last executing test programs: 3m52.027273813s ago: executing program 2 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 3m51.246948203s ago: executing program 2 (id=189): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) io_setup(0x7fff, &(0x7f00000055c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) 3m47.331039948s ago: executing program 2 (id=220): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 3m46.752979282s ago: executing program 2 (id=229): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002b00)={[{@fat=@showexec}, {@shortname_mixed}, {@utf8no}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002f40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 3m46.423750501s ago: executing program 2 (id=233): socket(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 3m46.02658548s ago: executing program 2 (id=240): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x804) 3m45.728149118s ago: executing program 32 (id=240): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x804) 2m35.150506464s ago: executing program 4 (id=598): syz_open_procfs(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000000140)=ANY=[], 0x2, 0xa1b, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183442, 0x25) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) open(&(0x7f00000000c0)='./bus\x00', 0x2f77e, 0x67) 2m33.961833913s ago: executing program 4 (id=603): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000000690780a0101020a01010244140601e0000001fffffffce0000001000000000000000006cb94edb99e1f1cc16310f0927e1e15cb5dc1e488c278be55ba8798c075466ba41a6b09492874ff4fee679c3312a60a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 2m31.487713223s ago: executing program 4 (id=616): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0) pwrite64(r1, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2m30.900124778s ago: executing program 4 (id=622): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800000, &(0x7f0000000500)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@nodecompose}, {@type={'type', 0x3d, "e481e91c"}}, {@barrier}, {@gid}, {@type={'type', 0x3d, "590389e5"}}]}, 0x1, 0x5e5, &(0x7f0000000680)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, &(0x7f0000000140)) 2m30.577748006s ago: executing program 4 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) 2m27.499739011s ago: executing program 4 (id=637): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==") open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002880)=ANY=[@ANYBLOB="0e746ef955ca56d1db8aa338105bc3dad4dd95ba8bf67cfaa7548d9916be7cae0d46e55019a6ffb8908d85bb98ad63453ab7b0d1d6db430cebb5746b1d67ae915fbcdfc83d0c9e9354fcc4fc9dbbc779822592ece87e471419f5633bb48ff006276be2d53843aeca238589184582ee3cbbab8b2347a6b9375f521bc99ed391"], 0x32600) socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xec776000) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000010c0)) 2m27.200675368s ago: executing program 33 (id=637): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002880)=ANY=[@ANYBLOB="0e746ef955ca56d1db8aa338105bc3dad4dd95ba8bf67cfaa7548d9916be7cae0d46e55019a6ffb8908d85bb98ad63453ab7b0d1d6db430cebb5746b1d67ae915fbcdfc83d0c9e9354fcc4fc9dbbc779822592ece87e471419f5633bb48ff006276be2d53843aeca238589184582ee3cbbab8b2347a6b9375f521bc99ed391"], 0x32600) socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xec776000) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000010c0)) 1m58.54476012s ago: executing program 1 (id=757): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x2, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x400, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f00000001c0)={0x8001, 0x7ff}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4) lseek(r3, 0xfffffffffffffffc, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x4044890) getdents(r3, 0x0, 0x54) openat(r3, &(0x7f0000000040)='./bus\x00', 0x331500, 0x121) 1m58.388458893s ago: executing program 1 (id=759): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r3, 0x12) 1m56.169293357s ago: executing program 1 (id=769): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) 1m55.593532161s ago: executing program 1 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x34, r1, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x34}}, 0x4008010) 1m55.406001756s ago: executing program 1 (id=774): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x112, &(0x7f0000000200)=ANY=[], 0x0) 1m55.177629812s ago: executing program 1 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x3) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x188b9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) socket(0xa, 0x5, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r4], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) 1m40.066959192s ago: executing program 34 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x3) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x188b9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) socket(0xa, 0x5, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64=r4], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) 17.53632691s ago: executing program 3 (id=1166): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x6) socket$packet(0x11, 0x3, 0x300) 17.194829619s ago: executing program 3 (id=1168): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 16.501010856s ago: executing program 5 (id=1169): timer_create(0x1, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002140)={r0, &(0x7f0000002000)="4f16e387ec58a359c3d293bbd73f6a60dc561f6e65bab7c36199f3c17330157b07e27f595454c05e9237548c42d31221a9074f8d737e993bba25a48b5d6db575e1911c9c860bc082b14cf79e5d9dae18c8b44d37f4c434e1217fd436c58d94c869b76967b44ed1b09cf00b5ac4895de78dd2c5732bb872c53771eb9f02ddd8aa75cb8768ba993c5eebe81c16c06c66e9cd3fa359a0cbc6cc5632939d0a0d5728ec56ec35e10b62d0c8bcbbc6d1807f8210c1692962c772ad487584a7c0fa805d6930ea86aeaac02e", &(0x7f0000002180)=@tcp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0xf) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15.203563877s ago: executing program 5 (id=1170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/10, 0x5b) 15.165328718s ago: executing program 5 (id=1171): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 8.281930047s ago: executing program 6 (id=1187): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x500001b3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 7.948334295s ago: executing program 7 (id=1189): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./control\x00', 0x3008003, &(0x7f0000000340)=ANY=[], 0x16, 0x20e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) 7.881783766s ago: executing program 6 (id=1190): syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b080000090503dec8002a0000090505"], 0x0) 7.550902404s ago: executing program 7 (id=1191): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6.744791724s ago: executing program 7 (id=1193): timer_create(0x1, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002140)={r0, &(0x7f0000002000)="4f16e387ec58a359c3d293bbd73f6a60dc561f6e65bab7c36199f3c17330157b07e27f595454c05e9237548c42d31221a9074f8d737e993bba25a48b5d6db575e1911c9c860bc082b14cf79e5d9dae18c8b44d37f4c434e1217fd436c58d94c869b76967b44ed1b09cf00b5ac4895de78dd2c5732bb872c53771eb9f02ddd8aa75cb8768ba993c5eebe81c16c06c66e9cd3fa359a0cbc6cc5632939d0a0d5728ec56ec35e10b62d0c8bcbbc6d1807f8210c1692962c772ad487584a7c0fa805d6930ea86aeaac02e", &(0x7f0000002180)=@tcp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0xf) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.372436283s ago: executing program 3 (id=1194): mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x722) msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x8, 0x800) 6.270678446s ago: executing program 6 (id=1195): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x242d3c50, 0x2, 0x0, 0x8}}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x7fffffff, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) write$uinput_user_dev(r3, 0x0, 0xfffffffffffffd7b) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 6.079767931s ago: executing program 3 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5.803767538s ago: executing program 7 (id=1197): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) lseek(r0, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40050, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') open(&(0x7f0000000300)='./file0/../file0/file0\x00', 0x101001, 0xb) syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d39f0389b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d1695d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000005, 0x0, 0x0, 0x5, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.384104568s ago: executing program 0 (id=1198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x4, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.203855402s ago: executing program 5 (id=1199): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001280)={0x2c, &(0x7f0000001080)={0x40, 0x17, 0x5, "40043e8a5d"}, 0x0, 0x0, 0x0, 0x0}) 5.130335374s ago: executing program 0 (id=1200): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x38}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/50, 0x32}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/201, 0xc9}, 0x9}], 0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffe2b, &(0x7f0000000440)=@any_dev={0x3, 0x333, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x20}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x10, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x128}}], 0x1, 0x0, 0x0) 5.099661435s ago: executing program 3 (id=1201): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x1, 0x2, '\x00\x00'}, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 4.955801358s ago: executing program 6 (id=1202): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000280)=""/78, 0x4e}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) write(r1, &(0x7f0000000040)="240000001a005f0214f9f407000904001f00000000070002000000000800040001000000", 0x24) 4.86060532s ago: executing program 0 (id=1203): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.756540823s ago: executing program 7 (id=1204): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 4.569175347s ago: executing program 0 (id=1205): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={r0, &(0x7f00000000c0)='.^{^},\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x927, 0x5]}, {0x9, 0x3, 0x0, 0x2}}, 0x2, &(0x7f0000000280), &(0x7f0000000580)=0x100}) sendto$inet(r4, 0x0, 0xfffffffffffffe74, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fchown(r5, 0xee01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) rmdir(&(0x7f0000000500)='./file1\x00') mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 3.513130893s ago: executing program 6 (id=1206): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x60, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.043997195s ago: executing program 0 (id=1207): timer_create(0x1, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002140)={r0, &(0x7f0000002000)="4f16e387ec58a359c3d293bbd73f6a60dc561f6e65bab7c36199f3c17330157b07e27f595454c05e9237548c42d31221a9074f8d737e993bba25a48b5d6db575e1911c9c860bc082b14cf79e5d9dae18c8b44d37f4c434e1217fd436c58d94c869b76967b44ed1b09cf00b5ac4895de78dd2c5732bb872c53771eb9f02ddd8aa75cb8768ba993c5eebe81c16c06c66e9cd3fa359a0cbc6cc5632939d0a0d5728ec56ec35e10b62d0c8bcbbc6d1807f8210c1692962c772ad487584a7c0fa805d6930ea86aeaac02e", &(0x7f0000002180)=@tcp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0xf) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.451787269s ago: executing program 5 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x76f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x20004890) 2.084053118s ago: executing program 5 (id=1209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r2 = syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080)=r2, 0x12) 1.406616365s ago: executing program 3 (id=1210): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffde6}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "1800", {0x1, 0x7f, 0x9, 0xfc, 0x8}}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"]) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x3, 0x5, 0x8, 0x8}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x2, 0xf001}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000800)={0x20, 0x81, 0x3, "1c7a95"}, &(0x7f0000000840)={0x20, 0x82, 0x1, "f9"}, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x85, 0x3, "86e44a"}}) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.347726776s ago: executing program 0 (id=1211): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000d40)={0x1c, 0x0, 0x0, &(0x7f0000000d00)={0x21, 0x0, 0x4, "69fa7941"}}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 411.85051ms ago: executing program 6 (id=1212): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0080002a9008070900be0083"], 0x0}, 0x0) 0s ago: executing program 7 (id=1213): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102"], 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) kernel console output (not intermixed with test programs): blems! [ 113.359113][ T5007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.392311][ T5007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.416905][ T5007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.463266][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.480720][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.523997][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.546305][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.560697][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.573356][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.598870][ T5007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.618238][ T5007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.648604][ T5007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.672106][ T5007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.698508][ T5371] device syzkaller0 entered promiscuous mode [ 113.886737][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.910959][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.930535][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.940235][ T5390] loop3: detected capacity change from 0 to 512 [ 113.955251][ T5387] loop4: detected capacity change from 0 to 1024 [ 113.983722][ T5094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.998377][ T5094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.018919][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.161257][ T5387] syz.4.339: attempt to access beyond end of device [ 114.161257][ T5387] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.265378][ T5392] loop0: detected capacity change from 0 to 4096 [ 114.272796][ T4324] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.282775][ T5387] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.308416][ T5392] EXT4-fs: Ignoring removed orlov option [ 114.329411][ T5386] syz.4.339: attempt to access beyond end of device [ 114.329411][ T5386] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.350895][ T5392] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.361582][ T5386] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.375733][ T5387] syz.4.339: attempt to access beyond end of device [ 114.375733][ T5387] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.393572][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.475758][ T4324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.477787][ T5387] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.522509][ T5386] syz.4.339: attempt to access beyond end of device [ 114.522509][ T5386] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.522570][ T4324] usb 4-1: not running at top speed; connect to a high speed hub [ 114.523630][ T4324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 114.582190][ T5386] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.603794][ T5387] syz.4.339: attempt to access beyond end of device [ 114.603794][ T5387] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.637705][ T5387] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.679059][ T4324] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.707094][ T5387] syz.4.339: attempt to access beyond end of device [ 114.707094][ T5387] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.740262][ T4324] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 114.767003][ T5387] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.783810][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.810439][ T5387] syz.4.339: attempt to access beyond end of device [ 114.810439][ T5387] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.810719][ T4324] usb 4-1: Product: syz [ 114.838889][ T5392] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.852157][ T4324] usb 4-1: Manufacturer: syz [ 114.857088][ T4324] usb 4-1: SerialNumber: syz [ 114.871689][ T5387] Buffer I/O error on dev loop4, logical block 2889, async page read [ 114.895652][ T5387] syz.4.339: attempt to access beyond end of device [ 114.895652][ T5387] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 114.920375][ T5390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.960054][ T5387] Buffer I/O error on dev loop4, logical block 2889, async page read [ 115.000610][ T5386] syz.4.339: attempt to access beyond end of device [ 115.000610][ T5386] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 115.024715][ T5386] Buffer I/O error on dev loop4, logical block 2889, async page read [ 115.029020][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 115.049288][ T5414] syz.4.339: attempt to access beyond end of device [ 115.049288][ T5414] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 115.087733][ T5414] Buffer I/O error on dev loop4, logical block 2889, async page read [ 115.141506][ T4324] usb 4-1: MIDIStreaming interface descriptor not found [ 115.175568][ T5415] hfsplus: request for non-existent node 1280 in B*Tree [ 115.249165][ T4324] usb 4-1: USB disconnect, device number 3 [ 115.325568][ T5415] hfsplus: request for non-existent node 1280 in B*Tree [ 115.703720][ T5436] device syzkaller0 entered promiscuous mode [ 115.877276][ T5439] input: syz0 as /devices/virtual/input/input9 [ 116.175845][ T5448] loop3: detected capacity change from 0 to 256 [ 116.279614][ T5448] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 116.381358][ T27] audit: type=1800 audit(1787598019.474:4): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.354" name="file1" dev="loop3" ino=1048601 res=0 errno=0 [ 116.401866][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.425334][ T5456] loop4: detected capacity change from 0 to 256 [ 116.608009][ T4321] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 116.638311][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.690755][ T4321] usb 6-1: Product: syz [ 116.705284][ T4321] usb 6-1: Manufacturer: syz [ 116.723134][ T4321] usb 6-1: SerialNumber: syz [ 116.742198][ T4279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.942237][ T4279] usb 4-1: Using ep0 maxpacket: 16 [ 116.949797][ T4279] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.961239][ T4321] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 116.988180][ T4321] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 117.023331][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.042586][ T4279] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 117.052662][ T4321] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 117.071828][ T4279] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 117.087851][ T4321] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 117.108618][ T4279] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 117.152507][ T4321] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.177088][ T4279] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.683766][ T4279] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 117.757280][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.827681][ T4279] usb 4-1: Product: syz [ 117.855147][ T4279] usb 4-1: Manufacturer: syz [ 117.952637][ T4279] usb 4-1: SerialNumber: syz [ 118.038108][ T4321] lan78xx: probe of 6-1:1.0 failed with error -71 [ 118.114701][ T4321] usb 6-1: USB disconnect, device number 2 [ 118.220440][ T4279] usb 4-1: unit 131 not found! [ 118.279371][ T5490] device syzkaller0 entered promiscuous mode [ 118.343631][ T4279] usb 4-1: USB disconnect, device number 4 [ 118.634762][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.771495][ T5502] loop5: detected capacity change from 0 to 256 [ 119.036200][ T5508] loop3: detected capacity change from 0 to 512 [ 119.084218][ T5508] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.131681][ T5508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.816917][ T5508] EXT4-fs (loop3): 1 truncate cleaned up [ 119.900013][ T5508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.200586][ T5528] cgroup: noprefix used incorrectly [ 120.292850][ T5525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.375'. [ 120.872192][ T4322] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 121.075108][ T4322] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.106757][ T4322] usb 5-1: config 1 has no interface number 0 [ 121.122215][ T5546] PM: suspend entry (deep) [ 121.138545][ T4322] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 121.202210][ T4322] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 121.238694][ T4322] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 121.289031][ T4322] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 121.318734][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.341733][ T4322] usb 5-1: Product: syz [ 121.398099][ T4322] usb 5-1: Manufacturer: syz [ 121.420476][ T4322] usb 5-1: SerialNumber: syz [ 121.464761][ T5546] Filesystems sync: 0.315 seconds [ 121.683374][ T5525] loop4: detected capacity change from 0 to 8 [ 121.738984][ T4322] usb 5-1: 1:0 : does not exist [ 121.771125][ T4322] usb 5-1: BAAD GENERIC IO: no channels? [ 121.853865][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 121.892455][ T5546] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.916792][ T5546] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.937304][ T5560] loop3: detected capacity change from 0 to 128 [ 121.969280][ T5546] Bluetooth: hci0: Suspend notifier action (3) failed: -4 [ 121.977872][ T5546] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.984344][ T5546] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.993055][ T5546] Bluetooth: hci1: Suspend notifier action (3) failed: -4 [ 122.000410][ T5546] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.001513][ T4322] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 122.006970][ T5546] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.019981][ T4322] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 122.030084][ T4322] snd_usb_pod 5-1:1.1: set_interface failed [ 122.083444][ T4322] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 122.090681][ T4322] snd_usb_pod: probe of 5-1:1.1 failed with error -71 [ 122.130294][ T4322] usb 5-1: USB disconnect, device number 3 [ 122.199202][ T5546] Bluetooth: hci2: Suspend notifier action (3) failed: -4 [ 122.209432][ T5546] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.236311][ T5546] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.285822][ T5546] Bluetooth: hci3: Suspend notifier action (3) failed: -4 [ 122.317985][ T5546] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.346377][ T5546] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 122.389115][ T5546] Bluetooth: hci4: Suspend notifier action (3) failed: -4 [ 122.395113][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.598287][ T5546] Freezing user space processes [ 122.617465][ T5578] loop4: detected capacity change from 0 to 512 [ 122.630368][ T5546] Freezing user space processes completed (elapsed 0.005 seconds) [ 122.638515][ T5546] OOM killer disabled. [ 122.646143][ T5546] Freezing remaining freezable tasks [ 122.655114][ T5546] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 122.666421][ T5546] printk: Suspending console(s) (use no_console_suspend to debug) [ 122.776295][ T5546] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 122.813620][ T5546] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 122.853660][ T5546] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 122.893389][ T5546] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 122.933563][ T5546] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 122.973928][ T5546] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 123.023788][ T5546] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 123.063642][ T5546] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 123.103885][ T5546] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 123.143352][ T5546] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 123.189694][ T5546] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 123.223249][ T5546] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 123.274161][ T5546] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 123.313220][ T5546] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 123.353252][ T5546] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 123.413999][ T9] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 123.650541][ T5546] ACPI: PM: Preparing to enter system sleep state S3 [ 123.651232][ T5546] ACPI: PM: Saving platform NVS memory [ 123.653286][ T5546] Disabling non-boot CPUs ... [ 123.683750][ T5546] smpboot: CPU 1 is now offline [ 123.708025][ T5546] ACPI: PM: Low-level resume complete [ 123.708069][ T5546] ACPI: PM: Restoring platform NVS memory [ 123.725315][ T5546] Enabling non-boot CPUs ... [ 123.726361][ T5546] x86: Booting SMP configuration: [ 123.726398][ T5546] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 123.739705][ T5546] CPU1 is up [ 123.741163][ T5546] ACPI: PM: Waking up from system sleep state S3 [ 123.933250][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.000353][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.020397][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.083310][ T5546] OOM killer enabled. [ 124.083995][ T5546] Restarting tasks ... done. [ 124.131376][ T5546] random: crng reseeded on system resumption [ 124.141057][ T5546] PM: suspend exit [ 124.200956][ T5578] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.384: iget: bad i_size value: 38620345925642 [ 124.203172][ T5578] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.384: couldn't read orphan inode 15 (err -117) [ 124.205436][ T5578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.239167][ T5702] loop5: detected capacity change from 0 to 512 [ 124.241755][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.245233][ T5578] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.384: bg 0: block 5: invalid block bitmap [ 124.326291][ T5702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.334759][ T5702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.363658][ T5702] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 124.366344][ T5702] EXT4-fs (loop5): 1 truncate cleaned up [ 124.367201][ T5702] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 124.400725][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.475727][ T5710] loop0: detected capacity change from 0 to 256 [ 124.477644][ T5710] exfat: Deprecated parameter 'namecase' [ 124.516364][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 124.571295][ T5710] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 124.696111][ T5715] loop4: detected capacity change from 0 to 512 [ 124.732359][ T5715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.733423][ T5715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.796550][ T5715] EXT4-fs (loop4): 1 truncate cleaned up [ 124.797480][ T5715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.683491][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 126.050207][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 126.090429][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 126.091381][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 127.210582][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 127.211573][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 127.271263][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 127.492236][ T5747] cgroup: noprefix used incorrectly [ 127.572709][ T5748] device syzkaller0 entered promiscuous mode [ 129.148812][ T5806] device syzkaller0 entered promiscuous mode [ 129.386226][ T5811] loop3: detected capacity change from 0 to 1024 [ 129.480580][ T5811] hfsplus: invalid length 32517 has been corrected to 255 [ 129.660471][ T4398] hfsplus: b-tree write err: -5, ino 2 [ 129.661979][ T4398] hfsplus: b-tree write err: -5, ino 4 [ 129.876670][ T5825] netlink: 'syz.3.419': attribute type 11 has an invalid length. [ 129.961067][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.981144][ T5829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.034199][ T5825] device wlan0 entered promiscuous mode [ 130.148490][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'. [ 130.175814][ T5834] device vlan2 entered promiscuous mode [ 130.176698][ T5834] device gretap0 entered promiscuous mode [ 130.633516][ T5845] device syzkaller0 entered promiscuous mode [ 132.029355][ T5882] loop3: detected capacity change from 0 to 256 [ 132.066817][ T5882] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.068435][ T5882] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 132.453144][ T5882] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 132.514440][ T5882] exFAT-fs (loop3): failed to load alloc-bitmap [ 132.545148][ T5882] exFAT-fs (loop3): failed to recognize exfat type [ 132.643617][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.644699][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.115278][ T5912] loop0: detected capacity change from 0 to 2048 [ 134.174284][ T5912] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 134.384046][ T5912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.726215][ T5939] loop4: detected capacity change from 0 to 256 [ 135.789550][ T5939] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 139.617142][ T6008] device syzkaller0 entered promiscuous mode [ 141.005793][ T6039] loop0: detected capacity change from 0 to 1024 [ 141.471476][ T22] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 141.572318][ T6056] loop3: detected capacity change from 0 to 1024 [ 141.606028][ T6056] ext4: Bad value for 'sb' [ 141.660865][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.672040][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.692787][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.722095][ T22] usb 5-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 141.764313][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.784062][ T22] usb 5-1: Product: syz [ 141.792312][ T22] usb 5-1: Manufacturer: syz [ 141.796954][ T22] usb 5-1: SerialNumber: syz [ 141.852009][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.878714][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 141.902117][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.924224][ T14] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.940449][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.959379][ T14] usb 1-1: config 0 descriptor?? [ 141.984238][ T6051] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.254188][ T22] usb 5-1: USB disconnect, device number 4 [ 142.417733][ T14] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 142.459126][ T14] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.491980][ T4669] udevd[4669]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.873386][ C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 145.680394][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 145.784689][ T6128] loop4: detected capacity change from 0 to 256 [ 145.818860][ T6128] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.848953][ T6128] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 145.911911][ T6128] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62e2eca, utbl_chksum : 0xe619d30d) [ 145.945018][ T4324] usb 1-1: USB disconnect, device number 2 [ 146.006628][ T6128] exFAT-fs (loop4): failed to load alloc-bitmap [ 146.013650][ T6128] exFAT-fs (loop4): failed to recognize exfat type [ 146.520256][ T22] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 146.698692][ T6156] loop3: detected capacity change from 0 to 256 [ 146.788174][ T22] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 146.858732][ T22] usb 1-1: config 0 has no interface number 0 [ 146.958441][ T22] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 147.134972][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.347110][ T22] usb 1-1: Product: syz [ 147.463607][ T22] usb 1-1: Manufacturer: syz [ 147.482348][ T22] usb 1-1: SerialNumber: syz [ 147.538399][ T22] usb 1-1: config 0 descriptor?? [ 147.623804][ T6170] loop4: detected capacity change from 0 to 512 [ 148.344485][ T22] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 148.375827][ T6170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.388560][ T22] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 148.540436][ T22] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 148.557884][ T6143] loop0: detected capacity change from 0 to 128 [ 148.575173][ T22] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 148.585183][ T6143] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 148.637538][ T6143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.666111][ T22] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 148.833753][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 149.089511][ T22] usb 1-1: USB disconnect, device number 3 [ 149.153030][ T22] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 149.231353][ T22] keyspan 1-1:0.133: device disconnected [ 150.356470][ T6216] loop5: detected capacity change from 0 to 1024 [ 150.873684][ T6216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.170410][ T4322] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.185308][ T6234] loop0: detected capacity change from 0 to 256 [ 151.243057][ T6234] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 151.273532][ T6236] netlink: 68 bytes leftover after parsing attributes in process `syz.4.539'. [ 151.289542][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 151.310558][ T6234] FAT-fs (loop0): Filesystem has been set read-only [ 151.372433][ T4322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.379078][ T6234] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 151.398161][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.432435][ T4322] usb 4-1: Product: syz [ 151.444247][ T6234] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 151.446615][ T4322] usb 4-1: Manufacturer: syz [ 151.471008][ T6241] loop4: detected capacity change from 0 to 512 [ 151.481845][ T4322] usb 4-1: SerialNumber: syz [ 151.998077][ T6241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.067776][ T6241] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.539982][ T6254] loop0: detected capacity change from 0 to 256 [ 152.596222][ T6254] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.606945][ T6254] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 152.666160][ T6254] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 152.758180][ T4322] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.773882][ T4322] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 152.836640][ T4322] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 152.845066][ T6254] exFAT-fs (loop0): failed to load alloc-bitmap [ 152.900328][ T6254] exFAT-fs (loop0): failed to recognize exfat type [ 152.941227][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 152.975935][ T4322] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 153.053903][ T4322] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 153.201166][ T4322] usb 4-1: USB disconnect, device number 5 [ 153.207626][ T4322] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 153.535125][ T6272] loop0: detected capacity change from 0 to 2048 [ 153.643430][ T6272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.686093][ T6272] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.808773][ T6272] fs-verity: sha512 using implementation "sha512-avx2" [ 153.849359][ T6274] loop5: detected capacity change from 0 to 8192 [ 153.868540][ T6287] loop4: detected capacity change from 0 to 2048 [ 153.919114][ T6287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.028059][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 154.514685][ T6305] device syzkaller0 entered promiscuous mode [ 154.863497][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.394163][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.413936][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.450286][ T14] usb 1-1: Product: syz [ 156.500252][ T14] usb 1-1: Manufacturer: syz [ 156.581068][ T14] usb 1-1: SerialNumber: syz [ 156.594710][ T6328] loop4: detected capacity change from 0 to 2048 [ 156.685127][ T6328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.718867][ T6328] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.825906][ T6328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.565: bg 0: block 345: padding at end of block bitmap is not set [ 156.873806][ T6340] loop5: detected capacity change from 0 to 256 [ 156.886532][ T6328] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 1 with error 117 [ 156.913451][ T6328] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.913451][ T6328] [ 156.970184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 156.980191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 