last executing test programs: 15.205920449s ago: executing program 2 (id=1401): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1200204, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x1, 0xc64, &(0x7f0000001400)="$eJzs3U9sHNd5APDvjZZaUm4iJk4Vu43aTQuksmK5sqSYilW4q5pmG0CWhVDMLQBXIqUuTJEESTWykbZMLz30EKAoesiJQGsUSNHAqIugR7Z1geTiQ5FTT0ILG0HRA1sECFDA2GJm34orirJp8Y8o+/ezyW/2zXuz780MZyhiv3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET8zkvnTz6b7i1Pyw+jNwDAXrg4/vWTpza5/wMAH1+X7/PvfwAAAAAAAAAAAAAAYN9IUcTjkWL+4lqarF53DV5oz968NTE6tnmzoVS1PFDVL78Gnz11+sxXnhs524sf3H6nPRmvjF8+33hx7sb8wvTi4vRUY2K2fXVuqtjyFjZvP/3APTpe7oB6RNycunZtsXHqmdN3rb41/F79sSPD50aeOnG0W/dWY2J0bGy8r05t4IHf/R73y/A4GEWciBRP/+CnqRUR1Q7b5r74kHNntw1VgzheDWJidKwayEy7NbtUrrzU2xFFRKOvUbO3j/bgWGxLM2K57H7Z4ePl8MbnWwutKzPTjUuthaX2Untu9lLq9rYcTyOKOJsiViLidv3ezQ1EEbVI8b3Da+lKRBzo7YcvV4nB9+/H1n+ydkXZz8ZAxErxCByzfaweRbwcKX729rG4Wu6z/BVfini5jD+MeKOML0Sk8sQ4E/HuJucRj6ZaFPFn5fE/t5amqutB77py4RuNr81em+ur27uubO/+0Mlnz57fH4Y2xL2xz69Ng1FEq7rir6UH/2UHAAAAAAAAAAAAAAAAgJ02FEU8GSle+rc/qPKKo8pLP3xu5HeHP3UnZzxFPNHNCr2vFP8Xz0TEcrG1nNyDOYX4UrqU0kPOJf4kG4wi/jDn/32nV7i8T5ITAQAAAAAAAAAAAAAAAAAAPlGK+EmkeP6dY2kl+ucUb89eb1xuXZnpzgrbm/u3N2d6p9PpNFI3NnOczHE5x5UcV3O8nWMUuX2OzRwnc1zOcaWIqEfEan59O8c4kNvn2MxxMsflHFdyXM3xdo5Ry+1zbOY4meNyjitlrK0P+HYuD+nxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7rogi3o8U3/3WWooUEc2IyejG1frD7h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUKqnIt6KFI3fa94pq0VEqv7vOlZ+OxPNg2X8bDRHyvhCNM/n2Kpirfmdh9B/tmcgFfHjSFEffPPOAf9U9/gPdF/dOQ3ijW+vv/qlWjce6K0cfq/+2JHD50bGfuWJ+y2nzTpw/EJ79uatxsTo2Nh4X3Etv/tn+8qG8/sWOzN0ImLxtddfbc3MTC88+EJ5CvRKjm5jO3u8MLQTY9/bhYOxL7qxlwufzufp9rbTyVv5qM2jti92wkNZeIgXJfZMef9/N1L85jv/3rvh937/+4Xu8p07fPz8j9bv/89v3NAu3f8f7yt7Pv82MlCLGFy6MT9wJGJw8bXXT7RvtK5PX5+ePXPy5FdHRr56+uTAwYjBa+1fjYju0sz0yR3YWQAAAAAAAAAAAAAAAAB7KRXx25Gi9eO11IiIW1W+1vC5kadOHD0QB6p8q7vytl4Zv3y+8eLcjfmF6cXF6anGxGz76tzU9FbfbrBK95oYHduVwXyooV3u/9Dgi3Pzry20r//+0qbrDw2ev7K4tNC6uvnqGIoiotlfcrzq8MToWNXpmXZrtmp6adNkuo9uIBXxH5Hi6plG+mIuy/l/GzP878r/X964oV3K//tMX1n5nikV8fNI8Rt//kR8sernobhnn+V6fx0pjp/9Qq4XB8t6vT50nyvQzQws6/5PpPj79++u28uHfHy97rNb3rGPiPL4H44Ub/3p9+PXclntruc/bH78D23c0BaPf+ePN7T7kOP/ub6yQ3c9r2Bnxv9JVx7/E5HihcffjF/PZbUPeP5H79kbx3LlO8/n2KWf/05fo+HqfT39AwAAAAAAAAAAIPLnv/4mUhwdq6XnctlWPv83tXFDu/T5r8/3lU2tf/6vvpuT94QppgAAAAD4mBhIRfwkUlxfevNODvXd+d99+Z+/tf6HsdG0YW31d75PV88N2Mm///Ubzu87uf1hAwAAAAAAAAAAAAAAAAAAwL6SUhHP5fnUJzeZT30oYrHI9VYjxUv/9XSul46U9XrzwA9X3wcvzs2eOD8zM3e1tdS6MjPdGJ9vXZ0u234uUqz91Rdy26KaX7073/zBO33pzcW+ECnG/rZXtzsXe29u8u584N252Mu6n4kU//l3d9ftzWP9i+t1T5V1/zJSfPMfN697ZL3u6bLu9yPFj77Z6NU9VNbtPR/18+t1n7k651GhAAAAAAAAAAAAAAAAAAAAbN9AKuJPIsV/31i5k8uf5/8f6HtZeePbffP9b3Crmud/uJr//37LDzL///C9Ld7vdEV0Dj/gqAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYH9LUcTrkWL+4lparZevuwYvtGdv3poYHdu82VCqWh6o6pdfg8+eOn3mK8+NnO3FD26/056MV8Yvn2+8OHdjfmF6cXF6qjEx2746NzW95S1st/1Gx6sd0Ljx6s2pa9cWG6eeOX3X6lvD79UfOzJ8buSpE0d7dSdGx8bG++rUBh743e+R7lN+MIr4i0jx9A9+mv6pHlHE9vfFh5w7u22oGsTxahATo2PVQGbardmlcuWl3o4oIhp9jZq9fbQHx2JbmhHLZffLDh8vhzc+31poXZmZblxqLSy1l9pzs5dSt7fleBpRxNkUsRIRt+v3bm4ging1Unzv8Fr653rEgd5++PLF8a+fPHX/fhS7OMYtKPvZGIhYKR6BY7aP1aOIf4gUP3v7WPxLPaIW3a/4UsTLZfxhxBvRPd6pPDHORLy7yXnEo6kWRfxvefzPraW36+X1oHddufCNxteW3uqv27uuPPL3h720z69Ng1HEj6or/lr6Vz/XAAAAAAAAAAAAAAAAAPtIEb8cKZ5/51iq8oN7SdEL7dnrjcutKzPdtL5e7l9vdafT6TRSNzZTt2Qyv17OcSXH1Rxv5xhFbp9js4yDnc5kfr2c40qOq8V6snHV/kBun2Mzx8kcl3NcyXE1x9s5Ri23z7GZ42SOyzmu5Lia4+0cY5/k7gEAAAAAAAAAAAAAAAAAAB8vRfVfiu9+ay116t35pSfLFc3O4YfdN3bf/wcAAP//wY7pwg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, 0x0, 0x0) r3 = getpgrp(0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') lseek(r5, 0x1000000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip6_vti0\x00', 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000100)={'wlan1\x00', {0x2, 0x4e21, @multicast1}}) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 12.844966165s ago: executing program 2 (id=1409): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48}, {0x6, 0xba, 0x12, 0xffff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 11.617354675s ago: executing program 2 (id=1417): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0}) 7.16529033s ago: executing program 2 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0', 0xb) io_uring_setup(0x3ced, &(0x7f0000000540)={0x0, 0xf822, 0x1, 0x1, 0x38e}) close(0x3) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}}, 0x8840) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 7.092748472s ago: executing program 1 (id=1438): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(0x0, 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='01234', 0x5) close(0xffffffffffffffff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, 0x0, 0x0) r1 = open(0x0, 0x241, 0x1ff) write(r1, 0x0, 0x0) symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x0) 7.037019783s ago: executing program 1 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000e00)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0285628, &(0x7f00000001c0)={0x39, 0x2, 0x0, "444900e1b0faa9b000"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') 6.432756737s ago: executing program 1 (id=1441): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r6 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@generic={0x71, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 6.203657113s ago: executing program 4 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc001, 0x4, 0x6, 0x0, 0x8, 0x0, 0xa, 0x2, 0x9, 0x12, 0x5, 0x40}, {0x9, 0x2, 0x1, 0x7, 0x7, 0x0, 0xc, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x2}, {0x5, 0x3, 0x38, 0xb, 0x84, 0x7, 0x3, 0x50, 0xc, 0x3, 0x4, 0x1, 0x20024a9}], 0x81}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd7, 0x8, 0x61, 0x200006000001, 0x400000000000005, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x7, 0x400000000, 0x6, 0xf739], 0x8000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.982103128s ago: executing program 1 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 5.93345047s ago: executing program 2 (id=1445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) accept4$llc(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf21, 0x2d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7f}, @NL80211_ATTR_IE={0x42, 0x2a, [@preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x9, 0x7a, 0xfac5, @device_a, 0x7, @void, 0xfff, 0x8001, 0x1, [{{0x1}, @broadcast, 0xfffffffe}]}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x3, @device_b, 0x2, 0x8, 0x10001}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x73}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) bind(r1, &(0x7f0000000300)=@generic={0xb, "0000000000000100000000000000000000000000000000000000000000000000000000000000ed0000000200000000000000000700000000000004000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000001000"}, 0x80) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000080)) 4.998431252s ago: executing program 1 (id=1447): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = syz_open_dev$vim2m(0x0, 0x2000142, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0x0, 0x3, 0x9002, 0x9, 0x1, 0x8, 0x8, 0x9, 0xba3, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab58baeda525e1a8deffafde25"}) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) r5 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f0000000080)=0xffffffff, 0x4) 4.997740622s ago: executing program 3 (id=1448): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 4.893362404s ago: executing program 4 (id=1449): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(0x0, 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='01234', 0x5) close(0xffffffffffffffff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, 0x0, 0x0) r1 = open(0x0, 0x241, 0x1ff) write(r1, 0x0, 0x0) symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlink(&(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x0) 4.849513415s ago: executing program 3 (id=1450): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) pipe2$watch_queue(&(0x7f0000009b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) recvfrom$inet(r2, 0x0, 0x0, 0x40002022, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', r1, r2, 0x0, 0x2, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280)=0x3, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@bsdgroups}, {@noauto_da_alloc}, {@orlov}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$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") 4.823251806s ago: executing program 0 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0285628, &(0x7f00000001c0)={0x39, 0x2, 0x0, "444900e1b0faa9b000"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') 4.468350164s ago: executing program 0 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYRES32=r6]) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x74) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, 0x0, 0x0) 2.769589034s ago: executing program 4 (id=1453): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087", 0x5d}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.673275577s ago: executing program 2 (id=1454): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x84) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x4, 0x20, 0xfffffffffffffffc}, 0x2f) 2.587310569s ago: executing program 3 (id=1455): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@generic={0x71, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 2.11965356s ago: executing program 3 (id=1456): statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) 1.944243954s ago: executing program 0 (id=1457): execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.857356336s ago: executing program 4 (id=1458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="760033008000e100ffffffffffff08021100000050505050505000"/36], 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0xfffffffa) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x200c}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r7 = syz_open_pts(r5, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) ioctl$TCFLSH(r7, 0x540b, 0x2) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x84448c08}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) 837.230601ms ago: executing program 0 (id=1459): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4078) 819.348691ms ago: executing program 3 (id=1460): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 761.887232ms ago: executing program 1 (id=1461): syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) migrate_pages(0x0, 0xfc, &(0x7f0000000080)=0xffffffffffff6df7, &(0x7f0000000240)=0x1) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$key(0xf, 0x3, 0x2) write$binfmt_script(r3, 0x0, 0x6f4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r4, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x14a}}, './file0\x00'}) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '+#(]&(\\)\''}, {0x20, 'syzkaller\x00'}, {0x20, 'syzkaller\x00'}]}, 0x2d) 761.472642ms ago: executing program 4 (id=1462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0285628, &(0x7f00000001c0)={0x39, 0x2, 0x0, "444900e1b0faa9b000"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') 761.247292ms ago: executing program 0 (id=1463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='usb3503 0x08\n\x00', 0xd) accept4$inet6(r4, 0x0, &(0x7f00000001c0), 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0x08\n\x00', 0x5) write(r0, &(0x7f0000000180), 0x0) 682.379034ms ago: executing program 3 (id=1464): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x9, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x6000000, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9197, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x2007, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x200, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x6c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1f73, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xcaa, 0x10006, 0x0, 0xfffffff7, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xc0, 0x39, {0xffffffffffffffff}, {0xee01}, 0x1, 0x2}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 477.233159ms ago: executing program 0 (id=1465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff870013e000000200000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=1466): write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYRES8], 0x21, 0x554e, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@desc={0x1, 0x0, @desc4}}) kernel console output (not intermixed with test programs): bad mount option "./file0" or missing value [ 75.577888][ T4445] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 75.668840][ T4453] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 75.683005][ T4453] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 76.355869][ T4445] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 76.379632][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.569778][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.591985][ T4443] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 76.615575][ T4443] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 76.628695][ T4443] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.42: Failed to acquire dquot type 1 [ 76.651649][ T4443] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 76.851294][ T4443] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 76.929963][ T4443] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.42: Failed to acquire dquot type 1 [ 77.042310][ T4443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.42: bg 0: block 248: padding at end of block bitmap is not set [ 77.152339][ T4443] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 77.216171][ T4443] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 77.270222][ T4443] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.354015][ T4443] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.42: Failed to acquire dquot type 1 [ 77.440000][ T4443] EXT4-fs (loop1): 1 orphan inode deleted [ 77.551050][ T4443] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 77.572466][ T4443] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.662162][ T4490] usb3503 0-0008: unknown mode is requested [ 77.668352][ T4490] usb3503 0-0008: usb3503_probe: probed in standby mode [ 77.677724][ T4490] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 77.689081][ T4490] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 78.581657][ T4500] set_capacity_and_notify: 5 callbacks suppressed [ 78.581674][ T4500] loop0: detected capacity change from 0 to 128 [ 78.869057][ T4500] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 79.115370][ T4500] hpfs: filesystem error: improperly stopped [ 79.333887][ T4500] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 79.515128][ T4500] hpfs: You really don't want any checks? You are crazy... [ 79.544630][ T4508] loop2: detected capacity change from 0 to 512 [ 79.560843][ T4500] hpfs: Code page index out of array [ 79.576014][ T4500] hpfs: code page support is disabled [ 79.582744][ T4500] hpfs: hpfs_map_4sectors(): unaligned read [ 79.589131][ T4500] hpfs: hpfs_map_4sectors(): unaligned read [ 79.595471][ T4500] hpfs: filesystem