last executing test programs: 31.083992848s ago: executing program 0 (id=1461): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x5, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x100003, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0xd, 0xfffffff7}, 0xd0, 0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r7, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) add_key$user(0x0, &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) r9 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 29.533732912s ago: executing program 0 (id=1466): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000700)={[{@init_itable_val={'init_itable', 0x3d, 0xe806}}, {@init_itable}, {@minixdf}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 29.007122653s ago: executing program 0 (id=1469): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x2, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x7) socket(0x40000000015, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r7, 0x20, &(0x7f0000000000)=[r7], 0x1) getsockopt$llc_int(r5, 0x10c, 0x7, 0x0, &(0x7f00000001c0)) 27.673605303s ago: executing program 0 (id=1474): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 27.197062893s ago: executing program 0 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009d}]}) 25.240052336s ago: executing program 0 (id=1481): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) 24.355150255s ago: executing program 32 (id=1481): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) 12.484311896s ago: executing program 2 (id=1525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 10.108903098s ago: executing program 3 (id=1534): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x5, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x100003, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0xd, 0xfffffff7}, 0xd0, 0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r7, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) add_key$user(0x0, &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) r9 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 7.979940305s ago: executing program 4 (id=1535): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r4, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r7, 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, 0x0, 0x0) close(r8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 7.473379916s ago: executing program 1 (id=1536): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8040) 7.29011828s ago: executing program 4 (id=1537): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f00000003c0)='0', 0x1) 7.212109502s ago: executing program 1 (id=1538): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000fc0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB="00c5ae8000", @ANYRESHEX=0xee00, @ANYRES32=r0], 0x9, 0x14f2, &(0x7f0000001580)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 7.139699513s ago: executing program 2 (id=1539): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 7.057963035s ago: executing program 3 (id=1540): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="8faaaa95aaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 6.85104065s ago: executing program 2 (id=1541): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x40b20c0, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 6.732944012s ago: executing program 3 (id=1542): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x5, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x100003, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0xd, 0xfffffff7}, 0xd0, 0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r7, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) add_key$user(0x0, &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) r9 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 6.728908593s ago: executing program 1 (id=1543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000200)) 5.685140695s ago: executing program 2 (id=1544): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$eJzs3T9vW1UUAPDzHPvFJUMyMCEk3tCBhajpyoArFCREJpAH/khQ0VaqYqtSLFkqIKxOfAIGBr4HGzsSC98AiQ/ARoUqXfT8Xmxju3ad4hSlv9+Sq3PP8T3X7yUerHfzxev90zsPBvceffN7tNtZNDrRicdZHEQjzqVaAABXwuOU4s8Lfb43G9vqCQDYrpnP/9ZTUnYXQ+9suy0AYIs++viTD26dnBx/WBTtiP53w24W1c9q/ta9uB+9uBs3Yj+eTL8LSKkav/f+yXE0i9JBXO+Pht2ysv/5r5PUPMb1R7EfB8vrj4rKTP1o2G3FK7uRZRH3O2UjN2M/Xl2oL+ePby6pj24eb7brTZbrH8Z+/PZlPIhe3Bl/pzFd/9s8infT9399/WmZXNZno2F3d5w3lXYu+9oAAAAAAAAAAAAAAAAAAAAAAHB1HRYTB3G9X4bq83d2noznD/81Pz5fpzGer+qziHw8mDsfaJTix/PzdW4URZGyKn9yvs+1ZrzWjOYL2zgAAAAAAAAAAAAAAAAAAAD8jwwefnV6u9e7e/afDOqH/CeP9V/0dTozkTdidfLuRmvFTp1e9jqfc/TLZ/1JpNzERZoftoqIVT23FiLXyn7Wv/LfKaWUZRHPd5laz7LWmsHe6pzyDf75h723Tm9n697D9vmF+2l2Ko+zwcO5axrZJh2mjW6/fEVOXt8xz/Q6e8/5S/T2H9VidSRbs4vWTKRVD+Jpt197o/v58v4GAQAAAAAAAAAAAAAAAAAAlelDv0smH60sbWytKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZNP//z8dxEJkbjCqi5fnpJRGk0geZ4MXvEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeAv8EAAD//yiCbKI=") socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd14c2e453842c3, 0x0, 0x8, 0x0, &(0x7f0000000000)) 5.244074035s ago: executing program 1 (id=1545): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r1, r2, 0x1, 0x0, 0x3}) 5.064728589s ago: executing program 3 (id=1546): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r4, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x8}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r7, 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000140)=@generic={0x3, 0x8, 0x4}) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, 