156.990161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.000165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.010157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.020159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.030162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.040161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.050153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.060158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 157.104663][ T6340] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.234336][ T6346] loop3: detected capacity change from 0 to 512 [ 157.310527][ T6340] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 157.332475][ T6340] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.364603][ T6346] EXT4-fs (loop3): first meta block group too large: 67043329 (group descriptor block count 1) [ 157.552807][ T6340] exFAT-fs (loop5): failed to load alloc-bitmap [ 157.659822][ T6340] exFAT-fs (loop5): failed to recognize exfat type [ 157.870861][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 158.935840][ T14] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 158.943336][ T14] cdc_ncm 1-1:1.0: bind() failure [ 158.961781][ T14] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 158.968881][ T14] cdc_ncm 1-1:1.1: bind() failure [ 158.978562][ T14] usb 1-1: USB disconnect, device number 4 [ 159.141556][ T6358] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 159.373717][ T6368] loop3: detected capacity change from 0 to 512 [ 159.513550][ C0] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 159.523259][ T6368] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4643: inode #15: block 8: comm syz.3.575: unable to read itable block [ 159.589502][ C0] I/O error, dev loop3, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 159.613601][ T6368] EXT4-fs (loop3): Remounting filesystem read-only [ 159.628736][ T6368] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.575: couldn't read orphan inode 15 (err -5) [ 159.642879][ T6368] EXT4-fs (loop3): Remounting filesystem read-only [ 159.649468][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.668409][ T6368] EXT4-fs (loop3): unmounting filesystem. [ 160.009943][ T6393] device syzkaller0 entered promiscuous mode [ 160.150239][ T3599] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.361890][ T3599] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 160.373621][ T27] audit: type=1326 audit(1787598063.504:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 160.384002][ T3599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.444453][ T3599] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 160.474661][ T3599] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 160.525014][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.668708][ T6390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.689650][ T27] audit: type=1326 audit(1787598063.624:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 160.880437][ T27] audit: type=1326 audit(1787598063.684:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 160.957150][ T4277] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 160.964778][ T4277] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 160.972609][ T27] audit: type=1326 audit(1787598063.684:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 161.090619][ T27] audit: type=1326 audit(1787598063.684:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 161.117945][ T27] audit: type=1326 audit(1787598063.684:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 161.158826][ T27] audit: type=1326 audit(1787598063.684:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 161.195704][ T27] audit: type=1326 audit(1787598063.684:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.583" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd2ef9e0d9 code=0x7ffc0000 [ 161.230691][ T49] Bluetooth: hci5: Reading Intel version command failed (-71) [ 161.241216][ T3599] usb 5-1: USB disconnect, device number 5 [ 161.361454][ T6435] e1000e: probe of 0000:00:00.0 failed with error -5 [ 162.957277][ T6449] device syzkaller0 entered promiscuous mode [ 163.467150][ T4352] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 163.567315][ T6467] loop4: detected capacity change from 0 to 1024 [ 163.593243][ T6467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.256429][ T27] audit: type=1800 audit(1787598067.384:13): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.598" name="bus" dev="loop4" ino=870 res=0 errno=0 [ 165.711218][ T4352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.726869][ T4352] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.752273][ T4352] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 165.780173][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.788218][ T4352] usb 4-1: SerialNumber: syz [ 165.886385][ T4352] usb 4-1: 0:2 : does not exist [ 165.978815][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 166.252614][ T6496] xt_TCPMSS: Only works on TCP SYN packets [ 166.674694][ T4352] usb 4-1: USB disconnect, device number 6 [ 166.931984][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.148027][ T6519] loop0: detected capacity change from 0 to 1024 [ 167.239022][ T6523] loop4: detected capacity change from 0 to 256 [ 167.318849][ T6523] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 167.357730][ T6523] FAT-fs (loop4): Filesystem has been set read-only [ 167.378797][ T6523] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 167.409609][ T6523] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 167.427626][ T27] audit: type=1800 audit(1787598070.554:14): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.616" name="file1" dev="loop4" ino=1048609 res=0 errno=0 [ 167.733166][ T6523] syz.4.616 (6523) used greatest stack depth: 19856 bytes left [ 167.825759][ T6540] loop3: detected capacity change from 0 to 764 [ 167.839152][ T6539] loop4: detected capacity change from 0 to 1024 [ 167.872666][ T6539] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 167.951224][ T6539] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 168.030341][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.234172][ T4323] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 168.272761][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 168.305093][ T4323] usb 1-1: Product: syz [ 168.327879][ T4323] usb 1-1: config 0 descriptor?? [ 168.345248][ T4323] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 168.364420][ T4323] usb 1-1: Detected FT232H [ 168.984435][ T4323] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 169.440686][ T4323] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 169.829879][ T4324] usb 1-1: USB disconnect, device number 5 [ 169.894767][ T4324] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.909867][ T4324] ftdi_sio 1-1:0.0: device disconnected [ 171.294780][ T5093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.417807][ T5093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.512257][ T6587] loop5: detected capacity change from 0 to 256 [ 171.552593][ T6587] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 171.577854][ T5093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.636272][ T27] audit: type=1800 audit(1787598074.764:15): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.640" name="file1" dev="loop5" ino=1048610 res=0 errno=0 [ 171.740048][ T5093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.743917][ T6587] input: syz1 as /devices/virtual/input/input10 [ 172.235995][ T6598] device syzkaller0 entered promiscuous mode [ 172.396264][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.435850][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.448088][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.458232][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.459176][ T6608] loop5: detected capacity change from 0 to 512 [ 172.467295][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.490420][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.502936][ T6608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.610377][ T6608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 172.625142][ T6608] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.875817][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 173.035963][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'. [ 173.245169][ T6628] device vlan2 entered promiscuous mode [ 173.315346][ T6628] device gretap0 entered promiscuous mode [ 173.749990][ T6639] socket: no more sockets [ 174.076110][ T6603] chnl_net:caif_netlink_parms(): no params data found [ 174.859291][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 175.023464][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.037709][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.049678][ T6603] device bridge_slave_0 entered promiscuous mode [ 175.075429][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.088581][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.096924][ T6603] device bridge_slave_1 entered promiscuous mode [ 175.239233][ T6603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.300476][ T6603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.352670][ T6603] team0: Port device team_slave_0 added [ 175.375574][ T6603] team0: Port device team_slave_1 added [ 175.415816][ T5093] device hsr_slave_0 left promiscuous mode [ 175.428224][ T5093] device hsr_slave_1 left promiscuous mode [ 175.435105][ T5093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.448487][ T5093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.456673][ T5093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.466205][ T5093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.475489][ T5093] device bridge_slave_1 left promiscuous mode [ 175.482856][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.498193][ T5093] device bridge_slave_0 left promiscuous mode [ 175.506184][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.541862][ T5093] device veth1_macvtap left promiscuous mode [ 175.548141][ T5093] device veth0_macvtap left promiscuous mode [ 175.554811][ T5093] device veth1_vlan left promiscuous mode [ 175.560991][ T5093] device veth0_vlan left promiscuous mode [ 175.835003][ T6680] loop5: detected capacity change from 0 to 128 [ 175.885597][ T6680] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 175.924100][ T6680] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.011498][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 176.156500][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'. [ 176.385107][ T4322] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 176.574620][ T5093] team0 (unregistering): Port device team_slave_1 removed [ 176.606231][ T4322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.638065][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 176.650417][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 176.662015][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.680585][ T4322] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.746430][ T4322] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 176.795996][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.890452][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 176.933726][ T4322] usb 6-1: config 0 descriptor?? [ 176.985220][ T6683] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 177.052774][ T5093] team0 (unregistering): Port device team_slave_0 removed [ 177.093429][ T5093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.134204][ T5093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.238097][ T4322] usb 6-1: USB disconnect, device number 3 [ 177.458603][ T5093] bond0 (unregistering): Released all slaves [ 177.544177][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.556182][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.587043][ T6603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.671453][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.688843][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.786247][ T6695] UDC core: g1: couldn't find an available UDC or it's busy [ 177.791412][ T6603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.943879][ T6699] loop5: detected capacity change from 0 to 128 [ 177.954551][ T6603] device hsr_slave_0 entered promiscuous mode [ 178.011087][ T6699] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 178.026548][ T6603] device hsr_slave_1 entered promiscuous mode [ 178.680278][ T6603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.700227][ T6603] Cannot create hsr debugfs directory [ 178.960211][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 179.595416][ T6739] loop0: detected capacity change from 0 to 1024 [ 179.892063][ T6739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.661871][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 180.775425][ T6603] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.806165][ T6603] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.843177][ T6603] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.975997][ T6603] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.060502][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 181.679877][ T4322] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 181.865256][ T6603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.873687][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.890182][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 181.918341][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.923478][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 181.955094][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.961993][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.984460][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.014025][ T6603] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.022129][ T4322] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 182.048193][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.075645][ T4322] usb 1-1: config 0 descriptor?? [ 182.085333][ T6753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.236928][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.247195][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.261987][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.269170][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.279976][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.298492][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 182.315466][ T6733] usb 1-1: USB disconnect, device number 6 [ 182.336208][ T6776] device vlan2 entered promiscuous mode [ 182.341990][ T6776] device gretap0 entered promiscuous mode [ 182.397468][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.422462][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.432335][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.439448][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.447804][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.450293][ T4323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 182.468471][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.498024][ T6603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.508882][ T6603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.543523][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.554125][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.566426][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.585254][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.603295][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.614482][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.623573][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.637251][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.659448][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.689450][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.699545][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.709904][ T4323] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.712914][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.760590][ T4323] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.785740][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.806006][ T4323] usb 6-1: config 0 descriptor?? [ 183.228606][ T4323] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 183.260989][ T4323] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 183.354968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.366723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.383446][ T6603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.445280][ T4323] usb 6-1: USB disconnect, device number 4 [ 184.271430][ T6814] loop0: detected capacity change from 0 to 256 [ 184.393193][ T6807] fido_id[6807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 185.934713][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 185.935291][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 185.948366][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 186.970382][ T26] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.994585][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.023785][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.113446][ T6603] device veth0_vlan entered promiscuous mode [ 187.138579][ T4323] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 187.185707][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.195210][ T26] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.205275][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.213536][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.223320][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.244950][ T26] usb 6-1: config 0 descriptor?? [ 187.254998][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.268152][ T26] cp210x 6-1:0.0: cp210x converter detected [ 187.307247][ T6603] device veth1_vlan entered promiscuous mode [ 187.361605][ T4323] usb 1-1: not running at top speed; connect to a high speed hub [ 187.382862][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.393722][ T6603] device veth0_macvtap entered promiscuous mode [ 187.408906][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.424040][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 187.438678][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.456412][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.469643][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.501040][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.519154][ T4323] usb 1-1: Found UVC 1.00 device (046d:0825) [ 187.527852][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.544832][ T6603] device veth1_macvtap entered promiscuous mode [ 187.593160][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.620288][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.655201][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.669593][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.675100][ T26] usb 6-1: cp210x converter now attached to ttyUSB0 [ 