl1+2fM/6v4/W/3f9b39y3rMqw9X7n9/ceWdtmLDzn7Lz+c/tQO9fbDyr8Xy09w8FPorv/GrrPz8glCf/peVv6nP8m+Z/13Dlf//WH5abA8/0G/5KzWuVDvrkZ83Ttf/8vPGyfVs/lPbnh9Q/jee7zb/Q3bUeCOWD9NsUvqZHVS2H9HaaR++/9/o3Nr2/9uqbLZZy+/D+FxMpw1xus8h7+9k0Pqn+yvS/8CO7PMrBf9v+v+dbF+KcdHvIfX/m9bHevzLb0s3l2VK17os2zt1WwOT6t2puv43EWHjGNRB6D80ZoaYrtVPXMn1bzQa63tCq0CphVP68i/7OKHs8ste/kXy/n/zffi8/988P+//N8/P+//N8+fjN9QrP+//N1+eef+/ef492efm/QMvFOR/tCB/Z/f81mH7vQXT7yrI/1hB/p5W/qGOMVL+fQXT31+Qf3dB/gMF+Z8oyP9kQf6DBfkPt+W39wGd8j9VMP2dLj2PMq3zD9Msfz7P7x+mR7r+0+v3v70gH5hcP3t135GnfvvN+srz/3Ot8yHpOt7hmK7F46cfxnR+3Tu0pW/mvRHTf8vyx/18B0yTvP2M/P/9oYJ8YHKl+7z8vmEKVTZ2Hxzjonareu3nM1k+HePPxPizMX4kxosx3hvjfTFeGlH9WB9HXvv9wRcrq8f7W7P8fu8nz58H6mgnKoSwv8/65OcHBr2fPW/Hb1C3W/6Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptp8XV5eqIRw8fWXjz55/PTem0MOtcaoN19n21K11nQhPBrjmRj/Mr65/t4LJ9vjGzGuhKVQCZXW8PDE1VZJm0MI58LucCnUw86Ll196c+nx4+ePXdjz1isHr6zfEgAAAIA73/sBAAD//weuDxQ=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 2.987395703s ago: executing program 1 (id=772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.97728413s ago: executing program 3 (id=773): clock_gettime(0xc, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) 2.705653786s ago: executing program 3 (id=774): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) gettid() mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="004f8327d396ec0eb00fb37a43b6f2a507050762f820f0e43393d2fdb569e6e1ba5b213a25ddca1cc458d8d7abdd8a757ccb27d2109bb88e550466f8f8521c"], 0x1, 0x222, &(0x7f0000000000)="$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") 2.570923654s ago: executing program 2 (id=775): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4", 0x86}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.907517579s ago: executing program 2 (id=776): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYyf287MTxzbh87Gu3/3zu+f8zrv33SNfv/dO+CZrNpvVdI/LF36zncmy+5wd/+rTzz4upx/dyJ705JXii6Q/ST3pTXIoydj43Ox0l4KuJ5eS3EyKJHvTetyQSyl+ln3LyzdT/Kqqt3ThHhvGhjT5Vtvp8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHajYmx8eHikyNTkzIU36p1VQ4B32lhbLu/LatTv4suu9SZFOaW/f2mo70MHlzc/Wf46mqdbS09XA5KnPx898uSB157orS3tv07Cm/H39mDIm97xvQ8/uv7W4uKVdzts72k3574z3KXONWYm52cnp8+ca9Qn52frp0+dGj5xfmK+PjE51Zi/OL/QmK6PzTXOLMzO1QfHXqyPnD59st4Yujh7Yebc+NBUY2nlq/8+Ojx8qv760P80zszNz86ceH1ofuz85NTU5My5KqbcXMa8Wp6I/z25UF9onJmu169eW7xy8o6M1niqy6CRbi0pg0a7BY0Oj46OjIyOjpx65fQrrw4P9y6v6Em1YvguWbXL7ZM2+x7e8+Jb6JPaBoLKi2N9C6/ecH9q7f4/U5nMTC7kjdTX/BnLeOYym+kO29uW+v9jJxrr1ruy/1/q5Q8tb34qVf//bGvp2U79f4dctu/nvXyYj3I9b2Uxi7mSd+/YuvceSmw2127Vr//Qei52usV3/pxLIzOZzHxmM5npnKnW1Ntr6jmdUzmV4byZ85nIfOqZyGSm0sh8LmY+C2lUZ9RY5tLImSz0tto4mLG8mHpGcjqnczL1NDKUi5nNhczkXMZzpirlaq5Vz/vJdXK8HTSykaDRdYJGy5N77f6/vWIT/T/fUlt9CYd71mz3/3vuWl9bHTo4tl1JAQAAAFvqX3+f/Qcf/92fk748U91jBwAAAB421dv1ni4f+sq5Z1JMTE41hlcHvr/9uQEAAABbo6g+Y1ckGcjh1tzSJ6HWuAkAAAAAfBNV//9/tnwYKOcOp/D3PwAAADxsun/HfteI4njquVFuql9uRV5uR6T6VEExMDE51Rgam516bSTPV98yUH3SYFVpPTmQVB8/eClHWlFHBlqPA8sllnX2l1EjQ6+NpD9H2w0ZfK58eG5wjcjRMvKlvNCKfGEpsj+rIk+WkQDwsDu6Tn+80f7/pRxvRRx/qvr69t6n1uiDh1s96w93qJ0AwLLuY+x0jSj+Y2n4nzX+/i8jenL1cOstBUN5O+9kMZdzvPq0QfWOg3apuVlkudSBFW9DON7lbsDAihFeji/dDzi8b837AQMrBno5vuqOQKfYk2s+d8WWHw0A2B5HV/XD6/T/zWZrbtX9//X//h/wlkIA2FVuj2D/AGfurrNvZ5oKALR17qXX0fMAEwIAAAAAAAAAAAAAAAAAAAAAAAAAAICHwIP8/v9akgc7ssB9zNxIsgvS2OaZv7QP+6pN7fU3djzDFTN7c//l9G/LCBcf/t+eXXyq39vMDl6UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DZF0rPW+lqyN+kdTnJi+7N6cG7sdAI7rLiVW/kg+3c6DwAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh037+/9raT0+0lqV3lpyLMmlJP+70zlupVs7ncDWGig2ucOK7/8vj3maRXpbhz1F39j43Ox0VeLecvtXn372cTndS2JlAWUNdwwu0a6h816PVXsNjF957/r33/leffxsleTZhYmp8elzc/+1HPhk8XlST2taspTvD4r2WXxnyz8vW9q93rKWiare8dX1/stae9+u99hvf965bcuW07i2eGW0rGmh8cbC+9+99sGKoMdzJHluMBm8s6bvlFOHmo6kb716i6+LnxT788tcqo5/mUbRLMpD9GiyJ7V/unpt8crQ2+8sXu6Q04EcTnI56d94TodXH4kl1VlX6ytrHa6Cyl8Hu5S3rkd69jebrRJHOrThseqUGdhUG+qd21Dp8ry323iyQ0ZP5PlNH+nnu9TY9rdmS2up+Lr4U3E+f8yPV4z/USuP/7Fs5NVZxlSRK86Uzm0+ttzy0ZUb3rw7suOrkgfgp/n//Oft419bcf1vH6vtuR6tqPGBvS6KVi/UVs0fvKtHal99OmXZzvNgK6pDnv+cl1fv1yXPl7tcUbbo9X+n4uvik2Iwf80N4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7X5H0rLW+lhxLciDJo+VyPWluRX21gWIritmgPavW3NjG2neP2u254lZu5YPs39F0AAAAAAAAANgyZ8e/+vSzj8up+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVnO928uh3K/7FtevlkuHdp8WwCAjflHAAAA///nD22t") r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000b40)={0xffffffffffffffff, r2}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d", 0x6b}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780d8e1bf9d21f0f1f2719ed31a3c18c47b3c5abb4dea4c758c7eb47b7e982793ca63b0b9d4b4611fbcc0ffad443b9ef735", 0x71}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r5, &(0x7f00000005c0)={0x0, 0xfffffec7, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000740)=""/125, 0x7d}], 0x3}, 0x0) r6 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x900, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010024bd7000fcdbdf25210000000800", @ANYRES32, @ANYBLOB="08009e000738000006002a000500000024002d"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x80) 1.779041049s ago: executing program 4 (id=777): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="a5", 0x1) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xcea5, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) 1.589967564s ago: executing program 2 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2d01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x3c}]}}}}}}, 0x42) 1.40567433s ago: executing program 0 (id=779): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.246422824s ago: executing program 2 (id=780): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="a5", 0x1) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xcea5, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0) 1.235147701s ago: executing program 0 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = eventfd(0x401) write$eventfd(r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb9, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="0206020002000000020000000000"], 0x10}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40045506, &(0x7f0000000400)=0x1) 73.341697ms ago: executing program 1 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = socket$inet6(0xa, 0x3, 0x1) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/pid\x00') 0s ago: executing program 3 (id=783): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="a5", 0x1) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0xcea5, 0x6) syz_usb_connect(0x0, 0x36, 0x0, 0x0) kernel console output (not intermixed with test programs): 133.641572][ T4316] usb 3-1: Manufacturer: syz [ 133.651694][ T4316] usb 3-1: SerialNumber: syz [ 133.695772][ T4316] usb 3-1: config 0 descriptor?? [ 134.070514][ T4681] loop4: detected capacity change from 0 to 4096 [ 134.581241][ T4681] ntfs3: loop4: ino=3, Correct links count -> 2. [ 135.160642][ T4687] ntfs3: loop4: ino=5, "/" directory corrupted [ 137.066423][ T4701] process 'syz.0.75' launched './file0' with NULL argv: empty string added [ 137.118216][ T4316] usb 3-1: can't set config #0, error -71 [ 137.133212][ T4316] usb 3-1: USB disconnect, device number 3 [ 141.378133][ T4811] device team_slave_0 entered promiscuous mode [ 141.431046][ T4813] device pim6reg1 entered promiscuous mode [ 141.867101][ T4830] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 141.894489][ T4831] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 141.921776][ T4830] pim6reg0: tun_chr_ioctl cmd 1074025692 [ 142.688490][ T4838] veth1_vlan: mtu greater than device maximum [ 143.394461][ T4877] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.403022][ T4877] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.529567][ T4882] device bridge_slave_1 left promiscuous mode [ 143.584551][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.632372][ T4882] device bridge_slave_0 left promiscuous mode [ 143.685890][ T4882] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.931427][ T4895] tap0: tun_chr_ioctl cmd 1074025677 [ 143.948260][ T4895] tap0: linktype set to 825 [ 144.020450][ T4898] syz.0.164[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.020562][ T4898] syz.0.164[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.264283][ T4901] loop3: detected capacity change from 0 to 1764 [ 144.287013][ T4906] loop0: detected capacity change from 0 to 16 [ 144.315655][ T4906] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 1792 [ 144.329656][ T4907] loop2: detected capacity change from 0 to 1024 [ 144.358882][ T4907] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.522190][ T4907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.565336][ T4903] loop1: detected capacity change from 0 to 32768 [ 144.577913][ T4903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.167 (4903) [ 144.603491][ T4903] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.613792][ T4903] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 144.622536][ T4903] BTRFS info (device loop1): using free space tree [ 144.643072][ T26] audit: type=1800 audit(1772349891.418:3): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 144.694318][ T4906] Zero length message leads to an empty skb [ 144.846914][ T26] audit: type=1800 audit(1772349891.418:4): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 144.898404][ T4907] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.169: Allocating blocks 497-513 which overlap fs metadata [ 145.183055][ T4903] BTRFS info (device loop1): enabling ssd optimizations [ 145.440538][ T4905] EXT4-fs (loop2): pa ffff8880757eeb60: logic 48, phys. 177, len 21 [ 145.449031][ T4905] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 146.495850][ T4942] overlayfs: missing 'workdir' [ 146.591390][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 146.861123][ T4944] loop3: detected capacity change from 0 to 4096 [ 146.910559][ T4944] ntfs3: loop3: ino=3, Correct links count -> 2. [ 147.904954][ T4955] input: syz0 as /devices/virtual/input/input7 [ 148.408335][ T4959] loop2: detected capacity change from 0 to 4096 [ 148.460626][ T4959] ntfs3: loop2: ino=3, Correct links count -> 2. [ 149.871419][ T4967] ntfs3: loop2: ino=5, "/" directory corrupted [ 151.567567][ T4279] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.608446][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.616525][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.695629][ T4974] loop3: detected capacity change from 0 to 4096 [ 151.731618][ T4979] device bridge_slave_1 left promiscuous mode [ 151.832230][ T4974] ntfs3: loop3: ino=3, Correct links count -> 2. [ 151.852237][ T4979] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.969797][ T4979] device bridge_slave_0 left promiscuous mode [ 152.010320][ T4979] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.405408][ T4989] ntfs3: loop3: ino=5, "/" directory corrupted [ 153.017537][ T4991] loop1: detected capacity change from 0 to 1764 [ 154.102471][ T4996] loop2: detected capacity change from 0 to 4096 [ 154.333066][ T4996] ntfs3: loop2: ino=3, Correct links count -> 2. [ 156.807714][ T5018] loop4: detected capacity change from 0 to 4096 [ 156.857707][ T5018] ntfs3: loop4: ino=3, Correct links count -> 2. [ 157.011699][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.305692][ T5029] ntfs3: loop4: ino=5, "/" directory corrupted [ 157.801801][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 157.809506][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.848682][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.973705][ T7] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 158.250991][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.265712][ T7] usb 3-1: Product: syz [ 158.270203][ T7] usb 3-1: Manufacturer: syz [ 158.275749][ T7] usb 3-1: SerialNumber: syz [ 158.288893][ T7] usb 3-1: config 0 descriptor?? [ 159.422434][ T4487] usb 3-1: USB disconnect, device number 4 [ 159.630760][ T5041] loop0: detected capacity change from 0 to 1764 [ 159.911550][ T4317] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.418627][ T4317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.449425][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.493712][ T4317] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 161.517824][ T5049] loop3: detected capacity change from 0 to 4096 [ 161.531319][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.555202][ T5049] ntfs3: loop3: ino=3, Correct links count -> 2. [ 161.562628][ T4317] usb 2-1: config 0 descriptor?? [ 161.577972][ T4317] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 161.649562][ T5055] loop4: detected capacity change from 0 to 4096 [ 162.412972][ T5063] ntfs3: loop3: ino=5, "/" directory corrupted [ 162.706134][ T5055] ntfs3: loop4: ino=3, Correct links count -> 2. [ 163.170873][ T5068] ntfs3: loop4: ino=5, "/" directory corrupted [ 164.356587][ T4983] usb 2-1: USB disconnect, device number 4 [ 164.519712][ T5079] loop4: detected capacity change from 0 to 256 [ 164.560970][ T5079] FAT-fs (loop4): Directory bread(block 64) failed [ 164.567749][ T5079] FAT-fs (loop4): Directory bread(block 65) failed [ 164.574571][ T5079] FAT-fs (loop4): Directory bread(block 66) failed [ 164.581119][ T5079] FAT-fs (loop4): Directory bread(block 67) failed [ 164.587699][ T5079] FAT-fs (loop4): Directory bread(block 68) failed [ 164.594281][ T5079] FAT-fs (loop4): Directory bread(block 69) failed [ 164.600875][ T5079] FAT-fs (loop4): Directory bread(block 70) failed [ 164.607415][ T5079] FAT-fs (loop4): Directory bread(block 71) failed [ 164.613991][ T5079] FAT-fs (loop4): Directory bread(block 72) failed [ 164.620528][ T5079] FAT-fs (loop4): Directory bread(block 73) failed [ 165.081293][ T5085] loop1: detected capacity change from 0 to 1764 [ 167.015308][ T4984] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 168.615478][ T4984] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.794762][ T4984] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.811061][ T4984] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.822470][ T4984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.980131][ T4984] usb 1-1: can't set config #16, error -71 [ 169.000255][ T4984] usb 1-1: USB disconnect, device number 3 [ 169.116711][ T5113] input: syz0 as /devices/virtual/input/input8 [ 170.921629][ T4488] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.440029][ T5131] loop2: detected capacity change from 0 to 256 [ 171.593603][ T4488] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.007199][ T4488] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 172.200527][ T5131] FAT-fs (loop2): Directory bread(block 64) failed [ 172.228359][ T4488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.300136][ T5131] FAT-fs (loop2): Directory bread(block 65) failed [ 172.389844][ T4488] usb 2-1: config 0 descriptor?? [ 172.409690][ T5131] FAT-fs (loop2): Directory bread(block 66) failed [ 172.510145][ T5131] FAT-fs (loop2): Directory bread(block 67) failed [ 172.538774][ T4488] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 172.618549][ T5131] FAT-fs (loop2): Directory bread(block 68) failed [ 172.755307][ T5131] FAT-fs (loop2): Directory bread(block 69) failed [ 172.881215][ T5131] FAT-fs (loop2): Directory bread(block 70) failed [ 172.951196][ T5131] FAT-fs (loop2): Directory bread(block 71) failed [ 173.034310][ T5131] FAT-fs (loop2): Directory bread(block 72) failed [ 173.100904][ T5131] FAT-fs (loop2): Directory bread(block 73) failed [ 173.650134][ T5134] loop3: detected capacity change from 0 to 1764 [ 173.849956][ T4983] usb 2-1: USB disconnect, device number 5 [ 175.403524][ T5145] loop4: detected capacity change from 0 to 4096 [ 175.507623][ T5145] ntfs3: loop4: ino=3, Correct links count -> 2. [ 176.018068][ T5160] ntfs3: loop4: ino=5, "/" directory corrupted [ 176.601581][ T4984] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 176.653476][ T4983] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.154690][ T5167] loop4: detected capacity change from 0 to 32768 [ 177.165393][ T5167] (syz.4.233,5167,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.179154][ T5167] (syz.4.233,5167,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.224666][ T4984] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.234618][ T4983] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 177.247157][ T5167] JBD2: Ignoring recovery information on journal [ 177.311039][ T5167] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 177.354778][ T4984] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.373738][ T4983] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.507811][ T4983] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.530964][ T4984] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.631694][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 177.728514][ T4984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.765251][ T4983] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.821779][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 177.838759][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.853096][ T126] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.879457][ T126] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 177.924074][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.933945][ T126] usb 3-1: Product: syz [ 177.942080][ T4983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.948968][ T126] usb 3-1: Manufacturer: syz [ 177.956718][ T126] usb 3-1: SerialNumber: syz [ 178.083998][ T126] usb 3-1: config 0 descriptor?? [ 178.146426][ T4983] usb 1-1: invalid MIDI out EP 0 [ 178.303269][ T4983] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 178.473647][ T4984] usb 4-1: usb_control_msg returned -32 [ 178.479474][ T4984] usbtmc 4-1:16.0: can't read capabilities [ 179.939355][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.948018][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.014833][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.066723][ T4983] usb 1-1: USB disconnect, device number 4 [ 180.692849][ T4983] usb 3-1: USB disconnect, device number 5 [ 180.834871][ T126] usb 4-1: USB disconnect, device number 3 [ 180.926846][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 184.060869][ T5206] loop1: detected capacity change from 0 to 8 [ 184.159238][ T5206] SQUASHFS error: xz decompression failed, data probably corrupt [ 184.167495][ T5206] SQUASHFS error: Failed to read block 0x108: -5 [ 184.174086][ T5206] SQUASHFS error: Unable to read metadata cache entry [106] [ 184.181531][ T5206] SQUASHFS error: Unable to read inode 0x11f [ 187.601578][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 187.801609][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 187.827185][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.877457][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.886839][ T4983] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 187.904010][ T7] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 187.933433][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.971870][ T7] usb 5-1: Product: syz [ 187.989235][ T7] usb 5-1: Manufacturer: syz [ 188.016794][ T7] usb 5-1: SerialNumber: syz [ 188.050491][ T7] usb 5-1: config 0 descriptor?? [ 188.073706][ T4983] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.100256][ T4983] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.174918][ T4983] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.198116][ T4983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.352492][ T126] usb 5-1: USB disconnect, device number 3 [ 188.382287][ T5238] loop3: detected capacity change from 0 to 256 [ 190.210180][ T5238] FAT-fs (loop3): Directory bread(block 64) failed [ 190.217042][ T5238] FAT-fs (loop3): Directory bread(block 65) failed [ 190.223939][ T5238] FAT-fs (loop3): Directory bread(block 66) failed [ 190.230608][ T5238] FAT-fs (loop3): Directory bread(block 67) failed [ 190.237430][ T5238] FAT-fs (loop3): Directory bread(block 68) failed [ 190.244212][ T5238] FAT-fs (loop3): Directory bread(block 69) failed [ 190.251115][ T5238] FAT-fs (loop3): Directory bread(block 70) failed [ 190.257847][ T5238] FAT-fs (loop3): Directory bread(block 71) failed [ 190.264624][ T5238] FAT-fs (loop3): Directory bread(block 72) failed [ 190.272041][ T5238] FAT-fs (loop3): Directory bread(block 73) failed [ 190.592546][ T4983] usb 2-1: usb_control_msg returned -32 [ 190.598182][ T4983] usbtmc 2-1:16.0: can't read capabilities [ 190.673105][ T4983] usb 2-1: USB disconnect, device number 6 [ 191.171709][ T4981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.653174][ T4981] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 192.677838][ T4981] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 192.918566][ T4981] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.950299][ T4981] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.966698][ T4981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.087272][ T5267] loop3: detected capacity change from 0 to 8 [ 193.421504][ T5269] loop2: detected capacity change from 0 to 4096 [ 193.462823][ T4981] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 193.488151][ T5269] ntfs3: loop2: ino=3, Correct links count -> 2. [ 193.567189][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.694978][ T5274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.876450][ T5272] loop1: detected capacity change from 0 to 4096 [ 193.903068][ T5274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.914326][ T5272] ntfs3: loop1: ino=3, Correct links count -> 2. [ 193.922064][ T5267] SQUASHFS error: xz decompression failed, data probably corrupt [ 193.990402][ T5277] ntfs3: loop2: ino=5, "/" directory corrupted [ 194.331765][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338106][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391710][ T5267] SQUASHFS error: Failed to read block 0x108: -5 [ 194.408281][ T5267] SQUASHFS error: Unable to read metadata cache entry [106] [ 194.445608][ T5267] SQUASHFS error: Unable to read inode 0x11f [ 194.879041][ T5282] ntfs3: loop1: ino=5, "/" directory corrupted [ 196.067817][ T5293] loop3: detected capacity change from 0 to 256 [ 196.121971][ T5293] FAT-fs (loop3): Directory bread(block 64) failed [ 196.128637][ T5293] FAT-fs (loop3): Directory bread(block 65) failed [ 196.135674][ T5293] FAT-fs (loop3): Directory bread(block 66) failed [ 196.142396][ T5293] FAT-fs (loop3): Directory bread(block 67) failed [ 196.149140][ T5293] FAT-fs (loop3): Directory bread(block 68) failed [ 196.155882][ T5293] FAT-fs (loop3): Directory bread(block 69) failed [ 196.162771][ T5293] FAT-fs (loop3): Directory bread(block 70) failed [ 196.169428][ T5293] FAT-fs (loop3): Directory bread(block 71) failed [ 196.176408][ T5293] FAT-fs (loop3): Directory bread(block 72) failed [ 196.183073][ T5293] FAT-fs (loop3): Directory bread(block 73) failed [ 196.232499][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 196.232862][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 196.233178][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 196.391942][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 196.392644][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 197.451598][ T126] usb 5-1: USB disconnect, device number 4 [ 199.663762][ T5311] loop0: detected capacity change from 0 to 4096 [ 199.686591][ T5311] ntfs3: loop0: ino=3, Correct links count -> 2. [ 199.814783][ T4317] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 200.086472][ T5319] ntfs3: loop0: ino=5, "/" directory corrupted [ 200.615561][ T4317] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.650232][ T4317] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.690126][ T4317] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.731760][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.389772][ T4317] usb 5-1: usb_control_msg returned -71 [ 201.401592][ T4317] usbtmc 5-1:16.0: can't read capabilities [ 201.454420][ T4317] usb 5-1: USB disconnect, device number 5 [ 201.721149][ T5328] loop4: detected capacity change from 0 to 1764 [ 205.042111][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.573120][ T126] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 205.609803][ T126] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 205.669738][ T126] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.903686][ T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.925493][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.785855][ T126] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 206.883798][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.850554][ T4981] usb 3-1: USB disconnect, device number 6 [ 208.846634][ T4981] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 209.108167][ T4981] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.936427][ T4981] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.949815][ T4981] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.991398][ T4981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.211665][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 210.360008][ T4981] usb 3-1: usb_control_msg returned -32 [ 212.429840][ T4981] usbtmc 3-1:16.0: can't read capabilities [ 213.225165][ T4317] usb 3-1: USB disconnect, device number 7 [ 213.261819][ T5384] loop0: detected capacity change from 0 to 1764 [ 213.506193][ T5390] loop0: detected capacity change from 0 to 4096 [ 213.554452][ T5390] ntfs3: loop0: ino=3, Correct links count -> 2. [ 213.561711][ T4487] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 213.761598][ T4487] usb 5-1: Using ep0 maxpacket: 32 [ 213.952597][ T4487] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.990553][ T4487] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.080396][ T5397] ntfs3: loop0: ino=5, "/" directory corrupted [ 214.637464][ T4487] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 214.647645][ T4487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.658022][ T4487] usb 5-1: Product: syz [ 214.663236][ T4487] usb 5-1: Manufacturer: syz [ 214.692631][ T4487] usb 5-1: SerialNumber: syz [ 214.768979][ T4487] usb 5-1: config 0 descriptor?? [ 215.050832][ T4487] usb 5-1: USB disconnect, device number 6 [ 216.321554][ T4981] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 216.583551][ T4981] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.774307][ T4981] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 217.083797][ T4981] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.701599][ T4981] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.796920][ T4981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.885042][ T5420] loop1: detected capacity change from 0 to 1764 [ 217.962986][ T4981] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 217.998153][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.172426][ T4983] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 218.262220][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.291134][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.386549][ T4983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.465540][ T4983] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.321416][ T4983] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 219.330885][ T4983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.350288][ T4983] usb 5-1: Product: syz [ 219.360500][ T4983] usb 5-1: Manufacturer: syz [ 219.375571][ T4983] usb 5-1: SerialNumber: syz [ 219.403617][ T4983] usb 5-1: config 0 descriptor?? [ 220.488985][ T5438] loop3: detected capacity change from 0 to 8 [ 220.632681][ T5438] SQUASHFS error: xz decompression failed, data probably corrupt [ 220.640586][ T5438] SQUASHFS error: Failed to read block 0x108: -5 [ 220.647516][ T5438] SQUASHFS error: Unable to read metadata cache entry [106] [ 220.656433][ T5438] SQUASHFS error: Unable to read inode 0x11f [ 220.972049][ T4981] usb 5-1: USB disconnect, device number 7 [ 223.524277][ T5456] loop4: detected capacity change from 0 to 4096 [ 223.646170][ T5461] loop2: detected capacity change from 0 to 256 [ 223.668732][ T5461] exfat: Unknown parameter 'Î7Íñ˜k&' [ 223.764394][ T5456] ntfs3: loop4: ino=3, Correct links count -> 2. [ 224.441163][ T5460] loop3: detected capacity change from 0 to 4096 [ 224.640293][ T5460] ntfs3: loop3: ino=3, Correct links count -> 2. [ 224.668841][ T5456] ntfs3: loop4: ino=5, "/" directory corrupted [ 225.116138][ T5466] ntfs3: loop3: ino=5, "/" directory corrupted [ 225.683132][ T5469] loop4: detected capacity change from 0 to 32768 [ 225.720546][ T5469] (syz.4.317,5469,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.734069][ T5469] (syz.4.317,5469,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 225.759240][ T5469] JBD2: Ignoring recovery information on journal [ 225.802007][ T5469] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 227.039765][ T4318] usb 1-1: USB disconnect, device number 6 [ 229.179657][ T5494] loop1: detected capacity change from 0 to 32768 [ 229.191225][ T5494] (syz.1.325,5494,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.205753][ T5494] (syz.1.325,5494,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.297943][ T5494] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 229.312466][ T5494] JBD2: Ignoring recovery information on journal [ 229.357450][ T5494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 231.068497][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 232.877090][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 236.221570][ T4983] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 237.206032][ T4983] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 237.219268][ T4983] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.236018][ T4983] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.259973][ T4983] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.273005][ T4983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.318023][ T4983] usb 4-1: invalid MIDI out EP 0 [ 238.282581][ T5548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.338521][ T5548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.348062][ T4983] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 238.415780][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.579878][ T4981] usb 4-1: USB disconnect, device number 4 [ 238.840631][ T5555] loop0: detected capacity change from 0 to 256 [ 238.849701][ T5555] exfat: Unknown parameter 'Î7Íñ˜k&' [ 239.969450][ T5559] loop3: detected capacity change from 0 to 1764 [ 242.654570][ T5588] loop4: detected capacity change from 0 to 8 [ 243.157248][ T5588] SQUASHFS error: xz decompression failed, data probably corrupt [ 244.113480][ T5588] SQUASHFS error: Failed to read block 0x108: -5 [ 244.161586][ T5588] SQUASHFS error: Unable to read metadata cache entry [106] [ 244.371581][ T5588] SQUASHFS error: Unable to read inode 0x11f [ 244.392990][ T5599] loop1: detected capacity change from 0 to 256 [ 244.413871][ T5599] FAT-fs (loop1): Directory bread(block 64) failed [ 244.420429][ T5599] FAT-fs (loop1): Directory bread(block 65) failed [ 244.427183][ T5599] FAT-fs (loop1): Directory bread(block 66) failed [ 244.433788][ T5599] FAT-fs (loop1): Directory bread(block 67) failed [ 244.440410][ T5599] FAT-fs (loop1): Directory bread(block 68) failed [ 244.447501][ T5599] FAT-fs (loop1): Directory bread(block 69) failed [ 244.454098][ T5599] FAT-fs (loop1): Directory bread(block 70) failed [ 244.460608][ T5599] FAT-fs (loop1): Directory bread(block 71) failed [ 244.467194][ T5599] FAT-fs (loop1): Directory bread(block 72) failed [ 244.474152][ T5599] FAT-fs (loop1): Directory bread(block 73) failed [ 244.555749][ T5600] loop2: detected capacity change from 0 to 8 [ 244.921189][ T5600] SQUASHFS error: xz decompression failed, data probably corrupt [ 244.934702][ T5600] SQUASHFS