last executing test programs: 11.501276996s ago: executing program 3 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 10.11036875s ago: executing program 3 (id=908): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x39, 0x62, 0x34, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x63, 0x33, 0x30, 0x31, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddee0b8511223344556677889920f7ffffeeff001122b75d5566778899e20778d1bbccddeedf00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0xe]}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x30, 0x64, 0x30, 0x30, 0x30, 0x36, 0x38, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x32, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x1d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x37, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x36, 0x31, 0x31, 0x30, 0x30, 0x30, 0x30, 0x64, 0x33, 0x32, 0x31]}, &(0x7f0000000580)={0x0, "001122334455667f8899aabbccddeeff00112233445566778899aabbccddeeff0011223344556a778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 9.955791173s ago: executing program 3 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 9.387074436s ago: executing program 3 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close(0x3) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000f00010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045010, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x4}, 0x8) 8.024933959s ago: executing program 3 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0x8000000) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0xd1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x400062, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r5, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r6, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5437, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002700)={{{@in6=@dev, @in=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002800)=0x61) 6.864515007s ago: executing program 3 (id=921): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x71c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="eb010000", @ANYRES16=r3, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) lremovexattr(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200)=@random={'os2.', '\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}]}}]}, 0x44}}, 0x0) pidfd_getfd(r0, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r11, 0x13, &(0x7f0000001bc0), 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f00000001c0)={0x1, 0x9}) 6.680902531s ago: executing program 4 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 6.439926567s ago: executing program 4 (id=926): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc002, 0x3, 0xce}) 6.254960802s ago: executing program 4 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close(0x3) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000f00010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045010, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x4}, 0x8) 5.216672236s ago: executing program 4 (id=929): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x11}) 1.809766087s ago: executing program 4 (id=943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 1.758766189s ago: executing program 1 (id=944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8], 0x54}}, 0x0) 1.706810139s ago: executing program 0 (id=946): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x1, 0x2, 0x0, 0x100}, 0x20) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/25, 0x19) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)={0x10, 0x6a, 0x1, 0x0, 0x8}, 0x10}], 0x1}, 0x2000c0d0) connect$pptp(r3, &(0x7f0000000240)={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000040)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) copy_file_range(r1, &(0x7f0000000180)=0x7, r3, &(0x7f00000001c0)=0xffff, 0x7, 0x0) sendmmsg$inet6(r6, &(0x7f0000004080)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @private2, 0x42}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1}}], 0x5cd, 0x40100) 1.551290833s ago: executing program 4 (id=947): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a777382010203010902240001000000000904"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) 1.505097604s ago: executing program 1 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0xffff, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(0x0, r4) 1.342232648s ago: executing program 1 (id=951): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1.195303262s ago: executing program 1 (id=953): clock_nanosleep(0x9, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.170623083s ago: executing program 1 (id=955): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0x8008b70d, 0x0) 1.019164236s ago: executing program 1 (id=957): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 851.61918ms ago: executing program 2 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, &(0x7f00000002c0)="5c00000030000506000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000180005801400018008000100000000000800030064000000", 0x5c, 0x0, 0x0, 0x0) 816.053101ms ago: executing program 0 (id=961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000040)="b80a000500000000e656ac90d0c9", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c00078008"], 0x198}}, 0x0) 615.154496ms ago: executing program 2 (id=962): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x39, 0x62, 0x34, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x63, 0x33, 0x30, 0x31, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddee0b8511223344556677889920f7ffffeeff001122b75d5566778899e20778d1bbccddeedf00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0xe]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x30, 0x64, 0x30, 0x30, 0x30, 0x36, 0x38, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x32, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x1d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x37, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x36, 0x31, 0x31, 0x30, 0x30, 0x30, 0x30, 0x64, 0x33, 0x32, 0x31]}, &(0x7f0000000580)={0x0, "001122334455667f8899aabbccddeeff00112233445566778899aabbccddeeff0011223344556a778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 541.961948ms ago: executing program 0 (id=963): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) 475.117359ms ago: executing program 2 (id=964): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000000c0)) 326.788503ms ago: executing program 0 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) 322.503703ms ago: executing program 2 (id=966): clock_nanosleep(0x9, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 190.545676ms ago: executing program 2 (id=967): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 81.440029ms ago: executing program 0 (id=968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) syz_ublk_setup_io_uring(0x2ff4, &(0x7f0000000180)={0x0, 0xc5a2, 0x1, 0x1}, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88f41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.28191ms ago: executing program 0 (id=969): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3, @raw_data="1c55ee04cd11ac3873aecd5e61ca414f2f7679664fa04b760531c67603c7935fd2db82b8b2f0ff55974517be6a62bfa765e4aa1a63e519d1879ab45d38b50e0f62ec3b0cf3e78b250e99f27cafbbbf35cf28167f61b1a0851888cfa4cff335df5303f3417c78f0d940210ccea68778e7c2dbcec0fad555de8ebfeb6e945fd858807351d26c72da18450259f96009994536270bd6ac58436091f9f098ee38f1dcbedade1c2bd9881e744d340b42fc3d3b493dbcde1e6746087a67ec7ef63019e2184a03d7faf42e9b"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) fspick(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='/dev/loop0,', 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40012020) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYRES16=r7, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2b, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x7362aaddb7f3aac3) 0s ago: executing program 2 (id=970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8], 0x54}}, 0x0) kernel console output (not intermixed with test programs): microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 132.558883][ T5494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.364'. [ 132.730491][ T5501] bond1: option mode: unable to set because the bond device has slaves [ 132.777690][ T4631] usb 2-1: USB disconnect, device number 6 [ 132.827202][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833974][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.207872][ T5498] loop2: detected capacity change from 0 to 32768 [ 134.042660][ T5536] Disabled LAPIC found during irq injection [ 134.194276][ T5545] bond1: option mode: unable to set because the bond device has slaves [ 134.210072][ T5539] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 134.224541][ T5539] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 134.457498][ T5551] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 134.481131][ T5551] pit: kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 134.508776][ T5551] pit: kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 134.539325][ T5551] pit: kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 134.559271][ T5551] pit: kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 134.599399][ T5551] pit: kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 134.649259][ T5551] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 134.698997][ T5551] pit: kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 134.721598][ T5551] pit: kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 134.801488][ T5551] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 135.077217][ T5549] loop3: detected capacity change from 0 to 32768 [ 135.120808][ T5549] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 135.161122][ T5549] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.174519][ T4746] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.182170][ T5549] BTRFS info (device loop3): use zstd compression, level 3 [ 135.192330][ T5549] BTRFS info (device loop3): using free space tree [ 135.212587][ T5549] BTRFS info (device loop3): has skinny extents [ 135.376151][ T5549] BTRFS info (device loop3): enabling ssd optimizations [ 135.403576][ T26] audit: type=1800 audit(1788134310.161:21): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 135.474676][ T4746] usb 3-1: Using ep0 maxpacket: 8 [ 135.604628][ T4746] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.629521][ T4746] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.650497][ T4746] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.675141][ T4746] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.718352][ T4746] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.734447][ T4746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.041383][ T4746] usb 3-1: GET_CAPABILITIES returned 0 [ 136.047684][ T4746] usbtmc 3-1:16.0: can't read capabilities [ 136.251321][ T5566] udc-core: couldn't find an available UDC or it's busy [ 136.288256][ T5566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.320578][ T4917] usb 3-1: USB disconnect, device number 6 [ 136.641837][ T5616] bond1: option mode: unable to set because the bond device has slaves [ 137.049531][ T5005] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.214161][ T5610] loop4: detected capacity change from 0 to 32768 [ 137.251403][ T5610] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.403 (5610) [ 137.314022][ T5610] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 137.331179][ T5610] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.350928][ T5610] BTRFS info (device loop4): use zstd compression, level 3 [ 137.359408][ T5610] BTRFS info (device loop4): using free space tree [ 137.388754][ T5610] BTRFS info (device loop4): has skinny extents [ 137.424647][ T5005] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.441117][ T5005] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.469662][ T5005] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.487174][ T5005] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.504093][ T5005] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 137.520357][ T5005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.629873][ T5610] BTRFS info (device loop4): enabling ssd optimizations [ 137.660916][ T26] audit: type=1800 audit(1788134312.421:22): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.403" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 137.899027][ T4230] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.314517][ T4230] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 138.345107][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.378376][ T4230] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.398841][ T4230] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 138.431951][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.479441][ T5618] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 138.525925][ T4230] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 138.546619][ T4230] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 138.685281][ T5005] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2 [ 138.745595][ T5618] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 138.795434][ T4230] usb 2-1: USB disconnect, device number 7 [ 138.818051][ T4230] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 138.866814][ T4230] cyberjack 2-1:1.0: device disconnected [ 138.978239][ T5005] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 139.013063][ T5005] usb 4-1: USB disconnect, device number 7 [ 139.512370][ T5663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.416'. [ 139.566152][ T5663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.416'. [ 139.610049][ T5665] bond1: option mode: unable to set because the bond device has slaves [ 141.330888][ T5667] loop1: detected capacity change from 0 to 32768 [ 141.372608][ T5667] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.419 (5667) [ 141.398433][ T5667] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 141.454528][ T5667] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.494551][ T5667] BTRFS info (device loop1): use zstd compression, level 3 [ 141.501829][ T5667] BTRFS info (device loop1): using free space tree [ 142.029767][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 143.609020][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.615027][ T5667] BTRFS info (device loop1): has skinny extents [ 143.791575][ T5667] BTRFS error (device loop1): open_ctree failed: -12 [ 143.964841][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.011332][ T5717] bond1: option mode: unable to set because the bond device has slaves [ 144.440136][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 144.610721][ T5747] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 144.672817][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'. [ 144.718839][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'. [ 144.875524][ T5758] bond1: option mode: unable to set because the bond device has slaves [ 145.947880][ T5771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 146.400160][ T5746] loop4: detected capacity change from 0 to 32768 [ 146.639561][ T5746] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.441 (5746) [ 146.830494][ T5746] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 146.842270][ T5746] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 146.867829][ T5746] BTRFS info (device loop4): use zstd compression, level 3 [ 146.875658][ T5746] BTRFS info (device loop4): using free space tree [ 146.884628][ T5746] BTRFS info (device loop4): has skinny extents [ 146.958563][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 146.970510][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 146.981954][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd4ac instead [ 146.997527][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xabb0 instead [ 147.011391][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 147.022263][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 147.033148][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 147.043960][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 147.056771][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 147.068782][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 147.080839][ T5782] jffs2: Further such events for this erase block will not be printed [ 147.089784][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 147.100481][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 147.111219][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd4ac instead [ 147.122147][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xabb0 instead [ 147.133056][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 147.144055][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 147.156622][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 147.169376][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 147.180658][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 147.193339][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 147.204239][ T5782] jffs2: Further such events for this erase block will not be printed [ 147.213132][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 147.224655][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 147.251324][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd4ac instead [ 147.291605][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xabb0 instead [ 147.302158][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 147.312813][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 147.359090][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd4ac instead [ 147.369885][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xabb0 instead [ 147.380744][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 147.394131][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 147.404968][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd4ac instead [ 147.415705][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xabb0 instead [ 147.426854][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 147.444614][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 147.531176][ T5746] BTRFS info (device loop4): enabling ssd optimizations [ 147.575654][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 147.588350][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd4ac instead [ 147.598799][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xabb0 instead [ 147.609241][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 147.619866][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 147.630548][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd4ac instead [ 147.641279][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xabb0 instead [ 147.652055][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 147.663684][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 147.698314][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 147.709954][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd4ac instead [ 147.722097][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xabb0 instead [ 147.735057][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 147.745569][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 147.756298][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd4ac instead [ 147.770165][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xabb0 instead [ 147.782877][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 147.794095][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 147.829990][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd4ac instead [ 147.961548][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xabb0 instead [ 148.060683][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 148.119524][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 148.171911][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd4ac instead [ 148.213579][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xabb0 instead [ 148.226498][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 148.237528][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 148.256557][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd4ac instead [ 148.324481][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xabb0 instead [ 148.383814][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 148.423410][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 148.447116][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd4ac instead [ 148.478562][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xabb0 instead [ 148.513428][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 148.572384][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 148.587207][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd4ac instead [ 148.613860][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xabb0 instead [ 148.637101][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 148.653545][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 148.671567][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd4ac instead [ 148.683528][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xabb0 instead [ 148.694689][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 148.699423][ T5836] bond1: option mode: unable to set because the bond device has slaves [ 148.709376][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 148.767031][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd4ac instead [ 148.777849][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xabb0 instead [ 148.789248][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 148.803097][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 148.824554][ T4629] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.844029][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd4ac instead [ 148.879712][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xabb0 instead [ 148.895154][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 148.911392][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 148.936909][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 148.943476][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 148.978801][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd4ac instead [ 149.010210][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xabb0 instead [ 149.034647][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 149.073706][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 149.075089][ T4629] usb 2-1: Using ep0 maxpacket: 8 [ 149.100347][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd4ac instead [ 149.121124][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xabb0 instead [ 149.160152][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 149.194538][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 149.238852][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd4ac instead [ 149.254831][ T4629] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.260019][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xabb0 instead [ 149.300950][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 149.329501][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 149.335301][ T4629] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 149.354551][ T4629] usb 2-1: config 2 has no interface number 0 [ 149.370993][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd4ac instead [ 149.383551][ T4629] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 149.402152][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xabb0 instead [ 149.417836][ T4629] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.423987][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 149.449154][ T4629] usb 2-1: config 2 interface 232 has no altsetting 0 [ 149.500706][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 149.529544][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd4ac instead [ 149.584476][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xabb0 instead [ 149.624667][ T4629] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 149.642623][ T5839] loop2: detected capacity change from 0 to 32768 [ 149.645318][ T4629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.649492][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 149.677712][ T4629] usb 2-1: Product: syz [ 149.692741][ T4629] usb 2-1: Manufacturer: syz [ 149.697421][ T5839] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.471 (5839) [ 149.748051][ T4629] usb 2-1: SerialNumber: syz [ 149.759701][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 149.793593][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd4ac instead [ 149.804743][ T5832] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.830508][ T5839] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 149.851004][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xabb0 instead [ 149.872527][ T5839] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.892872][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 149.912350][ T5839] BTRFS info (device loop2): use zstd compression, level 3 [ 149.931180][ T5839] BTRFS info (device loop2): using free space tree [ 149.938932][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 149.968184][ T5839] BTRFS info (device loop2): has skinny extents [ 149.989966][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd4ac instead [ 150.049397][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xabb0 instead [ 150.096887][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 150.120204][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 150.133375][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd4ac instead [ 150.145908][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xabb0 instead [ 150.160834][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 150.172141][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 150.186316][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd4ac instead [ 150.207682][ T4629] usb 2-1: USB disconnect, device number 8 [ 150.215257][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xabb0 instead [ 150.225978][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 150.243197][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 150.260488][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd4ac instead [ 150.291657][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xabb0 instead [ 150.302434][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 150.314123][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 150.340252][ T5839] BTRFS info (device loop2): enabling ssd optimizations [ 150.354058][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd4ac instead [ 150.401346][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xabb0 instead [ 150.430152][ T26] audit: type=1800 audit(1788134325.191:23): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.471" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 150.450490][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 150.463733][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.483895][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 150.524482][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd4ac instead [ 