last executing test programs: 4m4.266811893s ago: executing program 0 (id=87): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000"], 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xa0}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xe) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1) 3m59.680785884s ago: executing program 0 (id=100): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004880), 0x0, 0x4001, 0x0) sched_setscheduler(r0, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') pread64(r3, &(0x7f000001e540)=""/102376, 0xfffffe8f, 0xfff) semctl$IPC_RMID(0x0, 0x0, 0x0) 3m58.438529954s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dlm\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000640)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dlm/mydomain\x00', 0x1ff) 3m57.484253128s ago: executing program 0 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) write(r3, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x0, 0x18}, 0x18) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_audit(0x10, 0x3, 0x9) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x15) 3m56.502768372s ago: executing program 0 (id=108): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb1, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], &(0x7f0000000640)={0x0, 0x2, [0x521, 0xc34, 0xf62, 0x4b]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6a82cf356296db4e3165011257bc44151dc994f1efde4b8fe73e132d8e94795bc9adc5875f4867021a6d8453cf1ee42700e19f5bb6f58b649e0f75abb081224", 0xc0}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x6a3005c1, @rand_addr=' \x01\x00', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3m55.156833614s ago: executing program 0 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r2, 0x4, 0x20, 0x100000000, 0x5}, &(0x7f00000000c0)=0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x0, 0x4f, 0x0, 0x1, 0x2}, 0x28) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m39.037043904s ago: executing program 32 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r2, 0x4, 0x20, 0x100000000, 0x5}, &(0x7f00000000c0)=0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x0, 0x4f, 0x0, 0x1, 0x2}, 0x28) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.660426343s ago: executing program 3 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.867768446s ago: executing program 3 (id=779): r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 9.43757194s ago: executing program 3 (id=786): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x2000}], 0x1) 9.202828917s ago: executing program 3 (id=788): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) link(&(0x7f0000000640)='./cgroup\x00', &(0x7f0000000680)='./cgroup/file0\x00') 8.541908562s ago: executing program 3 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7f, 0x60000000, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 8.195837511s ago: executing program 4 (id=793): socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) madvise(&(0x7f000062b000/0x1000)=nil, 0x1000, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r1, 0x2004, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 6.616170459s ago: executing program 5 (id=796): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, 0x0, 0x8a141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0x1, 0xe32d) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) sendfile(r2, r2, 0x0, 0x9100) 6.15738243s ago: executing program 4 (id=798): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000006800010025bd7000ffdbdf250a0000000000000010000b"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc802) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x1, {0xa, 0xe2b, 0x7fffffff, @mcast2, 0x100}}}, 0x80, 0x0}, 0x20020830) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x48, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x20048844) 6.15445768s ago: executing program 3 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r3, 0x0, 0xfff, 0x9) unlink(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') openat2(r4, &(0x7f0000000040)='./cgroup/file0\x00', 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x180000) 5.075214837s ago: executing program 1 (id=801): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) landlock_restrict_self(0xffffffffffffffff, 0xc) close_range(r0, r0, 0x0) 5.074775226s ago: executing program 2 (id=802): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 5.052614647s ago: executing program 4 (id=803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0xd, 0x800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000400)={0x3, r3, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000001c0)={0x9, 0x0, [{0xab8, 0x0, 0x101}, {0x9e9, 0x0, 0x4}, {0x118, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x2a0, 0x0, 0xff}, {0x373, 0x0, 0x5}, {0x880, 0x0, 0x8000}, {0x891, 0x0, 0x13}]}) 5.022456078s ago: executing program 5 (id=804): socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfae8}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) 4.875159391s ago: executing program 1 (id=805): r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x8200, 0x0) readv(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x70, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x4, 0x7fff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x8, 0x3]}, @chandef_params, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x48040}, 0x40040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/events/raw_syscalls/sys_enter/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 4.788458624s ago: executing program 4 (id=806): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r2, &(0x7f0000000600)='dir .', 0x5) write(r2, &(0x7f0000000700)='bind', 0x4) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x5, 0x1}}, 0x28) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) 4.680514916s ago: executing program 5 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b00", 0x4}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f0000000380)="d4", 0x1}], 0x3) 4.063712701s ago: executing program 1 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x1e, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 3.142822863s ago: executing program 2 (id=809): socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) madvise(&(0x7f000062b000/0x1000)=nil, 0x1000, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r1, 0x2004, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 3.097124485s ago: executing program 4 (id=810): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7, 0x21, 0x1}, 0xffffffc0) mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) 2.804939012s ago: executing program 5 (id=811): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mlockall(0x3) kernel console output (not intermixed with test programs): 24392][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.933074][ T4359] usb 3-1: Using ep0 maxpacket: 16 [ 133.942801][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.950236][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 133.957817][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.028437][ T4990] x_tables: duplicate underflow at hook 1 [ 134.190596][ T4322] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.420578][ T4322] usb 5-1: Using ep0 maxpacket: 32 [ 134.432592][ T4322] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 134.660408][ T4322] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.672033][ T4359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.682785][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.694068][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.704413][ T4359] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.714129][ T4359] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.729979][ T4322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.743305][ T4359] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.770409][ T4359] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.778433][ T4359] usb 3-1: Manufacturer: syz [ 134.804871][ T4322] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.822758][ T4359] usb 3-1: config 0 descriptor?? [ 134.862325][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.890452][ T4322] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.927088][ T4322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 135.041161][ T4322] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.187275][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.388066][ T4322] usb 5-1: config 0 descriptor?? [ 135.826202][ T4359] rc_core: IR keymap rc-hauppauge not found [ 135.839962][ T4359] Registered IR keymap rc-empty [ 135.845699][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.121329][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 136.520502][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.550989][ T4359] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 136.734217][ T27] audit: type=1800 audit(1786141907.122:43): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="ipv4_address" dev="configfs" ino=36076 res=0 errno=0 [ 136.737324][ T4359] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 136.828617][ T4985] chnl_net:caif_netlink_parms(): no params data found [ 136.909991][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.971390][ T27] audit: type=1800 audit(1786141907.162:44): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="ipv4_port" dev="configfs" ino=36077 res=0 errno=0 [ 136.992018][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.020508][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.040692][ T27] audit: type=1800 audit(1786141907.182:45): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="num" dev="configfs" ino=36078 res=0 errno=0 [ 137.061881][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.090446][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.101519][ T5015] loop1: detected capacity change from 0 to 4096 [ 137.109003][ T27] audit: type=1800 audit(1786141907.182:46): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="local" dev="configfs" ino=36079 res=0 errno=0 [ 137.116315][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.136229][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.143783][ T4985] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.152178][ T4985] device bridge_slave_0 entered promiscuous mode [ 137.162371][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.169574][ T4985] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.177164][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.185559][ T4985] device bridge_slave_1 entered promiscuous mode [ 138.042210][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.058587][ T14] usb 5-1: USB disconnect, device number 9 [ 138.070623][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.101149][ T4359] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.134836][ T4359] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 138.149075][ T4985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.150502][ T5015] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.174633][ T4359] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 138.195883][ T4985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.200558][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 138.303147][ T4359] usb 3-1: USB disconnect, device number 7 [ 138.794620][ T5039] x_tables: duplicate underflow at hook 1 [ 139.426528][ T4985] team0: Port device team_slave_0 added [ 139.453503][ T4985] team0: Port device team_slave_1 added [ 139.505104][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 139.520665][ T4985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.550680][ T4985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.863909][ T4985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.557172][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 140.690614][ T4985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.697601][ T4985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.849949][ T27] audit: type=1800 audit(1786141911.232:47): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.170" name="ipv4_address" dev="configfs" ino=36152 res=0 errno=0 [ 140.879156][ T4985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.028485][ T27] audit: type=1800 audit(1786141911.292:48): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.170" name="ipv4_port" dev="configfs" ino=36153 res=0 errno=0 [ 141.065587][ T4262] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.074334][ T27] audit: type=1800 audit(1786141911.292:49): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.170" name="num" dev="configfs" ino=36154 res=0 errno=0 [ 141.098758][ T4985] device hsr_slave_0 entered promiscuous mode [ 141.106724][ T27] audit: type=1800 audit(1786141911.292:50): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.170" name="local" dev="configfs" ino=36155 res=0 errno=0 [ 141.160963][ T4985] device hsr_slave_1 entered promiscuous mode [ 141.245547][ T4985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.294208][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 141.327143][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.351097][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.363063][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.372999][ T4262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.382911][ T4262] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.522506][ T4262] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.541551][ T4985] Cannot create hsr debugfs directory [ 142.600643][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 142.630282][ T4262] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.660166][ T4262] usb 3-1: Manufacturer: syz [ 142.667343][ T4262] usb 3-1: config 0 descriptor?? [ 142.929666][ T4862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.946176][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.075748][ T5074] x_tables: duplicate underflow at hook 1 [ 143.128704][ T4862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.625780][ T4862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.680884][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 143.688811][ T7] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.697479][ T4262] rc_core: IR keymap rc-hauppauge not found [ 143.703567][ T4262] Registered IR keymap rc-empty [ 143.708505][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.740552][ T7] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.749284][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.763678][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.773078][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.778022][ T4862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.790418][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.836673][ T4262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 143.870772][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.881591][ T4985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.901233][ T4985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.902793][ T4262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 143.926135][ T4985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.936522][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 143.956106][ T7] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.966266][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.974727][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 143.992614][ T7] usb 2-1: config 0 descriptor?? [ 144.007170][ T4985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.026362][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.162569][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.211073][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.387529][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.460691][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 144.500538][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.121554][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.150270][ T4985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.170546][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.248664][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 145.316599][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.360007][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.374043][ T4262] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 145.441256][ T4985] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.587354][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.615283][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.669845][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.677912][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.085757][ T4262] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.518674][ T4262] usb 3-1: USB disconnect, device number 8 [ 146.530800][ T7] usb 2-1: USB disconnect, device number 4 [ 146.560186][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.582308][ T27] audit: type=1800 audit(1786141916.972:51): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="ipv4_address" dev="configfs" ino=35649 res=0 errno=0 [ 146.757933][ T27] audit: type=1800 audit(1786141916.992:52): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="ipv4_port" dev="configfs" ino=35650 res=0 errno=0 [ 147.565708][ T5118] x_tables: duplicate underflow at hook 1 [ 147.845710][ T27] audit: type=1800 audit(1786141916.992:53): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="num" dev="configfs" ino=35651 res=0 errno=0 [ 148.046180][ T27] audit: type=1800 audit(1786141917.022:54): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="local" dev="configfs" ino=35660 res=0 errno=0 [ 148.278787][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.379255][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.859560][ T27] audit: type=1800 audit(1786141917.912:55): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.183" name="c_srate" dev="configfs" ino=36502 res=0 errno=0 [ 148.938919][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.946119][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.973588][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.005308][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.034572][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.068987][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.088164][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.109180][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.128338][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.148896][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.180544][ T4985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.228983][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.476812][ T5115] device veth0 entered promiscuous mode [ 149.494510][ T5119] device veth0 left promiscuous mode [ 149.500948][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 149.805195][ T5121] bond0: (slave bond_slave_1): Releasing backup interface [ 149.905309][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.923215][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.990602][ T4262] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.998180][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.763975][ T4262] usb 4-1: Using ep0 maxpacket: 16 [ 150.771008][ T4262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.788122][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.799367][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.820479][ T4262] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.830172][ T4262] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.880545][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.956663][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.975276][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.977846][ T4262] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.000165][ T4262] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.023422][ T4262] usb 4-1: Manufacturer: syz [ 151.030286][ T4262] usb 4-1: config 0 descriptor?? [ 151.101435][ T4985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.420467][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 151.427369][ T22] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.451781][ T22] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.480972][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.512958][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.530541][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.535383][ T4262] rc_core: IR keymap rc-hauppauge not found [ 151.540220][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.569912][ T4262] Registered IR keymap rc-empty [ 151.579665][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.605100][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 151.620991][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.684408][ T5180] x_tables: duplicate underflow at hook 1 [ 151.734624][ T22] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.912024][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.129898][ T22] usb 3-1: config 0 descriptor?? [ 152.332223][ T4262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 152.346478][ T4262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 152.408420][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.450493][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.480682][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.521347][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.566092][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.623100][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 153.270523][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 153.310603][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 153.350639][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 153.393830][ T4262] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 153.448447][ T4262] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 153.488348][ T4262] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 153.510238][ T4262] usb 4-1: USB disconnect, device number 5 [ 153.550430][ T22] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.622303][ T4862] device hsr_slave_0 left promiscuous mode [ 153.629163][ T4862] device hsr_slave_1 left promiscuous mode [ 153.649573][ T4862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.657399][ T5200] loop3: detected capacity change from 0 to 256 [ 153.677587][ T4862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.718566][ T5200] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 153.734859][ T4862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.754109][ T5200] exFAT-fs (loop3): invalid boot region [ 153.756886][ T4862] device bridge_slave_1 left promiscuous mode [ 153.772102][ T22] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 153.775118][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.782600][ T5200] exFAT-fs (loop3): failed to recognize exfat type [ 153.797530][ T22] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 153.806656][ T4862] device bridge_slave_0 left promiscuous mode [ 153.819496][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.822875][ T22] usb 2-1: config 0 has no interface number 0 [ 153.864081][ T22] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.875499][ T4862] device veth1_macvtap left promiscuous mode [ 153.893842][ T4862] device veth0_macvtap left promiscuous mode [ 153.913992][ T4862] device veth1_vlan left promiscuous mode [ 153.922573][ T22] usb 2-1: config 0 interface 200 has no altsetting 0 [ 153.976461][ T22] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 153.996229][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.014133][ T22] usb 2-1: Product: syz [ 154.023712][ T22] usb 2-1: Manufacturer: syz [ 154.033679][ T22] usb 2-1: SerialNumber: syz [ 154.054006][ T22] usb 2-1: config 0 descriptor?? [ 154.769422][ T26] usb 3-1: USB disconnect, device number 9 [ 154.779553][ T22] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input19 [ 154.794626][ T22] usb 2-1: USB disconnect, device number 5 [ 155.716816][ T27] audit: type=1800 audit(1786141926.022:56): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.205" name="c_srate" dev="configfs" ino=36644 res=0 errno=0 [ 157.083540][ T5238] x_tables: duplicate underflow at hook 1 [ 158.463331][ T4862] team0 (unregistering): Port device team_slave_1 removed [ 158.510523][ T4360] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.526947][ T4862] team0 (unregistering): Port device team_slave_0 removed [ 158.597165][ T4862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.657431][ T5251] loop2: detected capacity change from 0 to 256 [ 158.668043][ T4862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.684885][ T5251] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 158.695807][ T5251] exFAT-fs (loop2): invalid boot region [ 158.701825][ T5251] exFAT-fs (loop2): failed to recognize exfat type [ 158.720602][ T4360] usb 5-1: Using ep0 maxpacket: 16 [ 158.735087][ T4360] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.755566][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.773610][ T4360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.932156][ T4262] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.940216][ T4360] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.950176][ T4360] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.969408][ T4360] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.978570][ T4360] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.986620][ T4360] usb 5-1: Manufacturer: syz [ 158.993650][ T4360] usb 5-1: config 0 descriptor?? [ 159.140501][ T4262] usb 4-1: Using ep0 maxpacket: 32 [ 159.192674][ T4262] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.318957][ T4262] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.405157][ T4262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.560651][ T4262] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.590159][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.610710][ T4262] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.654460][ T4262] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 159.674160][ T4262] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.684081][ T4360] rc_core: IR keymap rc-hauppauge not found [ 159.690008][ T4360] Registered IR keymap rc-empty [ 159.696655][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.704915][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.713778][ T4262] usb 4-1: config 0 descriptor?? [ 159.727168][ T4862] bond0 (unregistering): Released all slaves [ 159.744979][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.780840][ T4360] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 159.796734][ T4360] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 159.819138][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.900965][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.920411][ T4322] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.928831][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.939624][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.970486][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 159.978479][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.987075][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.997271][ T4985] device veth0_vlan entered promiscuous mode [ 160.003634][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.041956][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.051596][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.070591][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.085937][ T4985] device veth1_vlan entered promiscuous mode [ 160.115817][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.270589][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 160.283858][ T4322] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 160.404578][ T4322] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 160.421896][ T4985] device veth0_macvtap entered promiscuous mode [ 160.498790][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.537562][ T4985] device veth1_macvtap entered promiscuous mode [ 160.576296][ T4322] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 