error: Failed to read block 0x108: -5 [ 244.941216][ T5600] SQUASHFS error: Unable to read metadata cache entry [106] [ 244.958528][ T5600] SQUASHFS error: Unable to read inode 0x11f [ 245.315747][ T5606] loop0: detected capacity change from 0 to 1764 [ 248.913702][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.278491][ T4981] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 249.398959][ T5643] loop4: detected capacity change from 0 to 256 [ 249.407508][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 249.434565][ T5643] FAT-fs (loop4): Directory bread(block 64) failed [ 249.441152][ T5643] FAT-fs (loop4): Directory bread(block 65) failed [ 249.447895][ T5643] FAT-fs (loop4): Directory bread(block 66) failed [ 249.454458][ T5643] FAT-fs (loop4): Directory bread(block 67) failed [ 249.461640][ T5643] FAT-fs (loop4): Directory bread(block 68) failed [ 249.468189][ T5643] FAT-fs (loop4): Directory bread(block 69) failed [ 249.474799][ T5643] FAT-fs (loop4): Directory bread(block 70) failed [ 249.481326][ T5643] FAT-fs (loop4): Directory bread(block 71) failed [ 249.487904][ T5643] FAT-fs (loop4): Directory bread(block 72) failed [ 249.494525][ T5643] FAT-fs (loop4): Directory bread(block 73) failed [ 249.531516][ T4981] usb 4-1: Using ep0 maxpacket: 32 [ 249.540894][ T4981] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 249.590807][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.624493][ T4981] usb 4-1: config 0 has no interface number 0 [ 249.635688][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.636903][ T4981] usb 4-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.707866][ T27] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 249.730951][ T4981] usb 4-1: config 0 interface 89 has no altsetting 0 [ 249.760099][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.761200][ T4981] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 249.781094][ T4981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.819262][ T4981] usb 4-1: Product: syz [ 249.853995][ T27] usb 1-1: Product: syz [ 249.858223][ T27] usb 1-1: Manufacturer: syz [ 249.862108][ T4981] usb 4-1: Manufacturer: syz [ 249.882227][ T4981] usb 4-1: SerialNumber: syz [ 249.899159][ T4981] usb 4-1: config 0 descriptor?? [ 249.905466][ T27] usb 1-1: SerialNumber: syz [ 249.939809][ T27] usb 1-1: config 0 descriptor?? [ 250.277001][ T5650] loop1: detected capacity change from 0 to 1764 [ 251.344333][ T4983] usb 4-1: USB disconnect, device number 5 [ 251.759088][ T4983] usb 1-1: USB disconnect, device number 7 [ 253.630737][ T5682] loop0: detected capacity change from 0 to 32768 [ 253.655757][ T5682] (syz.0.381,5682,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.670091][ T5682] (syz.0.381,5682,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.697573][ T5682] JBD2: Ignoring recovery information on journal [ 253.743347][ T5682] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 253.847595][ T5688] loop2: detected capacity change from 0 to 256 [ 253.863723][ T5688] FAT-fs (loop2): Directory bread(block 64) failed [ 253.870287][ T5688] FAT-fs (loop2): Directory bread(block 65) failed [ 253.876897][ T5688] FAT-fs (loop2): Directory bread(block 66) failed [ 253.883429][ T5688] FAT-fs (loop2): Directory bread(block 67) failed [ 253.889993][ T5688] FAT-fs (loop2): Directory bread(block 68) failed [ 253.896528][ T5688] FAT-fs (loop2): Directory bread(block 69) failed [ 253.903138][ T5688] FAT-fs (loop2): Directory bread(block 70) failed [ 253.909653][ T5688] FAT-fs (loop2): Directory bread(block 71) failed [ 253.916246][ T5688] FAT-fs (loop2): Directory bread(block 72) failed [ 253.922781][ T5688] FAT-fs (loop2): Directory bread(block 73) failed [ 254.789820][ T5694] loop3: detected capacity change from 0 to 1764 [ 255.124031][ T5697] loop2: detected capacity change from 0 to 4096 [ 255.140024][ T5697] ntfs3: loop2: ino=3, Correct links count -> 2. [ 255.302086][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 255.618639][ T5706] ntfs3: loop2: ino=5, "/" directory corrupted [ 255.652115][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658550][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.887380][ T5728] loop2: detected capacity change from 0 to 256 [ 257.908850][ T5728] FAT-fs (loop2): Directory bread(block 64) failed [ 257.915468][ T5728] FAT-fs (loop2): Directory bread(block 65) failed [ 257.922102][ T5728] FAT-fs (loop2): Directory bread(block 66) failed [ 257.928614][ T5728] FAT-fs (loop2): Directory bread(block 67) failed [ 257.935281][ T5728] FAT-fs (loop2): Directory bread(block 68) failed [ 257.941837][ T5728] FAT-fs (loop2): Directory bread(block 69) failed [ 257.948385][ T5728] FAT-fs (loop2): Directory bread(block 70) failed [ 257.954921][ T5728] FAT-fs (loop2): Directory bread(block 71) failed [ 257.961911][ T5728] FAT-fs (loop2): Directory bread(block 72) failed [ 257.968430][ T5728] FAT-fs (loop2): Directory bread(block 73) failed [ 259.018611][ T5734] loop1: detected capacity change from 0 to 1764 [ 260.355005][ T5751] loop2: detected capacity change from 0 to 1024 [ 260.430906][ T5751] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.067492][ T5751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 261.129358][ T26] audit: type=1800 audit(1772350007.898:5): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.404" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 261.201235][ T26] audit: type=1800 audit(1772350007.948:6): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.404" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 261.257575][ T5751] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.404: Allocating blocks 497-513 which overlap fs metadata [ 262.042029][ T5749] EXT4-fs (loop2): pa ffff8880757eea80: logic 48, phys. 177, len 21 [ 262.050112][ T5749] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 262.473457][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 262.860751][ T5775] loop0: detected capacity change from 0 to 256 [ 262.897444][ T5775] FAT-fs (loop0): Directory bread(block 64) failed [ 262.904166][ T5775] FAT-fs (loop0): Directory bread(block 65) failed [ 263.638026][ T5775] FAT-fs (loop0): Directory bread(block 66) failed [ 263.644597][ T5775] FAT-fs (loop0): Directory bread(block 67) failed [ 263.651176][ T5775] FAT-fs (loop0): Directory bread(block 68) failed [ 263.657721][ T5775] FAT-fs (loop0): Directory bread(block 69) failed [ 263.664305][ T5775] FAT-fs (loop0): Directory bread(block 70) failed [ 263.670816][ T5775] FAT-fs (loop0): Directory bread(block 71) failed [ 263.677404][ T5775] FAT-fs (loop0): Directory bread(block 72) failed [ 263.683946][ T5775] FAT-fs (loop0): Directory bread(block 73) failed [ 263.822611][ T5778] loop1: detected capacity change from 0 to 1764 [ 264.248769][ T5784] loop3: detected capacity change from 0 to 4096 [ 264.332576][ T5784] ntfs3: loop3: ino=3, Correct links count -> 2. [ 264.471601][ T4318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 264.770231][ T5796] ntfs3: loop3: ino=5, "/" directory corrupted [ 265.163119][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.183751][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.194612][ T4318] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 265.210467][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.322046][ T4318] usb 2-1: config 0 descriptor?? [ 265.923991][ T4318] usbhid 2-1:0.0: can't add hid device: -71 [ 265.930044][ T4318] usbhid: probe of 2-1:0.0 failed with error -71 [ 265.997123][ T4318] usb 2-1: USB disconnect, device number 7 [ 266.087976][ T5809] loop4: detected capacity change from 0 to 1024 [ 266.138815][ T5809] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.282856][ T5809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 266.299392][ T26] audit: type=1800 audit(1772350013.068:7): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 266.322539][ T26] audit: type=1800 audit(1772350013.098:8): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 266.383679][ T5809] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.421: Allocating blocks 497-513 which overlap fs metadata [ 267.522780][ T5825] loop0: detected capacity change from 0 to 256 [ 267.546964][ T5825] FAT-fs (loop0): Directory bread(block 64) failed [ 267.553547][ T5825] FAT-fs (loop0): Directory bread(block 65) failed [ 267.560104][ T5825] FAT-fs (loop0): Directory bread(block 66) failed [ 267.566668][ T5825] FAT-fs (loop0): Directory bread(block 67) failed [ 267.573267][ T5825] FAT-fs (loop0): Directory bread(block 68) failed [ 267.579798][ T5825] FAT-fs (loop0): Directory bread(block 69) failed [ 267.586877][ T5825] FAT-fs (loop0): Directory bread(block 70) failed [ 267.593444][ T5825] FAT-fs (loop0): Directory bread(block 71) failed [ 267.600011][ T5825] FAT-fs (loop0): Directory bread(block 72) failed [ 267.606557][ T5825] FAT-fs (loop0): Directory bread(block 73) failed [ 267.639356][ T5808] EXT4-fs (loop4): pa ffff888073fd4d20: logic 48, phys. 177, len 21 [ 267.647625][ T5808] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 267.758805][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 267.802660][ T5824] loop1: detected capacity change from 0 to 4096 [ 267.811782][ T5830] loop2: detected capacity change from 0 to 1764 [ 267.847421][ T5824] ntfs3: loop1: ino=3, Correct links count -> 2. [ 268.263621][ T5832] loop4: detected capacity change from 0 to 32768 [ 268.274571][ T5832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.427 (5832) [ 268.301290][ T5833] ntfs3: loop1: ino=5, "/" directory corrupted [ 268.315378][ T5832] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.325682][ T5832] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 268.334408][ T5832] BTRFS info (device loop4): using free space tree [ 268.957821][ T5832] BTRFS info (device loop4): enabling ssd optimizations [ 269.211209][ T5862] overlayfs: missing 'workdir' [ 269.656179][ T4274] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.885827][ T4638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4638) [ 270.991788][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 271.199043][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.473295][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.491105][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 271.545603][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.621613][ T27] usb 4-1: config 0 descriptor?? [ 272.097050][ T5884] loop1: detected capacity change from 0 to 32768 [ 272.111354][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 272.125480][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 272.135271][ T5884] (syz.1.437,5884,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.148840][ T5884] (syz.1.437,5884,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.195446][ T5884] JBD2: Ignoring recovery information on journal [ 272.222064][ T27] usb 4-1: USB disconnect, device number 6 [ 272.346714][ T5886] loop4: detected capacity change from 0 to 256 [ 272.360818][ T5884] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 272.463852][ T5891] loop0: detected capacity change from 0 to 1764 [ 272.517424][ T5886] FAT-fs (loop4): Directory bread(block 64) failed [ 272.586411][ T5886] FAT-fs (loop4): Directory bread(block 65) failed [ 272.600083][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 272.659770][ T5886] FAT-fs (loop4): Directory bread(block 66) failed [ 272.691926][ T5886] FAT-fs (loop4): Directory bread(block 67) failed [ 272.745640][ T5886] FAT-fs (loop4): Directory bread(block 68) failed [ 272.776788][ T5886] FAT-fs (loop4): Directory bread(block 69) failed [ 272.823369][ T5886] FAT-fs (loop4): Directory bread(block 70) failed [ 272.880658][ T5886] FAT-fs (loop4): Directory bread(block 71) failed [ 272.914999][ T5886] FAT-fs (loop4): Directory bread(block 72) failed [ 272.925451][ T5894] loop1: detected capacity change from 0 to 1024 [ 272.965209][ T5886] FAT-fs (loop4): Directory bread(block 73) failed [ 273.009747][ T5894] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.203933][ T5894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 273.319560][ T26] audit: type=1800 audit(1772350020.088:9): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 273.526907][ T5903] loop2: detected capacity change from 0 to 32768 [ 273.572186][ T5903] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 273.663489][ T26] audit: type=1800 audit(1772350020.118:10): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 273.867530][ T5909] overlayfs: missing 'workdir' [ 274.536009][ T5868] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 274.824013][ T5894] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.440: Allocating blocks 497-513 which overlap fs metadata [ 274.956647][ T5894] EXT4-fs (loop1): pa ffff888073fd41c0: logic 48, phys. 177, len 21 [ 274.964836][ T5894] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 275.121654][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 275.128696][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.177489][ T4417] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 275.190123][ T5868] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.227411][ T5868] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 275.237457][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 275.268779][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.277255][ T5868] usb 1-1: Product: syz [ 275.291477][ T5868] usb 1-1: Manufacturer: syz [ 275.296269][ T5868] usb 1-1: SerialNumber: syz [ 275.308010][ T5868] usb 1-1: config 0 descriptor?? [ 275.607816][ T4490] usb 1-1: USB disconnect, device number 8 [ 277.091758][ T5935] loop4: detected capacity change from 0 to 1764 [ 277.281534][ T4490] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 277.483432][ T4490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.524088][ T4490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.567572][ T4490] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 277.591493][ T4490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.633213][ T4490] usb 1-1: config 0 descriptor?? [ 278.013496][ T5944] loop4: detected capacity change from 0 to 8 [ 278.442478][ T4490] usbhid 1-1:0.0: can't add hid device: -71 [ 278.448532][ T4490] usbhid: probe of 1-1:0.0 failed with error -71 [ 278.497954][ T5944] SQUASHFS error: xz decompression failed, data probably corrupt [ 278.555981][ T4490] usb 1-1: USB disconnect, device number 9 [ 278.575455][ T5944] SQUASHFS error: Failed to read block 0x108: -5 [ 278.626768][ T5944] SQUASHFS error: Unable to read metadata cache entry [106] [ 278.657673][ T5944] SQUASHFS error: Unable to read inode 0x11f [ 279.366511][ T5947] loop3: detected capacity change from 0 to 32768 [ 279.380367][ T5947] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 280.284887][ T5948] loop2: detected capacity change from 0 to 256 [ 280.439630][ T5948] FAT-fs (loop2): Directory bread(block 64) failed [ 280.446317][ T5948] FAT-fs (loop2): Directory bread(block 65) failed [ 280.452930][ T5948] FAT-fs (loop2): Directory bread(block 66) failed [ 280.459462][ T5948] FAT-fs (loop2): Directory bread(block 67) failed [ 280.466037][ T5948] FAT-fs (loop2): Directory bread(block 68) failed [ 280.528931][ T5958] overlayfs: missing 'workdir' [ 280.604610][ T5959] loop3: detected capacity change from 0 to 256 [ 280.612881][ T5959] FAT-fs (loop3): Unrecognized mount option "sys_immÛA¨¬utable" or missing value [ 281.507583][ T5948] FAT-fs (loop2): Directory bread(block 69) failed [ 281.514257][ T5948] FAT-fs (loop2): Directory bread(block 70) failed [ 281.520786][ T5948] FAT-fs (loop2): Directory bread(block 71) failed [ 281.527462][ T5948] FAT-fs (loop2): Directory bread(block 72) failed [ 281.534127][ T5948] FAT-fs (loop2): Directory bread(block 73) failed [ 282.433386][ T5971] loop4: detected capacity change from 0 to 1764 [ 283.258583][ T5985] loop2: detected capacity