150.589235][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xabb0 instead [ 150.613909][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 150.631152][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 150.666886][ T5892] bond1: option mode: unable to set because the bond device has slaves [ 150.756854][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd4ac instead [ 150.779507][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 150.812646][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xabb0 instead [ 150.833624][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 150.844282][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 150.855381][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd4ac instead [ 150.866965][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xabb0 instead [ 150.882556][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 150.891626][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 150.944374][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 151.198894][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd4ac instead [ 151.212884][ T5782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xabb0 instead [ 151.306958][ T5782] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 151.569757][ T5782] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 153.564334][ C1] sched: RT throttling activated [ 153.567299][ T4740] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.825388][ T5932] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 153.834080][ T5932] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 153.976261][ T5939] bond1: option mode: unable to set because the bond device has slaves [ 154.017342][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 154.026794][ T4740] usb 2-1: Using ep0 maxpacket: 16 [ 154.046564][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 154.135264][ T5948] capability: warning: `syz.4.497' uses 32-bit capabilities (legacy support in use) [ 154.179344][ T4740] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 154.354875][ T4740] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.374409][ T4740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.398894][ T4740] usb 2-1: Product: syz [ 154.403119][ T4740] usb 2-1: Manufacturer: syz [ 154.444806][ T4740] usb 2-1: SerialNumber: syz [ 154.466358][ T4740] usb 2-1: config 0 descriptor?? [ 154.639646][ T5937] loop0: detected capacity change from 0 to 32768 [ 154.708840][ T5937] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.492 (5937) [ 154.784816][ T5937] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 154.797331][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 154.813060][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 154.834519][ T5937] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.882303][ T5937] BTRFS info (device loop0): use zstd compression, level 3 [ 154.895666][ T5937] BTRFS info (device loop0): using free space tree [ 154.902558][ T5937] BTRFS info (device loop0): has skinny extents [ 154.983862][ T5979] bond1: option mode: unable to set because the bond device has slaves [ 155.051780][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 155.122397][ T5937] BTRFS info (device loop0): enabling ssd optimizations [ 155.156695][ T26] audit: type=1800 audit(1788134329.921:24): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.492" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 155.317718][ T26] audit: type=1800 audit(1788134329.941:25): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.492" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 155.734646][ T4743] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 156.144837][ T4743] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 156.168557][ T4743] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.191275][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 156.225248][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 156.394687][ T4743] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.409810][ T4743] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.422021][ T6019] bond1: option mode: unable to set because the bond device has slaves [ 156.436111][ T4743] usb 4-1: Product: syz [ 156.447546][ T4743] usb 4-1: Manufacturer: syz [ 156.461774][ T4743] usb 4-1: SerialNumber: syz [ 156.481814][ T4743] usb 4-1: config 0 descriptor?? [ 156.566940][ T4743] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 156.618725][ T4368] udevd[4368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.744624][ T4743] usb 4-1: USB disconnect, device number 8 [ 156.825437][ T4740] usb 2-1: USB disconnect, device number 9 [ 157.182721][ T6031] usb0: HOST MAC ce:58:99:bf:32:2e [ 157.220793][ T6031] usb0: MAC ae:89:f5:1c:bf:b8 [ 157.544736][ T4629] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.934599][ T4629] usb 1-1: Dual-Role OTG device on HNP port [ 157.947022][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 157.959369][ T4629] usb 1-1: New USB device found, idVendor=0000, idProduct=5678, bcdDevice= 5.15 [ 157.987121][ T4629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.149446][ T4629] usb 1-1: SerialNumber: 1234567890 [ 158.644601][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.924452][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 159.054220][ T4629] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, ce:58:99:bf:32:2e [ 159.054664][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 159.565327][ T1108] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 159.666252][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 159.938980][ T1108] usb 4-1: Product: syz [ 160.043195][ T1108] usb 4-1: Manufacturer: syz [ 160.148380][ T1108] usb 4-1: SerialNumber: syz [ 160.356621][ T1108] usb 4-1: config 0 descriptor?? [ 161.970916][ T1108] usb 4-1: can't set config #0, error -71 [ 161.985456][ T1108] usb 4-1: USB disconnect, device number 9 [ 162.054652][ T6069] bond1: option mode: unable to set because the bond device has slaves [ 162.419674][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.539'. [ 162.722550][ T6108] bond1: option mode: unable to set because the bond device has slaves [ 165.038903][ T6141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.553'. [ 165.558105][ T6104] loop4: detected capacity change from 0 to 32768 [ 165.597586][ T6150] gadgetfs: bound to dummy_udc driver [ 166.258923][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.706002][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 166.824760][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 166.844438][ T1108] usb 3-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 166.870616][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.905522][ T1108] usb 3-1: config 0 descriptor?? [ 167.033004][ T6167] bond1: option mode: unable to set because the bond device has slaves [ 167.324501][ T4262] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.409542][ T1108] input: HID 1b96:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0012.0003/input/input8 [ 167.516821][ T1108] ntrig 0003:1B96:0012.0003: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:0012] on usb-dummy_hcd.2-1/input0 [ 167.607176][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 167.624974][ T1108] usb 3-1: USB disconnect, device number 7 [ 167.655116][ T6196] comedi comedi3: No hardware detected at I/O base 0x100 [ 167.704455][ T4262] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.734860][ T4262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.817630][ T4262] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.858150][ T4262] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 167.882080][ T6200] fido_id[6200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 167.897304][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.926946][ T6171] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 168.236921][ T6216] bond1: option mode: unable to set because the bond device has slaves [ 168.286696][ T6216] netlink: 52 bytes leftover after parsing attributes in process `syz.4.570'. [ 168.402142][ T1108] usb 2-1: USB disconnect, device number 10 [ 169.754664][ T6203] loop0: detected capacity change from 0 to 32768 [ 169.833009][ T6203] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.567 (6203) [ 170.024657][ T4262] Bluetooth: hci5: command 0xfc05 tx timeout [ 170.063951][ T4198] Bluetooth: hci5: Reading Intel version command failed (-110) [ 170.100150][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 170.129505][ T6203] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 170.418974][ T6203] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 170.630679][ T6203] BTRFS info (device loop0): use zstd compression, level 3 [ 170.763558][ T6203] BTRFS info (device loop0): using free space tree [ 170.814175][ T6203] BTRFS info (device loop0): has skinny extents [ 171.004577][ T1108] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 171.016034][ T6283] bond1: option mode: unable to set because the bond device has slaves [ 171.026585][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.583'. [ 171.242768][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 171.257394][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 171.269393][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd4ac instead [ 171.280202][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xabb0 instead [ 171.321768][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 171.353619][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 171.362984][ T6203] BTRFS error (device loop0): open_ctree failed: -12 [ 171.406346][ T4368] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (4368) [ 171.415485][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.426030][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 171.469083][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 171.494853][ T1108] usb 2-1: not running at top speed; connect to a high speed hub [ 171.503038][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 171.534135][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 171.579433][ T6289] jffs2: Further such events for this erase block will not be printed [ 171.588214][ T1108] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 171.598500][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.589'. [ 171.612956][ T1108] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 171.648544][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 171.659108][ T1108] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 171.671969][ T6301] Mass Storage Function, version: 2009/09/11 [ 171.694547][ T6301] LUN: removable file: (no medium) [ 171.701333][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 171.718276][ T1108] usb 2-1: config 14 has no interface number 0 [ 171.730663][ T1108] usb 2-1: config 14 has no interface number 1 [ 171.746483][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd4ac instead [ 171.768962][ T1108] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 171.801401][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xabb0 instead [ 171.821150][ T1108] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 171.850216][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 171.873958][ T1108] usb 2-1: config 14 interface 57 has no altsetting 0 [ 171.895349][ T1108] usb 2-1: config 14 interface 228 has no altsetting 0 [ 171.909841][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 171.955831][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 172.011755][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 172.034420][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 172.094748][ T1108] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 172.115098][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 172.119808][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.160263][ T1108] usb 2-1: Product: syz [ 172.167991][ T6321] udc-core: couldn't find an available UDC or it's busy [ 172.179987][ T1108] usb 2-1: Manufacturer: syz [ 172.186016][ T1108] usb 2-1: SerialNumber: syz [ 172.190883][ T6321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.226882][ T6289] jffs2: Further such events for this erase block will not be printed [ 172.287184][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 172.315311][ T6324] bond1: option mode: unable to set because the bond device has slaves [ 172.323712][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 172.350917][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd4ac instead [ 172.361910][ T6324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.595'. [ 172.394394][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xabb0 instead [ 172.425270][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 172.471825][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 172.501556][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd4ac instead [ 172.513595][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xabb0 instead [ 172.571516][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 172.584505][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 172.595307][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd4ac instead [ 172.614367][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xabb0 instead [ 172.633693][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 172.656779][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 172.673681][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd4ac instead [ 172.684440][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xabb0 instead [ 172.689545][ T1108] legousbtower 2-1:14.57: interrupt endpoints not found [ 