error: unable to find root dir [ 79.810967][ T4515] loop1: detected capacity change from 0 to 1024 [ 79.818877][ T4508] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.59: inode has both inline data and extents flags [ 79.890365][ T4516] usb3503 0-0008: unknown mode is requested [ 79.896511][ T4516] usb3503 0-0008: usb3503_probe: probed in standby mode [ 79.904028][ T4516] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 79.912921][ T4516] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 79.931640][ T4508] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.59: couldn't read orphan inode 15 (err -117) [ 79.984650][ T4515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 80.000978][ T4515] System zones: 0-1, 3-8 [ 80.026780][ T4515] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,. Quota mode: none. [ 80.034029][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.056594][ T4515] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.137341][ T26] audit: type=1800 audit(1787541277.914:8): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.61" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 80.689523][ T4519] loop0: detected capacity change from 0 to 32768 [ 80.776032][ T4536] usb3503 0-0008: unknown mode is requested [ 80.782467][ T4536] usb3503 0-0008: usb3503_probe: probed in standby mode [ 80.792268][ T4536] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 80.804218][ T4536] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 81.069245][ T4528] loop4: detected capacity change from 0 to 4096 [ 81.463880][ T4528] ntfs3: Unknown parameter 'windows_names' [ 81.504019][ T4519] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 81.538342][ T4519] JBD2: Ignoring recovery information on journal [ 81.678121][ T4528] loop4: detected capacity change from 0 to 64 [ 81.806569][ T4519] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 81.879270][ T4528] hfs: unable to load iocharset "cM—„o" [ 81.919488][ T4528] hfs: unable to parse mount options [ 82.042705][ T4519] syz.0.62 (4519) used greatest stack depth: 18816 bytes left [ 82.090946][ T4548] loop2: detected capacity change from 0 to 164 [ 82.162891][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 82.263602][ T4551] loop3: detected capacity change from 0 to 4096 [ 82.281511][ T4528] loop4: detected capacity change from 0 to 2048 [ 82.344343][ T4528] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 82.373558][ T4551] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 82.381901][ T4548] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 82.414269][ T4548] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 82.436737][ T26] audit: type=1800 audit(1787541280.262:9): pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.71" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 82.665381][ T4559] loop1: detected capacity change from 0 to 64 [ 82.716630][ T4557] EXT4-fs (loop0): Ignoring removed bh option [ 82.741389][ T4557] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.72: inode #13: comm syz.0.72: iget: illegal inode # [ 82.796548][ T4557] EXT4-fs (loop0): Remounting filesystem read-only [ 82.803784][ T4557] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.72: couldn't read orphan inode 13 (err -117) [ 82.854550][ T4557] EXT4-fs (loop0): Remounting filesystem read-only [ 82.871840][ T4557] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,. Quota mode: none. [ 83.332136][ T4575] SQUASHFS error: zlib decompression failed, data probably corrupt [ 83.340578][ T4575] SQUASHFS error: Failed to read block 0x9b: -5 [ 83.346973][ T4575] SQUASHFS error: Unable to read metadata cache entry [99] [ 83.354325][ T4575] SQUASHFS error: Unable to read inode 0x127 [ 84.482188][ C0] sched: RT throttling activated [ 85.794826][ T4592] usb3503 0-0008: unknown mode is requested [ 85.801059][ T4592] usb3503 0-0008: usb3503_probe: probed in standby mode [ 85.810747][ T4592] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 85.822330][ T4592] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 86.384483][ T4589] set_capacity_and_notify: 2 callbacks suppressed [ 86.384500][ T4589] loop2: detected capacity change from 0 to 4096 [ 86.516039][ T1111] cfg80211: failed to load regulatory.db [ 86.559454][ T4597] loop0: detected capacity change from 0 to 256 [ 86.658293][ T4598] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.959078][ T4597] exfat: Deprecated parameter 'utf8' [ 86.987571][ T4597] exfat: Deprecated parameter 'namecase' [ 87.020948][ T4597] exfat: Deprecated parameter 'namecase' [ 87.136863][ T4597] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 87.246754][ T4585] loop4: detected capacity change from 0 to 32768 [ 87.328783][ T4585] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.82 (4585) [ 87.368024][ T4604] loop2: detected capacity change from 0 to 4096 [ 87.453222][ T4585] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 87.476228][ T4585] BTRFS info (device loop4): enabling ssd optimizations [ 87.526661][ T4585] BTRFS info (device loop4): not using ssd optimizations [ 87.533773][ T4585] BTRFS info (device loop4): turning off barriers [ 87.602139][ T4585] BTRFS info (device loop4): using free space tree [ 87.622217][ T4585] BTRFS info (device loop4): has skinny extents [ 88.278864][ T4604] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.374000][ T4602] loop1: detected capacity change from 0 to 32768 [ 88.798595][ T4641] loop3: detected capacity change from 0 to 8 [ 90.453417][ T4641] SQUASHFS error: zlib decompression failed, data probably corrupt [ 90.461952][ T4641] SQUASHFS error: Failed to read block 0x9b: -5 [ 90.468266][ T4641] SQUASHFS error: Unable to read metadata cache entry [99] [ 90.475752][ T4641] SQUASHFS error: Unable to read inode 0x127 [ 91.612609][ T4662] loop3: detected capacity change from 0 to 16 [ 91.679794][ T4662] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 92.402703][ T4690] usb3503 0-0008: unknown mode is requested [ 92.408758][ T4690] usb3503 0-0008: usb3503_probe: probed in standby mode [ 92.417656][ T4690] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 92.429681][ T4690] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 94.543891][ T4724] loop1: detected capacity change from 0 to 512 [ 94.552863][ T4717] loop3: detected capacity change from 0 to 4096 [ 94.635511][ T4725] loop2: detected capacity change from 0 to 8 [ 94.853857][ T4724] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 94.895364][ T4725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 94.903485][ T4725] SQUASHFS error: Failed to read block 0x9b: -5 [ 94.909882][ T4725] SQUASHFS error: Unable to read metadata cache entry [99] [ 94.917488][ T4725] SQUASHFS error: Unable to read inode 0x127 [ 96.501180][ T4717] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 96.875508][ T4734] loop2: detected capacity change from 0 to 16 [ 96.947480][ T4734] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.027998][ T4732] loop1: detected capacity change from 0 to 8192 [ 97.044264][ T4191] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 97.061965][ T4736] loop4: detected capacity change from 0 to 4096 [ 97.212603][ T4732] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.435002][ T4744] usb3503 0-0008: unknown mode is requested [ 97.441088][ T4744] usb3503 0-0008: usb3503_probe: probed in standby mode [ 97.451206][ T4744] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 97.463549][ T4744] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 99.612840][ T4761] jffs2: notice: (4761) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.816548][ T4750] loop1: detected capacity change from 0 to 4096 [ 99.850676][ T4768] loop3: detected capacity change from 0 to 1024 [ 100.042997][ T4768] EXT4-fs (loop3): Ignoring removed bh option [ 100.147699][ T4776] loop0: detected capacity change from 0 to 8 [ 102.226837][ T4750] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 102.681998][ T4776] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.690320][ T4776] SQUASHFS error: Failed to read block 0x9b: -5 [ 102.696771][ T4776] SQUASHFS error: Unable to read metadata cache entry [99] [ 102.704108][ T4776] SQUASHFS error: Unable to read inode 0x127 [ 102.769771][ T4768] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 103.350859][ T4785] loop4: detected capacity change from 0 to 2048 [ 103.606330][ T4796] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.647629][ T4788] loop1: detected capacity change from 0 to 512 [ 103.797158][ T4798] usb3503 0-0008: unknown mode is requested [ 103.803352][ T4798] usb3503 0-0008: usb3503_probe: probed in standby mode [ 103.811925][ T4798] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 103.824718][ T4798] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 103.958332][ T4788] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.359713][ T4795] loop0: detected capacity change from 0 to 4096 [ 104.375566][ T4788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 104.488013][ T4788] Quota error (device loop1): write_blk: dquota write failed [ 104.495526][ T4788] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 104.518039][ T4788] Quota error (device loop1): write_blk: dquota write failed [ 104.552098][ T4788] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 104.581405][ T4788] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.125: Failed to acquire dquot type 1 [ 104.611652][ T4788] EXT4-fs (loop1): 1 truncate cleaned up [ 104.637332][ T4788] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,max_batch_time=0x0000000000000005,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 104.650858][ T4795] ntfs3: Unknown parameter 'windows_names' [ 105.039553][ T4795] loop0: detected capacity change from 0 to 128 [ 105.193472][ T4789] loop3: detected capacity change from 0 to 32768 [ 105.314197][ T4813] loop4: detected capacity change from 0 to 1024 [ 105.325047][ T4795] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 105.371598][ T4789] XFS (loop3): Mounting V5 Filesystem [ 105.375501][ T4795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.448156][ T4789] XFS (loop3): Ending clean mount [ 105.459073][ T4813] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.596823][ T26] audit: type=1800 audit(1788065591.820:10): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.128" name="file1" dev="loop0" ino=104 res=0 errno=0 [ 105.714873][ T4829] loop2: detected capacity change from 0 to 256 [ 106.173877][ T4829] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 106.309793][ T4191] XFS (loop3): Unmounting Filesystem [ 106.598471][ T4832] loop4: detected capacity change from 0 to 2048 [ 106.705558][ T4832] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 106.812265][ T4832] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 106.829174][ T4832] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 106.867797][ T4832] UDF-fs: Scanning with blocksize 512 failed [ 106.978476][ T4832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.121072][ T4838] loop2: detected capacity change from 0 to 8 [ 107.580517][ T4825] loop1: detected capacity change from 0 to 32768 [ 108.096637][ T26] audit: type=1800 audit(1788589882.357:11): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.136" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 108.165566][ T4838] SQUASHFS error: zlib decompression failed, data probably corrupt [ 108.173870][ T4838] SQUASHFS error: Failed to read block 0x9b: -5 [ 108.180601][ T4838] SQUASHFS error: Unable to read metadata cache entry [99] [ 108.188093][ T4838] SQUASHFS error: Unable to read inode 0x127 [ 110.063185][ T4856] usb3503 0-0008: unknown mode is requested [ 110.069477][ T4856] usb3503 0-0008: usb3503_probe: probed in standby mode [ 110.078459][ T4856] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 110.090638][ T4856] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 110.633042][ T4858] loop2: detected capacity change from 0 to 64 [ 111.632620][ T4869] loop0: detected capacity change from 0 to 256 [ 111.894892][ T4871] loop2: detected capacity change from 0 to 164 [ 111.942928][ T4871] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 111.982073][ T4871] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 112.000054][ T4874] loop0: detected capacity change from 0 to 64 [ 112.043295][ T4871] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 112.184959][ T4862] loop4: detected capacity change from 0 to 32768 [ 112.310284][ T4862] XFS (loop4): Mounting V5 Filesystem [ 112.426474][ T4865] loop1: detected capacity change from 0 to 32768 [ 112.462920][ T4862] XFS (loop4): Ending clean mount [ 112.484175][ T26] audit: type=1800 audit(1788589886.873:12): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.145" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 112.512364][ T4862] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 112.578089][ T4865] XFS (loop1): Mounting V5 Filesystem [ 112.684399][ T4865] XFS (loop1): Ending clean mount [ 112.788848][ T4896] XFS (loop4): User initiated shutdown received. [ 112.818669][ T4896] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 112.876719][ T4896] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 112.890777][ T4190] XFS (loop1): Unmounting Filesystem [ 113.046543][ T4186] XFS (loop4): Unmounting Filesystem [ 113.243856][ T4904] loop0: detected capacity change from 0 to 8 [ 113.362328][ T4904] SQUASHFS error: zlib decompression failed, data probably corrupt [ 113.370550][ T4904] SQUASHFS error: Failed to read block 0x9b: -5 [ 113.377332][ T4904] SQUASHFS error: Unable to read metadata cache entry [99] [ 113.384598][ T4904] SQUASHFS error: Unable to read inode 0x127 [ 113.480386][ T4903] loop3: detected capacity change from 0 to 2048 [ 114.117135][ T4886] loop2: detected capacity change from 0 to 32768 [ 115.225512][ T4903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.463938][ T4920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.712906][ T4329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.967651][ T4329] usb 1-1: Using ep0 maxpacket: 32 [ 117.085937][ T4329] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.112780][ T4935] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.271542][ T4329] usb 1-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 117.295251][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.334633][ T4329] usb 1-1: Product: syz [ 117.348973][ T4329] usb 1-1: Manufacturer: syz [ 117.368426][ T4329] usb 1-1: SerialNumber: syz [ 117.426868][ T4329] usb 1-1: config 0 descriptor?? [ 117.603377][ T4939] device syzkaller0 entered promiscuous mode [ 117.829407][ T4329] usb 1-1: USB disconnect, device number 2 [ 118.513634][ T4952] loop3: detected capacity change from 0 to 8 [ 120.134864][ T4952] SQUASHFS error: zlib decompression failed, data probably corrupt [ 120.142993][ T4952] SQUASHFS error: Failed to read block 0x9b: -5 [ 120.720355][ T4952] SQUASHFS error: Unable to read metadata cache entry [99] [ 120.728647][ T4952] SQUASHFS error: Unable to read inode 0x127 [ 121.496509][ T4966] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.011161][ T4976] usb3503 0-0008: unknown mode is requested [ 122.017315][ T4976] usb3503 0-0008: usb3503_probe: probed in standby mode [ 122.025468][ T4976] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 122.037054][ T4976] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 123.004145][ T4963] loop0: detected capacity change from 0 to 32768 [ 125.133640][ T5005] loop2: detected capacity change from 0 to 8 [ 127.011434][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 127.031255][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 127.051070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 127.080885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 127.100620][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 127.120437][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 127.140350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 127.160083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 127.179892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 127.199806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 128.559326][ T5007] loop0: detected capacity change from 0 to 1024 [ 128.633151][ T5009] binder: BINDER_SET_CONTEXT_MGR already set [ 128.647545][ T5009] binder: 5008:5009 ioctl 4018620d 200000004a80 returned -16 [ 128.699245][ T5007] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.001912][ T5032] loop3: detected capacity change from 0 to 4096 [ 130.058833][ T5032] ntfs3: Unknown parameter 'windows_names' [ 130.776142][ T5045] loop0: detected capacity change from 0 to 512 [ 131.016355][ T5045] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 131.077283][ T5025] loop4: detected capacity change from 0 to 40427 [ 131.115789][ T5052] loop1: detected capacity change from 0 to 8 [ 131.350556][ T5045] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 131.450352][ T5052] SQUASHFS error: zlib decompression failed, data probably corrupt [ 131.458716][ T5052] SQUASHFS error: Failed to read block 0x9b: -5 [ 131.465037][ T5052] SQUASHFS error: Unable to read metadata cache entry [99] [ 131.472337][ T5052] SQUASHFS error: Unable to read inode 0x127 [ 131.514729][ T5025] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64) [ 131.673056][ T5025] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 131.809606][ T5045] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.877223][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.883764][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.897817][ T5025] F2FS-fs (loop4): invalid crc value [ 131.979555][ T5025] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 133.989886][ T5025] F2FS-fs (loop4): recover fsync data on readonly fs [ 134.001929][ T5025] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 134.009384][ T5025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.072124][ T5059] loop3: detected capacity change from 0 to 4096 [ 134.103008][ T5070] loop0: detected capacity change from 0 to 1024 [ 134.116658][ T5059] ntfs3: Unknown parameter 'windows_names' [ 134.226401][ T5070] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.690220][ T7] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 137.704212][ T7] lpc_ich 0000:00:00.0: No MFD cells added [ 137.723757][ T7] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 137.731607][ T7] lpc_ich 0000:00:01.0: No MFD cells added [ 137.780459][ T7] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 137.811152][ T7] lpc_ich 0000:00:05.0: No MFD cells added [ 137.979804][ T5103] Config c/1 of g1 needs at least one function. [ 138.028987][ T5103] udc dummy_udc.0: failed to start g1: -22 [ 138.962628][ T5117] loop0: detected capacity change from 0 to 8 [ 139.811175][ T5117] SQUASHFS error: zlib decompression failed, data probably corrupt [ 139.819464][ T5117] SQUASHFS error: Failed to read block 0x9b: -5 [ 139.826099][ T5117] SQUASHFS error: Unable to read metadata cache entry [99] [ 139.833477][ T5117] SQUASHFS error: Unable to read inode 0x127 [ 142.881061][ T5149] overlayfs: failed to resolve './file0': -2 [ 142.984910][ T5140] loop4: detected capacity change from 0 to 4096 [ 143.154772][ T5140] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.262887][ T26] audit: type=1800 audit(1789114206.124:13): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.222" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 143.464739][ T5154] loop3: detected capacity change from 0 to 1024 [ 143.992508][ T5154] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.460574][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.730637][ T5173] loop2: detected capacity change from 0 to 8 [ 144.901447][ T5173] SQUASHFS error: zlib decompression failed, data probably corrupt [ 144.909660][ T5173] SQUASHFS error: Failed to read block 0x9b: -5 [ 144.916535][ T5173] SQUASHFS error: Unable to read metadata cache entry [99] [ 144.923837][ T5173] SQUASHFS error: Unable to read inode 0x127 [ 145.510424][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 145.656135][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.677191][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.727233][ T1111] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 145.757859][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.806099][ T1111] usb 2-1: config 0 descriptor?? [ 146.321667][ T1111] savu 0003:1E7D:2D5A.0001: ignoring exceeding usage max [ 146.360966][ T5180] binder: BINDER_SET_CONTEXT_MGR already set [ 146.368651][ T1111] savu 0003:1E7D:2D5A.0001: item fetching failed at offset 6/8 [ 146.383272][ T5180] binder: 5179:5180 ioctl 4018620d 200000004a80 returned -16 [ 146.398909][ T1111] savu 0003:1E7D:2D5A.0001: parse failed [ 146.414427][ T1111] savu: probe of 0003:1E7D:2D5A.0001 failed with error -22 [ 146.578986][ T4330] usb 2-1: USB disconnect, device number 2 [ 147.144127][ T5192] loop3: detected capacity change from 0 to 512 [ 147.412301][ T5198] overlayfs: failed to resolve './file0': -2 [ 150.037819][ T5220] loop4: detected capacity change from 0 to 1024 [ 150.534667][ T5220] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.239015][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.532244][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 151.662554][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.704190][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.732244][ T1111] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 151.771874][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.829036][ T1111] usb 4-1: config 0 descriptor?? [ 152.294341][ T5245] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 152.311111][ T5245] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 152.348078][ T1111] savu 0003:1E7D:2D5A.0002: ignoring exceeding usage max [ 152.366465][ T1111] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 6/8 [ 152.386682][ T1111] savu 0003:1E7D:2D5A.0002: parse failed [ 152.395702][ T1111] savu: probe of 0003:1E7D:2D5A.0002 failed with error -22 [ 152.571200][ T1111] usb 4-1: USB disconnect, device number 2 [ 152.812338][ T5259] kernel profiling enabled (shift: 7) [ 154.037872][ T5269] loop3: detected capacity change from 0 to 256 [ 154.066224][ T5269] exfat: Bad value for 'dmask' [ 155.321731][ T5278] usb3503 0-0008: unknown mode is requested [ 155.328302][ T5278] usb3503 0-0008: usb3503_probe: probed in standby mode [ 155.336049][ T5278] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 156.925604][ T5294] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 158.268055][ T5294] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 161.823962][ T5335] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 161.895081][ T5336] loop4: detected capacity change from 0 to 8 [ 164.203439][ T5336] SQUASHFS error: zlib decompression failed, data probably corrupt [ 164.211788][ T5336] SQUASHFS error: Failed to read block 0x9b: -5 [ 164.218161][ T5336] SQUASHFS error: Unable to read metadata cache entry [99] [ 164.225426][ T5336] SQUASHFS error: Unable to read inode 0x127 [ 168.349319][ T4674] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.818249][ T4674] usb 5-1: Using ep0 maxpacket: 32 [ 168.935945][ T4674] usb 5-1: config 250 has an invalid interface number: 46 but max is 0 [ 168.944263][ T4674] usb 5-1: config 250 has no interface number 0 [ 168.990680][ T4674] usb 5-1: config 250 interface 46 has no altsetting 0 [ 169.278088][ T4674] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=cb.2d [ 169.287312][ T4674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.310634][ T4674] usb 5-1: Product: syz [ 169.315209][ T4674] usb 5-1: Manufacturer: syz [ 169.322286][ T4674] usb 5-1: SerialNumber: syz [ 169.629948][ T5382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.318489][ T4674] usb 5-1: bad CDC descriptors [ 170.370516][ T4674] usb 5-1: USB disconnect, device number 2 [ 172.336824][ T5423] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 172.433659][ T5392] loop1: detected capacity change from 0 to 32768 [ 172.684157][ T5392] XFS (loop1): Mounting V5 Filesystem [ 172.754517][ T5392] XFS (loop1): Ending clean mount [ 173.062156][ T5443] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 175.197460][ T5458] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 175.215874][ T5458] cramfs: wrong magic [ 175.482446][ T4190] XFS (loop1): Unmounting Filesystem [ 175.502466][ T5458] netlink: 88 bytes leftover after parsing attributes in process `syz.2.307'. [ 175.900946][ T5476] loop4: detected capacity change from 0 to 164 [ 176.170408][ T5476] rock: directory entry would overflow storage [ 176.176805][ T5476] rock: sig=0x66, size=4, remaining=3 [ 176.546372][ T5476] rock: directory entry would overflow storage [ 176.552878][ T5476] rock: sig=0x66, size=4, remaining=3 [ 176.635957][ T5476] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.704742][ T5484] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.872859][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 180.919197][ T5539] loop1: detected capacity change from 0 to 512 [ 180.980538][ T5539] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 181.026647][ T5539] EXT4-fs (loop1): invalid journal inode [ 181.071350][ T5539] EXT4-fs (loop1): can't get journal size [ 181.141529][ T5539] EXT4-fs (loop1): 1 truncate cleaned up [ 181.155871][ T5539] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none. [ 181.384279][ T5555] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 181.392534][ T1111] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 181.406712][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.420926][ T1111] usb 4-1: Product: syz [ 181.425133][ T1111] usb 4-1: Manufacturer: syz [ 181.441630][ T1111] usb 4-1: SerialNumber: syz [ 181.558319][ T5559] 9pnet: Insufficient options for proto=fd [ 181.734514][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.859649][ T1111] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 182.269210][ T1111] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 182.497128][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.530193][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.567521][ T1111] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 182.568367][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.619965][ T1111] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 183.217451][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.227094][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.251986][ T13] usb 3-1: config 0 descriptor?? [ 183.582875][ T1111] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.595947][ T1111] lan78xx: probe of 4-1:1.0 failed with error -71 [ 183.643090][ T1111] usb 4-1: USB disconnect, device number 3 [ 184.071750][ T13] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 184.104876][ T13] plantronics 0003:047F:FFFF.0003: parse failed [ 184.111277][ T13] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 184.271279][ T1111] Bluetooth: hci2: command 0x0406 tx timeout [ 184.277442][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 184.294003][ T5591] bridge0: port 3(syz_tun) entered blocking state [ 184.294038][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 184.307136][ T5591] bridge0: port 3(syz_tun) entered disabled state [ 184.323449][ T5591] device syz_tun entered promiscuous mode [ 184.331952][ T5591] bridge0: port 3(syz_tun) entered blocking state [ 184.338782][ T5591] bridge0: port 3(syz_tun) entered forwarding state [ 184.494298][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 184.569444][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 184.658334][ T4328] usb 3-1: USB disconnect, device number 2 [ 186.552900][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 186.767822][ T5627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.961315][ T5631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.978022][ T5631] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 187.004960][ T5631] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 189.248718][ T5667] syz.0.361 uses obsolete (PF_INET,SOCK_PACKET) [ 189.752266][ T5681] tmpfs: Unknown parameter 'usrquota' [ 190.693496][ T5689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.591810][ T5696] kvm [5695]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 191.602280][ T5696] kvm [5695]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 191.619822][ T5696] APIC base relocation is unsupported by KVM [ 191.773882][ T5703] device syzkaller0 entered promiscuous mode [ 191.937480][ T5710] loop1: detected capacity change from 0 to 8 [ 193.753382][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.753460][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.736894][ T5703] tipc: Started in network mode [ 194.736973][ T5703] tipc: Node identity 1a4b495addf3, cluster identity 4711 [ 194.737507][ T5703] tipc: Enabled bearer , priority 0 [ 194.789450][ T5710] SQUASHFS error: zlib decompression failed, data probably corrupt [ 194.789522][ T5710] SQUASHFS error: Failed to read block 0x9b: -5 [ 194.789541][ T5710] SQUASHFS error: Unable to read metadata cache entry [99] [ 194.789556][ T5710] SQUASHFS error: Unable to read inode 0x127 [ 194.797029][ T4216] rpcbind: server 127.0.0.1 not responding, timed out [ 194.895196][ T5703] tipc: Resetting bearer [ 194.962385][ T5701] tipc: Resetting bearer [ 195.018533][ T5701] tipc: Disabling bearer [ 197.038470][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 197.099216][ T5747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.107122][ T5747] IPv6: NLM_F_CREATE should be set when creating new route [ 197.172157][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 197.227392][ T5752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.570083][ T5773] loop3: detected capacity change from 0 to 1024 [ 198.739327][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 198.747337][ T5773] hfsplus: request for non-existent node 33423360 in B*Tree [ 199.557783][ T4674] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 200.095994][ T4674] usb 2-1: Using ep0 maxpacket: 32 [ 200.226302][ T4674] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.272988][ T4674] usb 2-1: config 0 has no interface number 0 [ 200.458023][ T4674] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 200.619961][ T4674] usb 2-1: config 0 interface 1 has no altsetting 0 [ 200.934092][ T4674] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 200.957309][ T4674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.008316][ T4674] usb 2-1: Product: syz [ 201.032461][ T4674] usb 2-1: Manufacturer: syz [ 201.045897][ T4674] usb 2-1: SerialNumber: syz [ 201.514926][ T5803] sctp: failed to load transform for md5: -2 [ 201.582015][ T4674] usb 2-1: config 0 descriptor?? [ 202.691473][ T4674] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 202.728507][ T4674] cx231xx 2-1:0.1: Failed to read PCB config [ 202.734732][ T4674] cx231xx: probe of 2-1:0.1 failed with error -71 [ 202.761151][ T4674] usb 2-1: USB disconnect, device number 3 [ 202.884828][ T5837] device syzkaller0 entered promiscuous mode [ 202.920820][ T5837] tipc: Started in network mode [ 202.926279][ T5837] tipc: Node identity e6a47cba459e, cluster identity 4711 [ 202.940850][ T5839] loop2: detected capacity change from 0 to 1024 [ 202.948974][ T5837] tipc: Enabled bearer , priority 0 [ 202.972744][ T5837] tipc: Resetting bearer [ 202.997457][ T5836] tipc: Resetting bearer [ 203.025417][ T5836] tipc: Disabling bearer [ 203.070701][ T5839] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.309403][ T4674] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.655443][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 203.883136][ T5858] device syzkaller0 entered promiscuous mode [ 203.973008][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 204.275548][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.384363][ T21] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 204.436668][ T21] usb 1-1: config 0 has no interface number 0 [ 204.502191][ T21] usb 1-1: config 0 interface 213 has no altsetting 0 [ 204.763090][ T21] usb 1-1: New USB device found, idVendor=3993, idProduct=7e17, bcdDevice=9e.a8 [ 204.787189][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.805898][ T21] usb 1-1: Product: syz [ 204.810113][ T21] usb 1-1: Manufacturer: syz [ 204.862190][ T21] usb 1-1: SerialNumber: syz [ 204.884261][ T21] usb 1-1: config 0 descriptor?? [ 205.207008][ T4660] Bluetooth: hci2: command 0x2021 tx timeout [ 205.265575][ T5888] loop2: detected capacity change from 0 to 1024 [ 205.330661][ T5888] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.531585][ T21] usb 1-1: Found UVC 0.02 device syz (3993:7e17) [ 205.538044][ T21] usb 1-1: No valid video chain found. [ 206.225847][ T21] usb 1-1: USB disconnect, device number 3 [ 207.638259][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.709087][ T5906] capability: warning: `syz.4.421' uses 32-bit capabilities (legacy support in use) [ 207.728323][ T5914] device batadv_slave_1 entered promiscuous mode [ 207.811336][ T5901] loop2: detected capacity change from 0 to 512 [ 207.936601][ T5901] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 207.982159][ T5901] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.512656][ T5929] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 208.580364][ T5929] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 209.093915][ T5936] loop2: detected capacity change from 0 to 1024 [ 209.228749][ T5940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.265325][ T5936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.273664][ T5945] device gretap1 entered promiscuous mode [ 209.665005][ T5957] netlink: 64 bytes leftover after parsing attributes in process `syz.1.443'. [ 210.783175][ T5968] loop3: detected capacity change from 0 to 1024 [ 210.975389][ T5968] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.104008][ T5970] usb3503 0-0008: unknown mode is requested [ 211.110248][ T5970] usb3503 0-0008: usb3503_probe: probed in standby mode [ 211.119440][ T5970] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 211.207274][ T5970] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 211.361345][ T26] audit: type=1326 audit(1791735715.214:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.455027][ T26] audit: type=1326 audit(1791735715.266:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.478887][ T5979] loop3: detected capacity change from 0 to 1024 [ 211.479311][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.598637][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.610128][ T26] audit: type=1326 audit(1791735715.286:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.636557][ T26] audit: type=1326 audit(1791735715.266:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82ef9a9e57 code=0x7ffc0000 [ 211.661228][ T26] audit: type=1326 audit(1791735715.286:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.685254][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.693594][ T26] audit: type=1326 audit(1791735715.286:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82ef951459 code=0x7ffc0000 [ 211.717617][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.725023][ T26] audit: type=1326 audit(1791735715.286:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.750124][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.758609][ T26] audit: type=1326 audit(1791735715.286:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.782794][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.848573][ T26] audit: type=1326 audit(1791735715.286:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ef9b00d9 code=0x7ffc0000 [ 211.883646][ T26] audit: type=1326 audit(1791735715.286:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.2.447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82ef97090e code=0x7ffc0000 [ 212.911840][ T5998] tmpfs: Unknown parameter 'sizÁe' [ 213.977542][ T5981] loop1: detected capacity change from 0 to 32768 [ 213.996273][ T6010] usb3503 0-0008: unknown mode is requested [ 214.002343][ T6010] usb3503 0-0008: usb3503_probe: probed in standby mode [ 214.009758][ T6010] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 214.019685][ T6010] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 215.666268][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.738136][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.812443][ T6033] bond0 (unregistering): Released all slaves [ 216.160468][ T6043] device syzkaller0 entered promiscuous mode [ 216.491588][ T6052] loop4: detected capacity change from 0 to 1024 [ 216.813005][ T6052] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.640937][ T6102] loop2: detected capacity change from 0 to 1024 [ 217.741805][ T6102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.843524][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 217.974669][ T6115] overlayfs: missing 'lowerdir' [ 219.996754][ T6104] loop3: detected capacity change from 0 to 32768 [ 220.266595][ T6104] XFS (loop3): Mounting V5 Filesystem [ 220.394859][ T6104] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 220.484988][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 220.497495][ T6104] XFS (loop3): Starting recovery (logdev: internal) [ 220.565287][ T6104] XFS (loop3): Ending recovery (logdev: internal) [ 220.621288][ T6167] loop4: detected capacity change from 0 to 1024 [ 220.642405][ T4191] XFS (loop3): Unmounting Filesystem [ 220.749199][ T6167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.810285][ T6173] capability: warning: `syz.1.499' uses deprecated v2 capabilities in a way that may be insecure [ 220.838691][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.856332][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.873319][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.887652][ T4231] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.899009][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.061007][ T4231] usb 3-1: config 0 descriptor?? [ 221.599572][ T4231] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 221.625139][ T4231] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 221.671216][ T6195] overlayfs: missing 'lowerdir' [ 221.809855][ T4660] usb 3-1: USB disconnect, device number 3 [ 222.004061][ T6203] fido_id[6203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 222.480692][ T6220] loop1: detected capacity change from 0 to 1024 [ 222.690734][ T6220] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.258175][ T6236] overlayfs: missing 'lowerdir' [ 223.399518][ T6237] loop2: detected capacity change from 0 to 8 [ 223.466076][ T6237] SQUASHFS error: zlib decompression failed, data probably corrupt [ 223.474271][ T6237] SQUASHFS error: Failed to read block 0x9b: -5 [ 223.482256][ T6237] SQUASHFS error: Unable to read metadata cache entry [99] [ 223.490024][ T6237] SQUASHFS error: Unable to read inode 0x127 [ 224.539856][ T6266] loop1: detected capacity change from 0 to 1024 [ 224.818221][ T6266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.894478][ T6278] loop2: detected capacity change from 0 to 128 [ 225.019580][ T6283] loop3: detected capacity change from 0 to 256 [ 225.226560][ T6278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.250271][ T6278] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.738105][ T6278] fscrypt: Error allocating hmac(sha512): -2 [ 229.117904][ T6338] loop2: detected capacity change from 0 to 1024 [ 229.384690][ T6338] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.557694][ T6366] loop2: detected capacity change from 0 to 32768 [ 232.561011][ T6396] loop1: detected capacity change from 0 to 1024 [ 232.655109][ T6366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.558 (6366) [ 232.679990][ T6396] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.693353][ T6366] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 232.708807][ T6366] BTRFS info (device loop2): enabling auto defrag [ 232.724411][ T6366] BTRFS info (device loop2): force clearing of disk cache [ 232.740364][ T6366] BTRFS info (device loop2): turning on sync discard [ 232.754637][ T6366] BTRFS info (device loop2): enabling disk space caching [ 232.770037][ T6366] BTRFS info (device loop2): setting nodatacow, compression disabled [ 232.787475][ T6366] BTRFS info (device loop2): disk space caching is enabled [ 233.055699][ T6366] BTRFS info (device loop2): has skinny extents [ 233.197634][ T6373] loop4: detected capacity change from 0 to 32768 [ 233.389329][ T6373] XFS (loop4): Mounting V5 Filesystem [ 233.622449][ T6366] BTRFS info (device loop2): enabling ssd optimizations [ 233.633292][ T6373] XFS (loop4): Ending clean mount [ 233.651389][ T6366] BTRFS info (device loop2): clearing free space tree [ 233.710125][ T6366] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.816979][ T6366] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.433121][ T4186] XFS (loop4): Unmounting Filesystem [ 234.733329][ T6486] loop3: detected capacity change from 0 to 512 [ 234.902924][ T6486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.586: missing EA_INODE flag [ 235.036573][ T6486] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.586: error while reading EA inode 2 err=-117 [ 235.102837][ T6486] EXT4-fs (loop3): 1 orphan inode deleted [ 235.117845][ T6486] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 235.144356][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 235.302880][ T6486] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 235.333527][ T6503] loop1: detected capacity change from 0 to 1024 [ 235.355184][ T6486] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.586: mark_inode_dirty error [ 235.434117][ T6486] EXT4-fs error (device loop3): ext4_get_max_inline_size:115: inode #15: comm syz.3.586: can't get inode location 15 [ 235.492532][ T6503] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 235.498208][ T6486] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 235.519110][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.542891][ T6486] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.586: mark_inode_dirty error [ 235.584466][ T6503] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.610186][ T6486] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 235.681172][ T6486] EXT4-fs error (device loop3): ext4_splice_branch:479: inode #15: comm syz.3.586: mark_inode_dirty error [ 235.712764][ T6503] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.589: lblock 0 mapped to illegal pblock 0 (length 1) [ 235.718410][ T6515] kvm: pic: non byte write [ 235.770299][ T6486] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 235.789410][ T6515] kvm: pic: non byte write [ 235.796927][ T6486] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.586: mark_inode_dirty error [ 235.812242][ T6515] kvm: pic: non byte write [ 235.818575][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 235.821813][ T6515] kvm: pic: non byte write [ 235.832115][ T6515] kvm: pic: non byte write [ 235.842829][ T6515] kvm: pic: non byte write [ 235.847558][ T6486] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 15: block 36:freeing already freed block (bit 36); block bitmap corrupt. [ 235.862876][ T6515] kvm: pic: non byte write [ 235.863923][ T6515] kvm: pic: single mode not supported [ 235.864118][ T6515] kvm: pic: level sensitive irq not supported [ 235.891697][ T6519] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.589: Freeing blocks not in datazone - block = 0, count = 1 [ 235.898098][ T6401] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 235.927637][ T6515] kvm: pic: non byte write [ 235.929949][ T6503] loop_set_status: loop1 () has still dirty pages (nrpages=128) [ 235.946336][ T6515] kvm: pic: single mode not supported [ 235.946355][ T6515] kvm: pic: level sensitive irq not supported [ 236.003998][ T6515] kvm: pic: non byte write [ 236.037459][ T6515] kvm: pic: non byte write [ 237.481495][ T6527] ODEBUG: Out of memory. ODEBUG disabled [ 237.534819][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 237.700640][ T6531] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.709516][ T6531] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 237.718077][ T6531] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 237.777796][ T13] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 237.803201][ T13] usb 3-1: config 0 has no interface number 0 [ 237.825376][ T13] usb 3-1: config 0 interface 12 has no altsetting 0 [ 237.998889][ T13] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 238.018565][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.046699][ T13] usb 3-1: Product: syz [ 238.063969][ T13] usb 3-1: Manufacturer: syz [ 238.068649][ T13] usb 3-1: SerialNumber: syz [ 238.104601][ T13] usb 3-1: config 0 descriptor?? [ 239.748267][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'. [ 239.821616][ T6534] loop3: detected capacity change from 0 to 32768 [ 239.824073][ T13] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 239.824151][ T13] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 239.824169][ T13] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 239.824231][ T13] f81534: probe of 3-1:0.12 failed with error -71 [ 239.837139][ T13] usb 3-1: USB disconnect, device number 4 [ 241.607797][ T6581] loop4: detected capacity change from 0 to 1024 [ 241.749124][ T6581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.793528][ T6590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.269583][ T6599] binder: 6593:6599 ioctl c0306201 0 returned -14 [ 243.319834][ T6605] loop1: detected capacity change