change from 0 to 4096 [ 283.296789][ T5985] ntfs3: loop2: ino=3, Correct links count -> 2. [ 283.700699][ T5985] ntfs3: loop2: ino=5, "/" directory corrupted [ 284.224034][ T4981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 284.433394][ T4981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.464334][ T4981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.491079][ T4981] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 284.515176][ T4981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.542903][ T4981] usb 3-1: config 0 descriptor?? [ 284.571554][ T5866] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 284.832664][ T5998] loop0: detected capacity change from 0 to 32768 [ 284.857888][ T5998] (syz.0.475,5998,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.878303][ T5998] (syz.0.475,5998,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.897236][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.901712][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 284.936215][ T5998] JBD2: Ignoring recovery information on journal [ 284.972485][ T5866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.042802][ T5998] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 285.056598][ T4981] usbhid 3-1:0.0: can't add hid device: -71 [ 285.088299][ T4981] usbhid: probe of 3-1:0.0 failed with error -71 [ 285.103254][ T27] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 285.114339][ T5866] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 285.595834][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.608304][ T27] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.610557][ T4981] usb 3-1: USB disconnect, device number 8 [ 285.622661][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.636654][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.636690][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.673462][ T5866] usb 4-1: SerialNumber: syz [ 285.748295][ T27] usb 2-1: invalid MIDI out EP 0 [ 285.921001][ T27] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 285.934803][ T5866] usb 4-1: 0:2 : does not exist [ 286.409330][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.431819][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.487641][ T5866] usb 4-1: USB disconnect, device number 7 [ 286.496156][ T6005] loop2: detected capacity change from 0 to 256 [ 286.564696][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.611005][ T6005] FAT-fs (loop2): Directory bread(block 64) failed [ 286.617614][ T6005] FAT-fs (loop2): Directory bread(block 65) failed [ 286.624283][ T6005] FAT-fs (loop2): Directory bread(block 66) failed [ 286.631286][ T6005] FAT-fs (loop2): Directory bread(block 67) failed [ 286.637940][ T6005] FAT-fs (loop2): Directory bread(block 68) failed [ 286.644527][ T6005] FAT-fs (loop2): Directory bread(block 69) failed [ 286.651082][ T6005] FAT-fs (loop2): Directory bread(block 70) failed [ 286.657664][ T6005] FAT-fs (loop2): Directory bread(block 71) failed [ 286.664268][ T6005] FAT-fs (loop2): Directory bread(block 72) failed [ 286.670778][ T6005] FAT-fs (loop2): Directory bread(block 73) failed [ 286.755934][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 286.843500][ T6007] loop4: detected capacity change from 0 to 4096 [ 286.882408][ T6007] ntfs3: loop4: ino=3, Correct links count -> 2. [ 287.057655][ T4318] usb 2-1: USB disconnect, device number 8 [ 287.376892][ T6010] ntfs3: loop4: ino=5, "/" directory corrupted [ 288.386835][ T6023] loop4: detected capacity change from 0 to 1024 [ 288.406331][ T6023] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.468564][ T6023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.529258][ T26] audit: type=1800 audit(1772350035.298:11): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.481" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 288.577383][ T26] audit: type=1800 audit(1772350035.338:12): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.481" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 288.671577][ T4319] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 288.953914][ T4319] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 288.981557][ T4319] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 289.087361][ T4319] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.135054][ T4319] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.183504][ T6023] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.481: Allocating blocks 497-513 which overlap fs metadata [ 289.380444][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.614249][ T4319] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 289.851623][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.863091][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.139242][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.166337][ T6023] EXT4-fs (loop4): pa ffff8880757ee700: logic 48, phys. 177, len 21 [ 290.174392][ T6023] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 290.186244][ T27] usb 2-1: USB disconnect, device number 9 [ 290.605615][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 290.893234][ T6042] loop0: detected capacity change from 0 to 4096 [ 290.936260][ T6042] ntfs3: loop0: ino=3, Correct links count -> 2. [ 291.128221][ T6045] loop1: detected capacity change from 0 to 4096 [ 291.190721][ T6045] ntfs3: loop1: ino=3, Correct links count -> 2. [ 291.353136][ T6047] ntfs3: loop0: ino=5, "/" directory corrupted [ 291.955677][ T6049] ntfs3: loop1: ino=5, "/" directory corrupted [ 292.578541][ T6051] loop0: detected capacity change from 0 to 4096 [ 292.642680][ T6051] ntfs3: loop0: ino=3, Correct links count -> 2. [ 292.800722][ T6054] loop1: detected capacity change from 0 to 32768 [ 292.817996][ T6054] (syz.1.489,6054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.831786][ T6054] (syz.1.489,6054,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 292.896389][ T6054] JBD2: Ignoring recovery information on journal [ 292.936090][ T6054] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 293.653050][ T6051] ntfs3: loop0: ino=5, "/" directory corrupted [ 294.008168][ T6065] loop2: detected capacity change from 0 to 256 [ 294.338576][ T6065] FAT-fs (loop2): Directory bread(block 64) failed [ 294.367087][ T6065] FAT-fs (loop2): Directory bread(block 65) failed [ 294.424007][ T6065] FAT-fs (loop2): Directory bread(block 66) failed [ 294.430629][ T6065] FAT-fs (loop2): Directory bread(block 67) failed [ 294.458679][ T6065] FAT-fs (loop2): Directory bread(block 68) failed [ 294.507854][ T6065] FAT-fs (loop2): Directory bread(block 69) failed [ 294.571682][ T6065] FAT-fs (loop2): Directory bread(block 70) failed [ 294.578235][ T6065] FAT-fs (loop2): Directory bread(block 71) failed [ 294.602191][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 294.737463][ T6065] FAT-fs (loop2): Directory bread(block 72) failed [ 294.771570][ T6065] FAT-fs (loop2): Directory bread(block 73) failed [ 295.850409][ T6079] loop0: detected capacity change from 0 to 1024 [ 295.907435][ T6079] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.973845][ T6080] loop3: detected capacity change from 0 to 4096 [ 296.466836][ T6080] ntfs3: loop3: ino=3, Correct links count -> 2. [ 296.482326][ T6079] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 296.587050][ T26] audit: type=1800 audit(1772350043.358:13): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.496" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 296.725694][ T26] audit: type=1800 audit(1772350043.388:14): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.496" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 297.008962][ T6091] ntfs3: loop3: ino=5, "/" directory corrupted [ 297.598756][ T6079] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.496: Allocating blocks 497-513 which overlap fs metadata [ 298.486016][ T6078] EXT4-fs (loop0): pa ffff888073fd4b60: logic 48, phys. 177, len 21 [ 298.494199][ T6078] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 298.671789][ T4319] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 298.705378][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 298.758900][ T6101] loop2: detected capacity change from 0 to 4096 [ 298.806181][ T6101] ntfs3: loop2: ino=3, Correct links count -> 2. [ 298.863083][ T4319] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 298.916484][ T4319] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 299.081942][ T6103] loop0: detected capacity change from 0 to 32768 [ 299.117446][ T6103] (syz.0.502,6103,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 299.137835][ T6103] (syz.0.502,6103,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 299.172567][ T4319] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.187268][ T6103] JBD2: Ignoring recovery information on journal [ 299.211974][ T4319] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.222444][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.261943][ T4319] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 299.330831][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.435232][ T6103] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 299.570205][ T6109] ntfs3: loop2: ino=5, "/" directory corrupted [ 301.630344][ T27] usb 2-1: USB disconnect, device number 10 [ 301.894006][ T6131] loop1: detected capacity change from 0 to 256 [ 302.031512][ T4318] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 302.221518][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 302.228397][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.289879][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.437293][ T6131] FAT-fs (loop1): Directory bread(block 64) failed [ 302.453909][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 302.464503][ T4318] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 302.500067][ T6131] FAT-fs (loop1): Directory bread(block 65) failed [ 302.517791][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.537955][ T6131] FAT-fs (loop1): Directory bread(block 66) failed [ 302.561835][ T4318] usb 4-1: Product: syz [ 302.569233][ T6131] FAT-fs (loop1): Directory bread(block 67) failed [ 302.576250][ T4318] usb 4-1: Manufacturer: syz [ 302.580911][ T4318] usb 4-1: SerialNumber: syz [ 302.601666][ T6131] FAT-fs (loop1): Directory bread(block 68) failed [ 302.622631][ T4318] usb 4-1: config 0 descriptor?? [ 302.645361][ T6131] FAT-fs (loop1): Directory bread(block 69) failed [ 302.671397][ T6131] FAT-fs (loop1): Directory bread(block 70) failed [ 302.706129][ T6131] FAT-fs (loop1): Directory bread(block 71) failed [ 302.766977][ T6131] FAT-fs (loop1): Directory bread(block 72) failed [ 302.781964][ T6131] FAT-fs (loop1): Directory bread(block 73) failed [ 302.841603][ T4981] usb 4-1: USB disconnect, device number 8 [ 304.066273][ T6144] loop1: detected capacity change from 0 to 32768 [ 304.078429][ T6144] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 304.115233][ T4318] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 304.339304][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.669769][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.680372][ T4318] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 304.728544][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.768915][ T4318] usb 1-1: config 0 descriptor?? [ 305.087375][ T4457] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 305.233391][ T4318] usbhid 1-1:0.0: can't add hid device: -71 [ 305.244659][ T4318] usbhid: probe of 1-1:0.0 failed with error -71 [ 305.285106][ T6158] loop3: detected capacity change from 0 to 4096 [ 305.292580][ T4318] usb 1-1: USB disconnect, device number 10 [ 305.341254][ T6158] ntfs3: loop3: ino=3, Correct links count -> 2. [ 305.723843][ T6160] ntfs3: loop3: ino=5, "/" directory corrupted [ 307.795516][ T6173] loop3: detected capacity change from 0 to 32768 [ 307.836308][ T6173] (syz.3.519,6173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.856833][ T6173] (syz.3.519,6173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 307.890060][ T6173] JBD2: Ignoring recovery information on journal [ 308.053371][ T6173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 308.617949][ T6172] loop0: detected capacity change from 0 to 4096 [ 308.653448][ T6172] ntfs3: loop0: ino=3, Correct links count -> 2. [ 308.726821][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 309.151701][ T6184] ntfs3: loop0: ino=5, "/" directory corrupted [ 309.866333][ T6187] loop3: detected capacity change from 0 to 256 [ 310.221534][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.230557][ T6187] FAT-fs (loop3): Directory bread(block 64) failed [ 310.281076][ T6187] FAT-fs (loop3): Directory bread(block 65) failed [ 310.331273][ T6187] FAT-fs (loop3): Directory bread(block 66) failed [ 310.400024][ T6187] FAT-fs (loop3): Directory bread(block 67) failed [ 310.422185][ T6187] FAT-fs (loop3): Directory bread(block 68) failed [ 310.431605][ T5868] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 310.449533][ T6187] FAT-fs (loop3): Directory bread(block 69) failed [ 310.470862][ T6187] FAT-fs (loop3): Directory bread(block 70) failed [ 310.477667][ T4981] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 310.495713][ T6187] FAT-fs (loop3): Directory bread(block 71) failed [ 310.523201][ T6187] FAT-fs (loop3): Directory bread(block 72) failed [ 310.540064][ T6187] FAT-fs (loop3): Directory bread(block 73) failed [ 310.653958][ T5868] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 310.691734][ T4981] usb 3-1: Using ep0 maxpacket: 32 [ 310.699468][ T4981] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.727832][ T5868] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.141591][ T4981] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.155160][ T5868] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.186051][ T4981] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 311.205717][ T5868] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.225463][ T4981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.237451][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.245811][ T4981] usb 3-1: Product: syz [ 311.250069][ T4981] usb 3-1: Manufacturer: syz [ 311.267962][ T4981] usb 3-1: SerialNumber: syz [ 311.277258][ T5868] usb 1-1: invalid MIDI out EP 0 [ 311.297827][ T4981] usb 3-1: config 0 descriptor?? [ 311.347858][ T5868] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 311.389623][ T4556] udevd[4556]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.526374][ T4318] usb 3-1: USB disconnect, device number 9 [ 314.551633][ T5868] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 314.671617][ T4981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 314.729387][ T4319] usb 1-1: USB disconnect, device number 11 [ 314.806811][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.874379][ T4981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.957171][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.975864][ T4981] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 315.103868][ T4981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.119182][ T5868] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 315.270292][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.306338][ T4981] usb 4-1: config 0 descriptor?? [ 315.480003][ T5866] usb 5-1: device descriptor read/64, error -110 [ 315.530979][ T5868] usb 2-1: config 0 descriptor?? [ 315.545315][ T4981] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 315.598644][ T5868] usb 2-1: can't set config #0, error -71 [ 316.382718][ T6209] fuse: Bad value for 'fd' [ 316.387450][ T5868] usb 2-1: USB disconnect, device number 11 [ 316.431549][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 316.611071][ T5866] usb 5-1: device descriptor read/64, error -32 [ 316.751887][ T5866] usb usb5-port1: attempt power cycle [ 317.036271][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.044046][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.048856][ T6221] loop2: detected capacity change from 0 to 4096 [ 317.161644][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 317.194518][ T5866] usb 5-1: device descriptor read/8, error -32 [ 317.213449][ T6221] ntfs3: loop2: ino=3, Correct links count -> 2. [ 317.742519][ T6230] ntfs3: loop2: ino=5, "/" directory corrupted [ 319.128616][ T4488] usb 4-1: USB disconnect, device number 9 [ 319.540444][ T6238] loop3: detected capacity change from 0 to 256 [ 319.627714][ T6238] FAT-fs (loop3): Directory bread(block 64) failed [ 319.657075][ T6238] FAT-fs (loop3): Directory bread(block 65) failed [ 319.694096][ T6238] FAT-fs (loop3): Directory bread(block 66) failed [ 319.738670][ T6238] FAT-fs (loop3): Directory bread(block 67) failed [ 319.759569][ T6238] FAT-fs (loop3): Directory bread(block 68) failed [ 319.797384][ T6238] FAT-fs (loop3): Directory bread(block 69) failed [ 319.831767][ T6238] FAT-fs (loop3): Directory bread(block 70) failed [ 319.855877][ T6238] FAT-fs (loop3): Directory bread(block 71) failed [ 319.879529][ T6238] FAT-fs (loop3): Directory bread(block 72) failed [ 319.891683][ T6238] FAT-fs (loop3): Directory bread(block 73) failed [ 320.076712][ T6243] loop2: detected capacity change from 0 to 4096 [ 320.108528][ T6243] ntfs3: loop2: ino=3, Correct links count -> 2. [ 320.368560][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 320.627190][ T6249] ntfs3: loop2: ino=5, "/" directory corrupted [ 321.001558][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 321.040030][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.061986][ T5866] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.362714][ T4983] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 321.418268][ T4318] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 321.675531][ T4983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.706682][ T4983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.743094][ T4318] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 321.758877][ T4983] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 321.761604][ T4318] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 321.784004][ T4318] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.800269][ T4983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.814957][ T4318] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.831780][ T4983] usb 3-1: config 0 descriptor?? [ 321.836755][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.882971][ T4318] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 321.950219][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.241204][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.251371][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.447827][ T4983] usbhid 3-1:0.0: can't add hid device: -71 [ 322.543910][ T4983] usbhid: probe of 3-1:0.0 failed with error -71 [ 322.728487][ T4488] usb 2-1: USB disconnect, device number 12 [ 322.733260][ T4983] usb 3-1: USB disconnect, device number 10 [ 322.919138][ T5866] usb 1-1: string descriptor 0 read error: -71 [ 322.926998][ T5866] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 322.951565][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.293363][ T5866] usb 1-1: config 0 descriptor?? [ 323.466503][ T5866] usb 1-1: can't set config #0, error -71 [ 323.553738][ T5866] usb 1-1: USB disconnect, device number 12 [ 323.933218][ T6282] loop3: detected capacity change from 0 to 4096 [ 324.001257][ T6282] ntfs3: loop3: ino=3, Correct links count -> 2. [ 324.451742][ T6288] ntfs3: loop3: ino=5, "/" directory corrupted [ 326.104022][ T6302] loop4: detected capacity change from 0 to 4096 [ 326.121388][ T6302] ntfs3: loop4: ino=3, Correct links count -> 2. [ 326.437329][ T4319] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 326.538767][ T6305] ntfs3: loop4: ino=5, "/" directory corrupted [ 326.623368][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.656568][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.677770][ T4319] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 326.733727][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.782698][ T4319] usb 4-1: config 0 descriptor?? [ 327.465343][ T4319] usbhid 4-1:0.0: can't add hid device: -71 [ 327.471344][ T4319] usbhid: probe of 4-1:0.0 failed with error -71 [ 327.536370][ T4319] usb 4-1: USB disconnect, device number 10 [ 327.791522][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 327.951598][ T4488] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 327.991707][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 328.008423][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.028826][ T27] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.105278][ T27] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 328.121523][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.133569][ T4488] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 328.149728][ T27] usb 5-1: Product: syz [ 328.154579][ T4488] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 328.165099][ T27] usb 5-1: Manufacturer: syz [ 328.169733][ T27] usb 5-1: SerialNumber: syz [ 328.181526][ T4488] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.209825][ T27] usb 5-1: config 0 descriptor?? [ 328.238643][ T4488] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.248717][ T4488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.324196][ T4488] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 328.409017][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.460430][ T6326] loop2: detected capacity change from 0 to 256 [ 328.499163][ T6326] FAT-fs (loop2): Directory bread(block 64) failed [ 328.505741][ T6326] FAT-fs (loop2): Directory bread(block 65) failed [ 328.512812][ T6326] FAT-fs (loop2): Directory bread(block 66) failed [ 328.519333][ T6326] FAT-fs (loop2): Directory bread(block 67) failed [ 328.525920][ T6326] FAT-fs (loop2): Directory bread(block 68) failed [ 328.532470][ T6326] FAT-fs (loop2): Directory bread(block 69) failed [ 328.539032][ T6326] FAT-fs (loop2): Directory bread(block 70) failed [ 328.545605][ T6326] FAT-fs (loop2): Directory bread(block 71) failed [ 328.552292][ T6326] FAT-fs (loop2): Directory bread(block 72) failed [ 328.558816][ T6326] FAT-fs (loop2): Directory bread(block 73) failed [ 328.664990][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.676281][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.061822][ T4488] usb 2-1: USB disconnect, device number 13 [ 329.061935][ T4983] usb 5-1: USB disconnect, device number 12 [ 329.958949][ T6332] loop0: detected capacity change from 0 to 4096 [ 330.127125][ T6339] loop1: detected capacity change from 0 to 32768 [ 330.139101][ T6339] (syz.1.566,6339,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 330.154300][ T6339] (syz.1.566,6339,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 330.178316][ T6339] JBD2: Ignoring recovery information on journal [ 330.222929][ T6332] ntfs3: loop0: ino=3, Correct links count -> 2. [ 330.234420][ T6339] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 331.083396][ T6344] loop2: detected capacity change from 0 to 2048 [ 331.211300][ T6346] ntfs3: loop0: ino=5, "/" directory corrupted [ 331.603558][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 331.749917][ T6348] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.251625][ T4983] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 333.303902][ T4983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.372575][ T4983] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 333.487661][ T4983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.696159][ T4983] usb 1-1: config 0 descriptor?? [ 333.828642][ T4983] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 334.481883][ T4983] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 334.704572][ T4983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.753256][ T4983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.665731][ T4983] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 335.675693][ T4983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.691330][ T4983] usb 2-1: config 0 descriptor?? [ 335.870254][ T6348] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 335.890685][ T4319] usb 1-1: USB disconnect, device number 13 [ 335.940687][ T6348] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 336.010217][ T6348] Remounting filesystem read-only [ 336.023346][ T4282] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 336.116532][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.203112][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.211278][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.238103][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.258305][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.270369][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.280450][ T4983] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 336.329409][ T4983] usb 2-1: USB disconnect, device number 14 [ 337.265700][ T6373] loop3: detected capacity change from 0 to 256 [ 337.283597][ T6373] FAT-fs (loop3): Directory bread(block 64) failed [ 337.290140][ T6373] FAT-fs (loop3): Directory bread(block 65) failed [ 337.296947][ T6373] FAT-fs (loop3): Directory bread(block 66) failed [ 337.303510][ T6373] FAT-fs (loop3): Directory bread(block 67) failed [ 337.310102][ T6373] FAT-fs (loop3): Directory bread(block 68) failed [ 337.316661][ T6373] FAT-fs (loop3): Directory bread(block 69) failed [ 337.323655][ T6373] FAT-fs (loop3): Directory bread(block 70) failed [ 337.330182][ T6373] FAT-fs (loop3): Directory bread(block 71) failed [ 337.336787][ T6373] FAT-fs (loop3): Directory bread(block 72) failed [ 337.343374][ T6373] FAT-fs (loop3): Directory bread(block 73) failed [ 337.952763][ T4983] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 338.143142][ T4983] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 338.187539][ T4983] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.215455][ T4983] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.230907][ T4983] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.246585][ T4983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.275080][ T4983] usb 2-1: invalid MIDI out EP 0 [ 338.335061][ T4983] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 338.395696][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.291659][ T4983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 340.532659][ T4983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.347041][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.355766][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.411984][ T4983] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 341.510376][ T4983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.049485][ T4983] usb 5-1: config 0 descriptor?? [ 342.121264][ T4319] usb 2-1: USB disconnect, device number 15 [ 342.170507][ T4983] usb 5-1: can't set config #0, error -71 [ 342.188805][ T4983] usb 5-1: USB disconnect, device number 13 [ 342.401671][ T4487] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 342.591497][ T4487] usb 3-1: Using ep0 maxpacket: 32 [ 342.598414][ T4487] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.626426][ T6404] loop0: detected capacity change from 0 to 1024 [ 342.658388][ T4487] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.663666][ T6404] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.702894][ T4487] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 342.722257][ T4487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.761703][ T4487] usb 3-1: Product: syz [ 342.771837][ T4487] usb 3-1: Manufacturer: syz [ 342.781640][ T4487] usb 3-1: SerialNumber: syz [ 342.798780][ T4487] usb 3-1: config 0 descriptor?? [ 342.804078][ T6404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 342.853660][ T26] audit: type=1800 audit(1772350089.628:15): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.586" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 342.956819][ T6404] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.586: Allocating blocks 497-513 which overlap fs metadata [ 342.972977][ T26] audit: type=1800 audit(1772350089.648:16): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.586" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 343.144470][ T4488] usb 3-1: USB disconnect, device number 11 [ 343.202132][ T4487] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 343.533796][ T6403] EXT4-fs (loop0): pa ffff8880757eed20: logic 48, phys. 177, len 21 [ 343.542002][ T6403] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 343.631177][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 343.667271][ T4487] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.689190][ T6402] loop1: detected capacity change from 0 to 32768 [ 343.698462][ T4487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.726913][ T4487] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.752528][ T4487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.766502][ T6402] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 343.777192][ T4487] usb 4-1: SerialNumber: syz [ 344.069309][ T4487] usb 4-1: 0:2 : does not exist [ 344.131486][ T4487] usb 4-1: USB disconnect, device number 11 [ 344.437532][ T6416] loop0: detected capacity change from 0 to 4096 [ 344.465288][ T6416] ntfs3: loop0: ino=3, Correct links count -> 2. [ 344.539456][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.686250][ T4457] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 345.033832][ T6426] ntfs3: loop0: ino=5, "/" directory corrupted [ 348.505531][ T4488] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 348.609398][ T6444] loop1: detected capacity change from 0 to 1024 [ 348.642916][ T6444] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.827827][ T6444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 348.879244][ T26] audit: type=1800 audit(1772350095.648:17): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.601" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 349.215181][ T26] audit: type=1800 audit(1772350095.678:18): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.601" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 349.713975][ T6444] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.601: Allocating blocks 497-513 which overlap fs metadata [ 350.232469][ T6444] EXT4-fs (loop1): pa ffff888073fd4b60: logic 48, phys. 177, len 21 [ 350.240500][ T6444] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 350.380039][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 350.724028][ T6467] loop4: detected capacity change from 0 to 4096 [ 350.733271][ T6467] ntfs3: loop4: ino=3, Correct links count -> 2. [ 351.166256][ T6474] ntfs3: loop4: ino=5, "/" directory corrupted [ 351.759904][ T6477] loop0: detected capacity change from 0 to 1764 [ 351.791534][ T4319] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 351.993509][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.021244][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.079602][ T4319] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 352.120243][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.131798][ T4319] usb 4-1: config 0 descriptor?? [ 352.291764][ T4487] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 353.713359][ T4487] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 353.732628][ T4487] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 353.759801][ T4487] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.782747][ T4487] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.808109][ T4487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.887684][ T4319] usbhid 4-1:0.0: can't add hid device: -71 [ 353.902702][ T4319] usbhid: probe of 4-1:0.0 failed with error -71 [ 353.908823][ T4487] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 