172.697222][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 172.712714][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 172.733734][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd4ac instead [ 172.771116][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xabb0 instead [ 172.803633][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 172.814695][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 172.826643][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd4ac instead [ 172.838191][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xabb0 instead [ 172.851141][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 172.865586][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 172.883084][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd4ac instead [ 172.901030][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xabb0 instead [ 172.912419][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 172.913925][ T1108] legousbtower 2-1:14.228: interrupt endpoints not found [ 172.923780][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 172.961695][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd4ac instead [ 173.033377][ T6343] Cannot find add_set index 0 as target [ 173.117152][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xabb0 instead [ 173.220834][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 173.329333][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 173.427637][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd4ac instead [ 173.526699][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xabb0 instead [ 173.666396][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 173.677465][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 173.688359][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd4ac instead [ 173.698967][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xabb0 instead [ 173.711632][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 173.722262][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 173.732920][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd4ac instead [ 173.744086][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xabb0 instead [ 173.754790][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 173.766097][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 173.778071][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd4ac instead [ 173.789102][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xabb0 instead [ 173.799857][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 173.810470][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 173.821114][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd4ac instead [ 173.856677][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xabb0 instead [ 173.881899][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 173.902117][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 173.912979][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd4ac instead [ 173.949198][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xabb0 instead [ 173.982010][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 174.012424][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 174.029773][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd4ac instead [ 174.072324][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xabb0 instead [ 174.090338][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 174.104050][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 174.117118][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd4ac instead [ 174.139055][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xabb0 instead [ 174.162194][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 174.177927][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 174.216671][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd4ac instead [ 174.225558][ T6332] loop3: detected capacity change from 0 to 32768 [ 174.249779][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xabb0 instead [ 174.272147][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 174.288551][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 174.300884][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 174.313875][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd4ac instead [ 174.340286][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xabb0 instead [ 174.356880][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 174.369812][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 174.382569][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd4ac instead [ 174.417785][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xabb0 instead [ 174.437108][ T6332] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 174.468075][ T6332] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 174.489348][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 174.530511][ T6332] BTRFS info (device loop3): use zstd compression, level 3 [ 174.560946][ T6332] BTRFS info (device loop3): using free space tree [ 174.574764][ T6332] BTRFS info (device loop3): has skinny extents [ 174.581287][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 174.602499][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd4ac instead [ 174.622943][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xabb0 instead [ 174.674342][ T6373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.699603][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 174.719456][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 174.730316][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd4ac instead [ 174.758295][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xabb0 instead [ 174.786658][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 174.797822][ T1108] usb 2-1: USB disconnect, device number 11 [ 174.806314][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 174.821341][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd4ac instead [ 174.832496][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xabb0 instead [ 174.887320][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 174.901409][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 174.955850][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd4ac instead [ 174.957319][ T6332] BTRFS info (device loop3): enabling ssd optimizations [ 174.967450][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xabb0 instead [ 174.984289][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 174.995178][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 175.011500][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd4ac instead [ 175.028755][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xabb0 instead [ 175.061791][ T26] audit: type=1800 audit(1788134349.821:26): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 175.064661][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 175.144958][ T26] audit: type=1800 audit(1788134349.861:27): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 175.265880][ T6399] bond1: option mode: unable to set because the bond device has slaves [ 175.296865][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 175.314482][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd4ac instead [ 175.333922][ T6399] netlink: 52 bytes leftover after parsing attributes in process `syz.1.606'. [ 175.524705][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xabb0 instead [ 175.547356][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 175.586052][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 175.741291][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd4ac instead [ 175.780504][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xabb0 instead [ 175.865110][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 175.903346][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 175.972669][ T4368] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4368) [ 176.022383][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd4ac instead [ 176.036806][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xabb0 instead [ 176.055611][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 176.066552][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 176.077454][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd4ac instead [ 176.103193][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xabb0 instead [ 176.124294][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 176.144407][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 176.164439][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd4ac instead [ 176.199041][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xabb0 instead [ 176.220518][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 176.251836][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 176.354070][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd4ac instead [ 176.404397][ T6289] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xabb0 instead [ 176.440034][ T6289] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 176.469724][ T6289] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 176.514550][ T4229] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 176.604897][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.612'. [ 176.894906][ T4229] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 176.989588][ T6445] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 177.102575][ T4229] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 177.113394][ T4229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.122991][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.373014][ T6457] bond1: option mode: unable to set because the bond device has slaves [ 177.375732][ T5126] usb 2-1: USB disconnect, device number 12 [ 177.432929][ T6457] netlink: 52 bytes leftover after parsing attributes in process `syz.4.618'. [ 177.596865][ T6467] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.651605][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 177.683346][ T6467] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 177.734056][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.623'. [ 177.872849][ T6453] loop0: detected capacity change from 0 to 32768 [ 177.994583][ T4627] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.184671][ T4627] usb 5-1: device descriptor read/64, error -71 [ 178.204577][ T4229] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.574730][ T4229] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 178.583980][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.704476][ T6502] bond1: option mode: unable to set because the bond device has slaves [ 178.890316][ T6502] netlink: 52 bytes leftover after parsing attributes in process `syz.0.632'. [ 178.954490][ T4627] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.108720][ T4229] usb 4-1: config 0 descriptor?? [ 179.147238][ T4229] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 179.216115][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 179.232011][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 179.294589][ T4627] usb 5-1: device descriptor read/64, error -71 [ 179.322116][ T6512] udc-core: couldn't find an available UDC or it's busy [ 179.351863][ T6512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.420433][ T4627] usb usb5-port1: attempt power cycle [ 180.304531][ T4229] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 180.624574][ T4627] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.834633][ T4229] STV06xx: probe of 4-1:0.0 failed with error -71 [ 180.874476][ T4627] usb 5-1: device not accepting address 7, error -71 [ 181.480793][ T4229] usb 4-1: USB disconnect, device number 10 [ 181.529466][ T6525] loop0: detected capacity change from 0 to 32768 [ 181.609527][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'. [ 181.666830][ T6549] bond1: option mode: unable to set because the bond device has slaves [ 181.687174][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 181.703160][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.645'. [ 181.714867][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'. [ 181.984968][ T6540] FAULT_INJECTION: forcing a failure. [ 181.984968][ T6540] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 182.000327][ T6540] CPU: 1 PID: 6540 Comm: syz.1.643 Not tainted syzkaller #0 [ 182.007664][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.017758][ T6540] Call Trace: [ 182.021072][ T6540] [ 182.024032][ T6540] dump_stack_lvl+0x188/0x250 [ 182.028767][ T6540] ? show_regs_print_info+0x20/0x20 [ 182.034005][ T6540] ? load_image+0x410/0x410 [ 182.038555][ T6540] ? mark_lock+0x94/0x320 [ 182.042929][ T6540] should_fail+0x383/0x4b0 [ 182.047390][ T6540] prepare_alloc_pages+0x1e3/0x5b0 [ 182.052550][ T6540] __alloc_pages+0x11b/0x480 [ 182.057184][ T6540] ? zone_statistics+0x170/0x170 [ 182.062200][ T6540] ? rcu_lock_acquire+0x30/0x30 [ 182.067086][ T6540] ? alloc_pages+0x452/0x560 [ 182.071753][ T6540] __get_free_pages+0x8/0x30 [ 182.076383][ T6540] __tlb_remove_page_size+0x1f2/0x3f0 [ 182.081797][ T6540] unmap_page_range+0xfcf/0x2410 [ 182.086809][ T6540] unmap_vmas+0x131/0x250 [ 182.091182][ T6540] ? unmap_page_range+0x2410/0x2410 [ 182.096427][ T6540] exit_mmap+0x3b9/0x640 [ 182.100705][ T6540] ? vm_brk+0x20/0x20 [ 182.104745][ T6540] ? uprobe_clear_state+0x2f6/0x460 [ 182.109983][ T6540] __mmput+0x115/0x390 [ 182.114088][ T6540] exit_mm+0x632/0x7b0 [ 182.118196][ T6540] ? perf_pmu_migrate_context+0xb70/0xb70 [ 182.123965][ T6540] ? do_exit+0x2110/0x2110 [ 182.128409][ T6540] ? __ia32_sys_timer_delete+0x40/0x40 [ 182.133901][ T6540] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 182.139431][ T6540] ? tty_audit_exit+0x149/0x1f0 [ 182.144325][ T6540] do_exit+0x5b8/0x2110 [ 182.148532][ T6540] ? put_task_struct+0x80/0x80 [ 182.153333][ T6540] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 182.159368][ T6540] ? _raw_spin_lock_irq+0xb7/0xf0 [ 182.164433][ T6540] do_group_exit+0x12c/0x2f0 [ 182.169056][ T6540] ? lockdep_hardirqs_on+0x94/0x140 [ 182.174298][ T6540] get_signal+0x7eb/0x12e0 [ 182.178772][ T6540] arch_do_signal_or_restart+0xe6/0x12a0 [ 182.184466][ T6540] ? futex_exit_release+0x1c0/0x1c0 [ 182.189703][ T6540] ? get_sigframe_size+0x10/0x10 [ 182.194686][ T6540] ? __context_tracking_exit+0x4c/0x80 [ 182.200195][ T6540] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 182.206227][ T6540] ? exit_to_user_mode_loop+0x3b/0x130 [ 182.211725][ T6540] exit_to_user_mode_loop+0x9e/0x130 [ 182.217047][ T6540] exit_to_user_mode_prepare+0xee/0x180 [ 182.222636][ T6540] syscall_exit_to_user_mode+0x16/0x40 [ 182.228132][ T6540] do_syscall_64+0x58/0xa0 [ 182.232584][ T6540] ? clear_bhb_loop+0x30/0x80 [ 182.237291][ T6540] ? clear_bhb_loop+0x30/0x80 [ 182.242006][ T6540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.247939][ T6540] RIP: 0033:0x7f7dffe57159 [ 182.252425][ T6540] Code: Unable to access opcode bytes at RIP 0x7f7dffe5712f. [ 182.259820][ T6540] RSP: 002b:00007f7dfe0af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.268289][ T6540] RAX: fffffffffffffe00 RBX: 00007f7e000defa8 RCX: 00007f7dffe57159 [ 182.276294][ T6540] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e000defa8 [ 182.284301][ T6540] RBP: 00007f7e000defa0 R08: 0000000000000000 R09: 0000000000000000 [ 182.292308][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.300312][ T6540] R13: 00007f7e000df038 R14: 00007ffeb1ad8440 R15: 00007ffeb1ad8528 [ 182.308335][ T6540] [ 183.844879][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 183.875221][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 183.931864][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.659'. [ 183.951426][ T6600] bond1: option mode: unable to set because the bond device has slaves [ 183.991193][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 184.035121][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.660'. [ 184.496090][ T6614] kAFS: No cell specified [ 185.651229][ T6630] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.705952][ T6631] lo speed is unknown, defaulting to 1000 [ 185.743177][ T6627] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 185.779308][ T6627] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 185.797807][ T6631] lo speed is unknown, defaulting to 1000 [ 185.869085][ T6637] autofs4:pid:6637:autofs_fill_super: called with bogus options [ 185.887753][ T6631] lo speed is unknown, defaulting to 1000 [ 185.953457][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.671'. [ 185.967729][ T6631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.054593][ T1108] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.086015][ T6609] loop3: detected capacity change from 0 to 32768 [ 186.109424][ T6631] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 186.149665][ T6645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.254551][ T6609] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 186.304549][ T6609] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 186.311176][ T6649] bond1: option mode: unable to set because the bond device has slaves [ 186.313993][ T6609] BTRFS info (device loop3): use zstd compression, level 3 [ 186.314020][ T6609] BTRFS info (device loop3): using free space tree [ 186.398155][ T6631] lo speed is unknown, defaulting to 1000 [ 186.444909][ T1108] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 186.454474][ T6609] BTRFS info (device loop3): has skinny extents [ 186.474472][ T1108] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.506536][ T6631] lo speed is unknown, defaulting to 1000 [ 186.513286][ T6631] lo speed is unknown, defaulting to 1000 [ 186.557518][ T6631] lo speed is unknown, defaulting to 1000 [ 186.564400][ T6631] lo speed is unknown, defaulting to 1000 [ 186.574874][ T1108] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 186.661337][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.719036][ T6609] BTRFS info (device loop3): enabling ssd optimizations [ 186.742542][ T1108] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.01 [ 186.799102][ T26] audit: type=1800 audit(1788134361.561:28): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 186.841271][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.912531][ T1108] usb 2-1: config 0 descriptor?? [ 186.942365][ T26] audit: type=1800 audit(1788134361.591:29): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 187.456595][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.482612][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.518853][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.547151][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.575165][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.601772][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.634468][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.660120][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.695371][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.720657][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.748416][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.772042][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.785278][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.792867][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.801119][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.821205][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.852514][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.897974][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 187.933210][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 189.297315][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 189.304839][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 189.312273][ T1108] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 189.319802][ T1108] hid-generic 0003:1B1C:1B27.0004: unbalanced collection at end of report description [ 189.327162][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 189.330784][ T1108] hid-generic: probe of 0003:1B1C:1B27.0004 failed with error -22 [ 189.366562][ T1108] usb 2-1: USB disconnect, device number 13 [ 189.639331][ T6702] Invalid ELF header len 18 [ 189.709346][ T6703] __nla_validate_parse: 3 callbacks suppressed [ 189.709365][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 189.804652][ T6707] bond1: option mode: unable to set because the bond device has slaves [ 189.820503][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 189.909153][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 190.006366][ T6715] netlink: 128 bytes leftover after parsing attributes in process `syz.3.688'. [ 190.021113][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 190.264460][ T4229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.644562][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.679241][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.699377][ T4229] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.725744][ T4229] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.769810][ T4229] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 190.804481][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.809680][ T6738] Process accounting resumed [ 190.950860][ T6719] loop3: detected capacity change from 0 to 32768 [ 191.100491][ T6719] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.690 (6719) [ 191.304585][ T4627] Bluetooth: hci2: command 0x0406 tx timeout [ 191.950702][ T4627] Bluetooth: hci3: command 0x0406 tx timeout [ 191.978751][ T4627] Bluetooth: hci1: command 0x0406 tx timeout [ 191.988145][ T6755] bond1: option mode: unable to set because the bond device has slaves [ 191.999901][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 192.021435][ T4627] Bluetooth: hci0: command 0x0406 tx timeout [ 192.050851][ T4627] Bluetooth: hci4: command 0x0406 tx timeout [ 192.111100][ T6719] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 192.159662][ T6719] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.185187][ T6719] BTRFS info (device loop3): use zstd compression, level 3 [ 192.220571][ T6719] BTRFS info (device loop3): using free space tree [ 192.231093][ T4229] [drm] Initialized gud 1.0.0 20200422 for 5-1:1.0 on minor 2 [ 192.253406][ T6719] BTRFS info (device loop3): has skinny extents [ 192.473415][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 192.504120][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 192.599870][ T6719] BTRFS info (device loop3): enabling ssd optimizations [ 192.650764][ T26] audit: type=1800 audit(1788134367.411:30): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.690" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 192.679812][ T26] audit: type=1800 audit(1788134367.431:31): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.690" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 192.925214][ T4229] gud 5-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 192.952992][ T4229] usb 5-1: USB disconnect, device number 9 [ 193.504630][ T4750] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.674245][ T6807] bond1: option mode: unable to set because the bond device has slaves [ 193.702454][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 193.784524][ T4750] usb 3-1: Using ep0 maxpacket: 16 [ 193.794632][ T4322] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 193.817814][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 194.109141][ T4750] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 194.128498][ T4750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.141669][ T4750] usb 3-1: Product: syz [ 194.152288][ T4750] usb 3-1: Manufacturer: syz [ 194.164802][ T4322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.171376][ T4750] usb 3-1: SerialNumber: syz [ 194.194511][ T4322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.210666][ T4750] usb 3-1: config 0 descriptor?? [ 194.233498][ T4322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.384681][ T4912] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.524402][ T4750] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 194.581054][ T6827] xt_hashlimit: size too large, truncated to 1048576 [ 194.589286][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.598844][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.766995][ T4750] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 195.109846][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.121330][ T4322] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.149175][ T4750] visor: probe of 3-1:0.0 failed with error -5 [ 195.159567][ T4750] usb 3-1: USB disconnect, device number 8 [ 195.229301][ T4322] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 195.248972][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.544557][ T4322] gud 4-1:1.0: Failed to get properties (error=-71) [ 196.551225][ T4322] gud: probe of 4-1:1.0 failed with error -71 [ 196.668922][ T4322] usb 4-1: USB disconnect, device number 11 [ 196.713187][ T6811] loop1: detected capacity change from 0 to 32768 [ 196.753914][ T6811] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.715 (6811) [ 197.876044][ T6811] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 197.886809][ T6811] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 197.910150][ T6811] BTRFS info (device loop1): use zstd compression, level 3 [ 197.921547][ T6811] BTRFS info (device loop1): using free space tree [ 197.928789][ T6811] BTRFS info (device loop1): has skinny extents [ 198.059155][ T6818] device bridge_slave_0 left promiscuous mode [ 198.174393][ T4188] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.308742][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.381471][ T6811] BTRFS error (device loop1): open_ctree failed: -12 [ 198.419287][ T6877] udc-core: couldn't find an available UDC or it's busy [ 198.426537][ T6877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 199.644403][ T4912] usb 5-1: device descriptor read/64, error -110 [ 199.974442][ T4912] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.050963][ T6887] __nla_validate_parse: 1 callbacks suppressed [ 201.051498][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 201.311052][ T6888] bond1: option mode: unable to set because the bond device has slaves [ 201.511888][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 201.831923][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 201.974585][ T4912] usb 5-1: device descriptor read/64, error -32 [ 202.000180][ T6899] ======================================================= [ 202.000180][ T6899] WARNING: The mand mount option has been deprecated and [ 202.000180][ T6899] and is ignored by this kernel. Remove the mand [ 202.000180][ T6899] option from the mount to silence this warning. [ 202.000180][ T6899] ======================================================= [ 202.037583][ T4750] kernel write not supported for file /uinput (pid: 4750 comm: kworker/1:13) [ 202.094799][ T4912] usb usb5-port1: attempt power cycle [ 202.305506][ T6909] mmap: syz.0.731 (6909) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 202.514494][ T4912] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.604852][ T4912] usb 5-1: device descriptor read/8, error -32 [ 202.894397][ T4912] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.935976][ T6917] tmpfs: Unknown parameter 'usrquota' [ 202.994542][ T4912] usb 5-1: device