187.692880][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.744554][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.758101][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.774975][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.787750][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.810360][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.822337][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.832112][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.852769][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.873890][ T26] usb 6-1: USB disconnect, device number 5 [ 187.906100][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.913501][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.918028][ T4323] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 187.944847][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.950475][ T4323] uvcvideo 1-1:1.1: No frame descriptor found for the default format. [ 187.959627][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.981730][ T26] cp210x 6-1:0.0: device disconnected [ 187.987727][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.001734][ T4323] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 188.039834][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.051862][ T6603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.068011][ T6603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.210874][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.236495][ T4325] usb 1-1: USB disconnect, device number 7 [ 188.256363][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.296531][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.041000][ T6603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.049739][ T6603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.058984][ T6603] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.093864][ T6603] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.346674][ T6905] loop0: detected capacity change from 0 to 2048 [ 189.364296][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.403371][ T4352] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.416687][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.449702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.985222][ T5258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.013808][ T5258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.062970][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.157488][ T6905] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.231778][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.244045][ T6905] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.273089][ T4352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.326774][ T4352] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.374895][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.399903][ T4352] usb 4-1: config 0 descriptor?? [ 190.429705][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 190.486265][ T6922] loop6: detected capacity change from 0 to 512 [ 190.541836][ T6922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.658556][ T6922] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.698185][ T6922] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.869804][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 190.913351][ T4352] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 190.934034][ T4352] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input11 [ 191.099635][ T4352] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 191.176252][ T4352] usb 4-1: USB disconnect, device number 7 [ 191.942711][ T6948] fido_id[6948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 192.087544][ T6957] loop5: detected capacity change from 0 to 1024 [ 192.206404][ T6960] loop0: detected capacity change from 0 to 128 [ 192.242538][ T6957] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 192.269779][ T6961] loop6: detected capacity change from 0 to 1024 [ 192.285963][ T6957] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.322243][ T6960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 192.412776][ T6960] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.610367][ T6733] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 192.815957][ T6733] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.846748][ T6733] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 192.884816][ T6733] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 192.895394][ T6733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.908549][ T6733] usb 6-1: Product: syz [ 192.914207][ T6733] usb 6-1: Manufacturer: syz [ 192.919005][ T6733] usb 6-1: SerialNumber: syz [ 193.056289][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 193.191095][ T6733] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 193.400522][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.410183][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.441677][ T6733] usb 6-1: USB disconnect, device number 6 [ 193.601813][ T6964] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 193.795547][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 194.084905][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.091301][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.907895][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.957586][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.475513][ T6986] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.491885][ T6986] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.523583][ T6986] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.543036][ T6986] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.800657][ T4324] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 195.898077][ T7026] loop6: detected capacity change from 0 to 16 [ 195.921180][ T7026] erofs: (device loop6): mounted with root inode @ nid 36. [ 195.995702][ T4324] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.015197][ T4324] usb 6-1: config 1 has no interface number 0 [ 196.036568][ T4324] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 196.056202][ T4324] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 196.069062][ T4324] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 196.112756][ T4324] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 196.127630][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.138729][ T4324] usb 6-1: Product: syz [ 196.156700][ T4324] usb 6-1: Manufacturer: syz [ 196.163012][ T4324] usb 6-1: SerialNumber: syz [ 196.179813][ T7035] loop6: detected capacity change from 0 to 512 [ 196.214235][ T7035] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 196.390974][ T4324] usb 6-1: 1:0 : does not exist [ 196.408269][ T4324] usb 6-1: BAAD GENERIC IO: no channels? [ 196.455777][ T4324] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 196.475629][ T4324] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 196.496038][ T4324] snd_usb_pod 6-1:1.1: set_interface failed [ 196.523360][ T4324] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 196.537934][ T4324] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 196.558100][ T4324] usb 6-1: USB disconnect, device number 7 [ 196.771103][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.669442][ T7060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.742'. [ 198.998319][ T7073] loop3: detected capacity change from 0 to 256 [ 199.112959][ T7073] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.210277][ T7073] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 199.311294][ T7073] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 199.373552][ T7073] exFAT-fs (loop3): failed to load alloc-bitmap [ 199.379900][ T7073] exFAT-fs (loop3): failed to recognize exfat type [ 203.765033][ T7200] loop0: detected capacity change from 0 to 128 [ 203.895764][ T7200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.918605][ T7200] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.098692][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 204.402448][ T7219] loop6: detected capacity change from 0 to 256 [ 204.476940][ T7219] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 204.550684][ T7219] exFAT-fs (loop6): failed to load alloc-bitmap [ 204.557051][ T7219] exFAT-fs (loop6): failed to recognize exfat type [ 204.924826][ T7227] loop6: detected capacity change from 0 to 512 [ 205.089679][ T7227] EXT4-fs (loop6): Test dummy encryption mode enabled [ 205.119968][ T7227] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 205.158839][ T7233] loop5: detected capacity change from 0 to 2048 [ 205.231170][ T7233] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 205.254660][ T7227] EXT4-fs (loop6): 1 truncate cleaned up [ 205.283525][ T7233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.305209][ T7227] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 207.613356][ T7242] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24) [ 208.385548][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 208.555842][ T7264] loop5: detected capacity change from 0 to 512 [ 209.245790][ T7264] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 209.435113][ T7264] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.793: inode has both inline data and extents flags [ 209.458497][ T7277] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 209.475707][ T7264] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.793: couldn't read orphan inode 15 (err -117) [ 209.512402][ T7264] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 209.700234][ T26] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 209.712835][ T7283] loop6: detected capacity change from 0 to 2048 [ 209.741030][ T7283] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 209.760813][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 209.809043][ T7283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.847658][ T27] audit: type=1800 audit(1787598112.974:16): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.799" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 209.890264][ T26] usb 1-1: device descriptor read/64, error -71 [ 210.170439][ T26] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 210.360226][ T26] usb 1-1: device descriptor read/64, error -71 [ 210.375433][ T7300] loop6: detected capacity change from 0 to 512 [ 210.397289][ T7300] EXT4-fs (loop6): Test dummy encryption mode enabled [ 210.428507][ T7300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.455842][ T7300] EXT4-fs (loop6): 1 truncate cleaned up [ 210.475886][ T7300] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 210.490540][ T26] usb usb1-port1: attempt power cycle [ 212.610901][ T26] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 212.730902][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 212.792838][ T26] usb 1-1: device descriptor read/8, error -71 [ 213.188971][ T7341] loop5: detected capacity change from 0 to 512 [ 213.323831][ T7341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 213.362819][ T7341] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.679487][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 213.996560][ T7370] loop6: detected capacity change from 0 to 512 [ 214.100491][ T7370] EXT4-fs (loop6): Test dummy encryption mode enabled [ 214.157712][ T7370] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 214.889117][ T7370] EXT4-fs (loop6): 1 truncate cleaned up [ 215.032092][ T7370] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 216.362395][ T4323] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 216.650260][ T4323] usb 6-1: device descriptor read/64, error -71 [ 216.720185][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 216.930234][ T4323] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 218.172601][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 218.253385][ T4323] usb 6-1: device descriptor read/64, error -71 [ 218.370362][ T4323] usb usb6-port1: attempt power cycle [ 218.932356][ T6733] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 219.163601][ T6733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.205450][ T6733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.223474][ T7430] netlink: 67 bytes leftover after parsing attributes in process `syz.5.830'. [ 219.232471][ T6733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.263298][ T7430] IPv6: NLM_F_REPLACE set, but no existing node found! [ 219.269679][ T6733] usb 4-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 219.325923][ T6733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.353145][ T6733] usb 4-1: config 0 descriptor?? [ 219.439190][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.454411][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.470826][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.487543][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.495280][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.503102][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.795141][ T6733] hid (null): report_id 793703765 is invalid [ 219.814847][ T6733] hid (null): report_id 23551 is invalid [ 219.865617][ T6733] hid-generic 0003:093A:8002.0006: report_id 793703765 is invalid [ 219.902510][ T6733] hid-generic 0003:093A:8002.0006: item 0 4 1 8 parsing failed [ 219.914092][ T6733] hid-generic: probe of 0003:093A:8002.0006 failed with error -22 [ 220.029508][ T4374] usb 4-1: USB disconnect, device number 8 [ 220.146703][ T7449] loop6: detected capacity change from 0 to 512 [ 220.165319][ T7449] EXT4-fs (loop6): Test dummy encryption mode enabled [ 220.186715][ T7449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.248437][ T7449] EXT4-fs (loop6): 1 truncate cleaned up [ 220.265283][ T7449] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 220.323606][ T7431] chnl_net:caif_netlink_parms(): no params data found [ 220.557018][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.565033][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.578065][ T7431] device bridge_slave_0 entered promiscuous mode [ 221.530244][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 221.722582][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.752636][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.777704][ T7431] device bridge_slave_1 entered promiscuous mode [ 221.815388][ T7431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.833112][ T7431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.956332][ T26] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 221.974087][ T7431] team0: Port device team_slave_0 added [ 222.032737][ T7431] team0: Port device team_slave_1 added [ 222.140444][ T26] usb 1-1: device descriptor read/64, error -71 [ 222.147130][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.177244][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.259906][ T7431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.261802][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 222.274649][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.283849][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.309811][ T7431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.374498][ T7431] device hsr_slave_0 entered promiscuous mode [ 222.408658][ T7431] device hsr_slave_1 entered promiscuous mode [ 222.420924][ T7431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.428516][ T7431] Cannot create hsr debugfs directory [ 222.445082][ T26] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 222.610279][ T26] usb 1-1: device descriptor read/64, error -71 [ 222.736581][ T26] usb usb1-port1: attempt power cycle [ 222.783749][ T7431] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.795691][ T7431] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.918569][ T7431] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.939310][ T7431] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.962238][ T7507] loop5: detected capacity change from 0 to 8 [ 223.004703][ T7507] SQUASHFS error: Unable to read directory block [629:26] [ 223.133138][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.171023][ T26] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 223.179342][ T7431] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.189626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.237633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.261537][ T26] usb 1-1: device descriptor read/8, error -71 [ 223.290932][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.307296][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.318198][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.325366][ T5601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.346658][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.362638][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.371909][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.379018][ T5601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.467202][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.486843][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.512074][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.547314][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.560376][ T26] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 223.589601][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.600260][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 223.606897][ T26] usb 1-1: device descriptor read/8, error -71 [ 223.634001][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.658505][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.699112][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.716206][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.730471][ T26] usb usb1-port1: unable to enumerate USB device [ 223.742692][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.751833][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.762366][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.778844][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.188229][ T7544] loop6: detected capacity change from 0 to 512 [ 224.211780][ T7544] EXT4-fs (loop6): Test dummy encryption mode enabled [ 224.239159][ T7544] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 224.302576][ T7544] EXT4-fs (loop6): 1 truncate cleaned up [ 224.308378][ T7544] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 224.355874][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.518763][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.526976][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.464742][ T7566] netlink: 44 bytes leftover after parsing attributes in process `syz.3.847'. [ 225.680564][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 226.254928][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 226.422376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.438338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.510823][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.521387][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.559837][ T7431] device veth0_vlan entered promiscuous mode [ 226.588695][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.614530][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.639406][ T7431] device veth1_vlan entered promiscuous mode [ 