160.662350][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.701947][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.714680][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.729244][ T4322] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.731747][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.747029][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.757794][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 160.770857][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.776505][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.787492][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.788774][ T4322] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 160.804228][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.822433][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.854541][ T4322] usb 3-1: config 0 descriptor?? [ 160.865134][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 160.878262][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.920507][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.957299][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.988342][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.013412][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.050167][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.079453][ T4985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.216963][ T4985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.228156][ T4985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.239438][ T4985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.246924][ T4360] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 161.260803][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.270653][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.279510][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.288847][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.305470][ T4985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.314389][ T4985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.542359][ T4985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.920821][ T4360] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.929884][ T4360] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.965895][ T4375] usb 4-1: USB disconnect, device number 6 [ 161.997640][ T4360] usb 5-1: USB disconnect, device number 10 [ 162.019602][ T4985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.952805][ T5290] x_tables: duplicate underflow at hook 1 [ 163.690411][ T14] usb 3-1: USB disconnect, device number 10 [ 163.944737][ T5299] loop4: detected capacity change from 0 to 256 [ 164.084110][ T5299] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 164.117160][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.155609][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.180647][ T5299] exFAT-fs (loop4): invalid boot region [ 164.186825][ T5299] exFAT-fs (loop4): failed to recognize exfat type [ 164.202303][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.265855][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.280232][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.309297][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.320579][ T4321] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 164.342318][ T5307] loop1: detected capacity change from 0 to 512 [ 164.560032][ T5312] CacheFiles: Failed to register: -95 [ 164.961906][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.990932][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.034580][ T4321] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 165.050385][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.095328][ T4321] usb 3-1: config 0 descriptor?? [ 165.430549][ T4262] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 165.596836][ T4321] hid-generic 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 165.630519][ T4262] usb 5-1: Using ep0 maxpacket: 16 [ 165.642114][ T4262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.653993][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.665779][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.686964][ T4262] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 165.723400][ T4262] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.740903][ T4262] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.770056][ T4262] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.798249][ T4322] usb 3-1: USB disconnect, device number 11 [ 165.805463][ T4262] usb 5-1: Manufacturer: syz [ 165.893798][ T5338] x_tables: duplicate underflow at hook 1 [ 165.921381][ T4360] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.273723][ T4262] usb 5-1: config 0 descriptor?? [ 166.484792][ T4360] usb 2-1: Using ep0 maxpacket: 32 [ 166.616268][ T4360] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.640214][ T4360] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.669913][ T4360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.697858][ T5333] fido_id[5333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 166.737200][ T4360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.760630][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.803760][ T4360] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.973819][ T4360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 166.987478][ T4360] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.997439][ T4360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.020422][ T4262] rc_core: IR keymap rc-hauppauge not found [ 167.026361][ T4262] Registered IR keymap rc-empty [ 167.031692][ T4360] usb 2-1: config 0 descriptor?? [ 167.120990][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.150493][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.190950][ T4262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 167.222501][ T4262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 167.267945][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.320501][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.370617][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.413604][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 167.450885][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.361962][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.460989][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.511175][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.559372][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.623969][ T4262] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 168.676621][ T4262] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 168.706392][ T4262] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 168.770103][ T4262] usb 5-1: USB disconnect, device number 11 [ 169.454472][ T4322] usb 2-1: USB disconnect, device number 6 [ 169.811205][ T5392] x_tables: duplicate underflow at hook 1 [ 171.270309][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.673496][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 171.683740][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.694046][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.706831][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.716759][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 171.740387][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.403780][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.413276][ T14] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.421684][ T14] usb 2-1: Manufacturer: syz [ 172.427918][ T14] usb 2-1: config 0 descriptor?? [ 172.630290][ T5431] loop3: detected capacity change from 0 to 512 [ 172.699867][ T5431] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.253: iget: bad i_size value: 38620345925642 [ 172.722046][ T5431] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.253: couldn't read orphan inode 15 (err -117) [ 172.734399][ T5431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.839041][ T5431] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.253: bg 0: block 5: invalid block bitmap [ 172.854524][ T5431] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2004 with error 28 [ 172.867286][ T5431] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.867286][ T5431] [ 172.877006][ T5431] EXT4-fs (loop3): Total free blocks count 0 [ 172.883062][ T5431] EXT4-fs (loop3): Free/Dirty block details [ 172.889000][ T5431] EXT4-fs (loop3): free_blocks=0 [ 172.894088][ T5431] EXT4-fs (loop3): dirty_blocks=2008 [ 172.899720][ T5431] EXT4-fs (loop3): Block reservation details [ 172.905784][ T5431] EXT4-fs (loop3): i_reserved_data_blocks=2008 [ 172.909206][ T5433] team0 (unregistering): Port device team_slave_0 removed [ 173.154679][ T5433] team0 (unregistering): Port device team_slave_1 removed [ 173.260536][ T14] rc_core: IR keymap rc-hauppauge not found [ 173.266749][ T14] Registered IR keymap rc-empty [ 173.277238][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.333939][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.399360][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 173.498496][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 173.538604][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.559983][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 174.236491][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.288889][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.330554][ T4375] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.350554][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.410423][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.460578][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.517589][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.610487][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.687569][ T5461] loop3: detected capacity change from 0 to 32768 [ 174.710427][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.757793][ T5461] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 174.775062][ T14] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 174.819602][ T14] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 174.904012][ T14] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.938174][ T4375] usb 1-1: Dual-Role OTG device on HNP port [ 174.948152][ T4375] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 174.957814][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.984858][ T4375] gspca_main: spca501-2.14.0 probing 0000:0000 [ 174.999655][ T4375] gspca_spca501: reg write: error -32 [ 175.005460][ T4375] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 175.021963][ T14] usb 2-1: USB disconnect, device number 7 [ 175.023743][ T5477] loop1: detected capacity change from 0 to 128 [ 175.039379][ T4375] spca501: probe of 1-1:1.0 failed with error -22 [ 175.164726][ T5481] x_tables: duplicate underflow at hook 1 [ 175.479742][ T5477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.492942][ T4262] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 175.723260][ T5477] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.915092][ T4262] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 175.942493][ T4262] usb 5-1: config 0 has no interface number 0 [ 175.975415][ T4262] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 176.066290][ T4262] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 176.163266][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 176.210390][ T4262] usb 5-1: Manufacturer: syz [ 176.220546][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.233906][ T4262] usb 5-1: SerialNumber: syz [ 176.260195][ T4262] usb 5-1: config 0 descriptor?? [ 176.532336][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 176.597566][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.863504][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 176.914107][ T4262] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 176.940721][ T4262] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 177.041756][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 177.061301][ T4262] usb 5-1: USB disconnect, device number 12 [ 177.080719][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.119497][ T14] usb 2-1: Product: syz [ 177.125288][ T14] usb 2-1: Manufacturer: syz [ 177.149911][ T14] usb 2-1: SerialNumber: syz [ 177.190013][ T5477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 178.407248][ T14] usb 2-1: USB disconnect, device number 8 [ 178.446084][ T5516] loop5: detected capacity change from 0 to 1024 [ 178.516176][ T5516] EXT4-fs: Ignoring removed bh option [ 178.532483][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 178.580789][ T5516] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.740193][ T5516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 178.760753][ T4321] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.963993][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 178.980650][ T5532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.275'. [ 179.058825][ T5533] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.184918][ T5492] udevd[5492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 179.500390][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 179.507261][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.531127][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.566934][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 179.577528][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.592056][ T4321] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.602490][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.667945][ T4321] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.678747][ T5542] loop2: detected capacity change from 0 to 1764 [ 179.697154][ T4321] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.751063][ T4321] usb 5-1: Manufacturer: syz [ 179.762269][ T4321] usb 5-1: config 0 descriptor?? [ 179.836524][ T5542] syz.2.278: attempt to access beyond end of device [ 179.836524][ T5542] loop2: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 179.907288][ T5542] Buffer I/O error on dev loop2, logical block 1795162143, async page read [ 179.918170][ T5542] syz.2.278: attempt to access beyond end of device [ 179.918170][ T5542] loop2: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 179.937182][ T5542] Buffer I/O error on dev loop2, logical