from 0 to 512 [ 243.553535][ T6616] loop2: detected capacity change from 0 to 256 [ 243.710812][ T6620] lo speed is unknown, defaulting to 1000 [ 243.717500][ T6620] lo speed is unknown, defaulting to 1000 [ 243.736291][ T6620] lo speed is unknown, defaulting to 1000 [ 243.773932][ T6620] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.805487][ T6616] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 243.858939][ T6605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.889561][ T6620] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 243.942142][ T6620] lo speed is unknown, defaulting to 1000 [ 243.950269][ T6620] lo speed is unknown, defaulting to 1000 [ 243.955631][ T6616] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 243.968121][ T6620] lo speed is unknown, defaulting to 1000 [ 243.975944][ T6620] lo speed is unknown, defaulting to 1000 [ 243.982221][ T6620] lo speed is unknown, defaulting to 1000 [ 244.007038][ T6605] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.340893][ T6616] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 245.363160][ T6616] UDF-fs: Scanning with blocksize 512 failed [ 245.443485][ T6616] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 245.509395][ T6616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.857699][ T6646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.867045][ T6646] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 245.875394][ T6646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.990402][ T6641] loop2: detected capacity change from 0 to 256 [ 246.015568][ T6638] usb3503 0-0008: unknown mode is requested [ 246.021838][ T6638] usb3503 0-0008: usb3503_probe: probed in standby mode [ 246.030146][ T6638] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 246.035727][ T6641] exfat: Deprecated parameter 'namecase' [ 246.044927][ T6638] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 246.136558][ T6641] exfat: Deprecated parameter 'namecase' [ 246.160632][ T6641] exfat: Deprecated parameter 'utf8' [ 246.183789][ T6654] binder: BINDER_SET_CONTEXT_MGR already set [ 246.189830][ T6654] binder: 6650:6654 ioctl 4018620d 200000004a80 returned -16 [ 246.255640][ T6641] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 246.260858][ T6654] binder: 6650:6654 ioctl c0306201 0 returned -14 [ 246.330646][ T6641] overlayfs: filesystem on './file0' not supported [ 246.739105][ T6667] usb3503 0-0008: unknown mode is requested [ 246.745099][ T6667] usb3503 0-0008: usb3503_probe: probed in standby mode [ 246.752415][ T6667] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 246.764123][ T6667] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 250.546325][ T6688] loop4: detected capacity change from 0 to 1024 [ 250.559204][ T6690] loop3: detected capacity change from 0 to 256 [ 250.608931][ T6690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 250.672352][ T6693] overlayfs: unrecognized mount option "/" or missing value [ 250.785651][ T6688] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.742579][ T6712] binder: 6707:6712 ioctl c0306201 0 returned -14 [ 252.013863][ T6714] usb3503 0-0008: unknown mode is requested [ 252.019959][ T6714] usb3503 0-0008: usb3503_probe: probed in standby mode [ 252.027131][ T6714] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 252.036429][ T6714] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 253.018902][ T6728] device syzkaller0 entered promiscuous mode [ 253.208205][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.470626][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 253.684875][ T23] usb 1-1: config 0 has no interfaces? [ 253.850474][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.863477][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.872109][ T23] usb 1-1: Product: syz [ 253.876536][ T23] usb 1-1: Manufacturer: syz [ 253.887108][ T23] usb 1-1: SerialNumber: syz [ 253.898541][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 254.198819][ T6736] loop1: detected capacity change from 0 to 1024 [ 254.310862][ T6736] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.433726][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 255.080465][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 255.134301][ T6755] loop2: detected capacity change from 0 to 8192 [ 255.931929][ T4318] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 255.940878][ T6770] syz.1.670 (6770) used greatest stack depth: 17584 bytes left [ 256.227674][ T6788] loop2: detected capacity change from 0 to 1024 [ 256.253625][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 256.272898][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.329708][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.341471][ T6785] loop3: detected capacity change from 0 to 8192 [ 256.533401][ T4318] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 256.651555][ T6785] loop3: p1 < > p3 p4 < > [ 256.659363][ T23] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 256.794371][ T6785] loop3: p3 start 986112 is beyond EOD, truncated [ 257.083524][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 257.495370][ T4318] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 257.517141][ T4318] usb 1-1: can't read configurations, error -61 [ 257.529917][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 257.545011][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 257.664491][ T4318] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 257.713187][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 257.870441][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.876862][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.904566][ T6828] device syzkaller0 entered promiscuous mode [ 257.926275][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 258.092612][ T4318] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 258.100465][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 258.115763][ T4318] usb 1-1: can't read configurations, error -61 [ 258.129767][ T4318] usb usb1-port1: attempt power cycle [ 258.384012][ T23] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 258.406810][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.415660][ T23] usb 3-1: Product: syz [ 258.420033][ T23] usb 3-1: Manufacturer: syz [ 258.435947][ T23] usb 3-1: SerialNumber: syz [ 258.523116][ T23] usb 3-1: config 0 descriptor?? [ 258.545700][ T6839] loop1: detected capacity change from 0 to 256 [ 258.566454][ T4318] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 258.615518][ T6839] exfat: Bad value for 'dmask' [ 258.712247][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 259.987668][ T4318] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 259.995654][ T4318] usb 1-1: can't read configurations, error -71 [ 260.345960][ T23] usb 3-1: USB disconnect, device number 5 [ 260.400213][ T6856] loop3: detected capacity change from 0 to 256 [ 261.090500][ T6865] loop2: detected capacity change from 0 to 2048 [ 261.686495][ T6865] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 262.048075][ T6865] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 262.148046][ T6873] device syzkaller0 entered promiscuous mode [ 263.686835][ T4318] usb 5-1: USB disconnect, device number 3 [ 264.134283][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 264.205793][ T6873] tipc: Enabled bearer , priority 0 [ 264.253538][ T6872] tipc: Resetting bearer [ 264.386061][ T6872] tipc: Disabling bearer [ 264.418569][ T6889] loop3: detected capacity change from 0 to 512 [ 264.441349][ T6889] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.699448][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.710938][ T13] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 264.723239][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.732230][ T6889] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 264.743959][ T6889] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 264.755973][ T6889] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 264.856627][ T13] usb 2-1: config 0 descriptor?? [ 265.167152][ T6904] overlayfs: missing 'workdir' [ 265.202862][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 265.208896][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 265.232249][ T13] usb 2-1: USB disconnect, device number 5 [ 265.278757][ T6908] loop4: detected capacity change from 0 to 2048 [ 265.318792][ T6908] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 265.363409][ T6908] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 265.702913][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 266.085649][ T13] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 268.084214][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 268.096427][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.338654][ T13] usb 2-1: string descriptor 0 read error: -71 [ 268.417887][ T13] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 268.546273][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.721157][ T13] usb 2-1: can't set config #1, error -71 [ 268.826361][ T13] usb 2-1: USB disconnect, device number 6 [ 270.030574][ T4674] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.071189][ T6938] overlayfs: missing 'workdir' [ 270.395858][ T4674] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 270.432037][ T4674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.603111][ T6940] loop2: detected capacity change from 0 to 2048 [ 270.749175][ T6940] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 270.781035][ T4674] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 270.815329][ T6940] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 272.782729][ T6947] loop4: detected capacity change from 0 to 4096 [ 272.790202][ T6932] Set syz1 is full, maxelem 65536 reached [ 272.850539][ T6947] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 273.179692][ T6947] ntfs3: loop4: try to read out of volume at offset 0x103000 [ 273.238861][ T6947] ntfs3: loop4: Failed to load $Volume. [ 275.617157][ T6973] overlayfs: failed to resolve './bus': -2 [ 275.838910][ T6977] overlayfs: missing 'workdir' [ 276.330304][ T6988] bridge0: port 3(syz_tun) entered blocking state [ 276.337387][ T6988] bridge0: port 3(syz_tun) entered disabled state [ 276.354165][ T6988] device syz_tun entered promiscuous mode [ 276.361779][ T6988] bridge0: port 3(syz_tun) entered blocking state [ 276.368339][ T6988] bridge0: port 3(syz_tun) entered forwarding state [ 277.510082][ T7001] tmpfs: Unknown parameter 'usrquota' [ 278.189913][ T23] usb 2-1: USB disconnect, device number 7 [ 278.756895][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 278.756911][ T26] audit: type=1326 audit(1793832935.766:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 279.175442][ T26] audit: type=1326 audit(1793832935.797:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 279.352225][ T7016] overlayfs: conflicting lowerdir path [ 279.527792][ T26] audit: type=1326 audit(1793832935.797:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 279.574566][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 279.811786][ T26] audit: type=1326 audit(1793832935.797:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 279.993375][ T23] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 280.060282][ T26] audit: type=1326 audit(1793832935.797:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 280.251375][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.281652][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.424372][ T23] usb 5-1: Product: syz [ 280.458250][ T26] audit: type=1326 audit(1793832935.797:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 280.504151][ T23] usb 5-1: Manufacturer: syz [ 280.560356][ T23] usb 5-1: SerialNumber: syz [ 280.693101][ T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.738616][ T26] audit: type=1326 audit(1793832935.797:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2d71400d9 code=0x7ffc0000 [ 281.018216][ T7037] device syzkaller0 entered promiscuous mode [ 281.185443][ T7035] tipc: Enabled bearer , priority 0 [ 281.397822][ T7035] tipc: Resetting bearer [ 281.505882][ T7034] tipc: Resetting bearer [ 281.600279][ T7034] tipc: Disabling bearer [ 281.680816][ T4235] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 281.963963][ T7024] udc-core: couldn't find an available UDC or it's busy [ 282.045570][ T7024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.156064][ T4318] usb 5-1: USB disconnect, device number 4 [ 282.844171][ T4235] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 282.863821][ T4235] ath9k_htc: Failed to initialize the device [ 282.893043][ T4318] usb 5-1: ath9k_htc: USB layer deinitialized [ 283.339480][ T4318] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 283.605842][ T7054] loop4: detected capacity change from 0 to 512 [ 283.767282][ T7054] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.786762][ T7054] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.289651][ T7078] loop4: detected capacity change from 0 to 1024 [ 284.337132][ T7059] loop1: detected capacity change from 0 to 32768 [ 284.398002][ T7059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.770 (7059) [ 284.470504][ T7059] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 284.518553][ T7059] BTRFS info (device loop1): using free space tree [ 284.569888][ T7059] BTRFS info (device loop1): has skinny extents [ 284.595917][ T7078] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.659103][ T7082] usb3503 0-0008: unknown mode is requested [ 284.665169][ T7082] usb3503 0-0008: usb3503_probe: probed in standby mode [ 284.672466][ T7082] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 284.682052][ T7082] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 285.159093][ T7074] loop3: detected capacity change from 0 to 32768 [ 285.253594][ T7103] netlink: 64 bytes leftover after parsing attributes in process `syz.4.780'. [ 285.300471][ T7074] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 285.408561][ T7074] JBD2: Ignoring recovery information on journal [ 285.878306][ T7059] BTRFS info (device loop1): enabling ssd optimizations [ 287.438709][ T7074] JBD2: recovery failed [ 287.454102][ T7074] (syz.3.775,7074,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 287.499109][ T7125] loop4: detected capacity change from 0 to 1024 [ 287.518350][ T7074] (syz.3.775,7074,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 287.528010][ T7074] (syz.3.775,7074,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 287.536013][ T7074] (syz.3.775,7074,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 287.596951][ T7074] (syz.3.775,7074,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 288.472109][ T7125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.073499][ T7143] loop4: detected capacity change from 0 to 1024 [ 289.240826][ T7143] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.436905][ T7148] usb3503 0-0008: unknown mode is requested [ 289.442911][ T7148] usb3503 0-0008: usb3503_probe: probed in standby mode [ 289.450158][ T7148] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 289.459558][ T7148] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 289.941873][ T7162] jffs2: notice: (7162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.912015][ T7179] loop4: detected capacity change from 0 to 2048 [ 291.047671][ T7179] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 292.009819][ T7179] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 292.121569][ T7179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.305422][ T7190] usb3503 0-0008: unknown mode is requested [ 292.311508][ T7190] usb3503 0-0008: usb3503_probe: probed in standby mode [ 292.319882][ T7190] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 292.328574][ T7190] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 292.512944][ T7193] usb3503 0-0008: unknown mode is requested [ 292.518892][ T7193] usb3503 0-0008: usb3503_probe: probed in standby mode [ 292.526431][ T7193] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 292.535604][ T7193] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 292.636961][ T7197] loop4: detected capacity change from 0 to 1024 [ 292.877151][ T7197] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.595213][ T7224] loop1: detected capacity change from 0 to 1024 [ 293.947450][ T7224] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.899608][ T26] audit: type=1800 audit(1795405817.134:92): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.820" name="c_srate" dev="configfs" ino=41830 res=0 errno=0 [ 295.997681][ T7243] usb3503 0-0008: unknown mode is requested [ 296.003717][ T7243] usb3503 0-0008: usb3503_probe: probed in standby mode [ 296.012941][ T7243] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 296.022234][ T7243] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 296.090188][ T7248] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 296.437835][ T7251] loop3: detected capacity change from 0 to 1024 [ 296.636361][ T7259] overlayfs: unrecognized mount option "/" or missing value [ 296.805686][ T7251] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.278509][ T7264] loop4: detected capacity change from 0 to 1024 [ 298.070845][ T7264] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.042120][ T26] audit: type=1326 audit(1795930108.359:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.114595][ T26] audit: type=1326 audit(1795930108.359:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.256018][ T26] audit: type=1326 audit(1795930108.359:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.366019][ T26] audit: type=1326 audit(1795930108.359:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.390127][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.505072][ T26] audit: type=1326 audit(1795930108.359:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.710392][ T7289] usb3503 0-0008: unknown mode is requested [ 299.716369][ T7289] usb3503 0-0008: usb3503_probe: probed in standby mode [ 299.723047][ T26] audit: type=1326 audit(1795930108.359:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.723708][ T7289] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 299.763729][ T7289] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 299.950367][ T26] audit: type=1326 audit(1795930108.359:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.975431][ T26] audit: type=1326 audit(1795930108.369:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 299.999852][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.443271][ T26] audit: type=1326 audit(1795930108.369:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 300.468191][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.286202][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 301.389028][ T7316] overlayfs: unrecognized mount option "/" or missing value [ 302.759015][ T26] audit: type=1326 audit(1795930108.369:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 302.783351][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.034197][ T7311] device bridge0 entered promiscuous mode [ 303.101942][ T26] audit: type=1326 audit(1795930108.369:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.127165][ T26] audit: type=1326 audit(1795930108.369:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.157486][ T26] audit: type=1326 audit(1795930108.369:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.178231][ T7311] device macvtap1 entered promiscuous mode [ 303.186390][ T26] audit: type=1326 audit(1795930108.369:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.212848][ T26] audit: type=1326 audit(1795930108.369:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.221478][ T7320] loop4: detected capacity change from 0 to 1024 [ 303.237458][ T26] audit: type=1326 audit(1795930108.369:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.275708][ T26] audit: type=1326 audit(1795930108.369:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.305769][ T26] audit: type=1326 audit(1795930108.369:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.331278][ T26] audit: type=1326 audit(1795930108.369:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.0.831" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1342f050d9 code=0x7ffc0000 [ 303.356429][ T7317] device bridge0 left promiscuous mode [ 303.362154][ T7317] device macvtap1 left promiscuous mode [ 303.714853][ T7320] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 305.442297][ T7354] overlayfs: unrecognized mount option "/" or missing value [ 306.333169][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 306.342481][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 306.345325][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 306.348037][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 306.348807][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 306.362575][ T7366] 9pnet_virtio: no channels available for device syz [ 307.662019][ T7374] md: personality for level is not loaded! [ 307.679878][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 307.925068][ T7388] loop2: detected capacity change from 0 to 1024 [ 308.139495][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 308.219797][ T7388] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.497313][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 308.507339][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.600619][ T7405] input: syz0 as /devices/virtual/input/input6 [ 308.634506][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 308.642625][ T7] pvrusb2: ********** [ 308.654846][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 308.661656][ T7406] loop3: detected capacity change from 0 to 1024 [ 308.671833][ T7] pvrusb2: Important functionality might not be entirely working. [ 308.681421][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 308.699780][ T7] pvrusb2: ********** [ 308.708838][ T7406] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 308.789461][ T2424] pvrusb2: Invalid write control endpoint [ 308.805341][ T7406] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 309.157358][ T7372] pvrusb2: Invalid write control endpoint [ 309.327157][ T4674] usb 5-1: USB disconnect, device number 6 [ 309.719983][ T7425] loop2: detected capacity change from 0 to 64 [ 309.792376][ T2424] pvrusb2: Invalid write control endpoint [ 309.800650][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 309.814584][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 309.823360][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 309.870853][ T2424] pvrusb2: Device being rendered inoperable [ 309.906262][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 309.951205][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 310.051323][ T2424] pvrusb2: Attached sub-driver cx25840 [ 310.058250][ T7432] loop3: detected capacity change from 0 to 1024 [ 310.063585][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 310.106183][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 310.211951][ T7432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.187107][ T7442] device syzkaller0 entered promiscuous mode [ 311.312683][ T7450] loop3: detected capacity change from 0 to 1024 [ 311.481136][ T7450] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.822798][ T7461] usb3503 0-0008: unknown mode is requested [ 311.828773][ T7461] usb3503 0-0008: usb3503_probe: probed in standby mode [ 311.836889][ T7461] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 311.846096][ T7461] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 313.060192][ T7476] lo speed is unknown, defaulting to 1000 [ 313.066357][ T7476] lo speed is unknown, defaulting to 1000 [ 313.076393][ T7476] lo speed is unknown, defaulting to 1000 [ 313.122078][ T7476] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.179595][ T7476] lo speed is unknown, defaulting to 1000 [ 313.194760][ T7476] lo speed is unknown, defaulting to 1000 [ 313.209422][ T7476] lo speed is unknown, defaulting to 1000 [ 313.234891][ T7476] lo speed is unknown, defaulting to 1000 [ 313.246206][ T7476] lo speed is unknown, defaulting to 1000 [ 313.756021][ T7492] loop4: detected capacity change from 0 to 1024 [ 314.105778][ T7499] overlayfs: unrecognized mount option "/" or missing value [ 314.596577][ T7492] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.969242][ T7511] usb3503 0-0008: unknown mode is requested [ 314.975394][ T7511] usb3503 0-0008: usb3503_probe: probed in standby mode [ 314.982785][ T7511] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 314.992185][ T7511] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 316.220111][ T7528] loop2: detected capacity change from 0 to 1024 [ 316.300770][ T7528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.956066][ T7545] overlayfs: unrecognized mount option "/" or missing value [ 317.414339][ T7544] loop2: detected capacity change from 0 to 1024 [ 317.675084][ T7548] loop1: detected capacity change from 0 to 512 [ 317.726724][ T7544] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.969641][ T7548] EXT4-fs (loop1): inline encryption not supported [ 318.020103][ T7548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 318.152450][ T7548] EXT4-fs (loop1): 1 truncate cleaned up [ 318.163528][ T7548] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 318.265536][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.271865][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.371069][ T7563] usb3503 0-0008: unknown mode is requested [ 320.377093][ T7563] usb3503 0-0008: usb3503_probe: probed in standby mode [ 320.384395][ T7563] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 320.392758][ T7563] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 320.690559][ T7573] loop3: detected capacity change from 0 to 1024 [ 321.209086][ T7573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.506770][ T7579] Set syz1 is full, maxelem 65536 reached [ 322.667923][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 322.692471][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 322.701645][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 322.711102][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 322.720299][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 322.766296][ T7601] 9pnet_virtio: no channels available for device syz [ 323.426075][ T7624] loop1: detected capacity change from 0 to 1024 [ 323.517120][ T7619] usb3503 0-0008: unknown mode is requested [ 323.523128][ T7619] usb3503 0-0008: usb3503_probe: probed in standby mode [ 323.531072][ T7619] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 323.540301][ T7619] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 323.681944][ T7624] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.715153][ T7637] device syzkaller0 entered promiscuous mode [ 324.004222][ T7637] tipc: Enabled bearer , priority 0 [ 324.391879][ T7651] tipc: Resetting bearer [ 324.600480][ T7631] tipc: Resetting bearer [ 325.728323][ T7631] tipc: Disabling bearer [ 326.087587][ T4231] tipc: Node number set to 3350743386 [ 328.267514][ T7689] loop2: detected capacity change from 0 to 1024 [ 330.087312][ T7689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.017223][ T7711] device syzkaller0 entered promiscuous mode [ 331.053457][ T7711] tipc: Started in network mode [ 331.078361][ T7711] tipc: Node identity 3e20158d73db, cluster identity 4711 [ 331.115340][ T7711] tipc: Enabled bearer , priority 0 [ 331.169685][ T7713] tipc: Resetting bearer [ 331.436212][ T7710] tipc: Resetting bearer [ 331.779420][ T7684] Set syz1 is full, maxelem 65536 reached [ 331.948670][ T7710] tipc: Disabling bearer [ 334.380909][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.979'. [ 334.648545][ T7772] device syzkaller0 entered promiscuous mode [ 334.719376][ T7772] tipc: Started in network mode [ 334.762098][ T7772] tipc: Node identity 529daad6c97a, cluster identity 4711 [ 334.802188][ T7772] tipc: Enabled bearer , priority 0 [ 334.853588][ T7781] tipc: Resetting bearer [ 335.271257][ T7771] tipc: Resetting bearer [ 335.800674][ T7794] loop2: detected capacity change from 0 to 1024 [ 335.832877][ T7771] tipc: Disabling bearer [ 335.992111][ T4677] tipc: Node number set to 2615651030 [ 336.039835][ T7794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.575898][ T7815] usb3503 0-0008: unknown mode is requested [ 336.581943][ T7815] usb3503 0-0008: usb3503_probe: probed in standby mode [ 336.593357][ T7815] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 336.602554][ T7815] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 336.866854][ T7823] loop3: detected capacity change from 0 to 2048 [ 336.969892][ T7823] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 337.204560][ T7823] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 339.243992][ T7849] loop3: detected capacity change from 0 to 1024 [ 340.378023][ T7849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.648371][ T7870] usb3503 0-0008: unknown mode is requested [ 340.654514][ T7870] usb3503 0-0008: usb3503_probe: probed in standby mode [ 340.661746][ T7870] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 340.670390][ T7870] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 341.327146][ T7885] loop2: detected capacity change from 0 to 2048 [ 341.451705][ T7885] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 341.679350][ T7885] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 344.262501][ T7917] usb3503 0-0008: unknown mode is requested [ 344.268751][ T7917] usb3503 0-0008: usb3503_probe: probed in standby mode [ 344.276020][ T7917] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 344.284916][ T7917] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 345.052451][ T7936] loop3: detected capacity change from 0 to 512 [ 345.241514][ T7936] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1029: inode has both inline data and extents flags [ 345.259265][ T7936] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1029: couldn't read orphan inode 15 (err -117) [ 345.274438][ T7936] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.921847][ T7946] loop1: detected capacity change from 0 to 2048 [ 345.966060][ T7916] loop4: detected capacity change from 0 to 32768 [ 346.104506][ T7946] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 347.078743][ T7916] [ 347.078743][ T7916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.078743][ T7916] [ 