226.796668][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.826017][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.855781][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.871061][ T4279] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 227.437146][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.523408][ T7431] device veth0_macvtap entered promiscuous mode [ 227.603010][ T7431] device veth1_macvtap entered promiscuous mode [ 227.618510][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.628184][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.682926][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.703738][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.721729][ T4279] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.740150][ T4279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.748298][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.770211][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 227.778067][ T4279] usb 7-1: config 0 descriptor?? [ 227.783421][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.802545][ T4279] cp210x 7-1:0.0: cp210x converter detected [ 227.813584][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.824810][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.835356][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.846375][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.858419][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.880377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.899004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.924249][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.945742][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.976126][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.009061][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.040165][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.050711][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.060719][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.071231][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.082622][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.098517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.115743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.138964][ T7431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.160175][ T7431] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.168949][ T7431] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.178024][ T7431] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.220805][ T4279] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 228.242579][ T4279] usb 7-1: cp210x converter now attached to ttyUSB0 [ 228.270425][ T6733] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 228.384536][ T5148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.411950][ T5148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.421865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.440187][ T5698] usb 7-1: USB disconnect, device number 2 [ 228.446700][ T6733] usb 6-1: device descriptor read/64, error -71 [ 228.469702][ T5698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 228.498142][ T5698] cp210x 7-1:0.0: device disconnected [ 228.500012][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.534726][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.543428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.714969][ T7634] loop7: detected capacity change from 0 to 512 [ 228.724615][ T6733] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 228.789078][ T7634] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 228.814336][ T7634] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.900240][ T6733] usb 6-1: device descriptor read/64, error -71 [ 228.948107][ T7431] EXT4-fs (loop7): unmounting filesystem. [ 228.961489][ T4325] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 229.020734][ T6733] usb usb6-port1: attempt power cycle [ 229.836231][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.846585][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.863690][ T4325] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.879449][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.887765][ T4325] usb 1-1: SerialNumber: syz [ 229.899434][ T7653] loop6: detected capacity change from 0 to 1024 [ 229.916638][ T7653] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 230.021433][ T4275] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.120341][ T6733] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 230.164385][ T6733] usb 6-1: device descriptor read/8, error -71 [ 230.177645][ T4325] usb 1-1: 0:2 : does not exist [ 230.218479][ T4325] usb 1-1: USB disconnect, device number 16 [ 230.452545][ T6733] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 230.492323][ T6733] usb 6-1: device descriptor read/8, error -71 [ 230.523002][ T4669] udevd[4669]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.615798][ T6733] usb usb6-port1: unable to enumerate USB device [ 232.845569][ T7710] loop6: detected capacity change from 0 to 128 [ 232.856652][ T7710] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 232.883798][ T7710] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 232.945418][ T7710] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.872: checksumming directory block 0 [ 233.027920][ T7718] loop3: detected capacity change from 0 to 256 [ 233.085019][ T7718] FAT-fs (loop3): Directory bread(block 64) failed [ 233.105303][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 233.111862][ T7718] FAT-fs (loop3): Directory bread(block 65) failed [ 233.185177][ T7718] FAT-fs (loop3): Directory bread(block 66) failed [ 233.215631][ T7718] FAT-fs (loop3): Directory bread(block 67) failed [ 233.256272][ T7718] FAT-fs (loop3): Directory bread(block 68) failed [ 233.293089][ T7718] FAT-fs (loop3): Directory bread(block 69) failed [ 233.335040][ T7718] FAT-fs (loop3): Directory bread(block 70) failed [ 233.375893][ T7718] FAT-fs (loop3): Directory bread(block 71) failed [ 233.403877][ T7718] FAT-fs (loop3): Directory bread(block 72) failed [ 233.440795][ T7718] FAT-fs (loop3): Directory bread(block 73) failed [ 233.587439][ T7731] loop0: detected capacity change from 0 to 16 [ 233.672474][ T7731] erofs: (device loop0): mounted with root inode @ nid 36. [ 233.729810][ T7731] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 233.807308][ T7731] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 233.860391][ T7731] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 234.230215][ T4279] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 234.790446][ T4279] usb 8-1: device descriptor read/64, error -71 [ 235.084213][ T7758] loop3: detected capacity change from 0 to 2048 [ 235.160236][ T4279] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 235.171116][ T7758] EXT4-fs: inline encryption not supported [ 235.277540][ T7758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.307784][ T7758] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.330517][ T4279] usb 8-1: device descriptor read/64, error -71 [ 235.623819][ T4279] usb usb8-port1: attempt power cycle [ 235.941279][ T27] audit: type=1800 audit(1787598139.034:17): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.882" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 236.059374][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 236.110578][ T4279] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 236.180806][ T4279] usb 8-1: device descriptor read/8, error -71 [ 236.285672][ T7773] loop6: detected capacity change from 0 to 1024 [ 236.345739][ T7773] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.885: lblock 2 mapped to illegal pblock 2 (length 1) [ 236.379880][ T7773] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 236.388653][ T7773] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.885: lblock 0 mapped to illegal pblock 48 (length 1) [ 236.403521][ T7773] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 236.414304][ T7773] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.885: Failed to acquire dquot type 0 [ 236.437582][ T7773] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 236.451477][ T7773] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.885: mark_inode_dirty error [ 236.463403][ T7773] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 236.474460][ T7773] EXT4-fs (loop6): 1 orphan inode deleted [ 236.484924][ T7773] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 236.493517][ T4279] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 236.510530][ T4398] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 236.531910][ T4279] usb 8-1: device descriptor read/8, error -71 [ 236.546523][ T4398] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 236.580296][ T4398] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 236.670355][ T4279] usb usb8-port1: unable to enumerate USB device [ 236.767191][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 236.800664][ T6603] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 236.859892][ T6603] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 236.892656][ T6603] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 237.090301][ T4323] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 237.291388][ T4323] usb 6-1: not running at top speed; connect to a high speed hub [ 237.322244][ T4323] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.340215][ T4323] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 237.350782][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.377269][ T4279] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 237.417216][ T4323] usb 6-1: Found UVC 1.00 device (046d:0825) [ 237.441119][ T4323] usb 6-1: No streaming interface found for terminal 2. [ 238.344723][ T4279] usb 8-1: not running at top speed; connect to a high speed hub [ 238.439332][ T4319] usb 6-1: USB disconnect, device number 15 [ 238.446855][ T4279] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.464907][ T4279] usb 8-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 238.474380][ T4279] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.723366][ T4319] usb 8-1: USB disconnect, device number 6 [ 239.200223][ T4279] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 239.430724][ T4279] usb 1-1: device descriptor read/64, error -71 [ 239.780327][ T4279] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 239.940284][ T4279] usb 1-1: device descriptor read/64, error -71 [ 240.078651][ T4279] usb usb1-port1: attempt power cycle [ 240.510508][ T4279] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 240.556078][ T4279] usb 1-1: device descriptor read/8, error -71 [ 241.848171][ T7879] binder: 7878:7879 ioctl c018620c 2000000001c0 returned -1 [ 241.966849][ T4279] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 242.000620][ T4279] usb 1-1: device descriptor read/8, error -71 [ 242.030318][ T7881] loop7: detected capacity change from 0 to 512 [ 242.114723][ T7885] loop6: detected capacity change from 0 to 512 [ 242.126776][ T7881] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 242.136875][ T4279] usb usb1-port1: unable to enumerate USB device [ 242.157721][ T7885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 242.166177][ T7881] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.187809][ T7885] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.372148][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 242.528360][ T7903] loop6: detected capacity change from 0 to 8 [ 242.558907][ T7903] SQUASHFS error: lzo decompression failed, data probably corrupt [ 242.567899][ T7903] SQUASHFS error: Failed to read block 0x91: -5 [ 242.574475][ T7903] SQUASHFS error: Unable to read metadata cache entry [8f] [ 242.595939][ T7903] SQUASHFS error: Unable to read inode 0x11f [ 242.671039][ T7431] EXT4-fs (loop7): unmounting filesystem. [ 243.030915][ T7910] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 244.180203][ T5698] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 244.401943][ T5698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.419621][ T5698] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 244.439992][ T5698] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 244.480309][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.521924][ T5698] usb 4-1: config 0 descriptor?? [ 244.601184][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 244.749960][ T6736] usb 4-1: USB disconnect, device number 9 [ 244.877868][ T7962] loop7: detected capacity change from 0 to 8 [ 245.479658][ T7958] ALSA: seq fatal error: cannot create timer (-19) [ 245.874327][ T7972] loop0: detected capacity change from 0 to 512 [ 245.904798][ T7974] loop7: detected capacity change from 0 to 2048 [ 245.916760][ T7972] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.957964][ T7972] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 246.036643][ T7974] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 246.154683][ T7983] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 246.201108][ T7972] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 246.216007][ T7972] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 246.251458][ T7972] System zones: 0-2, 18-18, 34-35 [ 246.268116][ T7431] EXT4-fs (loop7): unmounting filesystem. [ 246.311132][ T7972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.358124][ T7972] EXT4-fs (loop0): unmounting filesystem. [ 247.576150][ T8011] loop5: detected capacity change from 0 to 16 [ 247.583886][ T8011] erofs: (device loop5): mounted with root inode @ nid 36. [ 247.655918][ T8006] device syzkaller0 entered promiscuous mode [ 247.790277][ T4324] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 248.196896][ T4324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.220377][ T4324] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.348338][ T4324] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 248.375342][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.429891][ T4324] usb 1-1: config 0 descriptor?? [ 248.609110][ T8023] loop6: detected capacity change from 0 to 1024 [ 248.627113][ T8023] EXT4-fs: quotafile must be on filesystem root [ 248.668076][ T4319] usb 1-1: USB disconnect, device number 21 [ 251.949576][ T8056] loop6: detected capacity change from 0 to 1024 [ 251.997037][ T8056] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.018882][ T8056] EXT4-fs: Ignoring removed orlov option [ 252.162825][ T8056] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 253.179888][ T8081] loop3: detected capacity change from 0 to 512 [ 253.200064][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 253.241566][ T8081] EXT4-fs (loop3): Test dummy encryption mode enabled [ 253.289082][ T8081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.326516][ T8081] EXT4-fs (loop3): 1 truncate cleaned up [ 253.332704][ T8081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 255.616913][ T8091] loop5: detected capacity change from 0 to 8192 [ 255.896768][ T8114] loop0: detected capacity change from 0 to 1024 [ 255.943147][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.949531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.141690][ T8114] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 256.156388][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 256.234965][ T4275] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.496724][ T8123] loop7: detected capacity change from 0 to 8 [ 256.573639][ T8123] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 257.794415][ T8144] loop5: detected capacity change from 0 to 512 [ 258.283462][ T8144] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 258.321292][ T8144] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.529853][ T8144] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 18: comm syz.5.985: lblock 23 mapped to illegal pblock 18 (length 1) [ 258.657005][ T8158] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.985: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 258.845390][ T8158] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.985: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 258.983146][ T8163] loop0: detected capacity change from 0 to 512 [ 259.055223][ T8163] EXT4-fs (loop0): Test dummy encryption mode enabled [ 259.091922][ T8163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 259.145151][ T8163] EXT4-fs (loop0): 1 truncate cleaned up [ 259.182991][ T8163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 259.211154][ T5007] EXT4-fs (loop5): unmounting filesystem. [ 261.095666][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 262.599743][ T8223] device syzkaller0 entered promiscuous mode [ 262.733098][ T8235] loop6: detected capacity change from 0 to 512 [ 262.805285][ T8235] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 262.830972][ T8235] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.026447][ T5093] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 263.127857][ T5093] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 263.230666][ T5093] EXT4-fs (loop6): This should not happen!! Data will be lost [ 263.230666][ T5093] [ 263.256501][ T5093] EXT4-fs (loop6): Total free blocks count 0 [ 263.290227][ T5093] EXT4-fs (loop6): Free/Dirty block details [ 263.311150][ T5093] EXT4-fs (loop6): free_blocks=65280 [ 263.332172][ T5093] EXT4-fs (loop6): dirty_blocks=2 [ 263.337254][ T5093] EXT4-fs (loop6): Block reservation details [ 263.390300][ T5093] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 263.404636][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 263.606300][ T8260] loop0: detected capacity change from 0 to 512 [ 263.692069][ T8260] EXT4-fs (loop0): Test dummy encryption mode enabled [ 263.739458][ T8260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.773849][ T8260] EXT4-fs (loop0): 1 truncate cleaned up [ 263.831533][ T8260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 264.134203][ T7] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 266.210192][ T4279] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 266.259965][ T8291] loop6: detected capacity change from 0 to 128 [ 266.271760][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 266.331919][ T7] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 266.360874][ T7] usb 8-1: config 0 has no interface number 0 [ 266.367035][ T7] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 266.411924][ T4279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.460344][ T4279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.538002][ T7] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 266.539732][ T4279] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 266.566179][ T7] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 266.595588][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.608421][ T7] usb 8-1: Manufacturer: syz [ 266.626546][ T7] usb 8-1: SerialNumber: syz [ 266.807885][ T7] usb 8-1: config 0 descriptor?? [ 267.526250][ T4279] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 267.625896][ T7] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 267.628720][ T4279] input input15: Absolute device without dev->absinfo, refusing to register [ 267.633357][ T7] usbtouchscreen: probe of 8-1:0.214 failed with error -71 [ 267.694592][ T4279] wacom: probe of 0003:056A:033B.0007 failed with error -22 [ 267.705971][ T7] usb 8-1: USB disconnect, device number 7 [ 267.780431][ T4279] usb 4-1: USB disconnect, device number 10 [ 268.179885][ T8314] fido_id[8314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 268.212997][ T8325] loop0: detected capacity change from 0 to 1024 [ 269.148953][ T8335] loop7: detected capacity change from 0 to 512 [ 269.167416][ T8335] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.310224][ T8335] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 269.400768][ T8335] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.495045][ T8335] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.1022: corrupted xattr block 33 [ 270.248289][ T8335] fscrypt (loop7, inode 15): Error -117 getting encryption context [ 270.443752][ T7431] EXT4-fs warning (device loop7): ext4_rmdir:3243: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 270.489009][ T7431] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2918: inode #12: comm syz-executor: corrupted xattr block 6 [ 270.519147][ T7431] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 270.756658][ T7431] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2918: inode #15: comm syz-executor: corrupted xattr block 33 [ 271.015324][ T7431] EXT4-fs warning (device loop7): ext4_evict_inode:301: xattr delete (err -117) [ 271.459235][ T7431] EXT4-fs (loop7): unmounting filesystem. [ 271.768250][ T8368] loop7: detected capacity change from 0 to 2048 [ 272.267954][ T8368] EXT4-fs (loop7): bad geometry: block count 734439408128 exceeds size of device (512 blocks) [ 273.150845][ T8393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.197320][ T8393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.351731][ T8393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.505093][ T8448] loop3: detected capacity change from 0 to 128 [ 276.547464][ T27] audit: type=1804 audit(1787598179.674:18): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1052" name="/newroot/225/file1/bus" dev="loop3" ino=1048627 res=1 errno=0 [ 276.820027][ T8458] loop0: detected capacity change from 0 to 1024 [ 276.903744][ T8458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 276.917450][ T8458] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.210214][ T7979] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 277.266379][ T8448] bio_check_eod: 464 callbacks suppressed [ 277.266399][ T8448] syz.3.1052: attempt to access beyond end of device [ 277.266399][ T8448] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 277.291032][ T8448] buffer_io_error: 462 callbacks suppressed [ 277.291046][ T8448] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 277.370271][ T7979] usb 1-1: device descriptor read/64, error -71 [ 278.310343][ T7979] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 278.416201][ T8479] loop6: detected capacity change from 0 to 1024 [ 278.470376][ T7979] usb 1-1: device descriptor read/64, error -71 [ 278.503061][ T8479] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 278.530210][ T8479] EXT4-fs (loop6): group descriptors corrupted! [ 278.591232][ T7979] usb usb1-port1: attempt power cycle [ 279.000336][ T7979] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 279.050909][ T7979] usb 1-1: device descriptor read/8, error -71 [ 279.320191][ T7979] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 279.370875][ T7979] usb 1-1: device descriptor read/8, error -71 [ 279.490482][ T7979] usb usb1-port1: unable to enumerate USB device [ 279.515090][ T8506] loop5: detected capacity change from 0 to 256 [ 279.753955][ T8515] loop7: detected capacity change from 0 to 8 [ 279.857851][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 282.026099][ T8532] loop0: detected capacity change from 0 to 256 [ 282.960514][ T8559] loop3: detected capacity change from 0 to 16 [ 283.001698][ T8560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 283.032425][ T8559] erofs: (device loop3): mounted with root inode @ nid 36. [ 283.101404][ T8559] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 283.164468][ T8559] syz.3.1084: attempt to access beyond end of device [ 283.164468][ T8559] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 283.277564][ T8559] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 283.368015][ T8559] syz.3.1084: attempt to access beyond end of device [ 283.368015][ T8559] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 283.394564][ T8559] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 283.413242][ T27] audit: type=1800 audit(1787598186.544:19): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1084" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 283.530022][ T8576] loop7: detected capacity change from 0 to 164 [ 284.654269][ T8582] rock: directory entry would overflow storage [ 284.661854][ T8582] rock: sig=0x4f50, size=4, remaining=3 [ 284.667424][ T8582] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 284.816034][ T8559] syz.3.1084 (8559) used greatest stack depth: 19120 bytes left [ 284.910153][ T7915] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 285.118767][ T7915] usb 1-1: not running at top speed; connect to a high speed hub [ 285.137275][ T7915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 285.184347][ T7915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 6400, setting to 64 [ 285.220820][ T7915] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 285.236605][ T7915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.248737][ T7915] usb 1-1: Product: syz [ 285.253310][ T7915] usb 1-1: Manufacturer: syz [ 285.258368][ T7915] usb 1-1: SerialNumber: syz [ 285.396034][ T8570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.515420][ T7915] oti6858 1-1:1.0: oti6858 converter detected [ 285.659713][ T7915] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 285.977912][ T4323] usb 1-1: USB disconnect, device number 26 [ 285.999325][ T4323] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 286.030149][ T4323] oti6858 1-1:1.0: device disconnected [ 286.665293][ T8623] loop0: detected capacity change from 0 to 128 [ 286.707753][ T8623] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 286.737034][ T8623] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.809456][ T8623] EXT4-fs warning (device loop0): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 286.850869][ T8623] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted [ 286.878407][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 287.705403][ T8631] loop0: detected capacity change from 0 to 256 [ 287.715625][ T8631] exfat: Deprecated parameter 'namecase' [ 287.758252][ T8631] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 287.789394][ T8631] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 287.947767][ T8639] loop3: detected capacity change from 0 to 512 [ 287.974582][ T8639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.984161][ T8639] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.285190][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 291.811005][ T5698] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 292.045425][ T5698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.202594][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 292.212847][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 292.225918][ T5698] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 292.235240][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.279144][ T5698] usb 4-1: config 0 descriptor?? [ 292.321143][ T8705] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.576943][ T5698] usb 4-1: USB disconnect, device number 11 [ 293.047968][ T8739] loop6: detected capacity change from 0 to 8 [ 293.101697][ T8739] SQUASHFS error: Failed to read block 0x260685: -5 [ 293.116416][ T8739] SQUASHFS error: Unable to read metadata cache entry [260685] [ 293.130382][ T8739] SQUASHFS error: Unable to read directory block [260685:0] [ 295.700382][ T4322] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 295.914992][ T4322] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.945195][ T4322] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 296.006053][ T4322] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.059891][ T4322] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 296.088733][ T4322] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.120963][ T4322] usb 8-1: config 0 descriptor?? [ 296.126744][ T8784] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 296.366636][ T4320] usb 8-1: USB disconnect, device number 8 [ 296.493732][ T4322] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 296.617591][ T8813] loop6: detected capacity change from 0 to 2048 [ 296.676370][ T5601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.689560][ T4322] usb 6-1: no configurations [ 296.694371][ T4322] usb 6-1: can't read configurations, error -22 [ 296.756649][ T8813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.860432][ T4322] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 297.016748][ T5601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.081134][ T4322] usb 6-1: no configurations [ 297.085779][ T4322] usb 6-1: can't read configurations, error -22 [ 297.136694][ T4322] usb usb6-port1: attempt power cycle [ 297.493378][ T5601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.942317][ T8829] loop7: detected capacity change from 0 to 128 [ 297.982704][ T8829] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 297.998743][ T5601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.009423][ T4322] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 298.057061][ T4322] usb 6-1: no configurations [ 298.068516][ T4322] usb 6-1: can't read configurations, error -22 [ 298.240222][ T4322] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 298.297228][ T4322] usb 6-1: no configurations [ 298.305310][ T4322] usb 6-1: can't read configurations, error -22 [ 298.330685][ T4322] usb usb6-port1: unable to enumerate USB device [ 298.560347][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 298.681780][ T8847] device syzkaller0 entered promiscuous mode [ 299.707243][ T5698] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 299.936453][ T5698] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.027825][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 300.267785][ T5698] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.428950][ T8878] loop0: detected capacity change from 0 to 1024 [ 300.561301][ T5698] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 300.630590][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.675048][ T8878] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 300.696141][ T5698] usb 6-1: config 0 descriptor?? [ 300.705486][ T8878] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.727948][ T8866] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 300.818081][ T8878] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.1161: lblock 0 mapped to illegal pblock 0 (length 1) [ 300.876254][ T8876] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.1161: lblock 0 mapped to illegal pblock 0 (length 1) [ 300.917873][ T8878] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.1161: Freeing blocks not in datazone - block = 0, count = 1 [ 300.966999][ T4320] usb 6-1: USB disconnect, device number 20 [ 301.035251][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 301.474618][ T8896] device syzkaller0 entered promiscuous mode [ 305.836478][ T8941] loop0: detected capacity change from 0 to 256 [ 305.894245][ T8943] binder: 8942:8943 ioctl c0306201 200000000080 returned -14 [ 305.906949][ T8943] binder: 8942:8943 ioctl c0306201 2000000003c0 returned -14 [ 305.927281][ T8941] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 308.105657][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1179'. [ 308.158351][ T5601] device hsr_slave_0 left promiscuous mode [ 308.170773][ T5601] device hsr_slave_1 left promiscuous mode [ 308.187126][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.213748][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.225572][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.771161][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.811702][ T5601] device bridge_slave_1 left promiscuous mode [ 308.857306][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.060555][ T5601] device bridge_slave_0 left promiscuous mode [ 309.073552][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.489663][ T8971] loop6: detected capacity change from 0 to 256 [ 309.555654][ T8971] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 309.709406][ T27] audit: type=1800 audit(1787598212.804:20): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1184" name="file1" dev="loop6" ino=1048630 res=0 errno=0 [ 309.739039][ T5601] device veth1_macvtap left promiscuous mode [ 309.749524][ T5601] device veth0_macvtap left promiscuous mode [ 309.776411][ T5601] device veth1_vlan left promiscuous mode [ 309.787493][ T8976] loop7: detected capacity change from 0 to 4096 [ 309.796618][ T5601] device veth0_vlan left promiscuous mode [ 309.829386][ T8976] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 310.222097][ T8981] loop6: detected capacity change from 0 to 2048 [ 310.268421][ T8981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 310.284335][ T8981] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.345038][ T6603] EXT4-fs (loop6): unmounting filesystem. [ 310.424099][ T7431] EXT4-fs (loop7): unmounting filesystem. [ 310.496965][ T8985] loop6: detected capacity change from 0 to 256 [ 310.562577][ T8985] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 310.607760][ T27] audit: type=1800 audit(1787598213.734:21): pid=8985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1187" name="file1" dev="loop6" ino=1048633 res=0 errno=0 [ 310.763712][ T8989] loop7: detected capacity change from 0 to 16 [ 310.799168][ T8989] erofs: (device loop7): mounted with root inode @ nid 36. [ 310.896436][ T8989] erofs: (device loop7): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 310.938314][ T8989] erofs: (device loop7): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 311.111981][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 311.120562][ T4322] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 311.158377][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 311.203905][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.253754][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.329049][ T4322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.340420][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 311.350978][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.360973][ T4322] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.374200][ T4322] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 311.383328][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.397103][ T4322] usb 7-1: config 0 descriptor?? [ 311.402904][ T8991] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 311.621263][ T4322] usb 7-1: USB disconnect, device number 3 [ 311.665830][ T5601] bond0 (unregistering): Released all slaves [ 311.769989][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1191'. [ 313.680222][ T4322] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 313.849678][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1203'. [ 313.875579][ T4322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.898075][ T4322] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 313.908185][ T4320] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 314.072450][ T4322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.082934][ T4322] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.110142][ T4322] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 314.119249][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.132514][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.178730][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.226671][ T4320] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 315.308690][ T4322] gud: probe of 6-1:1.0 failed with error -121 [ 315.340267][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.389734][ T4320] usb 4-1: config 0 descriptor?? [ 315.533287][ T6993] usb 6-1: USB disconnect, device number 21 [ 315.820209][ T954] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 315.835219][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.852263][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.879472][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.888064][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.914723][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.926952][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.946994][ T4320] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 315.968860][ T4320] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 316.056842][ T954] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 316.094647][ T954] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 316.127129][ T954] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 316.170725][ T954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.217875][ T954] usb 7-1: probing VID:PID(0424:012C) [ 316.260440][ T954] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 316.274808][ T954] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 316.295227][ T954] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 316.317054][ T954] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 316.327606][ T954] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 316.455350][ T4320] usb 4-1: USB disconnect, device number 12 [ 316.642374][ T954] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 316.860236][ T954] usb 7-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 316.965527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.974912][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.281749][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.335689][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.607925][ T6733] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 317.690346][ T4320] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 317.810859][ T6733] usb 4-1: config index 0 descriptor too short (expected 64998, got 72) [ 317.831914][ T6733] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 317.865340][ T6733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.885674][ T4320] usb 1-1: config 118 interface 0 has no altsetting 0 [ 317.886884][ T6733] usb 4-1: Product: syz [ 317.897139][ T6733] usb 4-1: Manufacturer: syz [ 317.897150][ T4320] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 317.923859][ T6733] usb 4-1: SerialNumber: syz [ 317.937387][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.964411][ T4320] usb 