0x0, 0x0) close(r8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 5.02361237s ago: executing program 2 (id=1547): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c0) lsetxattr(&(0x7f0000000200)='./bus\x00', &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000800)='\x00', 0x1, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 4.985171041s ago: executing program 1 (id=1548): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x6, 0x12) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 4.698765057s ago: executing program 3 (id=1549): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 4.54379346s ago: executing program 4 (id=1550): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x5, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x100003, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0xd, 0xfffffff7}, 0xd0, 0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r7, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) add_key$user(0x0, &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) r9 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 3.682116689s ago: executing program 2 (id=1551): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@commit={'commit', 0x3d, 0x82f7}}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x1, 0x456, &(0x7f0000000d80)="$eJzs3MtvG8UfAPCv7Th9/5JfKY+GFAIFEfFImvRBD1yKQOIAEhIcirgQkrQKdRvUpBKtIggcwhFV4o44IvEXcKFcEHBC4gp3hBShXCicjNbeTdzETuLEiUv9+UibzHjGmvnu7tjjWa8D6FgDyZ9cxMGI+DUieqrZOysMVP/dXpob/3tpbjwX5fIbf+Yq9f5amhvPqmbPO1DNlMvrtLvwdsRYqTR5Nc0Pz15+f3jm+o3npi6PXZy8OHll9OzZUyePdZ8ZPd2SOA8lfe37cLr/6Ctv3Xxt/PzNd3/8OunvwbS8No5WGaju3bqebHVjbXaoJp3ramNHaEohIpLDVayM/54oxL7lsp54+ZO2dg7YUeVyvryncfF8GbiHJRN1oBNlb/TJ599s26Wpx11h8Vwsr2PcTrdqSVfk0zrF9DPSThiIiPPz/3yRbLFD6xAAALVunYuIZ+vN//LxQE29/6XXhnoj4v8RcTgi7ouIIxFxf0Sl7oMR8VCT7a++QrJ2/lPu2VJgm5TM/15Ir23dOf/LZn/RW0hzhyrxF3MXpkqTJ9J9MhjFPUl+ZJ02vnvpl88aldXO/5ItaT+bC6b9+KNr1QLdxNjs2HZirrX4cURfV734c8tz3mR+fDQi+rbYxtTTX/VH7K1btnH862jBpLz8ZcRT1eM/H6viz+QaXp8cef7M6OnhvVGaPDGcnRVr/fTzwuuN2t9W/C2weKsc++ue/8vx9+b2Rsxcv3Gpcr12pvk2Fn77tOFnmq2e/925Nyvp7vSxD8ZmZ6+ORHTnXl37+OjKc7N8Vj85/weP1x//h2NlTzwcEf0RcSwiHomIR9O+PxYRj0fE8XXi/+HFJ95rPv51VuVbKIl/YqPjH7XHv/lE4dL33zQffyY5/qcqqcH0kc28/m22g9vZdwAAAPBfka98Bz6XH1pO5/NDQ9Xv8B+J/fnS9MzsMxemr12ZqH5XvjeK+Wylq6dmPXQkXRvujeK1JD+6kq+Un0zXjT8v7Kvkh8anSxPtDh463IEG4z/xeyHeaXf/gB3mfi3oXMY/dC7jHzqX8Q+dy/iHzlVv/H/Uhn4Au2+D9/99u9UPYPeZ/0PnMv6hcxn/0JEa3huf39Yt/xJtSnzbvb3fath8IvJ3Scj3TKIYdYu6Nv1jFltM7Klb1O5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///78OPw") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmmsg$sock(r0, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) 3.19090453s ago: executing program 4 (id=1552): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@jqfmt_vfsv1}, {@delalloc}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000380)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xfffffffe, 0x0, 0x700, 0xfffffffffe000001}) 2.447943167s ago: executing program 4 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x501440, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(0x0, 0x201, 0x2002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getitimer(0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r3, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x7ff, 0x8}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, 0x0, 0x20008040) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x40b2, 0x598ed41c0}) sendfile(r2, r6, 0x0, 0x20fffe82) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) 1.38979041s ago: executing program 1 (id=1554): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1a00040, &(0x7f0000000840)={[{@utf8}, {@numtail}, {@fat=@time_offset={'time_offset', 0x3d, 0x56a}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uni_xlate}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@utf8no}]}, 0x3, 0x350, &(0x7f00000009c0)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.258220753s ago: executing program 4 (id=1555): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[], 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x5, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x100003, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0xd, 0xfffffff7}, 0xd0, 0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(0x3) statx(r8, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r7, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) add_key$user(0x0, &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000000300)="c2", 0x1, 0xfffffffffffffffb) r9 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 0s ago: executing program 3 (id=1556): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) kernel console output (not intermixed with test programs): os7840 1-1:0.0: required endpoints missing [ 289.378118][ T4361] usb 1-1: USB disconnect, device number 7 [ 289.649409][ T4316] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.672393][ T4316] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.888218][ T4316] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.050286][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.122120][ T6180] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 290.305136][ T26] audit: type=1326 audit(1783066580.709:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.4.563" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0cb9de59 code=0x0 [ 290.728883][ T6196] loop1: detected capacity change from 0 to 1024 [ 291.209722][ T22] usb 3-1: USB disconnect, device number 7 [ 291.440220][ T4316] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 291.527484][ T6206] udevd[6206]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.314425][ T4316] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 292.436317][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.444558][ T4316] usb 5-1: Product: syz [ 292.448979][ T4316] usb 5-1: Manufacturer: syz [ 292.453932][ T4316] usb 5-1: SerialNumber: syz [ 292.462881][ T4316] usb 5-1: config 0 descriptor?? [ 292.764441][ T4321] usb 5-1: USB disconnect, device number 8 [ 293.777312][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.366086][ T26] audit: type=1326 audit(1783066586.309:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 298.470332][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 299.691364][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.712057][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.722902][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.755218][ T22] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 299.785216][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.810392][ T22] usb 1-1: Product: syz [ 299.814641][ T22] usb 1-1: Manufacturer: syz [ 299.840428][ T22] usb 1-1: SerialNumber: syz [ 299.863520][ T22] usb 1-1: selecting invalid altsetting 1 [ 299.869596][ T22] usb 1-1: unit 6 not found! [ 300.121925][ T6282] loop2: detected capacity change from 0 to 32768 [ 300.155348][ T6282] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 300.155348][ T6282] [ 300.176024][ T6282] read_mapping_page failed! [ 300.184947][ T6282] ERROR: (device loop2): txCommit: [ 300.184947][ T6282] [ 300.465759][ T22] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 300.488716][ T22] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 300.509968][ T22] usb 1-1: USB disconnect, device number 8 [ 300.731523][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.984264][ T26] audit: type=1326 audit(1783066591.699:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.1.591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f141519de59 code=0x0 [ 304.979053][ T6330] syz.3.604 uses obsolete (PF_INET,SOCK_PACKET) [ 305.180248][ T2170] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 305.371743][ T26] audit: type=1326 audit(1783066595.829:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.0.606" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 306.212234][ T2170] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.228590][ T2170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.362031][ T2170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.731106][ T2170] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 306.740390][ T2170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.748629][ T2170] usb 3-1: Product: syz [ 306.753535][ T2170] usb 3-1: Manufacturer: syz [ 306.758341][ T2170] usb 3-1: SerialNumber: syz [ 306.779193][ T2170] usb 3-1: selecting invalid altsetting 1 [ 306.873342][ T2170] usb 3-1: unit 6 not found! [ 307.391167][ T2170] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 307.538209][ T2170] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 307.623143][ T2170] usb 3-1: USB disconnect, device number 8 [ 307.917037][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.073269][ T4774] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 308.974908][ T6370] loop2: detected capacity change from 0 to 128 [ 309.011519][ T6370] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 309.039188][ T6370] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.070273][ T4774] usb 5-1: Using ep0 maxpacket: 16 [ 309.078712][ T4774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.314565][ T26] audit: type=1326 audit(1783066599.769:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.3.620" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 310.062069][ T4774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.129040][ T4774] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 310.159596][ T4774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.215997][ T4774] usb 5-1: config 0 descriptor?? [ 310.938920][ T4774] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 311.135227][ T4361] usb 5-1: USB disconnect, device number 9 [ 311.360174][ T4316] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 311.448804][ T6394] fido_id[6394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 311.564022][ T4316] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 311.599901][ T4316] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 311.679183][ T4316] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 311.716108][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.753479][ T4316] usb 4-1: Product: syz [ 311.767118][ T4316] usb 4-1: Manufacturer: syz [ 311.786888][ T4316] usb 4-1: SerialNumber: syz [ 311.813949][ T4316] usb 4-1: config 0 descriptor?? [ 311.919561][ T6405] Bluetooth: MGMT ver 1.22 [ 313.009801][ T4316] mos7840 4-1:0.0: required endpoints missing [ 313.020555][ T4316] usb 4-1: USB disconnect, device number 4 [ 313.506870][ T26] audit: type=1326 audit(1783066603.959:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 315.100288][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 315.777951][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 315.798397][ T4321] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 315.814965][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.823693][ T4321] usb 4-1: Product: syz [ 315.828642][ T4321] usb 4-1: Manufacturer: syz [ 315.833545][ T4321] usb 