descriptor read/8, error -32 [ 203.199254][ T4912] usb usb5-port1: unable to enumerate USB device [ 203.691088][ T6913] loop3: detected capacity change from 0 to 32768 [ 203.758916][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'. [ 203.786631][ T6913] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.733 (6913) [ 203.820071][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'. [ 203.842419][ T6913] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 203.862280][ T6913] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 203.895919][ T6913] BTRFS info (device loop3): use zstd compression, level 3 [ 203.913612][ T6913] BTRFS info (device loop3): using free space tree [ 203.952030][ T6913] BTRFS info (device loop3): has skinny extents [ 203.994710][ T6936] bond1: option mode: unable to set because the bond device has slaves [ 204.018440][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 204.167873][ T6913] BTRFS info (device loop3): enabling ssd optimizations [ 204.201340][ T26] audit: type=1800 audit(1788134378.961:32): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 204.274133][ T26] audit: type=1800 audit(1788134378.991:33): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 204.382621][ T4912] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.382827][ T6961] udc-core: couldn't find an available UDC or it's busy [ 204.435030][ T6961] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 204.684739][ T4912] usb 3-1: Using ep0 maxpacket: 8 [ 204.814740][ T4912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 204.829281][ T4912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 204.858776][ T4912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.889349][ T4912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.922864][ T4912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.997137][ T4912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.598974][ T4912] usb 3-1: GET_CAPABILITIES returned 0 [ 205.599014][ T4912] usbtmc 3-1:16.0: can't read capabilities [ 207.083104][ T4262] usb 3-1: USB disconnect, device number 10 [ 207.177626][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 207.223548][ T6981] udc-core: couldn't find an available UDC or it's busy [ 207.233118][ T6981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.273482][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 207.368620][ T6983] lo speed is unknown, defaulting to 1000 [ 207.412339][ T6985] bond1: option mode: unable to set because the bond device has slaves [ 207.453030][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 208.122038][ T6988] loop4: detected capacity change from 0 to 32768 [ 208.203433][ T6988] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.753 (6988) [ 208.289862][ T6988] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 208.370554][ T6988] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 208.580626][ T6988] BTRFS info (device loop4): use zstd compression, level 3 [ 208.749238][ T6988] BTRFS info (device loop4): using free space tree [ 208.897646][ T6988] BTRFS info (device loop4): has skinny extents [ 209.459922][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 209.568633][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 209.724446][ T7087] bond1: option mode: unable to set because the bond device has slaves [ 209.830418][ T6988] BTRFS info (device loop4): enabling ssd optimizations [ 209.883258][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 209.987904][ T7096] udc-core: couldn't find an available UDC or it's busy [ 210.028569][ T26] audit: type=1800 audit(1788134384.791:34): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.753" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 210.070792][ T7096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.149282][ T26] audit: type=1800 audit(1788134384.811:35): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.753" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 210.361828][ T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 210.754614][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.779237][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.830735][ T7] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 210.939328][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.073197][ T7] usb 2-1: config 0 descriptor?? [ 211.647702][ T7] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 211.676771][ T7] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 211.684120][ T7] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 211.769285][ T7] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 211.814559][ T7] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 211.887206][ T7] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 211.922699][ T7] usb 2-1: USB disconnect, device number 14 [ 212.140931][ T7121] fido_id[7121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 212.298914][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'. [ 212.312466][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'. [ 212.342671][ T7126] bond1: option mode: unable to set because the bond device has slaves [ 212.847505][ T7112] comedi comedi3: reset error (fatal) [ 213.644443][ T4911] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 214.134624][ T4911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.201971][ T4911] usb 5-1: not running at top speed; connect to a high speed hub [ 214.324641][ T4911] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 214.332909][ T4911] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 214.373135][ T4911] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 214.409846][ T4911] usb 5-1: config 14 has no interface number 0 [ 214.434382][ T4911] usb 5-1: config 14 has no interface number 1 [ 214.471996][ T4911] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 214.494043][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'. [ 214.506695][ T4911] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 214.534610][ T4911] usb 5-1: config 14 interface 57 has no altsetting 0 [ 214.549734][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'. [ 214.551866][ T4911] usb 5-1: config 14 interface 228 has no altsetting 0 [ 214.615118][ T7133] loop3: detected capacity change from 0 to 32768 [ 214.651038][ T7133] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.780 (7133) [ 214.712215][ T7162] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 214.722263][ T7162] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 214.788244][ T4911] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 214.820407][ T7164] bond1: option mode: unable to set because the bond device has slaves [ 214.834338][ T4911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.878949][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 214.888574][ T4911] usb 5-1: Product: syz [ 214.892781][ T4911] usb 5-1: Manufacturer: syz [ 215.060160][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 215.070722][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 215.083050][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd4ac instead [ 215.108049][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xabb0 instead [ 215.118705][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 215.129539][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 215.140102][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 215.151075][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 215.162013][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 215.172862][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 215.183462][ T7168] jffs2: Further such events for this erase block will not be printed [ 215.198962][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 215.209618][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 215.220351][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd4ac instead [ 215.231209][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xabb0 instead [ 215.241776][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 215.252460][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 215.263138][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 215.273854][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 215.284601][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 215.295345][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 215.305956][ T7168] jffs2: Further such events for this erase block will not be printed [ 215.319409][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 215.330042][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 215.340850][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd4ac instead [ 215.351558][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xabb0 instead [ 215.363106][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 215.373838][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 215.384501][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd4ac instead [ 215.395271][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xabb0 instead [ 215.406486][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 215.417408][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 215.428036][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd4ac instead [ 215.439026][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xabb0 instead [ 215.450495][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 215.461153][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 215.471834][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd4ac instead [ 215.482560][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xabb0 instead [ 215.493566][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 215.504337][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 215.524190][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd4ac instead [ 215.535006][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xabb0 instead [ 215.545803][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 215.556498][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 215.567119][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd4ac instead [ 215.577684][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xabb0 instead [ 215.588446][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 215.599072][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 215.609687][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd4ac instead [ 215.620358][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xabb0 instead [ 215.631186][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 215.641787][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 215.652332][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd4ac instead [ 215.662887][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xabb0 instead [ 215.674991][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 215.685604][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 215.765477][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd4ac instead [ 215.775998][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xabb0 instead [ 215.792700][ T4911] usb 5-1: SerialNumber: syz [ 216.090635][ T7133] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 216.134608][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 216.145159][ T7133] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.145222][ T7133] BTRFS info (device loop3): use zstd compression, level 3 [ 216.145245][ T7133] BTRFS info (device loop3): using free space tree [ 216.145261][ T7133] BTRFS info (device loop3): has skinny extents [ 216.308469][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 216.363706][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd4ac instead [ 216.375325][ T7133] BTRFS error (device loop3): open_ctree failed: -12 [ 216.406792][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xabb0 instead [ 216.435928][ T4911] legousbtower 5-1:14.57: interrupt endpoints not found [ 216.464458][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 216.492676][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 216.516122][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd4ac instead [ 216.532497][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xabb0 instead [ 216.595120][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 216.650530][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 216.675894][ T4911] legousbtower 5-1:14.228: interrupt endpoints not found [ 216.699276][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd4ac instead [ 216.725149][ T4911] usb 5-1: USB disconnect, device number 14 [ 216.751146][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xabb0 instead [ 216.789425][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 216.810718][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 216.828710][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd4ac instead [ 216.860954][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xabb0 instead [ 216.893768][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 216.916401][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 216.940937][ T7208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.802'. [ 216.952856][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd4ac instead [ 216.976647][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xabb0 instead [ 216.998053][ T7208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.802'. [ 217.010513][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 217.036329][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 217.061990][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd4ac instead [ 217.088590][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xabb0 