1-1: Product: syz [ 317.968636][ T4320] usb 1-1: Manufacturer: syz [ 317.986043][ T4320] usb 1-1: SerialNumber: syz [ 317.992581][ T954] usb 7-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 318.036199][ T954] usb 7-1: USB disconnect, device number 4 [ 318.082160][ T954] USB vub300 remote SDIO host controller[0] now disconnected [ 318.153157][ T6733] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 318.211211][ T4320] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 318.236681][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.247502][ T4320] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 318.255857][ T4320] usb 1-1: media controller created [ 318.284747][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.395568][ T4320] DVB: Unable to find symbol mt352_attach() [ 318.405450][ T4320] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 318.436501][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 318.472285][ T4320] dvb-usb: schedule remote query interval to 100 msecs. [ 318.489699][ T4320] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 318.512697][ T4320] dvb_usb_m920x: probe of 1-1:118.0 failed with error -71 [ 318.523706][ T4320] usb 1-1: USB disconnect, device number 27 [ 318.591982][ T5698] m920x_read = error: -19 [ 318.598189][ T5698] dvb-usb: error while querying for an remote control event. [ 318.742188][ T4319] m920x_read = error: -19 [ 318.746627][ T4319] dvb-usb: error while querying for an remote control event. [ 318.771241][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.790128][ T954] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 318.800883][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.875623][ T4319] usb 4-1: USB disconnect, device number 13 [ 318.891581][ T4320] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 318.906044][ T6993] m920x_read = error: -19 [ 318.911306][ T6993] dvb-usb: error while querying for an remote control event. [ 318.930193][ T5698] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 319.010490][ T954] usb 7-1: Using ep0 maxpacket: 16 [ 319.030272][ T6993] m920x_read = error: -19 [ 319.034668][ T6993] dvb-usb: error while querying for an remote control event. [ 319.040265][ C0] [ 319.044134][ T954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.044441][ C0] ================================ [ 319.055612][ T954] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.060362][ C0] WARNING: inconsistent lock state [ 319.060371][ C0] syzkaller #0 Not tainted [ 319.060379][ C0] -------------------------------- [ 319.060383][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 319.060390][ C0] sed/9115 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 319.060408][ C0] ffff888029048648 [ 319.073580][ T954] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.078233][ C0] ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 319.082993][ T954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.087753][ C0] {SOFTIRQ-ON-W} state was registered at: [ 319.099874][ T954] usb 7-1: config 0 descriptor?? [ 319.100283][ C0] lock_acquire+0x1bb/0x4a0 [ 319.100308][ C0] __flush_work+0x122/0xac0 [ 319.100323][ C0] __cancel_work_timer+0x3f4/0x560 [ 319.143756][ T4320] usb 1-1: config 118 interface 0 has no altsetting 0 [ 319.145971][ C0] mmc_stop_host+0xd5/0x460 [ 319.145996][ C0] mmc_remove_host+0x11/0x60 [ 319.152560][ T4320] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 319.155748][ C0] vub300_disconnect+0x14b/0x2e0 [ 319.162981][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.167079][ C0] usb_unbind_interface+0x203/0x870 [ 319.167104][ C0] device_release_driver_internal+0x4cf/0x7c0 [ 319.172142][ T4320] usb 1-1: Product: syz [ 319.180752][ C0] bus_remove_device+0x2dd/0x400 [ 319.180774][ C0] device_del+0x63f/0xa80 [ 319.180788][ C0] usb_disable_device+0x3e7/0x8a0 [ 319.180803][ C0] usb_disconnect+0x33c/0x8a0 [ 319.180819][ C0] hub_event+0x1d27/0x5200 [ 319.186451][ T4320] usb 1-1: Manufacturer: syz [ 319.193788][ C0] process_one_work+0x8ab/0x1160 [ 319.193813][ C0] worker_thread+0xd6e/0x12a0 [ 319.193826][ C0] kthread+0x29d/0x330 [ 319.193837][ C0] ret_from_fork+0x1f/0x30 [ 319.193869][ C0] irq event stamp: 9810 [ 319.193875][ C0] hardirqs last enabled at (9810): [] __cancel_work_timer+0x36a/0x560 [ 319.193896][ C0] hardirqs last disabled at (9809): [] try_to_grab_pending+0xfa/0x890 [ 319.193914][ C0] softirqs last enabled at (8586): [] __irq_exit_rcu+0x13b/0x230 [ 319.201012][ T5698] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.205318][ C0] softirqs last disabled at (9745): [] __irq_exit_rcu+0x13b/0x230 [ 319.205347][ C0] [ 319.205347][ C0] other info that might help us debug this: [ 319.209503][ T5698] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.214485][ C0] Possible unsafe locking scenario: [ 319.214485][ C0] [ 319.214492][ C0] CPU0 [ 319.214495][ C0] ---- [ 319.214497][ C0] lock((work_completion)(&(&host->detect)->work)); [ 319.214511][ C0] [ 319.214513][ C0] lock((work_completion)(&(&host->detect)->work)); [ 319.214524][ C0] [ 319.214524][ C0] *** DEADLOCK *** [ 319.214524][ C0] [ 319.214528][ C0] 2 locks held by sed/9115: [ 319.214538][ C0] #0: ffff88807cb1cc58 ( [ 319.219596][ T4320] usb 1-1: SerialNumber: syz [ 319.224041][ C0] &mm->mmap_lock){++++}-{3:3}, at: do_mprotect_pkey+0x28a/0xba0 [ 319.224084][ C0] #1: [ 319.231813][ T5698] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 319.233398][ C0] ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 319.233445][ C0] [ 319.233445][ C0] stack backtrace: [ 319.233471][ C0] CPU: 0 PID: 9115 Comm: sed Not tainted syzkaller #0 [ 319.239100][ T5698] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.243031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.243059][ C0] Call Trace: [ 319.243065][ C0] [ 319.243072][ C0] dump_stack_lvl+0x188/0x24e [ 319.243098][ C0] ? show_regs_print_info+0x12/0x12 [ 319.243122][ C0] ? unwind_get_return_address+0x49/0x80 [ 319.243149][ C0] valid_state+0x13b/0x1d0 [ 319.243168][ C0] mark_lock_irq+0xa9/0x900 [ 319.243190][ C0] ? stack_trace_save+0xa6/0xf0 [ 319.249572][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.252073][ C0] ? save_trace+0xbb0/0xbb0 [ 319.252101][ C0] ? save_trace+0x5a/0xbb0 [ 319.252126][ C0] mark_lock+0x208/0x320 [ 319.262892][ T5698] usb 8-1: config 0 descriptor?? [ 319.270586][ C0] __lock_acquire+0xce0/0x7c40 [ 319.270618][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 319.270642][ C0] ? verify_lock_unused+0x140/0x140 [ 319.281205][ T6993] m920x_read = error: -19 [ 319.289678][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 319.289707][ C0] ? debug_object_assert_init+0x1ed/0x300 [ 319.289725][ C0] lock_acquire+0x1bb/0x4a0 [ 319.308208][ T6993] dvb-usb: error while querying for an remote control event. [ 319.309994][ C0] ? __flush_work+0x109/0xac0 [ 319.310019][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 319.452813][ T6993] m920x_read = error: -19 [ 319.453719][ C0] ? read_lock_is_recursive+0x10/0x10 [ 319.458946][ T6993] dvb-usb: error while querying for an remote control event. [ 319.464527][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 319.464546][ C0] ? _raw_spin_unlock+0x40/0x40 [ 319.464559][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 319.464579][ C0] ? kobject_put+0x25c/0x450 [ 319.464596][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 319.472197][ T4320] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 319.473464][ C0] ? call_timer_fn+0x1ac/0x670 [ 319.473491][ C0] ? __flush_work+0x109/0xac0 [ 319.481006][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.486272][ C0] __flush_work+0x122/0xac0 [ 319.486297][ C0] ? __flush_work+0x109/0xac0 [ 319.491455][ T4320] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 319.495173][ C0] ? flush_work+0x20/0x20 [ 319.495192][ C0] ? __timer_delete+0x6c/0x220 [ 319.499630][ T4320] usb 1-1: media controller created [ 319.504515][ C0] ? mark_lock+0x94/0x320 [ 319.504549][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 319.504568][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 319.504581][ C0] ? lock_chain_count+0x20/0x20 [ 319.504600][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 319.524157][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.528857][ C0] ? __cancel_work_timer+0x36a/0x560 [ 319.528883][ C0] __cancel_work_timer+0x3f4/0x560 [ 319.555234][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.556415][ C0] ? cancel_work_sync+0x20/0x20 [ 319.570120][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.573506][ C0] ? kobject_put+0x25c/0x450 [ 319.573534][ C0] ? __kmem_cache_free+0xb6/0x200 [ 319.579547][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.584325][ C0] ? kobject_put+0x41d/0x450 [ 319.584349][ C0] mmc_free_host+0x15/0x30 [ 319.584367][ C0] call_timer_fn+0x1ac/0x670 [ 319.584384][ C0] ? kref_get+0x70/0x70 [ 319.602162][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.607736][ C0] ? call_timer_fn+0xcf/0x670 [ 319.607763][ C0] ? __run_timers+0x810/0x810 [ 319.622697][ T4320] DVB: Unable to find symbol mt352_attach() [ 319.626360][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 319.631141][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.635516][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 319.643172][ T4320] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 319.647096][ C0] ? kref_get+0x70/0x70 [ 319.647121][ C0] __run_timers+0x56c/0x810 [ 319.653240][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 319.657055][ C0] ? detach_timer+0x350/0x350 [ 319.661648][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.667331][ C0] ? lock_chain_count+0x20/0x20 [ 319.674339][ T4320] dvb-usb: schedule remote query interval to 100 msecs. [ 319.677440][ C0] run_timer_softirq+0x63/0xf0 [ 319.677463][ C0] handle_softirqs+0x291/0x910 [ 319.683073][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.691030][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 319.691051][ C0] ? do_softirq+0x210/0x210 [ 319.691065][ C0] ? hrtimer_interrupt+0x775/0x980 [ 319.696790][ T4320] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 319.701422][ C0] __irq_exit_rcu+0x13b/0x230 [ 319.701442][ C0] ? irq_exit_rcu+0x20/0x20 [ 319.701459][ C0] irq_exit_rcu+0x5/0x20 [ 319.701471][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 319.701489][ C0] [ 319.701495][ C0] [ 319.701500][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 319.701533][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 319.701551][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 319.701564][ C0] RSP: 0018:ffffc9000e037990 EFLAGS: 00000206 [ 319.701580][ C0] RAX: c960758feb4aba00 RBX: ffff88802c7d0000 RCX: c960758feb4aba00 [ 319.709067][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.713592][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 319.713605][ C0] RBP: 0000000000000001 R08: ffff88802c7d0000 R09: 0000000000000003 [ 319.713615][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 319.713623][ C0] R13: 0000000000000246 R14: ffff88807cb1cc58 R15: ffff88802c7d0ae0 [ 319.713644][ C0] mas_next_entry+0x8ab/0xe90 [ 319.721857][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.725399][ C0] validate_mm_mt+0x173/0x420 [ 319.732795][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.737646][ C0] ? __split_vma+0x4f0/0x4f0 [ 319.743129][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.746624][ C0] ? vma_merge+0x883/0xa50 [ 319.746650][ C0] ? vma_mas_szero+0xb0/0xb0 [ 319.759008][ T954] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 319.762543][ C0] ? aa_file_perm+0x3ea/0xf00 [ 319.762572][ C0] __split_vma+0x30/0x4f0 [ 319.762592][ C0] ? split_vma+0x70/0xf0 [ 319.762609][ C0] mprotect_fixup+0x5dc/0x840 [ 319.762634][ C0] ? change_protection+0x3980/0x3980 [ 319.768323][ T5698] usbhid 8-1:0.0: can't add hid device: -71 [ 319.771975][ C0] ? common_file_perm+0x171/0x1c0 [ 319.772003][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 319.777975][ T5698] usbhid: probe of 8-1:0.0 failed with error -71 [ 319.783062][ C0] ? security_file_mprotect+0x7e/0xb0 [ 319.783081][ C0] do_mprotect_pkey+0x7ff/0xba0 [ 319.783107][ C0] ? prot_none_test+0x10/0x10 [ 319.792091][ T954] HID 045e:07da: Invalid code 65791 type 1 [ 319.795467][ C0] ? __up_read+0x2b4/0x6b0 [ 319.795497][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 319.803510][ T954] HID 045e:07da: Invalid code 768 type 1 [ 319.806891][ C0] __x64_sys_mprotect+0x7c/0x90 [ 319.814841][ T5698] usb 8-1: USB disconnect, device number 9 [ 319.822476][ C0] do_syscall_64+0x4c/0xa0 [ 319.822519][ C0] ? clear_bhb_loop+0x60/0xb0 [ 319.822540][ C0] ? clear_bhb_loop+0x60/0xb0 [ 319.827668][ T954] HID 045e:07da: Invalid code 769 type 1 [ 319.834378][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.834404][ C0] RIP: 0033:0x7f4c13ffd2c7 [ 319.841735][ T954] HID 045e:07da: Invalid code 770 type 1 [ 319.846162][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 319.846179][ C0] RSP: 002b:00007ffff2ea06b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 319.851392][ T954] HID 045e:07da: Invalid code 771 type 1 [ 319.855674][ C0] RAX: ffffffffffffffda RBX: 00007f4c13fd90c0 RCX: 00007f4c13ffd2c7 [ 319.855688][ C0] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007f4c13fd5000 [ 319.855700][ C0] RBP: 00007ffff2ea0980 R08: 0000000000000000 R09: 00007f4c13f56bf7 [ 319.863320][ T954] HID 045e:07da: Invalid code 772 type 1 [ 319.867788][ C0] R10: 00007f4c13fd90c0 R11: 0000000000000206 R12: 0000000000000008 [ 319.867803][ C0] R13: 000000a71a0c3e52 R14: 0000000000000000 R15: 00007f4c14011310 [ 319.872574][ T954] HID 045e:07da: Invalid code 773 type 1 [ 319.877385][ C0] [ 319.877551][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 319.888104][ T954] HID 045e:07da: Invalid code 774 type 1 [ 319.890293][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9115, name: sed [ 319.890311][ C0] preempt_count: 100, expected: 0 [ 319.908793][ T954] HID 045e:07da: Invalid code 775 type 1 [ 319.910543][ C0] RCU nest depth: 0, expected: 0 [ 319.910555][ C0] INFO: lockdep is turned off. [ 319.910559][ C0] Preemption disabled at: [ 319.910563][ C0] [] handle_softirqs+0xfd/0x910 [ 319.910586][ C0] CPU: 0 PID: 9115 Comm: sed Not tainted syzkaller #0 [ 319.916943][ T954] HID 045e:07da: Invalid code 776 type 1 [ 319.922260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.922271][ C0] Call Trace: [ 319.922277][ C0] [ 319.922284][ C0] dump_stack_lvl+0x188/0x24e [ 319.949745][ T954] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0009/input/input20 [ 319.955909][ C0] ? show_regs_print_info+0x12/0x12 [ 319.955934][ C0] ? load_image+0x410/0x410 [ 319.955955][ C0] ? handle_softirqs+0xfd/0x910 [ 319.963664][ T6993] m920x_read = error: -19 [ 319.971086][ C0] __might_resched+0x489/0x5f0 [ 319.971107][ C0] ? handle_softirqs+0xfd/0x910 [ 319.971130][ C0] ? __might_sleep+0xd0/0xd0 [ 319.971143][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 319.979320][ T6993] dvb-usb: error while querying for an remote control event. [ 319.987061][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 319.987085][ C0] ? _raw_spin_unlock+0x40/0x40 [ 319.987100][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 319.987117][ C0] ? kobject_put+0x25c/0x450 [ 319.987139][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 319.987159][ C0] ? call_timer_fn+0x1ac/0x670 [ 319.997294][ T954] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 319.999786][ C0] ? __flush_work+0x109/0xac0 [ 320.055125][ T954] usb 7-1: USB disconnect, device number 5 [ 320.057492][ C0] __flush_work+0x142/0xac0 [ 320.134322][ T9117] fido_id[9117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 320.135652][ C0] ? flush_work+0x20/0x20 [ 320.135678][ C0] ? __timer_delete+0x6c/0x220 [ 320.180269][ T5698] m920x_read = error: -19 [ 320.196383][ C0] ? mark_lock+0x94/0x320 [ 320.196414][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.196434][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 320.196448][ C0] ? lock_chain_count+0x20/0x20 [ 320.196467][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 320.217664][ T5698] dvb-usb: error while querying for an remote control event. [ 320.218457][ C0] ? __cancel_work_timer+0x36a/0x560 [ 320.330297][ T5698] m920x_read = error: -19 [ 320.331185][ C0] __cancel_work_timer+0x3f4/0x560 [ 320.331219][ C0] ? cancel_work_sync+0x20/0x20 [ 320.344161][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.344529][ C0] ? kobject_put+0x25c/0x450 [ 320.344552][ C0] ? __kmem_cache_free+0xb6/0x200 [ 320.344570][ C0] ? kobject_put+0x41d/0x450 [ 320.344587][ C0] mmc_free_host+0x15/0x30 [ 320.344604][ C0] call_timer_fn+0x1ac/0x670 [ 320.344622][ C0] ? kref_get+0x70/0x70 [ 320.344641][ C0] ? call_timer_fn+0xcf/0x670 [ 320.344656][ C0] ? __run_timers+0x810/0x810 [ 320.344675][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.344694][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 320.344711][ C0] ? kref_get+0x70/0x70 [ 320.344731][ C0] __run_timers+0x56c/0x810 [ 320.344752][ C0] ? detach_timer+0x350/0x350 [ 320.344771][ C0] ? lock_chain_count+0x20/0x20 [ 320.344795][ C0] run_timer_softirq+0x63/0xf0 [ 320.344812][ C0] handle_softirqs+0x291/0x910 [ 320.344829][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 320.344847][ C0] ? do_softirq+0x210/0x210 [ 320.344861][ C0] ? hrtimer_interrupt+0x775/0x980 [ 320.350199][ T6993] m920x_read = error: -32 [ 320.352374][ C0] __irq_exit_rcu+0x13b/0x230 [ 320.352397][ C0] ? irq_exit_rcu+0x20/0x20 [ 320.352414][ C0] irq_exit_rcu+0x5/0x20 [ 320.352426][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 320.352446][ C0] [ 320.352451][ C0] [ 320.352457][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 320.352481][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 320.352501][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 320.368997][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.369032][ C0] RSP: 0018:ffffc9000e037990 EFLAGS: 00000206 [ 320.404662][ T5698] dvb-usb: error while querying for an remote control event. [ 320.409252][ C0] [ 320.409258][ C0] RAX: c960758feb4aba00 RBX: ffff88802c7d0000 RCX: c960758feb4aba00 [ 320.409274][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 320.409287][ C0] RBP: 0000000000000001 R08: ffff88802c7d0000 R09: 0000000000000003 [ 320.425068][ T6993] dvb-usb: error while querying for an remote control event. [ 320.425622][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 320.425637][ C0] R13: 0000000000000246 R14: ffff88807cb1cc58 R15: ffff88802c7d0ae0 [ 320.425658][ C0] mas_next_entry+0x8ab/0xe90 [ 320.582793][ T5698] m920x_read = error: -19 [ 320.584034][ C0] validate_mm_mt+0x173/0x420 [ 320.593398][ T5698] dvb-usb: error while querying for an remote control event. [ 320.598543][ C0] ? __split_vma+0x4f0/0x4f0 [ 320.598569][ C0] ? vma_merge+0x883/0xa50 [ 320.608122][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1215'. [ 320.612382][ C0] ? vma_mas_szero+0xb0/0xb0 [ 320.612408][ C0] ? aa_file_perm+0x3ea/0xf00 [ 320.727434][ T9132] loop5: detected capacity change from 0 to 512 [ 