4-1: SerialNumber: syz [ 316.586387][ T4321] usb 4-1: config 0 descriptor?? [ 316.613110][ T4321] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 316.632767][ T6448] loop0: detected capacity change from 0 to 1024 [ 316.665360][ T4321] dvb-usb: bulk message failed: -22 (4/0) [ 316.714636][ T4321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 316.766852][ T6448] hfsplus: invalid length 3840 has been corrected to 255 [ 316.873432][ T6457] binder: BINDER_SET_CONTEXT_MGR already set [ 316.879552][ T6457] binder: 6453:6457 ioctl 4018620d 200000004a80 returned -16 [ 317.213637][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.220040][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.530256][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 317.575540][ T4321] dvb-usb: bulk message failed: -22 (5/0) [ 317.740491][ T4321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 317.803988][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.868924][ T4321] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 317.942547][ T4321] usb 4-1: media controller created [ 319.519814][ T26] audit: type=1326 audit(1783066609.969:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0cb9de59 code=0x0 [ 319.982106][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.066192][ T4321] usb 4-1: selecting invalid altsetting 3 [ 321.766010][ T4321] ttusb2: set interface to alts=3 failed [ 321.935579][ T4321] DVB: Unable to find symbol tda10086_attach() [ 321.942004][ T4321] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 321.952764][ T4321] dvb-usb: bulk message failed: -22 (4/0) [ 321.958570][ T4321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 322.104912][ T4321] dvb-usb: bulk message failed: -22 (5/0) [ 322.111091][ T4321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 322.124490][ T4321] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 322.144948][ T4321] usb 4-1: USB disconnect, device number 5 [ 322.304695][ T4321] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 323.370216][ T6141] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 324.332542][ T6507] binder: BINDER_SET_CONTEXT_MGR already set [ 324.338669][ T6507] binder: 6495:6507 ioctl 4018620d 200000004a80 returned -16 [ 324.570582][ T26] audit: type=1326 audit(1783066615.029:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 324.652455][ T6141] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.663194][ T6141] usb 5-1: not running at top speed; connect to a high speed hub [ 324.679474][ T6141] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.701493][ T6141] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 324.718866][ T6141] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 324.734119][ T6141] usb 5-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 324.774580][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.782798][ T6141] usb 5-1: Product: syz [ 324.787019][ T6141] usb 5-1: Manufacturer: syz [ 324.791961][ T6141] usb 5-1: SerialNumber: syz [ 325.174533][ T6141] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 325.266575][ T6141] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 326.263041][ T6141] usb 5-1: USB disconnect, device number 10 [ 327.661916][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.723454][ T6540] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 330.778301][ T6540] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 330.809855][ T6540] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 331.891229][ T6141] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 331.898894][ T4923] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 332.122416][ T6141] usb 2-1: Using ep0 maxpacket: 16 [ 332.166428][ T4923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.209088][ T26] audit: type=1326 audit(1783066622.659:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.4.674" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0cb9de59 code=0x0 [ 332.259728][ T4923] usb 4-1: config 0 has no interface number 0 [ 332.268934][ T6141] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 332.940695][ T6141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.950204][ T4923] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 333.142141][ T4923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.491847][ T6141] usb 2-1: config 0 descriptor?? [ 333.497029][ T4923] usb 4-1: Product: syz [ 333.520919][ T6141] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 333.530830][ T4923] usb 4-1: Manufacturer: syz [ 333.545237][ T4923] usb 4-1: SerialNumber: syz [ 333.606523][ T4923] usb 4-1: config 0 descriptor?? [ 333.648103][ T4923] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 333.733545][ T6141] usb 2-1: Detected FT232B [ 333.816230][ T6556] loop0: detected capacity change from 0 to 32768 [ 333.876081][ T4923] gspca_spca1528: reg_w err -71 [ 333.883209][ T6556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.672 (6556) [ 333.920454][ T4923] spca1528: probe of 4-1:0.1 failed with error -71 [ 333.949903][ T4923] usb 4-1: USB disconnect, device number 6 [ 333.974034][ T6556] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.994153][ T6556] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 334.031818][ T6556] BTRFS info (device loop0): setting nodatacow, compression disabled [ 334.053541][ T6556] BTRFS info (device loop0): turning on flush-on-commit [ 334.077616][ T6556] BTRFS info (device loop0): trying to use backup root at mount time [ 334.130805][ T6556] BTRFS info (device loop0): max_inline