block 1795162143, async page read [ 179.947068][ T27] audit: type=1800 audit(1786141950.342:57): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.278" name="file0" dev="loop2" ino=1923 res=0 errno=0 [ 180.120494][ T4321] rc_core: IR keymap rc-hauppauge not found [ 180.126444][ T4321] Registered IR keymap rc-empty [ 180.169719][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.210540][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.252081][ T4321] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 181.123626][ T4321] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 181.247890][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.322069][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.390516][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.450499][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.523321][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.580456][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.620551][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.660533][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.520548][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.570617][ T4321] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.601501][ T4321] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.647446][ T4321] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.698881][ T4321] usb 5-1: USB disconnect, device number 13 [ 182.726332][ T5587] loop1: detected capacity change from 0 to 2048 [ 182.764658][ T5589] loop5: detected capacity change from 0 to 1024 [ 182.798306][ T5589] EXT4-fs: Ignoring removed bh option [ 182.823217][ T5590] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.854199][ T5589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.874062][ T5586] binder: 5585:5586 ioctl 400c620e 0 returned -14 [ 184.242404][ T5589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 184.379535][ T5599] loop2: detected capacity change from 0 to 4096 [ 184.974046][ T5599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.066341][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 185.235967][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 185.560451][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.200812][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 186.204398][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 186.206901][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 186.220045][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 186.413856][ T5623] Cannot find add_set index 1 as target [ 186.440587][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 186.448569][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.479587][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.513943][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.546110][ T22] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.578784][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.801421][ T22] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.916299][ T22] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.022837][ T22] usb 6-1: Manufacturer: syz [ 187.169306][ T22] usb 6-1: config 0 descriptor?? [ 187.665943][ T5636] loop1: detected capacity change from 0 to 32768 [ 187.723193][ T5638] CacheFiles: Failed to register: -95 [ 187.753653][ T5642] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.827116][ T5636] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.002889][ T22] rc_core: IR keymap rc-hauppauge not found [ 188.008847][ T22] Registered IR keymap rc-empty [ 188.013883][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.050656][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.092701][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 188.123232][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 188.190528][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.220445][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.270476][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.300420][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.340823][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.370486][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.400420][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.435236][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.476341][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.520701][ T22] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 188.561442][ T22] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 188.590202][ T22] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 188.639599][ T22] usb 6-1: USB disconnect, device number 2 [ 188.699560][ T5665] loop2: detected capacity change from 0 to 512 [ 188.741711][ T5665] EXT4-fs: Ignoring removed i_version option [ 188.791365][ T5665] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 188.879418][ T5665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.539766][ T5665] EXT4-fs (loop2): 1 truncate cleaned up [ 189.687346][ T5665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.328285][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 190.682250][ T5686] tipc: Started in network mode [ 190.730539][ T5686] tipc: Node identity 7f000001, cluster identity 4711 [ 190.769302][ T5686] tipc: New replicast peer: 127.0.0.1 [ 190.823954][ T5686] tipc: Enabled bearer , priority 10 [ 191.943013][ T4262] tipc: Node number set to 2130706433 [ 193.947850][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 194.043858][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.050202][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.084286][ T5710] CacheFiles: Failed to register: -95 [ 194.470756][ T4322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 194.690593][ T4322] usb 6-1: Using ep0 maxpacket: 16 [ 195.153756][ T4322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.200514][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.275273][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.307227][ T4322] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 195.335718][ T5729] loop2: detected capacity change from 0 to 1024 [ 195.346379][ T4322] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.368391][ T5729] EXT4-fs: Ignoring removed bh option [ 195.379871][ T5730] tipc: Failed to remove unknown binding: 66,0,0/0:2439001861/2439001862 [ 195.398318][ T5729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.240711][ T4322] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.250119][ T4322] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.264332][ T4322] usb 6-1: Manufacturer: syz [ 196.273813][ T4322] usb 6-1: config 0 descriptor?? [ 196.404671][ T5729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 196.563627][ T5744] loop4: detected capacity change from 0 to 128 [ 196.988736][ T5744] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 197.379392][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 197.406384][ T5752] mmap: syz.3.325 (5752) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.432032][ T27] audit: type=1800 audit(1786141967.822:58): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.323" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 197.520016][ T5752] tmpfs: Unknown parameter 'usrquota' [ 197.560669][ T4322] rc_core: IR keymap rc-hauppauge not found [ 197.566615][ T4322] Registered IR keymap rc-empty [ 197.581137][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.641186][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.682497][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 198.021594][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 198.364636][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 198.500491][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 198.555335][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 198.620457][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 198.660540][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 198.702410][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.255968][ T5778] CacheFiles: Failed to register: -95 [ 199.466877][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.570465][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.600426][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.630755][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.677423][ T4322] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 199.686638][ T4322] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 199.700725][ T4322] usb 6-1: USB disconnect, device number 3 [ 200.108407][ T5786] jffs2: notice: (5786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.490182][ T5789] loop5: detected capacity change from 0 to 4096 [ 200.514483][ T5789] EXT4-fs: inline encryption not supported [ 200.544246][ T5783] Set syz1 is full, maxelem 6117 reached [ 200.569086][ T5789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.626293][ T5789] EXT4-fs (loop5): Test dummy encryption mode enabled [ 200.657381][ T5800] smc: net device lo applied user defined pnetid SYZ0 [ 200.675837][ T5789] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 200.701832][ T5789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 203.030400][ T4262] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.654796][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 203.750546][ T4262] usb 2-1: Using ep0 maxpacket: 16 [ 204.529792][ T4262] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 204.546384][ T4262] usb 2-1: can't read configurations, error -71 [ 206.276198][ T5844] device syzkaller1 entered promiscuous mode [ 207.330672][ T5846] syz.2.347 (5846) used greatest stack depth: 16432 bytes left [ 207.352922][ T5864] loop5: detected capacity change from 0 to 1024 [ 207.391655][ T5864] EXT4-fs: Ignoring removed bh option [ 207.909321][ T5864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.255587][ T5864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.870329][ T5880] TC_ACT_REPEAT abuse ? [ 209.046554][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 210.563100][ T5902] loop1: detected capacity change from 0 to 1756 [ 210.688098][ T5902] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 210.754097][ T5907] binder: 5906:5907 ioctl 400c620e 0 returned -14 [ 210.777205][ T5902] UDF-fs: Scanning with blocksize 512 failed [ 210.855399][ T5902] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 210.892962][ T5913] loop2: detected capacity change from 0 to 2048 [ 210.909663][ T5902] UDF-fs: Scanning with blocksize 1024 failed [ 210.924786][ T5913] EXT4-fs: Ignoring removed i_version option [ 210.972092][ T5902] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 211.022942][ T5882] loop3: detected capacity change from 0 to 32768 [ 211.046850][ T5913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.150630][ T5913] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.784687][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 215.126211][ T5962] binder: 5961:5962 ioctl 400c620e 0 returned -14 [ 215.288400][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.380'. [ 215.318541][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.380'. [ 215.364802][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.380'. [ 215.442996][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.380'. [ 216.335509][ T5983] loop3: detected capacity change from 0 to 1024 [ 216.421357][ T5983] EXT4-fs: Ignoring removed bh option [ 216.437022][ T5983] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.594284][ T5983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.499588][ T6003] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.814215][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 218.118881][ T6009] binder: 6006:6009 ioctl 400c620e 0 returned -14 [ 218.558897][ T6020] loop5: detected capacity change from 0 to 256 [ 218.849017][ T6020] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 219.083998][ T6020] exFAT-fs (loop5): invalid boot region [ 219.201053][ T6020] exFAT-fs (loop5): failed to recognize exfat type [ 219.705161][ T4376] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.079292][ T4376] usb 3-1: Using ep0 maxpacket: 8 [ 220.108954][ T4376] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 220.132649][ T4376] usb 3-1: config 0 has no interface number 0 [ 220.139637][ T4376] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 220.159273][ T4376] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 220.172242][ T4376] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.188179][ T4376] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 220.210747][ T4376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.238709][ T4376] usb 3-1: config 0 descriptor?? [ 220.265888][ T4376] ldusb 3-1:0.55: Interrupt in endpoint not found [ 220.525096][ T4262] usb 3-1: USB disconnect, device number 12 [ 220.741623][ T6052] binder: 6051:6052 ioctl 400c620e 0 returned -14 [ 220.921407][ T4376] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.740771][ T4376] usb 2-1: Using ep0 maxpacket: 16 [ 222.748216][ T4376] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.815868][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.890511][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.947295][ T4376] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.988967][ T4376] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.013876][ T4376] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.023497][ T4376] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.073740][ T4376] usb 2-1: Manufacturer: syz [ 223.099000][ T4376] usb 2-1: config 0 descriptor?? [ 223.297163][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 223.571034][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.699064][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.896640][ T6083] loop4: detected capacity change from 0 to 256 [ 223.898254][ T6080] loop5: detected capacity change from 0 to 256 [ 223.919455][ T6083] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 223.942246][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.019603][ T6083] exFAT-fs (loop4): invalid boot region [ 224.022672][ T6080] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 224.025898][ T6083] exFAT-fs (loop4): failed to recognize exfat type [ 224.052101][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.067482][ T6080] exFAT-fs (loop5): invalid boot region [ 224.070241][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.073129][ T6080] exFAT-fs (loop5): failed to recognize exfat type [ 224.095211][ T22] usb 3-1: config 0 descriptor?? [ 224.109163][ T4376] rc_core: IR keymap rc-hauppauge not found [ 224.115335][ T4376] Registered IR keymap rc-empty [ 224.122602][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.158328][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.248872][ T4376] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 224.307015][ T4376] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 224.337293][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.390155][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.441813][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.483887][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.527196][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.568956][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.580927][ T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 224.597726][ T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 224.623316][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.635983][ T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 224.643827][ T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 224.652397][ T22] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 224.663297][ T22] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 224.672505][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.693357][ T22] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 224.707593][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.130616][ T4376] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 225.168378][ T4376] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 225.189528][ T4376] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.235567][ T4376] usb 2-1: USB disconnect, device number 11 [ 226.215149][ T6105] binder: 6104:6105 ioctl 400c620e 0 returned -14 [ 226.279047][ T4262] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 228.208179][ T14] usb 3-1: USB disconnect, device number 13 [ 228.660515][ T6132] loop5: detected capacity change from 0 to 256 [ 228.689887][ T6137] loop1: detected capacity change from 0 to 256 [ 228.699313][ T6137] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 228.713169][ T6132] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 228.723959][ T6137] exFAT-fs (loop1): invalid boot region [ 228.729856][ T6137] exFAT-fs (loop1): failed to recognize exfat type [ 228.738855][ T6132] exFAT-fs (loop5): invalid boot region [ 228.744507][ T6132] exFAT-fs (loop5): failed to recognize exfat type [ 229.011361][ T6140] loop4: detected capacity change from 0 to 128 [ 229.342011][ T6140] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.357826][ T6140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.429145][ T4321] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 229.699609][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 229.706438][ T4321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.765485][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.979655][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.705277][ T4321] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.735145][ T6154] binder: 6151:6154 ioctl 400c620e 0 returned -14 [ 230.763665][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.801133][ T4321] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.812274][ T4321] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.820331][ T4321] usb 3-1: Manufacturer: syz [ 230.844059][ T4321] usb 3-1: config 0 descriptor?? [ 231.406173][ T6164] netlink: 'syz.4.434': attribute type 1 has an invalid length. [ 231.521298][ T6164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.538005][ T4321] rc_core: IR keymap rc-hauppauge not found [ 231.546776][ T4321] Registered IR keymap rc-empty [ 231.551965][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 231.597245][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 231.770013][ T4321] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 232.004320][ T6164] bond1: (slave geneve2): making interface the new active one [ 232.207338][ T4321] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 232.459074][ T6164] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 232.484210][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.513619][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 232.570429][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 232.628554][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 232.660968][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 232.703262][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 232.735266][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 232.778061][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.676884][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.712941][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.755558][ T4321] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.803275][ T4321] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 234.819677][ T4321] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 234.835577][ T6196] loop4: detected capacity change from 0 to 256 [ 234.866010][ T4321] usb 3-1: USB disconnect, device number 14 [ 234.876342][ T6196] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 234.893300][ T6196] exFAT-fs (loop4): invalid boot region [ 234.936052][ T6199] loop2: detected capacity change from 0 to 1024 [ 234.950789][ T6196] exFAT-fs (loop4): failed to recognize exfat type [ 234.993154][ T6199] EXT4-fs: Ignoring removed bh option [ 235.081361][ T6199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.202124][ T6199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.263329][ T6208] binder: 6203:6208 ioctl 400c620e 0 returned -14 [ 235.357412][ T6211] loop5: detected capacity change from 0 to 256 [ 235.437713][ T6211] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 235.483918][ T6211] exFAT-fs (loop5): invalid boot region [ 235.489586][ T6211] exFAT-fs (loop5): failed to recognize exfat type [ 236.181033][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 237.343657][ T6234] loop4: detected capacity change from 0 to 256 [ 238.133257][ T4322] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 238.774579][ T4322] usb 3-1: Using ep0 maxpacket: 16 [ 238.781295][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.816070][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.869535][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.905405][ T4322] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.761638][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.782724][ T4322] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.791904][ T4322] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.799916][ T4322] usb 3-1: Manufacturer: syz [ 239.806374][ T4322] usb 3-1: config 0 descriptor?? [ 240.694430][ T6273] loop1: detected capacity change from 0 to 256 [ 240.730314][ T6273] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 240.740828][ T6273] exFAT-fs (loop1): invalid boot region [ 240.746913][ T6273] exFAT-fs (loop1): failed to recognize exfat type [ 240.752119][ T4322] rc_core: IR keymap rc-hauppauge not found [ 240.759341][ T4322] Registered IR keymap rc-empty [ 240.768903][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.809787][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.902372][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 240.916580][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 240.934631][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.966094][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.998268][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.043904][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.094239][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.137006][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.169146][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.212064][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.243864][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.277303][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.309990][ T4322] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.320540][ T4322] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.438555][ T6294] syz.5.463 uses obsolete (PF_INET,SOCK_PACKET) [ 241.730117][ T4322] usb 3-1: USB disconnect, device number 15 [ 241.819179][ T6301] loop2: detected capacity change from 0 to 256 [ 241.840728][ T6301] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 242.010660][ T6301] exFAT-fs (loop2): invalid boot region [ 242.107491][ T6301] exFAT-fs (loop2): failed to recognize exfat type [ 243.466545][ T6312] loop3: detected capacity change from 0 to 4096 [ 243.474120][ T6312] EXT4-fs: inline encryption not supported [ 243.508641][ T6312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.542115][ T6312] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.820985][ T6312] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 243.908469][ T6312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 245.653246][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 245.917472][ T6338] loop1: detected capacity change from 0 to 256 [ 245.954288][ T6338] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 245.986492][ T6338] exFAT-fs (loop1): invalid boot region [ 245.998284][ T6338] exFAT-fs (loop1): failed to recognize exfat type [ 246.363965][ T4322] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 246.578834][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 246.599791][ T4322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.646402][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.697643][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.738107][ T4322] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.750545][ T4322] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.774344][ T4322] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.962215][ T4322] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.114252][ T4322] usb 4-1: Manufacturer: syz [ 247.128634][ T4322] usb 4-1: config 0 descriptor?? [ 248.384253][ T4322] rc_core: IR keymap rc-hauppauge not found [ 248.397428][ T4322] Registered IR keymap rc-empty [ 248.432373][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.475566][ T6368] loop2: detected capacity change from 0 to 1024 [ 248.482440][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.497456][ T6368] EXT4-fs: Ignoring removed bh option [ 248.505624][ T6368] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.534520][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 248.561177][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 248.581458][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.595151][ T6368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.740395][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 248.790458][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.416377][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.458321][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.467334][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 249.528076][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.607673][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.645637][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.693033][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.735887][ T4322] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 249.782105][ T6391] loop1: detected capacity change from 0 to 256 [ 249.791339][ T4322] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 249.802786][ T6386] loop2: detected capacity change from 0 to 4096 [ 249.814065][ T4322] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 249.831236][ T6391] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 249.856514][ T4322] usb 4-1: USB disconnect, device number 7 [ 249.867633][ T6391] exFAT-fs (loop1): invalid boot region [ 249.871524][ T6386] EXT4-fs: inline encryption not supported [ 249.874754][ T6391] exFAT-fs (loop1): failed to recognize exfat type [ 249.956851][ T27] audit: type=1800 audit(1786142018.388:59): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.488" name="c_srate" dev="configfs" ino=39386 res=0 errno=0 [ 250.014021][ T6386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.166399][ T6386] EXT4-fs (loop2): Test dummy encryption mode enabled [ 250.725836][ T6386] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 250.831559][ T6386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 250.944231][ T6402] loop3: detected capacity change from 0 to 256 [ 251.054040][ T6402] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 251.140437][ T6402] exFAT-fs (loop3): invalid boot region [ 252.523571][ T6402] exFAT-fs (loop3): failed to recognize exfat type [ 252.542427][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 252.623229][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 252.788328][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 252.800332][ T14] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 252.901167][ T14] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.017272][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.145176][ T14] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 253.455965][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.466284][ T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.481707][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 253.508389][ T6415] loop1: detected capacity change from 0 to 1024 [ 253.515233][ T14] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 253.525090][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.610836][ T6415] EXT4-fs: Ignoring removed bh option [ 253.766317][ T6415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.784795][ T14] usb 5-1: config 0 descriptor?? [ 254.011604][ T6415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.828251][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 