320.727845][ C0] __split_vma+0x30/0x4f0 [ 320.732613][ T6993] m920x_read = error: -19 [ 320.738301][ C0] ? split_vma+0x70/0xf0 [ 320.845996][ C0] mprotect_fixup+0x5dc/0x840 [ 320.850729][ C0] ? change_protection+0x3980/0x3980 [ 320.856044][ C0] ? common_file_perm+0x171/0x1c0 [ 320.861094][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 320.866314][ C0] ? security_file_mprotect+0x7e/0xb0 [ 320.871718][ C0] do_mprotect_pkey+0x7ff/0xba0 [ 320.876776][ C0] ? prot_none_test+0x10/0x10 [ 320.881476][ C0] ? __up_read+0x2b4/0x6b0 [ 320.885922][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.891959][ C0] __x64_sys_mprotect+0x7c/0x90 [ 320.896836][ C0] do_syscall_64+0x4c/0xa0 [ 320.901287][ C0] ? clear_bhb_loop+0x60/0xb0 [ 320.906002][ C0] ? clear_bhb_loop+0x60/0xb0 [ 320.910705][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.916616][ C0] RIP: 0033:0x7f4c13ffd2c7 [ 320.921084][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 320.940711][ C0] RSP: 002b:00007ffff2ea06b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 320.949153][ C0] RAX: ffffffffffffffda RBX: 00007f4c13fd90c0 RCX: 00007f4c13ffd2c7 [ 320.957144][ C0] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007f4c13fd5000 [ 320.965139][ C0] RBP: 00007ffff2ea0980 R08: 0000000000000000 R09: 00007f4c13f56bf7 [ 320.973220][ C0] R10: 00007f4c13fd90c0 R11: 0000000000000206 R12: 0000000000000008 [ 320.981210][ C0] R13: 000000a71a0c3e52 R14: 0000000000000000 R15: 00007f4c14011310 [ 320.989207][ C0] [ 320.992320][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1238 [ 321.001641][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9115, name: sed [ 321.010541][ C0] preempt_count: 100, expected: 0 [ 321.015577][ C0] RCU nest depth: 0, expected: 0 [ 321.020552][ C0] INFO: lockdep is turned off. [ 321.025320][ C0] Preemption disabled at: [ 321.025331][ C0] [] handle_softirqs+0xfd/0x910 [ 321.036122][ C0] CPU: 0 PID: 9115 Comm: sed Tainted: G W syzkaller #0 [ 321.044381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.054458][ C0] Call Trace: [ 321.057756][ C0] [ 321.060611][ C0] dump_stack_lvl+0x188/0x24e [ 321.065326][ C0] ? show_regs_print_info+0x12/0x12 [ 321.070551][ C0] ? load_image+0x410/0x410 [ 321.075074][ C0] ? handle_softirqs+0xfd/0x910 [ 321.079941][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 321.084983][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 321.090903][ C0] ? _raw_spin_unlock+0x40/0x40 [ 321.095775][ C0] ? handle_softirqs+0xfd/0x910 [ 321.100646][ C0] __might_resched+0x489/0x5f0 [ 321.105475][ C0] ? handle_softirqs+0xfd/0x910 [ 321.110339][ C0] ? __might_sleep+0xd0/0xd0 [ 321.114964][ C0] ? lock_release+0xcf/0x920 [ 321.119580][ C0] ? synchronize_srcu+0xcf/0x1b0 [ 321.124540][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 321.129581][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 321.134627][ C0] __synchronize_srcu+0x16b/0x350 [ 321.139679][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 321.145425][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 321.151349][ C0] ? _raw_spin_unlock+0x40/0x40 [ 321.156238][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 321.162153][ C0] ? _raw_spin_unlock+0x40/0x40 [ 321.167108][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 321.172670][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 321.177715][ C0] wakeup_source_unregister+0x112/0x190 [ 321.183281][ C0] mmc_host_classdev_release+0x43/0xf0 [ 321.188762][ C0] ? mmc_free_host+0x30/0x30 [ 321.193373][ C0] device_release+0x92/0x1c0 [ 321.197983][ C0] kobject_put+0x217/0x450 [ 321.202422][ C0] call_timer_fn+0x1ac/0x670 [ 321.207027][ C0] ? kref_get+0x70/0x70 [ 321.211197][ C0] ? call_timer_fn+0xcf/0x670 [ 321.215885][ C0] ? __run_timers+0x810/0x810 [ 321.220580][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.225796][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 321.231108][ C0] ? kref_get+0x70/0x70 [ 321.235289][ C0] __run_timers+0x56c/0x810 [ 321.239824][ C0] ? detach_timer+0x350/0x350 [ 321.244519][ C0] ? lock_chain_count+0x20/0x20 [ 321.249392][ C0] run_timer_softirq+0x63/0xf0 [ 321.254171][ C0] handle_softirqs+0x291/0x910 [ 321.258954][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 321.263820][ C0] ? do_softirq+0x210/0x210 [ 321.268327][ C0] ? hrtimer_interrupt+0x775/0x980 [ 321.273454][ C0] __irq_exit_rcu+0x13b/0x230 [ 321.278144][ C0] ? irq_exit_rcu+0x20/0x20 [ 321.282662][ C0] irq_exit_rcu+0x5/0x20 [ 321.286910][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 321.292560][ C0] [ 321.295497][ C0] [ 321.298521][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.304523][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 321.310255][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 321.329881][ C0] RSP: 0018:ffffc9000e037990 EFLAGS: 00000206 [ 321.335947][ C0] RAX: c960758feb4aba00 RBX: ffff88802c7d0000 RCX: c960758feb4aba00 [ 321.344350][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 321.352313][ C0] RBP: 0000000000000001 R08: ffff88802c7d0000 R09: 0000000000000003 [ 321.360276][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 321.368237][ C0] R13: 0000000000000246 R14: ffff88807cb1cc58 R15: ffff88802c7d0ae0 [ 321.376227][ C0] mas_next_entry+0x8ab/0xe90 [ 321.380914][ C0] validate_mm_mt+0x173/0x420 [ 321.385596][ C0] ? __split_vma+0x4f0/0x4f0 [ 321.390185][ C0] ? vma_merge+0x883/0xa50 [ 321.394606][ C0] ? vma_mas_szero+0xb0/0xb0 [ 321.399203][ C0] ? aa_file_perm+0x3ea/0xf00 [ 321.403891][ C0] __split_vma+0x30/0x4f0 [ 321.408215][ C0] ? split_vma+0x70/0xf0 [ 321.412464][ C0] mprotect_fixup+0x5dc/0x840 [ 321.417144][ C0] ? change_protection+0x3980/0x3980 [ 321.422427][ C0] ? common_file_perm+0x171/0x1c0 [ 321.427482][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 321.432710][ C0] ? security_file_mprotect+0x7e/0xb0 [ 321.438112][ C0] do_mprotect_pkey+0x7ff/0xba0 [ 321.442969][ C0] ? prot_none_test+0x10/0x10 [ 321.447641][ C0] ? __up_read+0x2b4/0x6b0 [ 321.452062][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.458049][ C0] __x64_sys_mprotect+0x7c/0x90 [ 321.462897][ C0] do_syscall_64+0x4c/0xa0 [ 321.467308][ C0] ? clear_bhb_loop+0x60/0xb0 [ 321.471980][ C0] ? clear_bhb_loop+0x60/0xb0 [ 321.476650][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.482624][ C0] RIP: 0033:0x7f4c13ffd2c7 [ 321.487027][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 321.506715][ C0] RSP: 002b:00007ffff2ea06b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 321.515123][ C0] RAX: ffffffffffffffda RBX: 00007f4c13fd90c0 RCX: 00007f4c13ffd2c7 [ 321.523089][ C0] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007f4c13fd5000 [ 321.531056][ C0] RBP: 00007ffff2ea0980 R08: 0000000000000000 R09: 00007f4c13f56bf7 [ 321.539018][ C0] R10: 00007f4c13fd90c0 R11: 0000000000000206 R12: 0000000000000008 [ 321.546984][ C0] R13: 000000a71a0c3e52 R14: 0000000000000000 R15: 00007f4c14011310 [ 321.554953][ C0] [ 321.558047][ C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffc9000e030000, but annotated. [ 321.565708][ T5698] m920x_read = error: -71 [ 321.567678][ C0] ------------[ cut here ]------------ [ 321.571756][ T4320] dvb_usb_m920x: probe of 1-1:118.0 failed with error -71 [ 321.577168][ C0] WARNING: CPU: 0 PID: 9115 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 321.589621][ T5698] dvb-usb: error while querying for an remote control event. [ 321.593791][ C0] Modules linked in: [ 321.593802][ C0] CPU: 0 PID: 9115 Comm: sed Tainted: G W syzkaller #0 [ 321.601540][ T6993] dvb-usb: error while querying for an remote control event. [ 321.605037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.622182][ T4320] usb 1-1: USB disconnect, device number 28 [ 321.630677][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 321.630704][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 9e f3 dd 12 48 c7 c1 c0 69 df 8a 48 c7 c7 20 6a df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 83 0b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 321.630718][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 321.630733][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: c960758feb4aba00 [ 321.630744][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 321.630754][ C0] RBP: dffffc0000000000 R08: ffffffff8e2110ef R09: 1ffffffff1c4221d [ 321.647159][ T9132] EXT4-fs (loop5): Test dummy encryption mode enabled [ 321.662149][ C0] R10: dffffc0000000000 R11: fffffbfff1c4221e R12: ffff88802c7d0020 [ 321.662166][ C0] R13: ffff8880226631f8 R14: 0000000000000001 R15: ffffffff8a8d30a0 [ 321.662176][ C0] FS: 00007f4c13c6ec80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 321.662191][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.662203][ C0] CR2: 00007f4c13fd6000 CR3: 000000002f13c000 CR4: 00000000003506f0 [ 321.662217][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.662227][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.689735][ T9132] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 321.692179][ C0] Call Trace: [ 321.692186][ C0] [ 321.692194][ C0] __synchronize_srcu+0x227/0x350 [ 321.692221][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 321.720270][ T6993] m920x_read = error: -19 [ 321.724385][ C0] ? _raw_spin_unlock+0x40/0x40 [ 321.731175][ T6993] dvb-usb: error while querying for an remote control event. [ 321.738907][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 321.747390][ T6993] m920x_read = error: -19 [ 321.754815][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 321.754841][ C0] wakeup_source_unregister+0x112/0x190 [ 321.765060][ T6993] dvb-usb: error while querying for an remote control event. [ 321.767895][ C0] mmc_host_classdev_release+0x43/0xf0 [ 321.806507][ T9132] EXT4-fs (loop5): 1 truncate cleaned up [ 321.807718][ C0] ? mmc_free_host+0x30/0x30 [ 321.812779][ T9132] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 321.818244][ C0] device_release+0x92/0x1c0 [ 321.818270][ C0] kobject_put+0x217/0x450 [ 321.818290][ C0] call_timer_fn+0x1ac/0x670 [ 321.863461][ C0] ? kref_get+0x70/0x70 [ 321.863490][ C0] ? call_timer_fn+0xcf/0x670 [ 321.863509][ C0] ? __run_timers+0x810/0x810 [ 321.863534][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.863555][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 321.863574][ C0] ? kref_get+0x70/0x70 [ 321.863594][ C0] __run_timers+0x56c/0x810 [ 321.863617][ C0] ? detach_timer+0x350/0x350 [ 321.863635][ C0] ? lock_chain_count+0x20/0x20 [ 321.863659][ C0] run_timer_softirq+0x63/0xf0 [ 321.863676][ C0] handle_softirqs+0x291/0x910 [ 321.863695][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 321.863713][ C0] ? do_softirq+0x210/0x210 [ 321.863727][ C0] ? hrtimer_interrupt+0x775/0x980 [ 321.863748][ C0] __irq_exit_rcu+0x13b/0x230 [ 321.863764][ C0] ? irq_exit_rcu+0x20/0x20 [ 321.863784][ C0] irq_exit_rcu+0x5/0x20 [ 321.863799][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 321.863818][ C0] [ 321.863824][ C0] [ 321.863830][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.863853][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 321.863873][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 321.863888][ C0] RSP: 0018:ffffc9000e037990 EFLAGS: 00000206 [ 321.863906][ C0] RAX: c960758feb4aba00 RBX: ffff88802c7d0000 RCX: c960758feb4aba00 [ 321.863920][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 321.863933][ C0] RBP: 0000000000000001 R08: ffff88802c7d0000 R09: 0000000000000003 [ 321.863944][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 321.863956][ C0] R13: 0000000000000246 R14: ffff88807cb1cc58 R15: ffff88802c7d0ae0 [ 321.863976][ C0] mas_next_entry+0x8ab/0xe90 [ 321.864011][ C0] validate_mm_mt+0x173/0x420 [ 321.864033][ C0] ? __split_vma+0x4f0/0x4f0 [ 321.864052][ C0] ? vma_merge+0x883/0xa50 [ 321.864073][ C0] ? vma_mas_szero+0xb0/0xb0 [ 321.864091][ C0] ? aa_file_perm+0x3ea/0xf00 [ 321.864117][ C0] __split_vma+0x30/0x4f0 [ 321.864136][ C0] ? split_vma+0x70/0xf0 [ 321.864157][ C0] mprotect_fixup+0x5dc/0x840 [ 321.864184][ C0] ? change_protection+0x3980/0x3980 [ 321.864206][ C0] ? common_file_perm+0x171/0x1c0 [ 321.864228][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 321.864251][ C0] ? security_file_mprotect+0x7e/0xb0 [ 321.864271][ C0] do_mprotect_pkey+0x7ff/0xba0 [ 321.864297][ C0] ? prot_none_test+0x10/0x10 [ 321.864319][ C0] ? __up_read+0x2b4/0x6b0 [ 321.864342][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.864369][ C0] __x64_sys_mprotect+0x7c/0x90 [ 321.864393][ C0] do_syscall_64+0x4c/0xa0 [ 321.864415][ C0] ? clear_bhb_loop+0x60/0xb0 [ 321.864436][ C0] ? clear_bhb_loop+0x60/0xb0 [ 321.864459][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.864480][ C0] RIP: 0033:0x7f4c13ffd2c7 [ 321.864494][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 321.864507][ C0] RSP: 002b:00007ffff2ea06b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 321.864525][ C0] RAX: ffffffffffffffda RBX: 00007f4c13fd90c0 RCX: 00007f4c13ffd2c7 [ 321.864537][ C0] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007f4c13fd5000 [ 321.864548][ C0] RBP: 00007ffff2ea0980 R08: 0000000000000000 R09: 00007f4c13f56bf7 [ 321.864560][ C0] R10: 00007f4c13fd90c0 R11: 0000000000000206 R12: 0000000000000008 [ 321.864571][ C0] R13: 000000a71a0c3e52 R14: 0000000000000000 R15: 00007f4c14011310 [ 321.864589][ C0] [ 321.864612][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.864623][ C0] CPU: 0 PID: 9115 Comm: sed Tainted: G W syzkaller #0 [ 321.864641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.864650][ C0] Call Trace: [ 321.864656][ C0] [ 321.864661][ C0] dump_stack_lvl+0x188/0x24e [ 321.864685][ C0] ? memcpy+0x3c/0x60 [ 321.864701][ C0] ? show_regs_print_info+0x12/0x12 [ 321.864724][ C0] ? load_image+0x410/0x410 [ 321.864747][ C0] panic+0x2d3/0x710 [ 321.864765][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 321.864788][ C0] __warn+0x2f8/0x4f0 [ 321.864804][ C0] ? __debug_object_init+0x18e/0x440 [ 321.864821][ C0] ? __debug_object_init+0x18e/0x440 [ 321.864836][ C0] report_bug+0x2ba/0x4f0 [ 321.864859][ C0] ? __debug_object_init+0x18e/0x440 [ 321.864876][ C0] handle_bug+0x3a/0x70 [ 321.864898][ C0] exc_invalid_op+0x16/0x40 [ 321.864920][ C0] asm_exc_invalid_op+0x16/0x20 [ 321.864941][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 321.864957][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 9e f3 dd 12 48 c7 c1 c0 69 df 8a 48 c7 c7 20 6a df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 83 0b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 321.864971][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 321.864985][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: c960758feb4aba00 [ 321.865003][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 321.865013][ C0] RBP: dffffc0000000000 R08: ffffffff8e2110ef R09: 1ffffffff1c4221d [ 321.865026][ C0] R10: dffffc0000000000 R11: fffffbfff1c4221e R12: ffff88802c7d0020 [ 321.865039][ C0] R13: ffff8880226631f8 R14: 0000000000000001 R15: ffffffff8a8d30a0 [ 321.865056][ C0] ? __debug_object_init+0x18e/0x440 [ 321.865074][ C0] __synchronize_srcu+0x227/0x350 [ 321.865098][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 321.865123][ C0] ? _raw_spin_unlock+0x40/0x40 [ 321.865141][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 321.865161][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 321.865183][ C0] wakeup_source_unregister+0x112/0x190 [ 321.865206][ C0] mmc_host_classdev_release+0x43/0xf0 [ 321.865226][ C0] ? mmc_free_host+0x30/0x30 [ 321.865245][ C0] device_release+0x92/0x1c0 [ 321.865269][ C0] kobject_put+0x217/0x450 [ 321.865287][ C0] call_timer_fn+0x1ac/0x670 [ 321.865304][ C0] ? kref_get+0x70/0x70 [ 321.865322][ C0] ? call_timer_fn+0xcf/0x670 [ 321.865339][ C0] ? __run_timers+0x810/0x810 [ 321.865358][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.865377][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 321.865393][ C0] ? kref_get+0x70/0x70 [ 321.865413][ C0] __run_timers+0x56c/0x810 [ 321.865435][ C0] ? detach_timer+0x350/0x350 [ 321.865453][ C0] ? lock_chain_count+0x20/0x20 [ 321.865476][ C0] run_timer_softirq+0x63/0xf0 [ 321.865491][ C0] handle_softirqs+0x291/0x910 [ 321.865509][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 321.865525][ C0] ? do_softirq+0x210/0x210 [ 321.865539][ C0] ? hrtimer_interrupt+0x775/0x980 [ 321.865560][ C0] __irq_exit_rcu+0x13b/0x230 [ 321.865575][ C0] ? irq_exit_rcu+0x20/0x20 [ 321.865594][ C0] irq_exit_rcu+0x5/0x20 [ 321.865608][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 321.865626][ C0] [ 321.865631][ C0] [ 321.865637][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.865658][ C0] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 321.865677][ C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 321.865691][ C0] RSP: 0018:ffffc9000e037990 EFLAGS: 00000206 [ 321.865704][ C0] RAX: c960758feb4aba00 RBX: ffff88802c7d0000 RCX: c960758feb4aba00 [ 321.865717][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 321.865728][ C0] RBP: 0000000000000001 R08: ffff88802c7d0000 R09: 0000000000000003 [ 321.865740][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 321.865750][ C0] R13: 0000000000000246 R14: ffff88807cb1cc58 R15: ffff88802c7d0ae0 [ 321.865770][ C0] mas_next_entry+0x8ab/0xe90 [ 321.865796][ C0] validate_mm_mt+0x173/0x420 [ 321.865817][ C0] ? __split_vma+0x4f0/0x4f0 [ 321.865836][ C0] ? vma_merge+0x883/0xa50 [ 321.865884][ C0] ? vma_mas_szero+0xb0/0xb0 [ 321.865901][ C0] ? aa_file_perm+0x3ea/0xf00 [ 321.865926][ C0] __split_vma+0x30/0x4f0 [ 321.865945][ C0] ? split_vma+0x70/0xf0 [ 321.865965][ C0] mprotect_fixup+0x5dc/0x840 [ 321.865990][ C0] ? change_protection+0x3980/0x3980 [ 321.866019][ C0] ? common_file_perm+0x171/0x1c0 [ 321.866041][ C0] ? bpf_lsm_file_mprotect+0x5/0x10 [ 321.866063][ C0] ? security_file_mprotect+0x7e/0xb0 [ 321.866082][ C0] do_mprotect_pkey+0x7ff/0xba0 [ 321.866108][ C0] ? prot_none_test+0x10/0x10 [ 321.866129][ C0] ? __up_read+0x2b4/0x6b0 [ 321.866152][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.866179][ C0] __x64_sys_mprotect+0x7c/0x90 [ 321.866201][ C0] do_syscall_64+0x4c/0xa0 [ 321.866223][ C0] ? clear_bhb_loop+0x60/0xb0 [ 321.866244][ C0] ? clear_bhb_loop+0x60/0xb0 [ 321.866266][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.866287][ C0] RIP: 0033:0x7f4c13ffd2c7 [ 321.866301][ C0] Code: 89 3d fd 3f 01 00 eb 90 0f 1f 00 f7 d8 89 05 f0 3f 01 00 48 c7 c0 ff ff ff ff eb 91 0f 1f 80 00 00 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 [ 321.866314][ C0] RSP: 002b:00007ffff2ea06b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 321.866331][ C0] RAX: ffffffffffffffda RBX: 00007f4c13fd90c0 RCX: 00007f4c13ffd2c7 [ 321.866343][ C0] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 00007f4c13fd5000 [ 321.866354][ C0] RBP: 00007ffff2ea0980 R08: 0000000000000000 R09: 00007f4c13f56bf7 [ 321.866366][ C0] R10: 00007f4c13fd90c0 R11: 0000000000000206 R12: 0000000000000008 [ 321.866377][ C0] R13: 000000a71a0c3e52 R14: 0000000000000000 R15: 00007f4c14011310 [ 321.866394][ C0] [ 321.866665][ C0] Kernel Offset: disabled [ 322.794970][ C0] Rebooting in 86400 seconds..