353.929758][ T4319] usb 4-1: USB disconnect, device number 13 [ 354.072107][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.304745][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.314732][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.551531][ T6483] loop4: detected capacity change from 0 to 32768 [ 354.591642][ T4487] usb 1-1: USB disconnect, device number 14 [ 354.658801][ T6483] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 354.702651][ T6483] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 354.739529][ T6483] BTRFS info (device loop4): using free space tree [ 355.221607][ T4983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 356.259763][ T6483] BTRFS error (device loop4): open_ctree failed: -12 [ 356.294589][ T4983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.340656][ T4983] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 356.419251][ T4983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.502581][ T4983] usb 4-1: config 0 descriptor?? [ 356.573346][ T4983] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 356.948253][ T4417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4417) [ 359.089229][ T4315] usb 4-1: USB disconnect, device number 14 [ 359.936322][ T6527] loop0: detected capacity change from 0 to 1764 [ 360.107412][ T6529] loop1: detected capacity change from 0 to 4096 [ 360.155884][ T6529] ntfs3: loop1: ino=3, Correct links count -> 2. [ 361.822436][ T4318] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 361.940923][ T6544] ntfs3: loop1: ino=5, "/" directory corrupted [ 362.508397][ T6548] input: syz0 as /devices/virtual/input/input10 [ 362.553304][ T4318] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 362.588722][ T4318] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 362.640573][ T4318] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.707868][ T4318] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.746699][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.801223][ T4318] usb 3-1: invalid MIDI out EP 0 [ 362.920552][ T4318] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 362.980525][ T4363] udevd[4363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.088021][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.096612][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.107058][ T14] usb 3-1: USB disconnect, device number 12 [ 363.462500][ T6546] loop4: detected capacity change from 0 to 32768 [ 363.497069][ T6546] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.542506][ T6546] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 363.581725][ T6546] BTRFS info (device loop4): using free space tree [ 363.753321][ T6546] BTRFS info (device loop4): enabling ssd optimizations [ 364.011481][ T4318] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 364.138877][ T6577] loop2: detected capacity change from 0 to 4096 [ 364.213200][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.233669][ T6577] ntfs3: loop2: ino=3, Correct links count -> 2. [ 364.240315][ T4318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.282222][ T4318] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.305910][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.375261][ T6585] overlayfs: missing 'workdir' [ 364.557540][ T4318] usb 2-1: SerialNumber: syz [ 364.819506][ T4318] usb 2-1: 0:2 : does not exist [ 364.923481][ T6588] ntfs3: loop2: ino=5, "/" directory corrupted [ 365.321751][ T4318] usb 2-1: USB disconnect, device number 16 [ 365.491116][ T6590] loop0: detected capacity change from 0 to 1764 [ 365.653688][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.694988][ T4274] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.478034][ T6596] loop1: detected capacity change from 0 to 4096 [ 366.572259][ T6596] ntfs3: loop1: ino=3, Correct links count -> 2. [ 366.598339][ T6603] loop0: detected capacity change from 0 to 1764 [ 366.771514][ T4318] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 366.809675][ T6605] loop2: detected capacity change from 0 to 4096 [ 366.901585][ T6596] ntfs3: loop1: ino=5, "/" directory corrupted [ 366.987337][ T4457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4457) [ 367.032198][ T6605] ntfs3: loop2: ino=3, Correct links count -> 2. [ 367.053145][ T4318] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 367.106530][ T4318] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 367.161083][ T4318] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.256889][ T4318] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.384299][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.844412][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.854636][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.212361][ T4318] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 368.249719][ T4318] usb 5-1: USB disconnect, device number 14 [ 368.569733][ T6621] ntfs3: loop2: ino=5, "/" directory corrupted [ 369.015758][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.205013][ T6638] loop0: detected capacity change from 0 to 8 [ 370.626180][ T6638] SQUASHFS error: xz decompression failed, data probably corrupt [ 370.657971][ T6638] SQUASHFS error: Failed to read block 0x108: -5 [ 370.681014][ T6638] SQUASHFS error: Unable to read metadata cache entry [106] [ 370.780535][ T6638] SQUASHFS error: Unable to read inode 0x11f [ 371.218410][ T6647] loop2: detected capacity change from 0 to 1764 [ 371.378735][ T6648] loop1: detected capacity change from 0 to 4096 [ 371.435464][ T6648] ntfs3: loop1: ino=3, Correct links count -> 2. [ 371.771695][ T6639] loop3: detected capacity change from 0 to 32768 [ 371.833011][ T6639] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 371.838465][ T6653] loop2: detected capacity change from 0 to 2048 [ 371.907897][ T6655] ntfs3: loop1: ino=5, "/" directory corrupted [ 372.354921][ T6657] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.198742][ T4638] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 373.990824][ T6657] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 374.042165][ T6657] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 374.086018][ T6657] Remounting filesystem read-only [ 374.121656][ T4282] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 374.861563][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 375.071705][ T7] usb 2-1: device descriptor read/64, error -71 [ 375.831499][ T4318] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 376.001557][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 376.043225][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.092033][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.134441][ T4318] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24 [ 376.161601][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.197368][ T6687] loop2: detected capacity change from 0 to 1764 [ 376.210688][ T4318] usb 1-1: Product: syz [ 376.211778][ T7] usb 2-1: device descriptor read/64, error -71 [ 376.270500][ T4318] usb 1-1: Manufacturer: syz [ 376.280873][ T4318] usb 1-1: SerialNumber: syz [ 376.311924][ T4318] usb 1-1: config 0 descriptor?? [ 376.335071][ T7] usb usb2-port1: attempt power cycle [ 376.621702][ T4980] usb 1-1: USB disconnect, device number 15 [ 376.771866][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 376.812055][ T7] usb 2-1: device descriptor read/8, error -71 [ 376.888710][ T6691] loop2: detected capacity change from 0 to 2048 [ 377.019399][ T6692] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 377.081554][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 377.355642][ T7] usb 2-1: device not accepting address 20, error -71 [ 377.391739][ T7] usb usb2-port1: unable to enumerate USB device [ 377.570176][ T6692] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 377.633738][ T6692] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 377.716314][ T6692] Remounting filesystem read-only [ 377.739296][ T4282] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 378.211516][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 378.433730][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.474508][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.481072][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.492957][ T7] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 379.184444][ T6704] loop0: detected capacity change from 0 to 32768 [ 379.199004][ T6704] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 379.306290][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.464482][ T7] usb 5-1: config 0 descriptor?? [ 379.744208][ T4457] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.809376][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 380.790232][ T6713] overlayfs: missing 'workdir' [ 380.975294][ T6716] loop0: detected capacity change from 0 to 256 [ 381.077187][ T6716] FAT-fs (loop0): Unrecognized mount option "sys_immÛA¨¬utable" or missing value [ 381.465308][ T6723] loop2: detected capacity change from 0 to 256 [ 381.488901][ T4488] usb 5-1: USB disconnect, device number 15 [ 382.053246][ T6723] FAT-fs (loop2): Directory bread(block 64) failed [ 382.063760][ T6723] FAT-fs (loop2): Directory bread(block 65) failed [ 382.191744][ T6723] FAT-fs (loop2): Directory bread(block 66) failed [ 382.205027][ T6723] FAT-fs (loop2): Directory bread(block 67) failed [ 382.229102][ T6723] FAT-fs (loop2): Directory bread(block 68) failed [ 382.237134][ T6723] FAT-fs (loop2): Directory bread(block 69) failed [ 382.259726][ T6723] FAT-fs (loop2): Directory bread(block 70) failed [ 382.351164][ T6723] FAT-fs (loop2): Directory bread(block 71) failed [ 382.804744][ T6723] FAT-fs (loop2): Directory bread(block 72) failed [ 382.898881][ T6723] FAT-fs (loop2): Directory bread(block 73) failed [ 383.061539][ T4985] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 383.223993][ T4985] usb 4-1: device descriptor read/64, error -71 [ 383.491521][ T4985] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 383.651626][ T4985] usb 4-1: device descriptor read/64, error -71 [ 383.792882][ T4985] usb usb4-port1: attempt power cycle [ 384.921492][ T4985] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 384.991464][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 385.042291][ T4985] usb 4-1: device descriptor read/8, error -71 [ 385.332495][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 385.357582][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.065866][ T4985] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 386.074832][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.176264][ T7] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 386.186389][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.194804][ T7] usb 1-1: Product: syz [ 386.199124][ T7] usb 1-1: Manufacturer: syz [ 386.203933][ T7] usb 1-1: SerialNumber: syz [ 386.210811][ T7] usb 1-1: config 0 descriptor?? [ 386.233838][ T4985] usb 4-1: device descriptor read/8, error -71 [ 386.321796][ T6754] loop1: detected capacity change from 0 to 4096 [ 386.345787][ T6754] ntfs3: loop1: ino=3, Correct links count -> 2. [ 386.352722][ T4985] usb usb4-port1: unable to enumerate USB device [ 386.556502][ T6756] loop3: detected capacity change from 0 to 32768 [ 386.578086][ T6756] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 386.648128][ T7] usb 1-1: USB disconnect, device number 16 [ 386.999698][ T6763] ntfs3: loop1: ino=5, "/" directory corrupted [ 387.927169][ T6765] loop2: detected capacity change from 0 to 256 [ 387.999532][ T6765] FAT-fs (loop2): Directory bread(block 64) failed [ 388.108605][ T6765] FAT-fs (loop2): Directory bread(block 65) failed [ 388.191576][ T6765] FAT-fs (loop2): Directory bread(block 66) failed [ 388.198170][ T6765] FAT-fs (loop2): Directory bread(block 67) failed [ 388.216439][ T4638] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 388.281942][ T6765] FAT-fs (loop2): Directory bread(block 68) failed [ 388.288547][ T6765] FAT-fs (loop2): Directory bread(block 69) failed [ 388.344973][ T6765] FAT-fs (loop2): Directory bread(block 70) failed [ 388.352186][ T6765] FAT-fs (loop2): Directory bread(block 71) failed [ 388.501174][ T6773] loop0: detected capacity change from 0 to 256 [ 388.507750][ T6765] FAT-fs (loop2): Directory bread(block 72) failed [ 388.551884][ T6765] FAT-fs (loop2): Directory bread(block 73) failed [ 388.646940][ T6773] FAT-fs (loop0): Directory bread(block 64) failed [ 388.706976][ T6773] FAT-fs (loop0): Directory bread(block 65) failed [ 388.767440][ T6773] FAT-fs (loop0): Directory bread(block 66) failed [ 388.957814][ T6773] FAT-fs (loop0): Directory bread(block 67) failed [ 388.971668][ T6775] loop3: detected capacity change from 0 to 32768 [ 388.995237][ T6775] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 389.021596][ T6773] FAT-fs (loop0): Directory bread(block 68) failed [ 389.021641][ T6773] FAT-fs (loop0): Directory bread(block 69) failed [ 389.021691][ T6773] FAT-fs (loop0): Directory bread(block 70) failed [ 389.021709][ T6773] FAT-fs (loop0): Directory bread(block 71) failed [ 389.021754][ T6773] FAT-fs (loop0): Directory bread(block 72) failed [ 389.021772][ T6773] FAT-fs (loop0): Directory bread(block 73) failed [ 391.202540][ T3598] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 391.256743][ T6764] tty tty1: ldisc open failed (-12), clearing slot 0 [ 391.275149][ T6770] tty tty1: ldisc open failed (-12), clearing slot 0 [ 391.392972][ T3598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.416548][ T3598] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 391.429542][ T6788] overlayfs: missing 'workdir' [ 391.463251][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.483161][ T3598] usb 5-1: config 0 descriptor?? [ 391.513847][ T3598] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 391.655237][ T6791] loop3: detected capacity change from 0 to 256 [ 391.686532][ T6791] FAT-fs (loop3): Unrecognized mount option "sys_immÛA¨¬utable" or missing value [ 392.571501][ T3598] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 392.731496][ T3598] usb 3-1: device descriptor read/64, error -71 [ 393.009368][ T4488] usb 5-1: USB disconnect, device number 16 [ 393.021521][ T3598] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 393.181500][ T3598] usb 3-1: device descriptor read/64, error -71 [ 393.301726][ T3598] usb usb3-port1: attempt power cycle [ 393.348672][ T6809] loop4: detected capacity change from 0 to 4096 [ 393.379453][ T6809] ntfs3: loop4: ino=3, Correct links count -> 2. [ 393.684416][ T6812] ntfs3: loop4: ino=5, "/" directory corrupted [ 393.731500][ T3598] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 393.782192][ T3598] usb 3-1: device descriptor read/8, error -71 [ 394.105363][ T3598] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 394.131489][ T6816] loop0: detected capacity change from 0 to 32768 [ 394.614807][ T6816] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 394.755310][ T3598] usb 3-1: device descriptor read/8, error -71 [ 394.899423][ T3598] usb usb3-port1: unable to enumerate USB device [ 395.050397][ T6826] overlayfs: missing 'workdir' [ 395.625447][ T6831] loop3: detected capacity change from 0 to 8 [ 396.038969][ T4638] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 396.131730][ T6831] SQUASHFS error: xz decompression failed, data probably corrupt [ 396.241809][ T6831] SQUASHFS error: Failed to read block 0x108: -5 [ 396.260667][ T6831] SQUASHFS error: Unable to read metadata cache entry [106] [ 396.281511][ T6831] SQUASHFS error: Unable to read inode 0x11f [ 396.648046][ T6842] loop1: detected capacity change from 0 to 1024 [ 396.659813][ T6842] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.729923][ T6842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.773145][ T26] audit: type=1800 audit(1772350143.548:19): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.711" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 