347.134354][ T7946] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 348.742007][ T4186] [ 348.742007][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.742007][ T4186] [ 348.791121][ T4186] [ 348.791121][ T4186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 348.791121][ T4186] [ 349.505689][ T7983] loop3: detected capacity change from 0 to 1024 [ 349.666189][ T7985] usb3503 0-0008: unknown mode is requested [ 349.672172][ T7985] usb3503 0-0008: usb3503_probe: probed in standby mode [ 349.679494][ T7985] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 349.688735][ T7985] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 349.752905][ T7989] loop4: detected capacity change from 0 to 2048 [ 349.808437][ T7989] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 349.837826][ T7989] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 350.105050][ T7983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 352.704895][ T8022] overlayfs: failed to resolve './file0': -2 [ 353.018368][ T8028] usb3503 0-0008: unknown mode is requested [ 353.024329][ T8028] usb3503 0-0008: usb3503_probe: probed in standby mode [ 353.031445][ T8028] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 353.040540][ T8028] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 353.224653][ T8040] loop1: detected capacity change from 0 to 2048 [ 353.514329][ T8040] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 353.566580][ T8040] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 354.785010][ T8061] overlayfs: failed to resolve './file0': -2 [ 355.356445][ T8065] i2c i2c-0: delete_device: Can't find device in list [ 355.852845][ T8076] overlayfs: unrecognized mount option "/" or missing value [ 356.892311][ T8087] loop3: detected capacity change from 0 to 2048 [ 356.980803][ T8087] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 357.010055][ T8087] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 357.126945][ T8094] loop1: detected capacity change from 0 to 1024 [ 357.542899][ T8099] overlayfs: failed to resolve './file0': -2 [ 357.786368][ T8094] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.011391][ T8131] device syzkaller0 entered promiscuous mode [ 360.153583][ T8127] tipc: Started in network mode [ 360.153639][ T8127] tipc: Node identity 3606c45dd252, cluster identity 4711 [ 360.154191][ T8127] tipc: Enabled bearer , priority 0 [ 360.178703][ T8127] tipc: Resetting bearer [ 360.197173][ T8126] tipc: Resetting bearer [ 360.397745][ T8137] i2c i2c-0: delete_device: Can't find device in list [ 360.447333][ T8126] tipc: Disabling bearer [ 360.788755][ T8156] loop3: detected capacity change from 0 to 1024 [ 361.605519][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.632922][ T8169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 363.211599][ T8193] loop3: detected capacity change from 0 to 64 [ 363.271720][ T8197] tipc: Enabling of bearer rejected, failed to enable media [ 364.539066][ T8213] loop3: detected capacity change from 0 to 1024 [ 364.765320][ T8213] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.905264][ T8218] i2c i2c-0: delete_device: Can't find device in list [ 365.505536][ T8240] loop4: detected capacity change from 0 to 1024 [ 366.339626][ T8240] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.810191][ T8250] device syzkaller0 entered promiscuous mode [ 366.845678][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 366.856258][ T8250] tipc: Enabled bearer , priority 0 [ 366.868946][ T8259] loop3: detected capacity change from 0 to 1024 [ 366.907836][ T8250] tipc: Resetting bearer [ 366.933280][ T8248] tipc: Resetting bearer [ 366.951627][ T8248] tipc: Disabling bearer [ 367.116778][ T8261] i2c i2c-0: delete_device: Can't find device in list [ 367.228147][ T8259] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.244013][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 368.324590][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.346261][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.620564][ T8280] overlayfs: missing 'lowerdir' [ 368.745796][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.205170][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.213755][ T23] usb 2-1: Product: syz [ 369.218048][ T23] usb 2-1: Manufacturer: syz [ 369.222684][ T23] usb 2-1: SerialNumber: syz [ 369.485710][ T8290] i2c i2c-0: delete_device: Can't find device in list [ 369.644271][ T23] usb 2-1: 0:2 : does not exist [ 369.849013][ T8299] loop1: detected capacity change from 0 to 1024 [ 369.882452][ T8295] i2c i2c-0: delete_device: Can't find device in list [ 370.033013][ T23] usb 2-1: USB disconnect, device number 8 [ 370.048034][ T8302] device syzkaller0 entered promiscuous mode [ 370.141601][ T8302] tipc: Enabled bearer , priority 0 [ 370.150257][ T8299] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 370.307464][ T8307] tipc: Resetting bearer [ 370.321007][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.354482][ T8301] tipc: Resetting bearer [ 370.362635][ T8314] overlayfs: missing 'lowerdir' [ 371.098277][ T8301] tipc: Disabling bearer [ 371.395366][ T7] tipc: Node number set to 2738519226 [ 371.967149][ T8318] Set syz1 is full, maxelem 65536 reached [ 372.837252][ T8335] i2c i2c-0: delete_device: Can't find device in list [ 373.629372][ T8340] device gretap0 entered promiscuous mode [ 373.635604][ T8340] device macvlan2 entered promiscuous mode [ 373.649811][ T8344] loop2: detected capacity change from 0 to 1024 [ 373.664243][ T8340] device gretap0 left promiscuous mode [ 373.737355][ T8344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 373.957268][ T8349] i2c i2c-0: delete_device: Can't find device in list [ 374.152835][ T8355] overlayfs: missing 'lowerdir' [ 374.219226][ T8361] loop4: detected capacity change from 0 to 1024 [ 374.257438][ T8359] device syzkaller0 entered promiscuous mode [ 374.326167][ T8359] tipc: Enabled bearer , priority 0 [ 374.412570][ T8367] tipc: Resetting bearer [ 374.527881][ T8361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.590214][ T8358] tipc: Resetting bearer [ 374.610221][ T8358] tipc: Disabling bearer [ 376.035342][ T8391] i2c i2c-0: delete_device: Can't find device in list [ 376.297848][ T8396] i2c i2c-0: delete_device: Can't find device in list [ 376.504513][ T8403] overlayfs: missing 'lowerdir' [ 376.837946][ T8412] device syzkaller0 entered promiscuous mode [ 376.861243][ T8412] tipc: Enabled bearer , priority 0 [ 376.884589][ T8412] tipc: Resetting bearer [ 376.892907][ T8410] tipc: Resetting bearer [ 377.144556][ T8410] tipc: Disabling bearer [ 377.313801][ T8426] overlayfs: unrecognized mount option "/" or missing value [ 378.391116][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.397587][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.205930][ T8441] i2c i2c-0: delete_device: Can't find device in list [ 379.612744][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 379.623040][ T8446] i2c i2c-0: delete_device: Can't find device in list [ 379.747013][ T8449] overlayfs: missing 'lowerdir' [ 379.823388][ T8453] loop4: detected capacity change from 0 to 1024 [ 379.911220][ T8453] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.161561][ T8466] device syzkaller0 entered promiscuous mode [ 380.173748][ T8466] tipc: Enabled bearer , priority 0 [ 380.210034][ T8466] tipc: Resetting bearer [ 380.221177][ T8462] tipc: Resetting bearer [ 380.236669][ T8462] tipc: Disabling bearer [ 380.452752][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.470462][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 380.499016][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.617475][ T8476] i2c i2c-0: delete_device: Can't find device in list [ 382.030231][ T1108] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 382.041726][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.050308][ T1108] usb 4-1: Product: syz [ 382.054496][ T1108] usb 4-1: Manufacturer: syz [ 382.059506][ T1108] usb 4-1: SerialNumber: syz [ 382.247837][ T1108] usb 4-1: can't set config #1, error -71 [ 382.255207][ T1108] usb 4-1: USB disconnect, device number 4 [ 382.263179][ T8479] i2c i2c-0: new_device: Missing parameters [ 382.271891][ T8479] i2c i2c-0: delete_device: Can't find device in list [ 383.917931][ T8513] tipc: Enabling of bearer rejected, failed to enable media [ 383.929625][ T8507] i2c i2c-0: delete_device: Can't find device in list [ 384.898975][ T8498] Set syz1 is full, maxelem 65536 reached [ 385.344448][ T8529] i2c i2c-0: new_device: Missing parameters [ 385.351599][ T8529] i2c i2c-0: delete_device: Can't find device in list [ 385.446284][ T8534] overlayfs: missing 'lowerdir' [ 385.614361][ T8537] loop1: detected capacity change from 0 to 2048 [ 385.633831][ T8539] loop2: detected capacity change from 0 to 1024 [ 385.682782][ T8537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.744351][ T8539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.171830][ T8554] loop1: detected capacity change from 0 to 1024 [ 386.340888][ T8554] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.447175][ T8567] device syzkaller0 entered promiscuous mode [ 386.457349][ T8567] tipc: Enabled bearer , priority 0 [ 386.475967][ T8567] tipc: Resetting bearer [ 386.642132][ T8566] tipc: Resetting bearer [ 386.849966][ T8565] i2c i2c-0: delete_device: Can't find device in list [ 386.877451][ T8572] i2c i2c-0: new_device: Missing parameters [ 386.884498][ T8572] i2c i2c-0: delete_device: Can't find device in list [ 386.946205][ T8566] tipc: Disabling bearer [ 387.231215][ T8586] bridge0: port 3(syz_tun) entered blocking state [ 387.238254][ T8586] bridge0: port 3(syz_tun) entered disabled state [ 387.249758][ T8586] device syz_tun entered promiscuous mode [ 387.257635][ T8586] bridge0: port 3(syz_tun) entered blocking state [ 387.264103][ T8586] bridge0: port 3(syz_tun) entered forwarding state [ 388.386745][ T8585] loop3: detected capacity change from 0 to 1024 [ 388.550040][ T8596] loop1: detected capacity change from 0 to 1024 [ 388.557359][ T8585] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.924865][ T8596] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.417084][ T8611] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 389.424381][ T8611] i2c i2c-0: delete_device: Can't find device in list [ 389.651666][ T8617] device syzkaller0 entered promiscuous mode [ 389.724993][ T8617] tipc: Enabled bearer , priority 0 [ 389.769477][ T8619] i2c i2c-0: delete_device: Can't find device in list [ 389.799359][ T8617] tipc: Resetting bearer [ 389.861847][ T8616] tipc: Resetting bearer [ 389.878916][ T8616] tipc: Disabling bearer [ 390.263947][ T8637] loop4: detected capacity change from 0 to 1024 [ 390.323405][ T8639] netlink: 'syz.1.1265': attribute type 4 has an invalid length. [ 390.339753][ T8637] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.386006][ T8645] loop2: detected capacity change from 0 to 1024 [ 390.535351][ T1108] lo speed is unknown, defaulting to 1000 [ 390.645163][ T8652] overlayfs: failed to clone upperpath [ 390.654090][ T8645] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.176210][ T8660] i2c i2c-0: delete_device: Can't find device in list [ 391.205367][ T8663] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 391.215017][ T8663] i2c i2c-0: delete_device: Can't find device in list [ 391.574850][ T8672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 392.599681][ T8681] device syzkaller0 entered promiscuous mode [ 392.609871][ T8681] tipc: Enabled bearer , priority 0 [ 392.634351][ T8681] tipc: Resetting bearer [ 392.660848][ T8680] tipc: Resetting bearer [ 392.685218][ T8680] tipc: Disabling bearer [ 392.795237][ T8684] loop3: detected capacity change from 0 to 1024 [ 392.912896][ T8684] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.981056][ T8694] loop2: detected capacity change from 0 to 1024 [ 393.008771][ T8696] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.018646][ T8696] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 393.026947][ T8696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 393.321250][ T8694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.371412][ T8702] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 393.378653][ T8702] i2c i2c-0: delete_device: Can't find device in list [ 394.058410][ T8713] i2c i2c-0: new_device: Missing parameters [ 394.065550][ T8713] i2c i2c-0: delete_device: Can't find device in list [ 394.169476][ T8716] loop2: detected capacity change from 0 to 512 [ 394.252125][ T8726] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 394.260966][ T8726] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 394.269873][ T8726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.282202][ T8716] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1291: iget: bad i_size value: 38620345925642 [ 394.353828][ T8716] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1291: couldn't read orphan inode 15 (err -117) [ 394.386774][ T8716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 394.596605][ T8737] tipc: Enabling of bearer rejected, failed to enable media [ 394.794253][ T8744] loop1: detected capacity change from 0 to 1024 [ 394.871220][ T8747] loop2: detected capacity change from 0 to 1024 [ 395.225175][ T8744] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.259771][ T8747] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.512144][ T8757] overlayfs: failed to clone upperpath [ 395.902527][ T8762] i2c i2c-0: new_device: Missing parameters [ 395.916310][ T8762] i2c i2c-0: delete_device: Can't find device in list [ 396.159932][ T8770] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 396.168832][ T8770] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 396.177226][ T8770] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 396.770725][ T8724] loop4: detected capacity change from 0 to 40427 [ 396.879793][ T8783] device syzkaller0 entered promiscuous mode [ 396.931935][ T8724] F2FS-fs (loop4): invalid crc value [ 396.960750][ T8786] tipc: Enabled bearer , priority 0 [ 396.994191][ T8724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 397.037299][ T8782] tipc: Resetting bearer [ 397.130388][ T8782] tipc: Disabling bearer [ 397.200317][ T8790] usb3503 0-0008: unknown mode is requested [ 397.206478][ T8790] usb3503 0-0008: usb3503_probe: probed in standby mode [ 397.213968][ T8790] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 397.223180][ T8790] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 397.494633][ T8796] loop2: detected capacity change from 0 to 1024 [ 397.584925][ T8724] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 397.929941][ T8799] i2c i2c-0: new_device: Missing parameters [ 397.960811][ T8799] i2c i2c-0: delete_device: Can't find device in list [ 398.074106][ T8813] overlayfs: missing 'lowerdir' [ 398.102332][ T8796] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.446541][ T8824] loop1: detected capacity change from 0 to 128 [ 398.849597][ T8824] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.871335][ T8824] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.924527][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 398.924597][ T26] audit: type=1800 