at 0 [ 334.138996][ T6141] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 334.207000][ T6556] BTRFS info (device loop0): using free space tree [ 335.342182][ T6141] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 335.351966][ T6141] usb 2-1: USB disconnect, device number 5 [ 335.369082][ T6556] BTRFS error (device loop0): open_ctree failed: -12 [ 335.387729][ T6141] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 335.413955][ T6141] ftdi_sio 2-1:0.0: device disconnected [ 335.499612][ T4451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4451) [ 335.760210][ T4332] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 335.880217][ T4923] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 337.908929][ T4332] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.921165][ T4923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.946327][ T4923] usb 3-1: config 0 has no interfaces? [ 337.955858][ T4332] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.980156][ T4923] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 337.989317][ T4332] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.998841][ T4923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.020278][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.044740][ T4923] usb 3-1: config 0 descriptor?? [ 338.061206][ T6606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 339.010197][ T26] audit: type=1326 audit(1783066628.829:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.3.687" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 339.155682][ T6604] usb 3-1: USB disconnect, device number 9 [ 341.252197][ T4774] usb 5-1: USB disconnect, device number 11 [ 342.006912][ T6652] loop3: detected capacity change from 0 to 512 [ 342.046335][ T6652] EXT4-fs: Ignoring removed i_version option [ 342.085380][ T6652] EXT4-fs: Ignoring removed bh option [ 342.173579][ T6652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 342.208926][ T6652] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.340900][ T6652] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.692: resize_inode disabled but reserved GDT blocks non-zero [ 344.231604][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 347.280255][ T4774] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 348.890238][ T4774] usb 4-1: Using ep0 maxpacket: 16 [ 348.897481][ T4774] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 348.983279][ T4774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.002881][ T4774] usb 4-1: config 0 descriptor?? [ 349.021043][ T4774] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 349.426654][ T4774] usb 4-1: Detected FT232B [ 349.846138][ T4774] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 349.895410][ T4774] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 350.158881][ T4774] usb 4-1: USB disconnect, device number 7 [ 350.167786][ T4774] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 350.178939][ T4774] ftdi_sio 4-1:0.0: device disconnected [ 350.202882][ T6716] loop2: detected capacity change from 0 to 2048 [ 350.220534][ T6716] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 350.834889][ T6716] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.906940][ T6716] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 351.014083][ T6716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.490389][ T4325] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 351.740318][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 351.769776][ T4325] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 351.966745][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.102195][ T4325] usb 5-1: Product: syz [ 352.167278][ T4325] usb 5-1: Manufacturer: syz [ 352.232249][ T4325] usb 5-1: SerialNumber: syz [ 352.364497][ T4325] usb 5-1: config 0 descriptor?? [ 352.570529][ T4325] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 352.723578][ T4325] dvb-usb: bulk message failed: -22 (4/0) [ 352.860970][ T4325] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 353.045779][ T4325] dvb-usb: bulk message failed: -22 (5/0) [ 353.196808][ T4325] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 353.382400][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.476978][ T26] audit: type=1326 audit(1783066643.929:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 353.592367][ T4325] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 353.727609][ T4325] usb 5-1: media controller created [ 353.826140][ T26] audit: type=1326 audit(1783066644.019:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.179885][ T26] audit: type=1326 audit(1783066644.069:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.303488][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.497784][ T26] audit: type=1326 audit(1783066644.069:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.686833][ T26] audit: type=1326 audit(1783066644.079:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.711877][ T26] audit: type=1326 audit(1783066644.139:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.736300][ T26] audit: type=1326 audit(1783066644.159:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.760823][ T4325] usb 5-1: selecting invalid altsetting 3 [ 354.761650][ T26] audit: type=1326 audit(1783066644.169:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.0.