397.070463][ T6852] loop4: detected capacity change from 0 to 4096 [ 397.151617][ T4487] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 397.174558][ T6852] ntfs3: loop4: ino=3, Correct links count -> 2. [ 397.207241][ T6842] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.711: Allocating blocks 497-513 which overlap fs metadata [ 397.446279][ T4487] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 397.460277][ T4487] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.477330][ T6857] ntfs3: loop4: ino=5, "/" directory corrupted [ 397.489065][ T4487] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.502637][ T4487] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.515089][ T4487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.781554][ T3598] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 397.812522][ T4487] usb 4-1: invalid MIDI out EP 0 [ 398.030543][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.040464][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.114870][ T4487] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 398.119254][ T3598] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 398.418689][ T4556] udevd[4556]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.444398][ T3598] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 398.462995][ T6841] EXT4-fs (loop1): pa ffff888073fd4e00: logic 48, phys. 177, len 21 [ 398.471055][ T6841] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 398.475635][ T3598] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.514973][ T3598] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.545868][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.610921][ T3598] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 398.623661][ T6863] loop4: detected capacity change from 0 to 4096 [ 398.636744][ T6863] ntfs3: loop4: ino=3, Correct links count -> 2. [ 398.693717][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.918075][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 399.019802][ T6868] ntfs3: loop4: ino=5, "/" directory corrupted [ 399.643208][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.668292][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.871582][ T4488] usb 3-1: USB disconnect, device number 17 [ 399.950363][ T7] usb 4-1: USB disconnect, device number 19 [ 401.615167][ T6893] loop0: detected capacity change from 0 to 4096 [ 401.652105][ T6893] ntfs3: loop0: ino=3, Correct links count -> 2. [ 401.910948][ T6899] loop3: detected capacity change from 0 to 32768 [ 401.926107][ T6899] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 402.156140][ T6900] ntfs3: loop0: ino=5, "/" directory corrupted [ 402.292269][ T6899] overlayfs: missing 'workdir' [ 402.644202][ T6903] loop2: detected capacity change from 0 to 4096 [ 402.662928][ T4638] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 402.678986][ T6907] input: syz0 as /devices/virtual/input/input12 [ 402.716040][ T6903] ntfs3: loop2: ino=3, Correct links count -> 2. [ 403.193892][ T6913] ntfs3: loop2: ino=5, "/" directory corrupted [ 404.101698][ T3598] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 404.285236][ T3598] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 404.322001][ T6929] loop3: detected capacity change from 0 to 256 [ 404.370033][ T6929] FAT-fs (loop3): Directory bread(block 64) failed [ 404.376940][ T6929] FAT-fs (loop3): Directory bread(block 65) failed [ 404.383902][ T6929] FAT-fs (loop3): Directory bread(block 66) failed [ 404.390747][ T6929] FAT-fs (loop3): Directory bread(block 67) failed [ 404.397741][ T6929] FAT-fs (loop3): Directory bread(block 68) failed [ 404.404455][ T6929] FAT-fs (loop3): Directory bread(block 69) failed [ 404.411432][ T6929] FAT-fs (loop3): Directory bread(block 70) failed [ 404.418029][ T6929] FAT-fs (loop3): Directory bread(block 71) failed [ 404.424940][ T6929] FAT-fs (loop3): Directory bread(block 72) failed [ 404.431587][ T6929] FAT-fs (loop3): Directory bread(block 73) failed [ 404.490084][ T3598] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 405.219667][ T3598] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.257047][ T6933] loop1: detected capacity change from 0 to 256 [ 405.272586][ T6933] FAT-fs (loop1): Directory bread(block 64) failed [ 405.279208][ T6933] FAT-fs (loop1): Directory bread(block 65) failed [ 405.285800][ T6933] FAT-fs (loop1): Directory bread(block 66) failed [ 405.292363][ T6933] FAT-fs (loop1): Directory bread(block 67) failed [ 405.298909][ T6933] FAT-fs (loop1): Directory bread(block 68) failed [ 405.305468][ T6933] FAT-fs (loop1): Directory bread(block 69) failed [ 405.312236][ T6933] FAT-fs (loop1): Directory bread(block 70) failed [ 405.318747][ T6933] FAT-fs (loop1): Directory bread(block 71) failed [ 405.325316][ T6933] FAT-fs (loop1): Directory bread(block 72) failed [ 405.331955][ T6933] FAT-fs (loop1): Directory bread(block 73) failed [ 405.343528][ T3598] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 405.352901][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.456400][ T3598] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 405.677506][ T4417] udevd[4417]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.743979][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.754032][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.177485][ T4488] usb 3-1: USB disconnect, device number 18 [ 407.866033][ T6952] loop3: detected capacity change from 0 to 256 [ 409.146390][ T6952] FAT-fs (loop3): Directory bread(block 64) failed [ 409.198409][ T6952] FAT-fs (loop3): Directory bread(block 65) failed [ 409.226360][ T6952] FAT-fs (loop3): Directory bread(block 66) failed [ 409.311582][ T6952] FAT-fs (loop3): Directory bread(block 67) failed [ 409.319312][ T6952] FAT-fs (loop3): Directory bread(block 68) failed [ 409.341600][ T6952] FAT-fs (loop3): Directory bread(block 69) failed [ 409.348423][ T6952] FAT-fs (loop3): Directory bread(block 70) failed [ 409.379674][ T6952] FAT-fs (loop3): Directory bread(block 71) failed [ 409.421652][ T6952] FAT-fs (loop3): Directory bread(block 72) failed [ 409.428251][ T6952] FAT-fs (loop3): Directory bread(block 73) failed [ 409.503270][ T6957] input: syz0 as /devices/virtual/input/input13 [ 409.841533][ T4318] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 409.890910][ T6962] loop1: detected capacity change from 0 to 2048 [ 410.026409][ T6965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.035670][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.071615][ T4318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.133158][ T4318] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.152738][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.215433][ T4318] usb 3-1: SerialNumber: syz [ 410.239642][ T6965] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 410.266374][ T6965] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 410.296368][ T6965] Remounting filesystem read-only [ 410.391155][ T4279] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 410.442710][ T4318] usb 3-1: 0:2 : does not exist [ 410.519156][ T4488] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 410.549115][ T4318] usb 3-1: USB disconnect, device number 19 [ 410.701516][ T4488] usb 1-1: Using ep0 maxpacket: 32 [ 410.715193][ T4488] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 410.780403][ T4488] usb 1-1: config 0 has no interface number 0 [ 410.836808][ T4488] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.925055][ T4488] usb 1-1: config 0 interface 89 has no altsetting 0 [ 411.039056][ T4488] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 411.202925][ T4488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.210984][ T4488] usb 1-1: Product: syz [ 411.246086][ T4488] usb 1-1: Manufacturer: syz [ 411.266372][ T4488] usb 1-1: SerialNumber: syz [ 411.287828][ T4488] usb 1-1: config 0 descriptor?? [ 411.488616][ T6973] loop4: detected capacity change from 0 to 32768 [ 411.503681][ T6976] loop1: detected capacity change from 0 to 256 [ 411.512112][ T4488] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 411.532006][ T4488] em28xx 1-1:0.89: Video interface 89 found: [ 411.553791][ T6976] FAT-fs (loop1): Directory bread(block 64) failed [ 411.560504][ T6976] FAT-fs (loop1): Directory bread(block 65) failed [ 411.567153][ T6976] FAT-fs (loop1): Directory bread(block 66) failed [ 411.573699][ T6976] FAT-fs (loop1): Directory bread(block 67) failed [ 411.580268][ T6976] FAT-fs (loop1): Directory bread(block 68) failed [ 411.586799][ T6976] FAT-fs (loop1): Directory bread(block 69) failed [ 411.593399][ T6976] FAT-fs (loop1): Directory bread(block 70) failed [ 411.599909][ T6976] FAT-fs (loop1): Directory bread(block 71) failed [ 411.606807][ T6976] FAT-fs (loop1): Directory bread(block 72) failed [ 411.613346][ T6976] FAT-fs (loop1): Directory bread(block 73) failed [ 411.651857][ T6973] (syz.4.754,6973,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 411.666281][ T6973] (syz.4.754,6973,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 411.693847][ T6973] JBD2: Ignoring recovery information on journal [ 411.715916][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.775330][ T6973] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 412.326982][ T4488] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 412.571335][ T6986] loop2: detected capacity change from 0 to 256 [ 412.624488][ T6986] FAT-fs (loop2): Directory bread(block 64) failed [ 412.631136][ T6986] FAT-fs (loop2): Directory bread(block 65) failed [ 412.638010][ T6986] FAT-fs (loop2): Directory bread(block 66) failed [ 412.644769][ T6986] FAT-fs (loop2): Directory bread(block 67) failed [ 412.651704][ T6986] FAT-fs (loop2): Directory bread(block 68) failed [ 412.658418][ T6986] FAT-fs (loop2): Directory bread(block 69) failed [ 412.665485][ T6986] FAT-fs (loop2): Directory bread(block 70) failed [ 412.672258][ T6986] FAT-fs (loop2): Directory bread(block 71) failed [ 412.679170][ T6986] FAT-fs (loop2): Directory bread(block 72) failed [ 412.686337][ T6986] FAT-fs (loop2): Directory bread(block 73) failed [ 412.794546][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 412.880711][ T4488] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 413.058500][ T4488] em28xx 1-1:0.89: board has no eeprom [ 413.071561][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 413.355851][ T4488] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 413.440022][ T4488] em28xx 1-1:0.89: analog set to bulk mode. [ 413.594274][ T4488] usb 1-1: USB disconnect, device number 17 [ 413.642719][ T4488] em28xx 1-1:0.89: Disconnecting em28xx [ 413.651676][ T4318] em28xx 1-1:0.89: Registering V4L2 extension [ 413.693536][ T7] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 413.739241][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 413.789949][ T7] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.034537][ T4318] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 414.071849][ T4318] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 414.120887][ T4318] em28xx 1-1:0.89: No AC97 audio processor [ 414.202114][ T4318] usb 1-1: Decoder not found [ 414.206770][ T4318] em28xx 1-1:0.89: failed to create media graph [ 414.318684][ T4318] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 414.372490][ T4318] em28xx 1-1:0.89: Registering snapshot button... [ 414.472641][ T4318] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input14 [ 414.566289][ T4318] em28xx 1-1:0.89: Remote control support is not available for this card. [ 414.630446][ T4488] em28xx 1-1:0.89: Closing input extension [ 414.639212][ T4488] em28xx 1-1:0.89: Deregistering snapshot button [ 415.791437][ T4488] em28xx 1-1:0.89: Freeing device [ 415.977631][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.987075][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.010401][ T6997] loop2: detected capacity change from 0 to 256 [ 416.041612][ T7] usb 4-1: can't set config #27, error -71 [ 416.077045][ T7] usb 4-1: USB disconnect, device number 20 [ 416.091202][ T6997] FAT-fs (loop2): Directory bread(block 64) failed [ 416.098267][ T6997] FAT-fs (loop2): Directory bread(block 65) failed [ 416.105106][ T6997] FAT-fs (loop2): Directory bread(block 66) failed [ 416.111742][ T6997] FAT-fs (loop2): Directory bread(block 67) failed [ 416.118395][ T6997] FAT-fs (loop2): Directory bread(block 68) failed [ 416.125064][ T6997] FAT-fs (loop2): Directory bread(block 69) failed [ 416.131741][ T6997] FAT-fs (loop2): Directory bread(block 70) failed [ 416.138323][ T6997] FAT-fs (loop2): Directory bread(block 71) failed [ 416.145077][ T6997] FAT-fs (loop2): Directory bread(block 72) failed [ 416.151717][ T6997] FAT-fs (loop2): Directory bread(block 73) failed [ 416.681514][ T4985] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 417.057418][ T7021] loop3: detected capacity change from 0 to 256 [ 417.078551][ T4985] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 417.106797][ T7021] FAT-fs (loop3): Directory bread(block 64) failed [ 417.113531][ T7021] FAT-fs (loop3): Directory bread(block 65) failed [ 417.120098][ T7021] FAT-fs (loop3): Directory bread(block 66) failed [ 417.126654][ T7021] FAT-fs (loop3): Directory bread(block 67) failed [ 417.133242][ T7021] FAT-fs (loop3): Directory bread(block 68) failed [ 417.139745][ T7021] FAT-fs (loop3): Directory bread(block 69) failed [ 417.146316][ T7021] FAT-fs (loop3): Directory bread(block 70) failed [ 417.152860][ T7021] FAT-fs (loop3): Directory bread(block 71) failed [ 417.159426][ T7021] FAT-fs (loop3): Directory bread(block 72) failed [ 417.165976][ T7021] FAT-fs (loop3): Directory bread(block 73) failed [ 417.224090][ T4985] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.278345][ T4985] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.333089][ T4985] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.360834][ T4985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.408011][ T4985] usb 3-1: invalid MIDI out EP 0 [ 417.513057][ T4985] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 417.560187][ T4556] udevd[4556]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.161632][ T4985] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 420.462324][ T4488] usb 3-1: USB disconnect, device number 20 [ 420.522433][ T4985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.555589][ T4985] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 420.568894][ T4985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.613783][ T4985] usb 1-1: config 0 descriptor?? [ 420.655010][ T4985] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 420.683288][ T7030] loop2: detected capacity change from 0 to 2048 [ 420.758330][ T7032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.931551][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 420.959623][ T7032] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 420.979359][ T7032] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 421.009106][ T7032] Remounting filesystem read-only [ 421.035062][ T4282] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 421.065013][ T7036] loop3: detected capacity change from 0 to 8 [ 421.121505][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 421.128791][ T7] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 421.161542][ T7] usb 2-1: config 0 has no interface number 0 [ 421.208767][ T7] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 421.229105][ T7] usb 2-1: config 0 interface 89 has no altsetting 0 [ 421.251799][ T7] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 421.281520][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.306067][ T7036] SQUASHFS error: xz decompression failed, data probably corrupt [ 421.319737][ T7036] SQUASHFS error: Failed to read block 0x108: -5 [ 421.326480][ T7036] SQUASHFS error: Unable to read metadata cache entry [106] [ 421.334261][ T7036] SQUASHFS error: Unable to