audit(1815853154.376:161): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1326" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 399.085355][ T8836] device syzkaller0 entered promiscuous mode [ 399.165920][ T8836] tipc: Enabled bearer , priority 0 [ 399.253826][ T8833] tipc: Resetting bearer [ 399.370860][ T8833] tipc: Disabling bearer [ 399.535647][ T8846] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 399.542858][ T8846] i2c i2c-0: delete_device: Can't find device in list [ 399.553546][ T8847] loop1: detected capacity change from 0 to 1024 [ 399.592586][ T8850] overlayfs: missing 'lowerdir' [ 399.805365][ T8854] loop4: detected capacity change from 0 to 1024 [ 399.818613][ T8847] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.582040][ T4323] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 400.595489][ T8854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.607395][ T4323] Bluetooth: hci1: Injecting HCI hardware error event [ 400.625531][ T4199] Bluetooth: hci1: hardware error 0x00 [ 400.933696][ T8872] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 401.025539][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 401.044156][ T8874] device bridge1 entered promiscuous mode [ 401.054234][ T8874] bond2: (slave bridge1): making interface the new active one [ 401.064171][ T8874] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 401.368595][ T8879] usb3503 0-0008: unknown mode is requested [ 401.374616][ T8879] usb3503 0-0008: usb3503_probe: probed in standby mode [ 401.382277][ T8879] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 401.391418][ T8879] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 401.527481][ T8890] overlayfs: missing 'lowerdir' [ 401.571688][ T8892] device syzkaller0 entered promiscuous mode [ 401.582476][ T8889] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 401.589544][ T8889] i2c i2c-0: delete_device: Can't find device in list [ 401.609371][ T8892] tipc: Enabled bearer , priority 0 [ 401.817044][ T8891] tipc: Resetting bearer [ 401.942821][ T8891] tipc: Disabling bearer [ 402.609022][ T8905] loop1: detected capacity change from 0 to 1024 [ 402.790336][ T8910] loop2: detected capacity change from 0 to 1024 [ 402.822978][ T8905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 402.888898][ T8912] overlayfs: failed to resolve './file0': -2 [ 403.225930][ T8910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.412310][ T8933] overlayfs: missing 'workdir' [ 403.704488][ T8934] usb3503 0-0008: unknown mode is requested [ 403.710661][ T8934] usb3503 0-0008: usb3503_probe: probed in standby mode [ 403.718575][ T8939] i2c i2c-0: delete_device: Can't find device in list [ 403.726265][ T8934] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 404.060352][ T8938] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 404.076178][ T8938] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 404.209036][ T8949] loop1: detected capacity change from 0 to 2048 [ 404.293542][ T8954] device syzkaller0 entered promiscuous mode [ 404.339890][ T8954] tipc: Enabled bearer , priority 0 [ 404.350489][ T8949] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 404.416636][ T8949] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 404.436633][ T8952] tipc: Resetting bearer [ 406.094606][ T8959] loop2: detected capacity change from 0 to 1024 [ 406.195682][ T8952] tipc: Disabling bearer [ 406.260776][ T8959] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 406.507842][ T8965] overlayfs: failed to resolve './file0': -2 [ 406.583823][ T8957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.755846][ T8969] loop2: detected capacity change from 0 to 1024 [ 406.812922][ T8957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.891621][ T8969] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.228433][ T8957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.280243][ T8976] overlayfs: missing 'workdir' [ 407.441033][ T8978] usb3503 0-0008: unknown mode is requested [ 407.447091][ T8978] usb3503 0-0008: usb3503_probe: probed in standby mode [ 407.454691][ T8978] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 407.463365][ T8978] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 407.802553][ T8957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.927299][ T26] audit: type=1800 audit(1817950315.596:162): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1380" name="ipv4_address" dev="configfs" ino=47042 res=0 errno=0 [ 407.992931][ T26] audit: type=1800 audit(1817950315.627:163): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1380" name="ipv4_port" dev="configfs" ino=47043 res=0 errno=0 [ 408.044893][ T8957] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.068379][ T26] audit: type=1800 audit(1817950315.637:164): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1380" name="num" dev="configfs" ino=47045 res=0 errno=0 [ 408.110664][ T26] audit: type=1800 audit(1817950315.647:165): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1380" name="local" dev="configfs" ino=47046 res=0 errno=0 [ 408.144039][ T8957] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.189089][ T8997] device syzkaller0 entered promiscuous mode [ 408.217141][ T8957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.239925][ T8999] loop3: detected capacity change from 0 to 1024 [ 408.277667][ T8957] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.361750][ T8999] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 408.463949][ T9004] overlayfs: failed to resolve './file0': -2 [ 408.633516][ T9007] loop4: detected capacity change from 0 to 2048 [ 408.665216][ T9007] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 408.778457][ T9007] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 408.843909][ T8995] kAFS: No cell specified [ 410.204388][ T9020] usb3503 0-0008: unknown mode is requested [ 410.210388][ T9020] usb3503 0-0008: usb3503_probe: probed in standby mode [ 410.218341][ T9020] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 410.227743][ T9020] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 410.331516][ T9028] overlayfs: missing 'workdir' [ 410.633479][ T9033] usb3503 0-0008: unknown mode is requested [ 410.639505][ T9033] usb3503 0-0008: usb3503_probe: probed in standby mode [ 410.647039][ T9033] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 410.657127][ T9033] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 410.980766][ T9045] loop2: detected capacity change from 0 to 1024 [ 411.004678][ T9048] overlayfs: failed to clone upperpath [ 411.058861][ T9049] device syzkaller0 entered promiscuous mode [ 411.188533][ T9045] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.535135][ T9064] loop2: detected capacity change from 0 to 2048 [ 412.566475][ T9064] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 412.755658][ T9064] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 412.781097][ T9067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.168701][ T9074] usb3503 0-0008: unknown mode is requested [ 413.174733][ T9074] usb3503 0-0008: usb3503_probe: probed in standby mode [ 413.181864][ T9074] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 413.190765][ T9074] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 414.460533][ T9086] loop3: detected capacity change from 0 to 1024 [ 414.490493][ T9091] overlayfs: failed to clone upperpath [ 414.577935][ T9086] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.503180][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 415.690261][ T9124] overlayfs: failed to clone upperpath [ 415.779182][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 415.813592][ T9130] loop3: detected capacity change from 0 to 1024 [ 415.953640][ T9130] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 415.964743][ T23] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 416.360005][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 416.383994][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.268164][ T23] usb 3-1: Product: syz [ 417.272708][ T23] usb 3-1: Manufacturer: syz [ 417.277333][ T23] usb 3-1: SerialNumber: syz [ 417.285558][ T23] r8152-cfgselector 3-1: config 0 descriptor?? [ 419.444692][ T23] r8152-cfgselector 3-1: Unknown version 0x0000 [ 419.463725][ T23] r8152-cfgselector 3-1: Unknown version 0x0000 [ 419.474980][ T23] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 419.714880][ T9159] dummy_hcd dummy_hcd.0: remove, state 1 [ 419.737471][ T9159] usb usb1: USB disconnect, device number 1 [ 420.114657][ T9171] usb3503 0-0008: unknown mode is requested [ 420.120786][ T9171] usb3503 0-0008: usb3503_probe: probed in standby mode [ 420.128186][ T9171] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 420.137490][ T9171] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 420.371160][ T9159] dummy_hcd dummy_hcd.0: stopped [ 420.393486][ T9175] loop1: detected capacity change from 0 to 1024 [ 420.448015][ T9159] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 420.504036][ T9175] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.429173][ T9206] loop3: detected capacity change from 0 to 512 [ 422.488826][ T9206] EXT4-fs (loop3): Ignoring removed orlov option [ 423.176143][ T9206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 423.184689][ T9206] System zones: 1-12 [ 423.797909][ T9206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1450: error while reading EA inode 32 err=-116 [ 423.814817][ T9206] EXT4-fs (loop3): Remounting filesystem read-only [ 423.822355][ T9206] EXT4-fs (loop3): 1 orphan inode deleted [ 423.828249][ T9206] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug,bsdgroups,noauto_da_alloc,orlov,jqfmt=vfsv1,grpid,. Quota mode: none. [ 424.343800][ T9220] loop3: detected capacity change from 0 to 1024 [ 424.436322][ T9220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 426.614465][ T9255] using random self ethernet address [ 426.657470][ T9255] using random host ethernet address [ 426.706433][ T9217] loop2: detected capacity change from 0 to 40427 [ 426.817931][ T9249] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 426.818984][ T9217] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 426.829954][ T9249] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 426.829977][ T9249] CPU: 1 PID: 9249 Comm: syz.1.1461 Not tainted syzkaller #0 [ 426.829997][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.830007][ T9249] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 426.868548][ T9249] Code: 94 c0 4d 8d b4 c6 f8 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b4 87 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b3 87 fb 41 be f0 12 00 00 4d [ 426.888324][ T9249] RSP: 0018:ffffc9000313fa38 EFLAGS: 00010246 [ 426.894482][ T9249] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880218b0000 [ 426.902559][ T9249] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 426.910888][ T9249] RBP: 0000000000000003 R08: ffffffff8c44fd07 R09: 1ffffffff1889fa0 [ 426.918893][ T9249] R10: dffffc0000000000 R11: fffffbfff1889fa1 R12: dffffc0000000000 [ 426.926903][ T9249] R13: ffff8880760754b8 R14: ffff88814811d2f8 R15: 0000000000000000 [ 426.934983][ T9249] FS: 00007f5947a046c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 426.943943][ T9249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.950624][ T9249] CR2: 00007f4e0f8db440 CR3: 000000005f7b7000 CR4: 00000000003506e0 [ 426.958601][ T9249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 426.966574][ T9249] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 426.974544][ T9249] Call Trace: [ 426.977897][ T9249] [ 426.981000][ T9249] ? dummy_wakeup+0x260/0x260 [ 426.985803][ T9249] usb_gadget_set_selfpowered+0x6a/0x230 [ 426.991429][ T9249] composite_dev_prepare+0x2f3/0x310 [ 426.996746][ T9249] configfs_composite_bind+0xa1/0xf60 [ 427.002137][ T9249] ? mutex_lock_io_nested+0x60/0x60 [ 427.007430][ T9249] ? mutex_lock_io_nested+0x60/0x60 [ 427.012635][ T9249] ? os_desc_qw_sign_store+0x130/0x130 [ 427.018245][ T9249] udc_bind_to_driver+0x203/0x5f0 [ 427.023399][ T9249] usb_gadget_probe_driver+0x1fb/0x380 [ 427.028882][ T9249] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 427.034554][ T9249] configfs_write_iter+0x30b/0x400 [ 427.039784][ T9249] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 427.045334][ T9249] vfs_write+0x748/0xd70 [ 427.049689][ T9249] ? file_end_write+0x250/0x250 [ 427.054727][ T9249] ? mutex_lock_nested+0x17/0x20 [ 427.059676][ T9249] ? __fdget_pos+0x2bf/0x370 [ 427.064486][ T9249] ? ksys_write+0x70/0x260 [ 427.068965][ T9249] ksys_write+0x153/0x260 [ 427.073324][ T9249] ? __ia32_sys_read+0x80/0x80 [ 427.078105][ T9249] ? lockdep_hardirqs_on+0x94/0x140 [ 427.083404][ T9249] do_syscall_64+0x4c/0xa0 [ 427.087820][ T9249] ? clear_bhb_loop+0x30/0x80 [ 427.092493][ T9249] ? clear_bhb_loop+0x30/0x80 [ 427.097169][ T9249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 427.103077][ T9249] RIP: 0033:0x7f59497ac0d9 [ 427.107490][ T9249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.127264][ T9249] RSP: 002b:00007f5947a04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.135693][ T9249] RAX: ffffffffffffffda RBX: 00007f5949a33fa0 RCX: 00007f59497ac0d9 [ 427.143675][ T9249] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000005 [ 427.151865][ T9249] RBP: 00007f5949843024 R08: 0000000000000000 R09: 0000000000000000 [ 427.159827][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.167891][ T9249] R13: 00007f5949a34038 R14: 00007f5949a33fa0 R15: 00007fffeb69e518 [ 427.176005][ T9249] [ 427.179049][ T9249] Modules linked in: [ 427.183005][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.190658][ T9217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 427.212865][ T9217] F2FS-fs (loop2): invalid crc value [ 427.219564][ T9217] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 427.488086][ T9249] ---[ end trace 851957bb889b1b4a ]--- [ 427.544721][ T9249] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 427.576535][ T9249] Code: 94 c0 4d 8d b4 c6 f8 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b4 87 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b3 87 fb 41 be f0 12 00 00 4d [ 427.596212][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.686927][ T9249] RSP: 0018:ffffc9000313fa38 EFLAGS: 00010246 [ 427.700057][ T9249] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880218b0000 [ 427.712672][ T9249] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 427.725461][ T9249] RBP: 0000000000000003 R08: ffffffff8c44fd07 R09: 1ffffffff1889fa0 [ 427.739582][ T9249] R10: dffffc0000000000 R11: fffffbfff1889fa1 R12: dffffc0000000000 [ 427.752364][ T9249] R13: ffff8880760754b8 R14: ffff88814811d2f8 R15: 0000000000000000 [ 427.765121][ T9249] FS: 00007f5947a046c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 427.779889][ T9249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.787876][ T9249] CR2: 00007f59475a1000 CR3: 000000005f7b7000 CR4: 00000000003506e0 [ 427.796130][ T9249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.804304][ T9249] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.813085][ T9249] Kernel panic - not syncing: Fatal exception [ 427.819252][ T9249] Kernel Offset: disabled [ 427.823666][ T9249] Rebooting in 86400 seconds..