instead [ 217.120853][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 217.141182][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 217.195940][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd4ac instead [ 217.230046][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xabb0 instead [ 218.537105][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 218.574874][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 218.586327][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd4ac instead [ 218.597746][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xabb0 instead [ 218.669303][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 218.720596][ T7216] bond1: option mode: unable to set because the bond device has slaves [ 218.739363][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 218.760313][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd4ac instead [ 218.814509][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xabb0 instead [ 218.836388][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 218.874417][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 218.908758][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd4ac instead [ 218.948829][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xabb0 instead [ 218.975514][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 219.009411][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 219.029048][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd4ac instead [ 219.054788][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xabb0 instead [ 219.076416][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 219.108523][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 219.131230][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd4ac instead [ 219.151543][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xabb0 instead [ 219.173477][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 219.199059][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 219.227478][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd4ac instead [ 219.266725][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xabb0 instead [ 219.308834][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 219.337180][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 219.364528][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd4ac instead [ 219.389513][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xabb0 instead [ 219.419555][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 219.447358][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 219.474350][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd4ac instead [ 219.508873][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xabb0 instead [ 219.532827][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 219.564385][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 219.584743][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd4ac instead [ 219.618878][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xabb0 instead [ 219.656771][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 219.679071][ T7221] loop3: detected capacity change from 0 to 32768 [ 219.690474][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 219.702830][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd4ac instead [ 219.721058][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xabb0 instead [ 219.731767][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 219.762678][ T7221] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.808 (7221) [ 219.781644][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 219.809180][ T7221] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 219.819607][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd4ac instead [ 219.839093][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xabb0 instead [ 219.849756][ T7221] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.873327][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 219.879972][ T7221] BTRFS info (device loop3): use zstd compression, level 3 [ 219.891585][ T7221] BTRFS info (device loop3): using free space tree [ 219.920392][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 219.931120][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd4ac instead [ 219.941832][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xabb0 instead [ 219.962033][ T7221] BTRFS info (device loop3): has skinny extents [ 219.962087][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 219.980345][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 220.011786][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd4ac instead [ 220.047115][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xabb0 instead [ 220.079790][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 220.097090][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 220.110762][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd4ac instead [ 220.122121][ T7168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xabb0 instead [ 220.133472][ T7168] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 220.144045][ T7168] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 220.219348][ T7221] BTRFS info (device loop3): enabling ssd optimizations [ 220.282621][ T26] audit: type=1800 audit(1788134395.041:36): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.808" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 220.351832][ T26] audit: type=1800 audit(1788134395.051:37): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.808" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 220.387364][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'. [ 221.011705][ T4368] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4368) [ 221.035010][ T7267] bond1: option mode: unable to set because the bond device has slaves [ 221.302105][ T7270] Process accounting paused [ 222.374709][ T4262] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 222.704431][ T4629] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.754574][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.281593][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.291477][ T4262] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.304979][ T4262] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.314123][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.336584][ T4262] usb 3-1: config 0 descriptor?? [ 223.580357][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.828'. [ 223.653014][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.828'. [ 223.689341][ T4629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.774623][ T4629] usb 5-1: config 1 has an invalid interface number: 48 but max is 1 [ 223.789648][ T4629] usb 5-1: config 1 has no interface number 1 [ 223.798503][ T4262] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.810898][ T4262] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.822063][ T4629] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 223.840374][ T4262] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.848536][ T4262] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.856484][ T4629] usb 5-1: too many endpoints for config 1 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 223.870776][ T4262] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 223.881045][ T4629] usb 5-1: config 1 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 223.898239][ T4262] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 223.910244][ T4629] usb 5-1: config 1 interface 0 has no altsetting 0 [ 223.928380][ T4629] usb 5-1: config 1 interface 48 has no altsetting 0 [ 223.936303][ T4262] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 224.104595][ T4629] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 224.121668][ T4629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.141908][ T7293] loop1: detected capacity change from 0 to 32768 [ 224.148592][ T4629] usb 5-1: Product: syz [ 224.153317][ T4629] usb 5-1: Manufacturer: syz [ 224.165305][ T4629] usb 5-1: SerialNumber: syz [ 224.212023][ T7308] bond1: option mode: unable to set because the bond device has slaves [ 225.163081][ T4629] smsusb:smsusb_probe: board id=8, interface number 0 [ 225.234322][ C0] Clock: inserting leap second 23:59:60 UTC [ 225.346078][ T4629] smsusb:smsusb_probe: board id=8, interface number 48 [ 225.389867][ T4629] usb 5-1: USB disconnect, device number 15 [ 225.425651][ T4300] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 226.622447][ T21] usb 3-1: USB disconnect, device number 11 [ 226.673797][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.840'. [ 226.735224][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.840'. [ 226.973419][ T7341] bond1: option mode: unable to set because the bond device has slaves [ 227.011978][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 228.497288][ T7336] loop3: detected capacity change from 0 to 32768 [ 228.552177][ T7336] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 228.585208][ T7336] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 228.616519][ T7336] BTRFS info (device loop3): use zstd compression, level 3 [ 228.623899][ T7336] BTRFS info (device loop3): using free space tree [ 228.644467][ T7336] BTRFS info (device loop3): has skinny extents [ 228.895303][ T7336] BTRFS info (device loop3): enabling ssd optimizations [ 228.986579][ T26] audit: type=1800 audit(1788134402.751:38): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.841" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 229.040132][ T26] audit: type=1800 audit(1788134402.771:39): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.841" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 229.404561][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.854'. [ 229.652195][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.854'. [ 229.749896][ T7397] bond1: option mode: unable to set because the bond device has slaves [ 229.772329][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 230.076116][ T7405] tmpfs: Unknown parameter 'usrquota' [ 230.629422][ T7401] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.641015][ T7401] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.652193][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 230.864418][ T4322] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 231.064190][ T7401] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.076821][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 231.086993][ T7401] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.098158][ T7401] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.109389][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 231.119242][ T7401] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.130459][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 231.140573][ T7401] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.151735][ T7401] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.162948][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 231.172767][ T7401] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.184014][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 231.194002][ T7401] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 231.205146][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 231.214846][ T7401] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 231.224440][ T7401] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 232.264532][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 232.571597][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.868'. [ 232.585081][ T4322] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 232.596543][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.618702][ T4322] usb 2-1: Product: syz [ 232.640319][ T4322] usb 2-1: Manufacturer: syz [ 232.653520][ T4322] usb 2-1: SerialNumber: syz [ 232.664854][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.868'. [ 232.678858][ T4322] usb 2-1: config 0 descriptor?? [ 232.728401][ T4322] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 232.770530][ T7438] bond1: option mode: unable to set because the bond device has slaves [ 232.841101][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 232.946834][ T4322] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 232.959696][ T4322] visor: probe of 2-1:0.0 failed with error -5 [ 233.110158][ T7445] netlink: 128 bytes leftover after parsing attributes in process `syz.0.872'. [ 233.141260][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 233.172073][ T4300] usb 2-1: USB disconnect, device number 15 [ 233.288584][ T7432] loop3: detected capacity change from 0 to 32768 [ 233.359665][ T7432] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.866 (7432) [ 233.394118][ T7432] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 233.416301][ T7432] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 233.446369][ T7432] BTRFS info (device loop3): use zstd compression, level 3 [ 233.466187][ T7432] BTRFS info (device loop3): using free space tree [ 233.487386][ T7432] BTRFS info (device loop3): has skinny extents [ 233.562587][ T7432] BTRFS info (device loop3): enabling ssd optimizations [ 233.591187][ T26] audit: type=1800 audit(1788134407.351:40): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.866" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 233.668056][ T26] audit: type=1800 audit(1788134407.381:41): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.866" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 234.415409][ T7482] SET target dimension over the limit! [ 234.850934][ T7477] tmpfs: Unknown parameter 'usrquota' [ 234.917667][ T4368] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4368) [ 235.047719][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 235.057636][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 235.067957][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 235.077717][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 235.087837][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 235.097593][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 235.107601][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 235.117341][ T7477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 235.127074][ T7477] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 236.189398][ T7492] bond1: option mode: unable to set because the bond device has slaves [ 236.476554][ T26] audit: type=1800 audit(1788134410.241:42): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.884" name="file" dev="configfs" ino=42869 res=0 errno=0 [ 236.515388][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 236.537069][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 237.282836][ T7505] udc-core: couldn't find an available UDC or it's busy [ 237.364469][ T7505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 238.049837][ T7519] udc-core: couldn't find an available UDC or it's busy [ 238.084499][ T7519] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 239.461279][ T7528] bond1: option mode: unable to set because the bond device has slaves [ 239.660416][ T7532] SET target dimension over the limit! [ 240.563734][ T7517] loop2: detected capacity change from 0 to 32768 [ 240.617136][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'. [ 240.631386][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'. [ 240.701178][ T7545] gadgetfs: bound to dummy_udc driver [ 240.835666][ T7540] lo speed is unknown, defaulting to 1000 [ 241.734632][ T4740] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 242.169614][ T26] audit: type=1800 audit(1788134415.931:43): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.901" name="file" dev="configfs" ino=43534 res=0 errno=0 [ 242.224597][ T4740] usb 5-1: Using ep0 maxpacket: 8 [ 242.365032][ T5005] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 242.372747][ T4740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 242.404433][ T4740] usb 5-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 242.413574][ T4740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.444631][ T4740] usb 5-1: config 0 descriptor?? [ 242.602285][ T7563] bond1: option mode: unable to set because the bond device has slaves [ 242.679242][ T7554] loop0: detected capacity change from 0 to 32768 [ 242.744735][ T5005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.889349][ T5005] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.006984][ T5005] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.039251][ T4740] input: HID 1b96:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B96:0012.0007/input/input11 [ 243.102222][ T5005] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.224997][ T5005] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 243.322308][ T5005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.031678][ T4740] ntrig 0003:1B96:0012.0007: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:0012] on usb-dummy_hcd.4-1/input0 [ 244.078931][ T4740] usb 5-1: USB disconnect, device number 16 [ 244.273748][ T7579] fido_id[7579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 244.339632][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 244.415923][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 244.719690][ T5005] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 244.824157][ T7590] gadgetfs: bound to dummy_udc driver [ 245.869549][ T5005] gud 3-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 245.890446][ T5005] usb 3-1: USB disconnect, device number 12 [ 246.266777][ T26] audit: type=1800 audit(1788134420.031:44): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.915" name="file" dev="configfs" ino=43679 res=0 errno=0 [ 246.424413][ T7604] SET target dimension over the limit! [ 247.210008][ T7609] bond1: option mode: unable to set because the bond device has slaves [ 247.499461][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.924'. [ 247.530927][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.924'. [ 247.641625][ T7618] xt_hashlimit: size too large, truncated to 1048576 [ 247.714896][ T4300] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 247.747956][ T5005] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 247.827492][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.890795][ T7631] gadgetfs: bound to dummy_udc driver [ 247.994437][ T5005] usb 2-1: Using ep0 maxpacket: 8 [ 248.115754][ T5005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 248.205445][ T5005] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 248.293315][ T7626] device bridge_slave_0 left promiscuous mode [ 248.334661][ T5005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.565515][ T5005] usb 2-1: config 0 descriptor?? [ 248.599421][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.159457][ T5005] input: HID 1b96:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0012.0008/input/input12 [ 249.187049][ T7642] bond1: option mode: unable to set because the bond device has slaves [ 249.257114][ T5005] ntrig 0003:1B96:0012.0008: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 249.358820][ T5124] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 249.374693][ T5005] usb 2-1: USB disconnect, device number 16 [ 249.394512][ T7645] fuse: Bad value for 'fd' [ 249.503805][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 249.754579][ T5124] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.771336][ T5124] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.781464][ T5124] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.797181][ T5124] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.811727][ T5124] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 249.824624][ T5124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.088892][ T5124] [drm] Initialized gud 1.0.0 20200422 for 5-1:1.0 on minor 2 [ 251.114902][ T26] audit: type=1800 audit(1788134424.881:45): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.935" name="file" dev="configfs" ino=43831 res=0 errno=0 [ 251.382762][ T5124] gud 5-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 251.405950][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.939'. [ 251.422010][ T5124] usb 5-1: USB disconnect, device number 17 [ 252.420987][ T7645] Process accounting resumed [ 252.431465][ T7673] bond1: option mode: unable to set because the bond device has slaves [ 252.520098][ T7677] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 252.528995][ T7677] netlink: 'syz.2.945': attribute type 4 has an invalid length. [ 252.833986][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.952'. [ 252.854510][ T5124] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.924483][ T4300] usb 4-1: device descriptor read/64, error -110 [ 253.132709][ T5124] usb 5-1: Using ep0 maxpacket: 16 [ 253.166370][ T7702] fuse: Bad value for 'fd' [ 253.214420][ T4300] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 253.231595][ T7704] bond1: option mode: unable to set because the bond device has slaves [ 253.243643][ T7704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.959'. [ 253.264647][ T5124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.394533][ T4300] usb 4-1: device descriptor read/64, error -32 [ 253.427875][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'. [ 253.458403][ T7707] netlink: 212 bytes leftover after parsing attributes in process `syz.0.961'. [ 253.468239][ T5124] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 253.482712][ T5124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.499555][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.961'. [ 253.512895][ T5124] usb 5-1: Product: syz [ 253.523730][ T5124] usb 5-1: Manufacturer: syz [ 253.528979][ T4300] usb usb4-port1: attempt power cycle [ 253.545442][ T5124] usb 5-1: SerialNumber: syz [ 253.569373][ T5124] usb 5-1: config 0 descriptor?? [ 253.653301][ T5124] asix: probe of 5-1:0.0 failed with error -22 [ 253.666383][ T7712] autofs4:pid:7712:autofs_fill_super: called with bogus options [ 253.823602][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'. [ 253.857907][ T4751] usb 5-1: USB disconnect, device number 18 [ 253.955928][ T4300] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 254.008618][ T7721] program syz.2.967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.043992][ T7721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 254.064491][ T4300] usb 4-1: device descriptor read/8, error -32 [ 254.190792][ T7727] bond1: option mode: unable to set because the bond device has slaves [ 254.284313][ T7728] divide error: 0000 [#1] PREEMPT SMP KASAN [ 254.290279][ T7728] CPU: 1 PID: 7728 Comm: syz.0.969 Not tainted syzkaller #0 [ 254.297592][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.307680][ T7728] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 254.313352][ T7728] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 28 83 91 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 d0 5e 4c fc 4d 85 f6 0f 85 98 [ 254.333011][ T7728] RSP: 0018:ffffc900032ff9e0 EFLAGS: 00010246 [ 254.339118][ T7728] RAX: 0000000000000000 RBX: 1ffff1100fa21c02 RCX: 0000000000000000 [ 254.347497][ T7728] RDX: 0000000000000000 RSI: 0000000000700000 RDI: 0000000001f00000 [ 254.355515][ T7728] RBP: ffffc900032ffbd0 R08: ffff888020c834af R09: 1ffff11004190695 [ 254.363530][ T7728] R10: dffffc0000000000 R11: ffffed1004190696 R12: ffffc900032ffa60 [ 254.371537][ T7728] R13: dffffc0000000000 R14: ffff8881409006e0 R15: 0000000000000000 [ 254.379587][ T7728] FS: 00007f0090d9f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 254.388551][ T7728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.395186][ T7728] CR2: 0000000000000000 CR3: 000000007d49a000 CR4: 00000000003506e0 [ 254.403194][ T7728] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.411224][ T7728] DR3: 00000000000f0006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 254.419222][ T7728] Call Trace: [ 254.422520][ T7728] [ 254.425480][ T7728] ? block2mtd_setup+0x40/0x40 [ 254.430276][ T7728] ? __mutex_lock_common+0x44c/0x2400 [ 254.435711][ T7728] ? lockdep_hardirqs_on+0x94/0x140 [ 254.440951][ T7728] ? module_attr_show+0x70/0x70 [ 254.445854][ T7728] block2mtd_setup+0x1f/0x40 [ 254.450485][ T7728] param_attr_store+0x20a/0x300 [ 254.455368][ T7728] ? param_attr_show+0x170/0x170 [ 254.460336][ T7728] ? sysfs_kf_read+0x350/0x350 [ 254.465120][ T7728] module_attr_store+0x5b/0x80 [ 254.469919][ T7728] kernfs_fop_write_iter+0x3a8/0x500 [ 254.475237][ T7728] vfs_write+0x748/0xd70 [ 254.479516][ T7728] ? file_end_write+0x250/0x250 [ 254.484396][ T7728] ? mutex_lock_nested+0x17/0x20 [ 254.489361][ T7728] ? __fdget_pos+0x2bf/0x370 [ 254.493975][ T7728] ? ksys_write+0x70/0x260 [ 254.498411][ T7728] ksys_write+0x153/0x260 [ 254.502763][ T7728] ? __ia32_sys_read+0x80/0x80 [ 254.507551][ T7728] ? lockdep_hardirqs_on+0x94/0x140 [ 254.512779][ T7728] do_syscall_64+0x4c/0xa0 [ 254.517226][ T7728] ? clear_bhb_loop+0x30/0x80 [ 254.521926][ T7728] ? clear_bhb_loop+0x30/0x80 [ 254.526626][ T7728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.532545][ T7728] RIP: 0033:0x7f0092b68159 [ 254.536985][ T7728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.556614][ T7728] RSP: 002b:00007f0090d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.565060][ T7728] RAX: ffffffffffffffda RBX: 00007f0092df0090 RCX: 00007f0092b68159 [ 254.573057][ T7728] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000008 [ 254.581051][ T7728] RBP: 00007f0092bff024 R08: 0000000000000000 R09: 0000000000000000 [ 254.589042][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.597036][ T7728] R13: 00007f0092df0128 R14: 00007f0092df0090 R15: 00007ffd851db278 [ 254.605046][ T7728] [ 254.608096][ T7728] Modules linked in: [ 254.612621][ T7728] ---[ end trace b9c549b208602ba2 ]--- [ 254.618217][ T7728] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 254.624116][ T7728] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 28 83 91 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 d0 5e 4c fc 4d 85 f6 0f 85 98 [ 254.644335][ T7728] RSP: 0018:ffffc900032ff9e0 EFLAGS: 00010246 [ 254.650486][ T7728] RAX: 0000000000000000 RBX: 1ffff1100fa21c02 RCX: 0000000000000000 [ 254.658547][ T7728] RDX: 0000000000000000 RSI: 0000000000700000 RDI: 0000000001f00000 [ 254.666594][ T7728] RBP: ffffc900032ffbd0 R08: ffff888020c834af R09: 1ffff11004190695 [ 254.674661][ T7728] R10: dffffc0000000000 R11: ffffed1004190696 R12: ffffc900032ffa60 [ 254.682693][ T7728] R13: dffffc0000000000 R14: ffff8881409006e0 R15: 0000000000000000 [ 254.690740][ T7728] FS: 00007f0090d9f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 254.728069][ T7727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.970'. [ 254.738027][ T4300] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.799966][ T7728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.808047][ T7728] CR2: 000000110c2f36c7 CR3: 000000007d49a000 CR4: 00000000003506e0 [ 254.816434][ T7728] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.823278][ T4300] usb 4-1: device descriptor read/8, error -32 [ 254.832419][ T7728] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.840872][ T7728] Kernel panic - not syncing: Fatal exception [ 254.847260][ T7728] Kernel Offset: disabled [ 254.851614][ T7728] Rebooting in 86400 seconds..