256.187356][ T4375] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.379855][ T4375] usb 2-1: Using ep0 maxpacket: 16 [ 256.385539][ T14] usb 5-1: USB disconnect, device number 14 [ 256.394647][ T4375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.424433][ T4375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.435658][ T4375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.447277][ T4375] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 256.461945][ T4375] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.466220][ T6444] loop3: detected capacity change from 0 to 256 [ 256.483820][ T4375] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.495431][ T4375] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.510769][ T4375] usb 2-1: Manufacturer: syz [ 256.529614][ T4375] usb 2-1: config 0 descriptor?? [ 256.537748][ T6447] loop2: detected capacity change from 0 to 256 [ 256.550484][ T6447] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.573925][ T6444] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 256.650987][ T6444] exFAT-fs (loop3): invalid boot region [ 256.657103][ T6444] exFAT-fs (loop3): failed to recognize exfat type [ 257.694610][ T4375] rc_core: IR keymap rc-hauppauge not found [ 257.701331][ T4375] Registered IR keymap rc-empty [ 258.035742][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.042209][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.929029][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.010254][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.074261][ T4375] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 259.168185][ T4375] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 259.255405][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.298137][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.312316][ T6476] loop1: detected capacity change from 0 to 256 [ 259.330330][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.356937][ T6476] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 259.369638][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.444742][ T6480] binder: 6477:6480 ioctl 400c620e 0 returned -14 [ 259.451592][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.488388][ T6476] exFAT-fs (loop1): invalid boot region [ 259.559385][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.572899][ T6476] exFAT-fs (loop1): failed to recognize exfat type [ 259.694900][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 259.854118][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 260.140748][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 260.174841][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 260.346568][ T4375] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 260.389501][ T4375] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 260.398591][ T4375] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 260.445266][ T6488] loop1: detected capacity change from 0 to 256 [ 260.571493][ T6488] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 260.601079][ T6488] exFAT-fs (loop1): invalid boot region [ 260.627084][ T4375] usb 2-1: USB disconnect, device number 12 [ 260.653096][ T6488] exFAT-fs (loop1): failed to recognize exfat type [ 261.761644][ T27] audit: type=1800 audit(1786142029.249:60): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.519" name="c_srate" dev="configfs" ino=40509 res=0 errno=0 [ 262.890480][ T6508] loop2: detected capacity change from 0 to 128 [ 263.060883][ T6508] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 263.548679][ T27] audit: type=1800 audit(1786142031.092:61): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.526" name="c_srate" dev="configfs" ino=39578 res=0 errno=0 [ 263.830471][ T6522] loop4: detected capacity change from 0 to 256 [ 264.155360][ T6522] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 264.207544][ T6522] exFAT-fs (loop4): invalid boot region [ 264.217679][ T6522] exFAT-fs (loop4): failed to recognize exfat type [ 264.483113][ T6528] tipc: Enabling of bearer rejected, failed to enable media [ 265.916298][ T6554] fuse: Bad value for 'fd' [ 266.198075][ T6558] loop2: detected capacity change from 0 to 128 [ 266.317491][ T6558] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 266.395021][ T27] audit: type=1800 audit(1786142033.768:62): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.537" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 266.944997][ T6568] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 267.118513][ T27] audit: type=1800 audit(1786142034.217:63): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.540" name="c_srate" dev="configfs" ino=39636 res=0 errno=0 [ 267.397885][ T6558] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 267.709475][ T6573] loop5: detected capacity change from 0 to 256 [ 267.816724][ T6545] loop4: detected capacity change from 0 to 32768 [ 267.956933][ T6545] read_mapping_page failed! [ 267.961858][ T6545] ERROR: (device loop4): txCommit: [ 267.961858][ T6545] [ 268.033766][ T6573] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 268.044613][ T6573] exFAT-fs (loop5): invalid boot region [ 268.050183][ T6573] exFAT-fs (loop5): failed to recognize exfat type [ 269.248513][ T6584] sctp: failed to load transform for md5: -2 [ 271.140351][ T27] audit: type=1800 audit(1786142038.202:64): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.551" name="c_srate" dev="configfs" ino=39694 res=0 errno=0 [ 271.699295][ T6625] loop2: detected capacity change from 0 to 128 [ 271.981413][ T6625] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 272.113110][ T27] audit: type=1800 audit(1786142039.119:65): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 272.192241][ T6625] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 272.243030][ T6634] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 272.254096][ T6636] loop3: detected capacity change from 0 to 256 [ 272.288645][ T6636] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 272.371331][ T27] audit: type=1800 audit(1786142039.343:66): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.556" name="c_srate" dev="configfs" ino=39715 res=0 errno=0 [ 272.403426][ T6636] exFAT-fs (loop3): invalid boot region [ 272.454847][ T6636] exFAT-fs (loop3): failed to recognize exfat type [ 273.692293][ T6653] device veth3 entered promiscuous mode [ 274.646418][ T6658] loop2: detected capacity change from 0 to 128 [ 274.700406][ T6658] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 275.083682][ T6674] tipc: Enabling of bearer rejected, failed to enable media [ 276.392879][ T6683] loop2: detected capacity change from 0 to 256 [ 276.418967][ T6685] loop3: detected capacity change from 0 to 128 [ 276.477264][ T6683] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 276.497403][ T6687] binder: 6684:6687 ioctl 400c620e 0 returned -14 [ 276.627134][ T6683] exFAT-fs (loop2): invalid boot region [ 276.713750][ T6685] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 276.738376][ T6683] exFAT-fs (loop2): failed to recognize exfat type [ 277.326684][ T27] audit: type=1800 audit(1786142043.993:67): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.571" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 278.261661][ T6701] ubi0: attaching mtd0 [ 278.424056][ T6701] ubi0: scanning is finished [ 278.444499][ T6701] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 278.812337][ T6709] loop2: detected capacity change from 0 to 128 [ 278.852050][ T6709] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 278.875451][ T6701] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 278.943415][ T27] audit: type=1800 audit(1786142045.508:68): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 278.985929][ T6709] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 279.228241][ T6723] tipc: Enabling of bearer rejected, failed to enable media [ 280.167645][ T6736] loop2: detected capacity change from 0 to 256 [ 281.157490][ T6736] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1131abd0) [ 281.323422][ T27] audit: type=1800 audit(1786142047.735:69): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.582" name="c_srate" dev="configfs" ino=40761 res=0 errno=0 [ 281.382071][ T6736] exFAT-fs (loop2): invalid boot region [ 281.390051][ T6736] exFAT-fs (loop2): failed to recognize exfat type [ 281.502640][ T6740] binder: 6738:6740 ioctl 400c620e 0 returned -14 [ 282.354941][ T27] audit: type=1800 audit(1786142048.708:70): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.587" name="idProduct" dev="configfs" ino=39881 res=0 errno=0 [ 282.729902][ T4322] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 282.931731][ T4322] usb 6-1: Using ep0 maxpacket: 16 [ 282.939781][ T4322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.857753][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.869123][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.879222][ T4322] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.889483][ T4322] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.906111][ T4322] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.915730][ T4322] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.923811][ T4322] usb 6-1: Manufacturer: syz [ 283.935362][ T4322] usb 6-1: config 0 descriptor?? [ 284.158046][ T6774] tipc: Enabling of bearer rejected, failed to enable media [ 284.492423][ T4322] rc_core: IR keymap rc-hauppauge not found [ 284.498663][ T4322] Registered IR keymap rc-empty [ 284.563433][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.652761][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.685352][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 284.742453][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 284.828061][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.870906][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.941563][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 284.974518][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.005556][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.513783][ T6783] loop3: detected capacity change from 0 to 40427 [ 286.255100][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 286.298889][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 286.480981][ T27] audit: type=1800 audit(1786142052.562:71): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.599" name="c_srate" dev="configfs" ino=39926 res=0 errno=0 [ 286.509049][ T6791] binder: 6789:6791 ioctl 400c620e 0 returned -14 [ 286.738908][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 286.753743][ T6783] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 286.812053][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 286.812165][ T6783] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 286.844029][ T4322] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 286.884408][ T6795] loop5: detected capacity change from 0 to 256 [ 286.906178][ T4322] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 286.937110][ T6783] F2FS-fs (loop3): Found nat_bits in checkpoint [ 286.983905][ T4322] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 287.036679][ T4322] usb 6-1: USB disconnect, device number 4 [ 287.285558][ T6783] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 287.294174][ T6783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 287.451068][ T6783] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=38d380e8, run fsck to fix. [ 287.746505][ T4282] syz-executor: attempt to access beyond end of device [ 287.746505][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 287.874251][ T6818] tipc: Enabling of bearer rejected, failed to enable media [ 289.090084][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 289.313643][ T27] audit: type=1800 audit(1786142055.126:72): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.612" name="c_srate" dev="configfs" ino=40991 res=0 errno=0 [ 289.923180][ T6839] binder: 6835:6839 ioctl 400c620e 0 returned -14 [ 289.933335][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 290.680451][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.690775][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.702384][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.713831][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.723533][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.848923][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.887799][ T7] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.895892][ T7] usb 5-1: Manufacturer: syz [ 290.903156][ T7] usb 5-1: config 0 descriptor?? [ 291.097640][ T6851] loop2: detected capacity change from 0 to 128 [ 291.152435][ T6851] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 291.286159][ T27] audit: type=1800 audit(1786142057.053:73): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.618" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 291.337819][ T6851] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 291.413404][ T6855] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 291.547533][ T7] rc_core: IR keymap rc-hauppauge not found [ 291.557139][ T7] Registered IR keymap rc-empty [ 291.594028][ T6857] loop5: detected capacity change from 0 to 512 [ 291.601020][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 291.643172][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 291.697937][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 291.736610][ T6857] FAT-fs (loop5): error, corrupted file size (i_pos 53, 9216) [ 291.746298][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 291.749564][ T6857] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 291.772792][ T6857] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 291.790688][ T6857] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 291.820575][ T6857] FAT-fs (loop5): error, corrupted file size (i_pos 53, 8960) [ 291.872308][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 291.921593][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 