read inode 0x11f [ 421.351291][ T7] usb 2-1: Product: syz [ 421.355755][ T7] usb 2-1: Manufacturer: syz [ 421.381478][ T7] usb 2-1: SerialNumber: syz [ 421.402370][ T7] usb 2-1: config 0 descriptor?? [ 421.441153][ T7] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 421.487482][ T7] em28xx 2-1:0.89: Video interface 89 found: [ 421.841299][ T7040] loop2: detected capacity change from 0 to 1764 [ 422.055055][ T7] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 422.093528][ T4487] usb 1-1: USB disconnect, device number 18 [ 422.144070][ T4488] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 422.356750][ T4488] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 422.497220][ T7] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 422.519911][ T7] em28xx 2-1:0.89: board has no eeprom [ 422.550021][ T4488] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 422.560945][ T4488] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.574218][ T4488] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.583397][ T4488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.591666][ T7] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 422.625179][ T7] em28xx 2-1:0.89: analog set to bulk mode. [ 422.658643][ T4488] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 422.671514][ T4985] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 422.720416][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.749245][ T7] usb 2-1: USB disconnect, device number 21 [ 422.763427][ T7] em28xx 2-1:0.89: Disconnecting em28xx [ 422.782137][ T14] em28xx 2-1:0.89: Registering V4L2 extension [ 422.933844][ T4985] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 422.956449][ T4985] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.103088][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.112896][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.471216][ T4985] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.495873][ T4488] usb 5-1: USB disconnect, device number 17 [ 423.598156][ T4985] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.651552][ T4985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.668135][ T14] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 423.682668][ T14] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 423.719517][ T14] em28xx 2-1:0.89: No AC97 audio processor [ 423.728224][ T4985] usb 3-1: invalid MIDI out EP 0 [ 423.766361][ T14] usb 2-1: Decoder not found [ 423.791179][ T14] em28xx 2-1:0.89: failed to create media graph [ 423.828212][ T14] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 423.900020][ T4985] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 423.914811][ T7061] ================================================================== [ 423.922408][ T14] em28xx 2-1:0.89: Registering snapshot button... [ 423.922895][ T7061] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 423.936272][ T7061] Read of size 8 at addr ffff8880763a4738 by task v4l_id/7061 [ 423.943760][ T7061] [ 423.946128][ T7061] CPU: 1 PID: 7061 Comm: v4l_id Not tainted syzkaller #0 [ 423.953176][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.963259][ T7061] Call Trace: [ 423.966570][ T7061] [ 423.969518][ T7061] dump_stack_lvl+0x188/0x24e [ 423.974246][ T7061] ? __lock_acquire+0x7d10/0x7d10 [ 423.979301][ T7061] ? show_regs_print_info+0x12/0x12 [ 423.984518][ T7061] ? load_image+0x400/0x400 [ 423.989042][ T7061] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 423.994517][ T7061] ? __virt_addr_valid+0x188/0x540 [ 423.999653][ T7061] ? __virt_addr_valid+0x465/0x540 [ 424.004779][ T7061] ? v4l2_fh_open+0xc6/0x430 [ 424.009390][ T7061] print_report+0xa8/0x210 [ 424.013826][ T7061] kasan_report+0x10b/0x140 [ 424.018367][ T7061] ? v4l2_fh_open+0xc6/0x430 [ 424.022985][ T7061] v4l2_fh_open+0xc6/0x430 [ 424.027421][ T7061] em28xx_v4l2_open+0x152/0x990 [ 424.032284][ T7061] ? __lock_acquire+0x7d10/0x7d10 [ 424.037324][ T7061] v4l2_open+0x20b/0x360 [ 424.041616][ T7061] chrdev_open+0x5c5/0x6a0 [ 424.046050][ T7061] ? cd_forget+0x160/0x160 [ 424.050486][ T7061] ? fsnotify_perm+0x39b/0x550 [ 424.055284][ T7061] ? cd_forget+0x160/0x160 [ 424.059732][ T7061] do_dentry_open+0x7e9/0x10d0 [ 424.064550][ T7061] path_openat+0x2635/0x2ee0 [ 424.069156][ T7061] ? verify_lock_unused+0x140/0x140 [ 424.074377][ T7061] ? do_syscall_64+0x4c/0xa0 [ 424.078998][ T7061] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.085076][ T7061] ? do_filp_open+0x430/0x430 [ 424.089793][ T7061] do_filp_open+0x1f1/0x430 [ 424.094320][ T7061] ? vfs_tmpfile+0x480/0x480 [ 424.098940][ T7061] ? _raw_spin_unlock+0x24/0x40 [ 424.103810][ T7061] ? alloc_fd+0x58f/0x630 [ 424.108162][ T7061] do_sys_openat2+0x150/0x4b0 [ 424.112866][ T7061] ? do_sys_open+0xe0/0xe0 [ 424.117301][ T7061] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 424.123299][ T7061] ? lock_chain_count+0x20/0x20 [ 424.128168][ T7061] __x64_sys_openat+0x135/0x160 [ 424.133053][ T7061] do_syscall_64+0x4c/0xa0 [ 424.137495][ T7061] ? clear_bhb_loop+0x60/0xb0 [ 424.142206][ T7061] ? clear_bhb_loop+0x60/0xb0 [ 424.146913][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.152820][ T7061] RIP: 0033:0x7fca3aea7407 [ 424.157261][ T7061] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 424.176894][ T7061] RSP: 002b:00007ffc2d63a580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 424.185321][ T7061] RAX: ffffffffffffffda RBX: 00007fca3b64c880 RCX: 00007fca3aea7407 [ 424.193324][ T7061] RDX: 0000000000000000 RSI: 00007ffc2d63bf1c RDI: ffffffffffffff9c [ 424.201320][ T7061] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 424.209303][ T7061] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 424.217304][ T7061] R13: 00007ffc2d63a7d0 R14: 00007fca3b7ab000 R15: 000055b54a3b94d8 [ 424.225298][ T7061] [ 424.228338][ T7061] [ 424.230674][ T7061] Allocated by task 14: [ 424.234837][ T7061] kasan_set_track+0x4b/0x70 [ 424.239445][ T7061] __kasan_kmalloc+0x8e/0xa0 [ 424.244055][ T7061] em28xx_v4l2_init+0x107/0x2e70 [ 424.248999][ T7061] em28xx_init_extension+0x118/0x1b0 [ 424.254304][ T7061] process_one_work+0x8a2/0x1160 [ 424.259248][ T7061] worker_thread+0xd83/0x1270 [ 424.263930][ T7061] kthread+0x29d/0x330 [ 424.268002][ T7061] ret_from_fork+0x1f/0x30 [ 424.272427][ T7061] [ 424.274768][ T7061] Freed by task 14: [ 424.278574][ T7061] kasan_set_track+0x4b/0x70 [ 424.283190][ T7061] kasan_save_free_info+0x2d/0x50 [ 424.288216][ T7061] ____kasan_slab_free+0x126/0x1e0 [ 424.293335][ T7061] slab_free_freelist_hook+0x131/0x1a0 [ 424.298823][ T7061] __kmem_cache_free+0xb6/0x1f0 [ 424.303682][ T7061] em28xx_v4l2_init+0x166c/0x2e70 [ 424.308713][ T7061] em28xx_init_extension+0x118/0x1b0 [ 424.314014][ T7061] process_one_work+0x8a2/0x1160 [ 424.318961][ T7061] worker_thread+0xd83/0x1270 [ 424.323645][ T7061] kthread+0x29d/0x330 [ 424.327716][ T7061] ret_from_fork+0x1f/0x30 [ 424.332136][ T7061] [ 424.334470][ T7061] Last potentially related work creation: [ 424.340184][ T7061] kasan_save_stack+0x3a/0x60 [ 424.344886][ T7061] __kasan_record_aux_stack+0xb2/0xc0 [ 424.350279][ T7061] call_rcu+0x14f/0x990 [ 424.354453][ T7061] generic_shutdown_super+0x130/0x340 [ 424.359848][ T7061] kill_block_super+0x7c/0xe0 [ 424.364537][ T7061] deactivate_locked_super+0x93/0xf0 [ 424.369840][ T7061] cleanup_mnt+0x42c/0x4b0 [ 424.374259][ T7061] task_work_run+0x1d0/0x260 [ 424.378866][ T7061] exit_to_user_mode_loop+0xe6/0x110 [ 424.384160][ T7061] exit_to_user_mode_prepare+0xee/0x180 [ 424.389718][ T7061] syscall_exit_to_user_mode+0x16/0x40 [ 424.395187][ T7061] do_syscall_64+0x58/0xa0 [ 424.399617][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.405523][ T7061] [ 424.407857][ T7061] Second to last potentially related work creation: [ 424.414445][ T7061] kasan_save_stack+0x3a/0x60 [ 424.419145][ T7061] __kasan_record_aux_stack+0xb2/0xc0 [ 424.424537][ T7061] call_rcu+0x14f/0x990 [ 424.428709][ T7061] generic_shutdown_super+0x130/0x340 [ 424.434090][ T7061] kill_block_super+0x7c/0xe0 [ 424.438775][ T7061] deactivate_locked_super+0x93/0xf0 [ 424.444063][ T7061] cleanup_mnt+0x42c/0x4b0 [ 424.448494][ T7061] task_work_run+0x1d0/0x260 [ 424.453091][ T7061] exit_to_user_mode_loop+0xe6/0x110 [ 424.458385][ T7061] exit_to_user_mode_prepare+0xee/0x180 [ 424.463949][ T7061] syscall_exit_to_user_mode+0x16/0x40 [ 424.469418][ T7061] do_syscall_64+0x58/0xa0 [ 424.473849][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.479755][ T7061] [ 424.482080][ T7061] The buggy address belongs to the object at ffff8880763a4000 [ 424.482080][ T7061] which belongs to the cache kmalloc-8k of size 8192 [ 424.496136][ T7061] The buggy address is located 1848 bytes inside of [ 424.496136][ T7061] 8192-byte region [ffff8880763a4000, ffff8880763a6000) [ 424.509607][ T7061] [ 424.511940][ T7061] The buggy address belongs to the physical page: [ 424.518380][ T7061] page:ffffea0001d8e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880763a0000 pfn:0x763a0 [ 424.529844][ T7061] head:ffffea0001d8e800 order:3 compound_mapcount:0 compound_pincount:0 [ 424.538171][ T7061] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 424.546172][ T7061] raw: 00fff00000010200 ffffea0001e17a00 dead000000000004 ffff888017442280 [ 424.554774][ T7061] raw: ffff8880763a0000 0000000080020001 00000001ffffffff 0000000000000000 [ 424.563367][ T7061] page dumped because: kasan: bad access detected [ 424.569806][ T7061] page_owner tracks the page as allocated [ 424.575532][ T7061] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6035, tgid 6024 (syz.1.483), ts 289752140999, free_ts 289404949864 [ 424.598229][ T7061] post_alloc_hook+0x173/0x1a0 [ 424.603013][ T7061] get_page_from_freelist+0x1a1e/0x1ab0 [ 424.608590][ T7061] __alloc_pages+0x1ec/0x4f0 [ 424.613193][ T7061] alloc_slab_page+0x5d/0x160 [ 424.617885][ T7061] new_slab+0x87/0x2c0 [ 424.621968][ T7061] ___slab_alloc+0xbc6/0x1240 [ 424.626657][ T7061] __kmem_cache_alloc_node+0x1a0/0x260 [ 424.632122][ T7061] __kmalloc+0xa0/0x240 [ 424.636295][ T7061] snd_seq_oss_readq_new+0x7e/0x240 [ 424.641516][ T7061] snd_seq_oss_open+0x7e4/0xf50 [ 424.646378][ T7061] odev_open+0x63/0x90 [ 424.650461][ T7061] chrdev_open+0x5c5/0x6a0 [ 424.654889][ T7061] do_dentry_open+0x7e9/0x10d0 [ 424.659665][ T7061] path_openat+0x2635/0x2ee0 [ 424.664282][ T7061] do_filp_open+0x1f1/0x430 [ 424.668804][ T7061] do_sys_openat2+0x150/0x4b0 [ 424.673496][ T7061] page last free stack trace: [ 424.678182][ T7061] free_unref_page_prepare+0x8b4/0x9a0 [ 424.683669][ T7061] free_unref_page+0x2e/0x3f0 [ 424.688368][ T7061] __unfreeze_partials+0x1a5/0x200 [ 424.693495][ T7061] put_cpu_partial+0x17c/0x250 [ 424.698275][ T7061] qlist_free_all+0x76/0xe0 [ 424.702786][ T7061] kasan_quarantine_reduce+0x144/0x160 [ 424.708249][ T7061] __kasan_slab_alloc+0x1e/0x80 [ 424.713130][ T7061] slab_post_alloc_hook+0x4b/0x480 [ 424.718252][ T7061] kmem_cache_alloc+0x123/0x2f0 [ 424.723121][ T7061] getname_flags+0xb7/0x500 [ 424.727635][ T7061] user_path_at_empty+0x28/0x60 [ 424.732493][ T7061] do_readlinkat+0xd9/0x490 [ 424.737004][ T7061] __x64_sys_readlink+0x7b/0x90 [ 424.741867][ T7061] do_syscall_64+0x4c/0xa0 [ 424.746311][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.752217][ T7061] [ 424.754553][ T7061] Memory state around the buggy address: [ 424.760194][ T7061] ffff8880763a4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.768265][ T7061] ffff8880763a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.776338][ T7061] >ffff8880763a4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.784417][ T7061] ^ [ 424.790319][ T7061] ffff8880763a4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.798389][ T7061] ffff8880763a4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.806457][ T7061] ================================================================== [ 424.816576][ T4318] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 425.096903][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.139374][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input15 [ 425.139433][ T4318] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 425.161425][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.169459][ T4318] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.201499][ T4318] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.248057][ T4318] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.276477][ T4638] udevd[4638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.293580][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.397617][ T4318] usb 4-1: invalid MIDI out EP 0 [ 425.425208][ T4318] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 425.507961][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.527254][ T14] em28xx 2-1:0.89: Remote control support is not available for this card. [ 425.536101][ T7] em28xx 2-1:0.89: Closing input extension [ 425.542356][ T7] em28xx 2-1:0.89: Deregistering snapshot button [ 425.552597][ T7061] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 425.559822][ T7061] CPU: 0 PID: 7061 Comm: v4l_id Not tainted syzkaller #0 [ 425.566860][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.576926][ T7061] Call Trace: [ 425.580207][ T7061] [ 425.583134][ T7061] dump_stack_lvl+0x188/0x24e [ 425.587835][ T7061] ? memcpy+0x3c/0x60 [ 425.591863][ T7061] ? show_regs_print_info+0x12/0x12 [ 425.597073][ T7061] ? load_image+0x400/0x400 [ 425.601605][ T7061] panic+0x2e5/0x730 [ 425.605514][ T7061] ? bpf_jit_dump+0xd0/0xd0 [ 425.610026][ T7061] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 425.615663][ T7061] ? check_panic_on_warn+0x6c/0xa0 [ 425.620775][ T7061] check_panic_on_warn+0x80/0xa0 [ 425.625730][ T7061] ? v4l2_fh_open+0xc6/0x430 [ 425.630403][ T7061] end_report+0x66/0x110 [ 425.634672][ T7061] kasan_report+0x118/0x140 [ 425.639176][ T7061] ? v4l2_fh_open+0xc6/0x430 [ 425.643774][ T7061] v4l2_fh_open+0xc6/0x430 [ 425.648199][ T7061] em28xx_v4l2_open+0x152/0x990 [ 425.653043][ T7061] ? __lock_acquire+0x7d10/0x7d10 [ 425.658069][ T7061] v4l2_open+0x20b/0x360 [ 425.662316][ T7061] chrdev_open+0x5c5/0x6a0 [ 425.666727][ T7061] ? cd_forget+0x160/0x160 [ 425.671141][ T7061] ? fsnotify_perm+0x39b/0x550 [ 425.675904][ T7061] ? cd_forget+0x160/0x160 [ 425.680318][ T7061] do_dentry_open+0x7e9/0x10d0 [ 425.685085][ T7061] path_openat+0x2635/0x2ee0 [ 425.689697][ T7061] ? verify_lock_unused+0x140/0x140 [ 425.694944][ T7061] ? do_syscall_64+0x4c/0xa0 [ 425.699551][ T7061] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.705626][ T7061] ? do_filp_open+0x430/0x430 [ 425.710316][ T7061] do_filp_open+0x1f1/0x430 [ 425.714864][ T7061] ? vfs_tmpfile+0x480/0x480 [ 425.719467][ T7061] ? _raw_spin_unlock+0x24/0x40 [ 425.724310][ T7061] ? alloc_fd+0x58f/0x630 [ 425.728642][ T7061] do_sys_openat2+0x150/0x4b0 [ 425.733313][ T7061] ? do_sys_open+0xe0/0xe0 [ 425.737740][ T7061] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 425.743727][ T7061] ? lock_chain_count+0x20/0x20 [ 425.748585][ T7061] __x64_sys_openat+0x135/0x160 [ 425.753441][ T7061] do_syscall_64+0x4c/0xa0 [ 425.757863][ T7061] ? clear_bhb_loop+0x60/0xb0 [ 425.762534][ T7061] ? clear_bhb_loop+0x60/0xb0 [ 425.767207][ T7061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.773097][ T7061] RIP: 0033:0x7fca3aea7407 [ 425.777507][ T7061] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 425.797110][ T7061] RSP: 002b:00007ffc2d63a580 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 425.805519][ T7061] RAX: ffffffffffffffda RBX: 00007fca3b64c880 RCX: 00007fca3aea7407 [ 425.813491][ T7061] RDX: 0000000000000000 RSI: 00007ffc2d63bf1c RDI: ffffffffffffff9c [ 425.821470][ T7061] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 425.829436][ T7061] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 425.837399][ T7061] R13: 00007ffc2d63a7d0 R14: 00007fca3b7ab000 R15: 000055b54a3b94d8 [ 425.845375][ T7061] [ 425.848540][ T7061] Kernel Offset: disabled [ 425.852891][ T7061] Rebooting in 86400 seconds..