291.964297][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.017670][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.049712][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.104303][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.230401][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.370867][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.552561][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.691371][ T7] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 292.932304][ T7] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 293.028818][ T7] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 293.128552][ T7] usb 5-1: USB disconnect, device number 15 [ 293.616134][ T4359] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 293.836641][ T4359] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 293.865564][ T4359] usb 6-1: config 0 has no interface number 0 [ 293.882605][ T4359] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 293.932300][ T4359] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 293.985090][ T4359] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 294.762064][ T27] audit: type=1800 audit(1786142060.308:74): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.626" name="c_srate" dev="configfs" ino=41995 res=0 errno=0 [ 294.799101][ T4359] usb 6-1: Manufacturer: syz [ 294.830393][ T4359] usb 6-1: SerialNumber: syz [ 294.854542][ T6878] binder: 6876:6878 ioctl 400c620e 0 returned -14 [ 294.891092][ T4359] usb 6-1: config 0 descriptor?? [ 296.305958][ T6891] loop1: detected capacity change from 0 to 128 [ 296.369116][ T6889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.440924][ T6891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 296.480528][ T6889] device batadv_slave_1 entered promiscuous mode [ 296.675976][ T6898] fuse: Bad value for 'fd' [ 296.971459][ T27] audit: type=1800 audit(1786142062.376:75): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.631" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 297.004980][ T6891] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 297.332067][ T4359] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 297.339145][ T4359] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 297.489520][ T4359] usb 6-1: USB disconnect, device number 5 [ 297.641086][ T4376] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 297.928998][ T4376] usb 5-1: Using ep0 maxpacket: 16 [ 297.974152][ T4376] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.342938][ T4376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.356422][ T4376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.366684][ T4376] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.378522][ T4376] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.438111][ T4376] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.755220][ T4376] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.875705][ T4376] usb 5-1: Manufacturer: syz [ 299.021085][ T4376] usb 5-1: config 0 descriptor?? [ 299.896641][ T27] audit: type=1800 audit(1786142065.023:76): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.639" name="c_srate" dev="configfs" ino=41123 res=0 errno=0 [ 300.586630][ T6926] binder: 6920:6926 ioctl 400c620e 0 returned -14 [ 300.643799][ T4359] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 300.836948][ T4376] rc_core: IR keymap rc-hauppauge not found [ 300.847953][ T4376] Registered IR keymap rc-empty [ 300.904917][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.094131][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.136224][ T4376] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 301.163124][ T4376] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 301.199668][ T4359] usb 2-1: Using ep0 maxpacket: 32 [ 301.207327][ T4359] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 301.223850][ T4359] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 301.226275][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.240122][ T4359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.262743][ T4359] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 301.288945][ T6939] fuse: Bad value for 'fd' [ 301.306672][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.341915][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.352559][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.392293][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.406436][ T4359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.434976][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.464084][ T4359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 301.470414][ T6941] loop2: detected capacity change from 0 to 128 [ 301.484003][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.488231][ T4359] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 301.522942][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.531082][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.547807][ T6941] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 301.553846][ T4359] usb 2-1: config 0 descriptor?? [ 301.577477][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.616577][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.630401][ T27] audit: type=1800 audit(1786142066.735:77): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.647" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 301.663665][ T6941] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 301.698123][ T4376] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 301.710034][ T6945] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 301.739585][ T4376] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 301.753628][ T4376] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 301.798081][ T4376] usb 5-1: USB disconnect, device number 16 [ 303.085372][ T6962] loop5: detected capacity change from 0 to 512 [ 303.123343][ T6962] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.254901][ T6966] binder: 6963:6966 ioctl 400c620e 0 returned -14 [ 304.091907][ T6962] EXT4-fs (loop5): 1 truncate cleaned up [ 304.131514][ T6962] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 304.291268][ T4318] usb 2-1: USB disconnect, device number 13 [ 305.243550][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 305.304309][ T4359] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 305.507539][ T4359] usb 3-1: Using ep0 maxpacket: 16 [ 305.514886][ T4359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.559079][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.027564][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.038153][ T4359] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.049331][ T4359] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.083589][ T4359] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.244839][ T4359] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.278248][ T4359] usb 3-1: Manufacturer: syz [ 307.474080][ T7004] binder: 7000:7004 ioctl 400c620e 0 returned -14 [ 308.306855][ T4359] usb 3-1: config 0 descriptor?? [ 308.376480][ T4359] usb 3-1: can't set config #0, error -71 [ 308.401404][ T4359] usb 3-1: USB disconnect, device number 16 [ 308.646877][ T7024] ubi0: attaching mtd0 [ 308.669278][ T7024] ubi0: scanning is finished [ 308.685815][ T7024] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 308.822134][ T7024] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 308.921764][ T7031] netlink: 774 bytes leftover after parsing attributes in process `syz.1.672'. [ 308.968077][ T7031] netlink: 52 bytes leftover after parsing attributes in process `syz.1.672'. [ 309.183192][ T7037] loop3: detected capacity change from 0 to 4096 [ 309.370695][ T7037] ntfs3: Unknown parameter 'windows_names' [ 311.046708][ T7053] binder: 7049:7053 ioctl 400c620e 0 returned -14 [ 311.745850][ T7059] loop2: detected capacity change from 0 to 128 [ 311.827916][ T7061] loop3: detected capacity change from 0 to 128 [ 311.837040][ T7061] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 311.869333][ T7064] ubi0: attaching mtd0 [ 311.885604][ T7064] ubi0: scanning is finished [ 311.890643][ T7064] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 311.905618][ T27] audit: type=1800 audit(1786142076.343:78): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.685" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 311.915456][ T7059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.931631][ T4324] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 311.941342][ T7061] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 311.957989][ T7064] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 312.027149][ T7059] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.051171][ T7071] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 312.187108][ T27] audit: type=1800 audit(1786142076.605:79): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.682" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 312.263084][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 312.276892][ T4324] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 312.758748][ T4324] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 312.785844][ C0] hrtimer: interrupt took 34337 ns [ 312.786400][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.910128][ T4324] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 312.957316][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.979198][ T4324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 312.989002][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 313.003576][ T4324] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.013902][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.061533][ T4324] usb 5-1: config 0 descriptor?? [ 313.247998][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 315.723846][ T7100] binder: 7093:7100 ioctl 400c620e 0 returned -14 [ 316.151198][ T26] usb 5-1: USB disconnect, device number 17 [ 316.394573][ T7109] loop2: detected capacity change from 0 to 128 [ 316.405591][ T7109] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 316.442516][ T27] audit: type=1800 audit(1786142080.590:80): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.698" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 316.446489][ T7109] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 316.548011][ T7112] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 316.654488][ T7115] loop3: detected capacity change from 0 to 512 [ 316.670047][ T7117] loop4: detected capacity change from 0 to 128 [ 316.779434][ T7117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.881448][ T7117] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.745397][ T27] audit: type=1800 audit(1786142081.807:81): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.699" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 318.366838][ T7115] FAT-fs (loop3): error, corrupted file size (i_pos 53, 8960) [ 318.425689][ T7115] FAT-fs (loop3): error, corrupted file size (i_pos 53, 8960) [ 318.447285][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 318.708819][ T4262] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 318.943909][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 318.960394][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.180632][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.385308][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.456827][ T4262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 319.599422][ T7145] binder: 7137:7145 ioctl 400c620e 0 returned -14 [ 319.745618][ T4322] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 319.970008][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 319.981039][ T4322] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 320.161464][ T4322] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 320.355877][ T4262] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.381703][ T4262] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.391697][ T4262] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.392279][ T4322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.411594][ T4262] usb 3-1: Manufacturer: syz [ 320.446951][ T4262] usb 3-1: config 0 descriptor?? [ 320.499373][ T4322] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 320.578873][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.590690][ T7155] device syzkaller0 entered promiscuous mode [ 320.599634][ T4322] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.604779][ T7155] tipc: Started in network mode [ 320.615269][ T7155] tipc: Node identity f21cefb3b9a3, cluster identity 4711 [ 320.618373][ T4322] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 320.639945][ T7155] tipc: Enabled bearer , priority 0 [ 320.647974][ T4322] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 320.662850][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.679969][ T4322] usb 6-1: config 0 descriptor?? [ 320.693612][ T7155] tipc: Resetting bearer [ 320.722940][ T7161] loop4: detected capacity change from 0 to 1024 [ 320.738670][ T7154] tipc: Resetting bearer [ 320.762011][ T7161] EXT4-fs: Ignoring removed bh option [ 320.768145][ T7154] tipc: Disabling bearer [ 320.790085][ T7161] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.816502][ T7161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.971451][ T4262] rc_core: IR keymap rc-hauppauge not found [ 320.977523][ T4262] Registered IR keymap rc-empty [ 320.982460][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 321.541664][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 321.574379][ T4262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 321.702310][ T4262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 321.740099][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 321.928501][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 322.080733][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 322.107307][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 322.203707][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 322.363432][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 322.648378][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 322.907187][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 323.016731][ T26] usb 6-1: USB disconnect, device number 6 [ 323.080773][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 323.112613][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 323.166562][ T4262] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 323.242346][ T4262] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 323.269144][ T4262] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 323.317974][ T4262] usb 3-1: USB disconnect, device number 17 [ 323.570967][ T7190] binder: 7187:7190 ioctl 400c620e 0 returned -14 [ 323.630368][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.642998][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.611927][ T7195] device syzkaller0 entered promiscuous mode [ 324.623447][ T7195] tipc: Started in network mode [ 324.628375][ T7195] tipc: Node identity 46791f1e26f4, cluster identity 4711 [ 324.635853][ T7195] tipc: Enabled bearer , priority 0 [ 324.649797][ T7195] tipc: Resetting bearer [ 324.671236][ T7192] tipc: Resetting bearer [ 324.897207][ T7192] tipc: Disabling bearer [ 326.461702][ T26] tipc: Node number set to 1619861278 [ 326.614310][ T7205] device ip6gretap1 entered promiscuous mode [ 327.067758][ T4262] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 327.313770][ T4262] usb 5-1: Using ep0 maxpacket: 32 [ 327.341189][ T4262] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 327.487408][ T4262] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 327.633467][ T4262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.796909][ T4262] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 327.945595][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 328.141019][ T4262] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 328.179203][ T4262] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 328.263900][ T4262] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 328.291341][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.333118][ T4262] usb 5-1: config 0 descriptor?? [ 329.429967][ T7229] binder: 7225:7229 ioctl 400c620e 0 returned -14 [ 330.662765][ T7242] unsupported nlmsg_type 40 [ 330.908546][ T4324] usb 5-1: USB disconnect, device number 18 [ 332.658951][ T7271] loop4: detected capacity change from 0 to 1024 [ 332.675432][ T7271] EXT4-fs: Ignoring removed bh option [ 332.689182][ T7271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 332.800553][ T7271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.692717][ T7287] loop3: detected capacity change from 0 to 128 [ 333.706965][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 333.719286][ T7287] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 333.814753][ T7287] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 333.823501][ T27] audit: type=1800 audit(1786142096.812:82): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.753" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 333.876896][ T7288] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 334.345354][ T7307] CacheFiles: Failed to register: -95 [ 334.657369][ T4275] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 334.665190][ T4284] Bluetooth: hci2: command 0xfc11 tx timeout [ 335.846251][ T7315] loop5: detected capacity change from 0 to 1024 [ 335.853809][ T7315] EXT4-fs: Ignoring removed bh option [ 335.860167][ T7315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 336.027788][ T7315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 336.889758][ T7327] loop1: detected capacity change from 0 to 128 [ 336.951645][ T7327] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 336.981194][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 337.135898][ T7331] loop4: detected capacity change from 0 to 2048 [ 337.273675][ T7331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 337.296248][ T7340] netlink: 'syz.3.770': attribute type 3 has an invalid length. [ 337.356441][ T7331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 337.524064][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 337.546423][ T7345] device syzkaller0 entered promiscuous mode [ 337.634580][ T7345] tipc: Enabled bearer , priority 0 [ 337.668765][ T7345] tipc: Resetting bearer [ 337.744689][ T7343] tipc: Resetting bearer [ 337.755581][ T7354] CacheFiles: Failed to register: -95 [ 338.025751][ T7343] tipc: Disabling bearer [ 339.190772][ T7359] loop2: detected capacity change from 0 to 128 [ 339.520718][ T7359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 339.715245][ T7359] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.607205][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 340.664448][ T7372] netlink: 'syz.1.782': attribute type 3 has an invalid length. [ 341.278560][ T7391] Cannot find add_set index 0 as target [ 341.431268][ T4275] Bluetooth: hci4: unexpected subevent 0x06 length: 18 > 10 [ 341.981978][ T7395] CacheFiles: Failed to register: -95 [ 343.647161][ T4284] Bluetooth: hci4: command 0x2021 tx timeout [ 343.787557][ T7413] loop5: detected capacity change from 0 to 128 [ 344.030929][ T7413] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 344.221802][ T7413] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.735138][ T7424] loop3: detected capacity change from 0 to 32768 [ 344.759213][ T7424] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 344.888154][ T7423] netlink: 'syz.4.798': attribute type 3 has an invalid length. [ 345.018418][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 345.304664][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.359512][ T7440] device batadv_slave_1 entered promiscuous mode [ 345.511269][ T7447] CacheFiles: Failed to register: -95 [ 347.349023][ T7459] loop4: detected capacity change from 0 to 128 [ 347.415528][ T7459] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 347.471132][ T27] audit: type=1800 audit(1786142109.620:83): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.810" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 347.523710][ T7459] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 347.646112][ T7463] use of bytesused == 0 is deprecated and will be removed in the future, [ 347.655126][ T7463] use the actual size instead. [ 347.795339][ T7463] loop5: detected capacity change from 0 to 4096 [ 347.805812][ T7463] ntfs3: Unknown parameter 'windows_names' [ 347.886664][ T5489] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.726656][ T7472] loop5: detected capacity change from 0 to 128 [ 348.742099][ T7472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 348.752751][ T7472] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.851150][ T7477] gadgetfs: bound to dummy_udc driver [ 348.991861][ T4985] EXT4-fs (loop5): unmounting filesystem. [ 349.155708][ T4377] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 349.191594][ C0] gadgetfs: connected [ 349.234675][ T4377] gadgetfs: disconnected [ 349.612877][ C0] gadgetfs: connected [ 349.629002][ T4377] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 349.899785][ T4377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 349.999798][ T4377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.036378][ C0] gadgetfs: configuration #1 [ 350.042493][ T7481] gadgetfs: suspended from state 3 [ 350.048112][ T7481] gadgetfs: disconnected [ 350.069032][ T7481] ------------[ cut here ]------------ [ 350.074829][ T7481] WARNING: CPU: 0 PID: 7481 at drivers/usb/gadget/udc/dummy_hcd.c:690 dummy_free_request+0x63/0x70 [ 350.085620][ T7481] Modules linked in: [ 350.089537][ T7481] CPU: 0 PID: 7481 Comm: syz.4.815 Not tainted syzkaller #0 [ 350.096870][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.107005][ T7481] RIP: 0010:dummy_free_request+0x63/0x70 [ 350.112657][ T7481] Code: 53 fb 48 8b 03 48 39 d8 75 1b e8 58 5a 02 fb 48 89 df 5b 41 5e e9 dd fe 3a fb e8 48 5a 02 fb 0f 0b 5b 41 5e c3 e8 3d 5a 02 fb <0f> 0b eb e1 66 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 [ 350.132338][ T7481] RSP: 0018:ffffc9000c4f7bc0 EFLAGS: 00010287 [ 350.138491][ T7481] RAX: ffffffff867fd3e3 RBX: ffff88802ed06200 RCX: 0000000000080000 [ 350.146520][ T7481] RDX: ffffc9000f804000 RSI: 000000000000e520 RDI: 000000000000e521 [ 350.154537][ T7481] RBP: 1ffff110289ea98b R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 350.162580][ T7481] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888144f54068 [ 350.170601][ T7481] R13: dffffc0000000000 R14: ffff888144f54068 R15: ffff88802ed06210 [ 350.178629][ T7481] FS: 00007ff6b93f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 350.187582][ T7481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.194219][ T7481] CR2: 00007f9e55d556c8 CR3: 0000000074f1a000 CR4: 00000000003506f0 [ 350.202254][ T7481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 350.210287][ T7481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 350.218278][ T7481] Call Trace: [ 350.221633][ T7481] [ 350.224584][ T7481] gadgetfs_unbind+0x1a5/0x2a0 [ 350.229377][ T7481] gadget_unbind_driver+0x1bb/0x3d0 [ 350.234741][ T7481] ? gadget_bind_driver+0x760/0x760 [ 350.239964][ T7481] device_release_driver_internal+0x47d/0x7c0 [ 350.246107][ T7481] driver_detach+0x1ef/0x2d0 [ 350.250718][ T7481] bus_remove_driver+0x11c/0x230 [ 350.255731][ T7481] ? sysfs_remove_groups+0x8a/0xa0 [ 350.260885][ T7481] usb_gadget_unregister_driver+0x4a/0x70 [ 350.266687][ T7481] dev_release+0x82/0x1f0 [ 350.271043][ T7481] ? gadget_dev_open+0x1b0/0x1b0 [ 350.276060][ T7481] __fput+0x20a/0x8b0 [ 350.280067][ T7481] task_work_run+0x1d0/0x260 [ 350.284717][ T7481] ? task_work_cancel+0x220/0x220 [ 350.289768][ T7481] ? ksys_read+0x1fd/0x260 [ 350.294211][ T7481] ? exit_to_user_mode_loop+0x3b/0x110 [ 350.299753][ T7481] exit_to_user_mode_loop+0xe6/0x110 [ 350.305067][ T7481] exit_to_user_mode_prepare+0xee/0x180 [ 350.310693][ T7481] syscall_exit_to_user_mode+0x16/0x40 [ 350.316186][ T7481] do_syscall_64+0x58/0xa0 [ 350.320692][ T7481] ? clear_bhb_loop+0x60/0xb0 [ 350.325389][ T7481] ? clear_bhb_loop+0x60/0xb0 [ 350.330155][ T7481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.336066][ T7481] RIP: 0033:0x7ff6bb19e0d9 [ 350.340558][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.360219][ T7481] RSP: 002b:00007ff6b93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.361423][ T7486] loop5: detected capacity change from 0 to 32768 [ 350.368641][ T7481] RAX: 000000000000000c RBX: 00007ff6bb426180 RCX: 00007ff6bb19e0d9 [ 350.368657][ T7481] RDX: 0000000000000100 RSI: 0000200000000d00 RDI: 0000000000000003 [ 350.368669][ T7481] RBP: 00007ff6bb235024 R08: 0000000000000000 R09: 0000000000000000 [ 350.368681][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.368693][ T7481] R13: 00007ff6bb426218 R14: 00007ff6bb426180 R15: 00007ffc80560268 [ 350.368717][ T7481] [ 350.418218][ T7481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.425493][ T7481] CPU: 0 PID: 7481 Comm: syz.4.815 Not tainted syzkaller #0 [ 350.432762][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.442804][ T7481] Call Trace: [ 350.446072][ T7481] [ 350.448993][ T7481] dump_stack_lvl+0x188/0x24e [ 350.453665][ T7481] ? memcpy+0x3c/0x60 [ 350.457639][ T7481] ? show_regs_print_info+0x12/0x12 [ 350.462830][ T7481] ? load_image+0x410/0x410 [ 350.467332][ T7481] panic+0x2d3/0x710 [ 350.471219][ T7481] ? bpf_jit_dump+0xd0/0xd0 [ 350.475722][ T7481] __warn+0x2f8/0x4f0 [ 350.479695][ T7481] ? dummy_free_request+0x63/0x70 [ 350.484710][ T7481] ? dummy_free_request+0x63/0x70 [ 350.489722][ T7481] report_bug+0x2ba/0x4f0 [ 350.494045][ T7481] ? dummy_free_request+0x63/0x70 [ 350.499061][ T7481] handle_bug+0x3a/0x70 [ 350.503213][ T7481] exc_invalid_op+0x16/0x40 [ 350.507708][ T7481] asm_exc_invalid_op+0x16/0x20 [ 350.512551][ T7481] RIP: 0010:dummy_free_request+0x63/0x70 [ 350.518175][ T7481] Code: 53 fb 48 8b 03 48 39 d8 75 1b e8 58 5a 02 fb 48 89 df 5b 41 5e e9 dd fe 3a fb e8 48 5a 02 fb 0f 0b 5b 41 5e c3 e8 3d 5a 02 fb <0f> 0b eb e1 66 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 [ 350.537767][ T7481] RSP: 0018:ffffc9000c4f7bc0 EFLAGS: 00010287 [ 350.543822][ T7481] RAX: ffffffff867fd3e3 RBX: ffff88802ed06200 RCX: 0000000000080000 [ 350.551781][ T7481] RDX: ffffc9000f804000 RSI: 000000000000e520 RDI: 000000000000e521 [ 350.559742][ T7481] RBP: 1ffff110289ea98b R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 350.567700][ T7481] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffff888144f54068 [ 350.575662][ T7481] R13: dffffc0000000000 R14: ffff888144f54068 R15: ffff88802ed06210 [ 350.583628][ T7481] ? dummy_free_request+0x63/0x70 [ 350.588648][ T7481] gadgetfs_unbind+0x1a5/0x2a0 [ 350.593406][ T7481] gadget_unbind_driver+0x1bb/0x3d0 [ 350.598601][ T7481] ? gadget_bind_driver+0x760/0x760 [ 350.603789][ T7481] device_release_driver_internal+0x47d/0x7c0 [ 350.609850][ T7481] driver_detach+0x1ef/0x2d0 [ 350.614430][ T7481] bus_remove_driver+0x11c/0x230 [ 350.619352][ T7481] ? sysfs_remove_groups+0x8a/0xa0 [ 350.624477][ T7481] usb_gadget_unregister_driver+0x4a/0x70 [ 350.630193][ T7481] dev_release+0x82/0x1f0 [ 350.634515][ T7481] ? gadget_dev_open+0x1b0/0x1b0 [ 350.639442][ T7481] __fput+0x20a/0x8b0 [ 350.643419][ T7481] task_work_run+0x1d0/0x260 [ 350.648006][ T7481] ? task_work_cancel+0x220/0x220 [ 350.653022][ T7481] ? ksys_read+0x1fd/0x260 [ 350.657430][ T7481] ? exit_to_user_mode_loop+0x3b/0x110 [ 350.662882][ T7481] exit_to_user_mode_loop+0xe6/0x110 [ 350.668163][ T7481] exit_to_user_mode_prepare+0xee/0x180 [ 350.673703][ T7481] syscall_exit_to_user_mode+0x16/0x40 [ 350.679150][ T7481] do_syscall_64+0x58/0xa0 [ 350.683563][ T7481] ? clear_bhb_loop+0x60/0xb0 [ 350.688230][ T7481] ? clear_bhb_loop+0x60/0xb0 [ 350.692902][ T7481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.698804][ T7481] RIP: 0033:0x7ff6bb19e0d9 [ 350.703213][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.722813][ T7481] RSP: 002b:00007ff6b93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.731218][ T7481] RAX: 000000000000000c RBX: 00007ff6bb426180 RCX: 00007ff6bb19e0d9 [ 350.739175][ T7481] RDX: 0000000000000100 RSI: 0000200000000d00 RDI: 0000000000000003 [ 350.747134][ T7481] RBP: 00007ff6bb235024 R08: 0000000000000000 R09: 0000000000000000 [ 350.755099][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.763056][ T7481] R13: 00007ff6bb426218 R14: 00007ff6bb426180 R15: 00007ffc80560268 [ 350.771025][ T7481] [ 350.774170][ T7481] Kernel Offset: disabled [ 350.778534][ T7481] Rebooting in 86400 seconds..