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3bd9de59 code=0x7ffc0000 [ 354.766610][ T4325] ttusb2: set interface to alts=3 failed [ 355.794951][ T4325] DVB: Unable to find symbol tda10086_attach() [ 355.803242][ T4325] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 355.827076][ T4325] dvb-usb: bulk message failed: -22 (4/0) [ 355.850338][ T4325] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 355.870466][ T4325] dvb-usb: bulk message failed: -22 (5/0) [ 355.896778][ T4325] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 355.917395][ T4325] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 355.979880][ T4325] usb 5-1: USB disconnect, device number 12 [ 356.122998][ T4325] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 356.830408][ T4325] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 357.000309][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 357.045762][ T4325] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 357.083186][ T4325] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 357.199879][ T4325] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 357.200235][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 357.219208][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.317234][ T4325] usb 5-1: Product: syz [ 357.342156][ T14] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 357.376337][ T4325] usb 5-1: Manufacturer: syz [ 357.422597][ T4325] usb 5-1: SerialNumber: syz [ 357.440714][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.575028][ T4325] usb 5-1: config 0 descriptor?? [ 357.591233][ T14] usb 1-1: config 0 descriptor?? [ 357.623145][ T14] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 357.828075][ T14] usb 1-1: Detected FT232B [ 357.921597][ T26] audit: type=1326 audit(1783066648.379:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.3.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1918d9de59 code=0x7ffc0000 [ 358.022866][ T26] audit: type=1326 audit(1783066648.409:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.3.733" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1918d9de59 code=0x7ffc0000 [ 358.048549][ T4325] mos7840 5-1:0.0: required endpoints missing [ 358.087662][ T4325] usb 5-1: USB disconnect, device number 13 [ 358.272686][ T14] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 358.323204][ T14] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 358.437106][ T14] usb 1-1: USB disconnect, device number 9 [ 358.550835][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 358.569883][ T14] ftdi_sio 1-1:0.0: device disconnected [ 360.819403][ T6796] loop1: detected capacity change from 0 to 512 [ 360.908856][ T6796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 360.928383][ T6796] fs-verity: sha512 using implementation "sha512-avx2" [ 360.973365][ T6796] EXT4-fs warning (device loop1): ext4_begin_enable_verity:137: inode #15: comm syz.1.740: verity is only allowed on extent-based files [ 361.087569][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 361.306464][ T4774] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 361.572219][ T4774] usb 4-1: unable to get BOS descriptor or descriptor too short [ 362.889026][ T4774] usb 4-1: not running at top speed; connect to a high speed hub [ 362.898582][ T4774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.909654][ T4774] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 362.921077][ T4774] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 362.982844][ T4774] usb 4-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 362.998964][ T4774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.007361][ T4774] usb 4-1: Product: syz [ 363.060282][ T4774] usb 4-1: Manufacturer: syz [ 363.077784][ T4774] usb 4-1: SerialNumber: syz [ 363.374275][ T4774] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 363.389367][ T4774] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 363.403661][ T4325] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 363.525611][ T4774] usb 4-1: USB disconnect, device number 8 [ 363.652563][ T4325] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 363.666666][ T4325] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 363.834417][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 363.888366][ T4325] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 364.050153][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 364.062288][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.071842][ T14] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 365.175594][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.648189][ T4325] usb 3-1: Product: syz [ 365.652508][ T4325] usb 3-1: Manufacturer: syz [ 365.660033][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.669041][ T4325] usb 3-1: SerialNumber: syz [ 365.675597][ T14] usb 5-1: config 0 descriptor?? [ 365.694646][ T4325] usb 3-1: config 0 descriptor?? [ 365.704190][ T14] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 365.906408][ T14] usb 5-1: Detected FT232B [ 365.969982][ T6839] loop3: detected capacity change from 0 to 2048 [ 366.024179][ T6839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 366.083641][ T6839] EXT4-fs error (device loop3): ext4_find_extent:900: inode #2: comm syz.3.756: inode has invalid extent depth: 8 [ 366.128117][ T6839] EXT4-fs (loop3): Remounting filesystem read-only [ 366.146239][ T4325] mos7840 3-1:0.0: required endpoints missing [ 366.163215][ T4325] usb 3-1: USB disconnect, device number 10 [ 366.238315][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 366.280364][ T4332] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 366.313719][ T14] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 366.336746][ T14] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 366.352157][ T14] usb 5-1: USB disconnect, device number 14 [ 366.363911][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 366.374568][ T14] ftdi_sio 5-1:0.0: device disconnected [ 366.480157][ T4332] usb 2-1: Using ep0 maxpacket: 32 [ 366.488769][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.505750][ T4332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.525998][ T4332] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 366.535361][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.551317][ T4332] usb 2-1: config 0 descriptor?? [ 366.969741][ T4332] wacom 0003:056A:0028.0005: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 367.004408][ T4332] wacom 0003:056A:0028.0005: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.1-1/input0 [ 367.046921][ T4332] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0028.0005/input/input5 [ 367.253757][ T4332] usb 2-1: USB disconnect, device number 6 [ 368.052624][ T6866] fido_id[6866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 368.108033][ T6868] loop2: detected capacity change from 0 to 4096 [ 370.697617][ T6877] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.760654][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 370.760686][ T26] audit: type=1800 audit(1783066661.219:53): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.766" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 370.889132][ T6878] loop1: detected capacity change from 0 to 2048 [ 370.951369][ T6878] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 371.014165][ T6878] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 371.049353][ T6878] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 371.077728][ T6878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.452641][ T6884] loop0: detected capacity change from 0 to 32768 [ 375.105482][ T4361] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 375.124914][ T4451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4451) [ 375.260916][ T26] audit: type=1326 audit(1783066665.679:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.4.781" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0cb9de59 code=0x0 [ 375.936640][ T6604] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 376.006374][ T4361] usb 1-1: Using ep0 maxpacket: 8 [ 376.113994][ T4361] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 376.454563][ T4361] usb 1-1: config 179 has no interface number 0 [ 376.718481][ T4361] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 376.943177][ T4361] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 376.985766][ T4361] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 377.133525][ T6604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.146325][ T4361] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 377.158020][ T4361] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 377.171762][ T4361] usb 1-1: config 179 interface 65 has no altsetting 0 [ 377.178698][ T4361] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 377.179189][ T6604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 377.916786][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.092947][ T4361] usb 1-1: can't set config #179, error -71 [ 378.110371][ T4361] usb 1-1: USB disconnect, device number 10 [ 378.129568][ T6604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 378.209782][ T6604] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 378.249788][ T6604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.528043][ T6941] fuse: Unknown parameter 'user_i00000000000000000000' [ 378.800574][ T6604] usb 4-1: config 0 descriptor?? [ 378.805869][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812206][ T6604] usb 4-1: can't set config #0, error -71 [ 378.812294][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.822677][ T6604] usb 4-1: USB disconnect, device number 9 [ 380.045024][ T26] audit: type=1326 audit(1783066670.499:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 381.522241][ T6978] comedi comedi3: Buffer allocation failed [ 382.119744][ T6976] fuse: Unknown parameter 'user_id00000000000000000000' [ 383.661355][ T26] audit: type=1326 audit(1783066674.109:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.3.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 386.450669][ T26] audit: type=1326 audit(1783066676.279:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.0.825" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 387.246970][ T7035] fuse: Unknown parameter 'user_id00000000000000000000' [ 389.979058][ T7050] loop1: detected capacity change from 0 to 1024 [ 389.997080][ T7050] EXT4-fs: Ignoring removed bh option [ 390.057929][ T7050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.275512][ T26] audit: type=1326 audit(1783066680.729:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 391.068192][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 391.510207][ T26] audit: type=1326 audit(1783066681.879:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.0.830" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 393.762404][ T7085] loop2: detected capacity change from 0 to 64 [ 394.110145][ T4923] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 394.630764][ T4923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 394.646100][ T4923] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 394.695626][ T7092] fuse: Unknown parameter 'user_id00000000000000000000' [ 394.727393][ T4923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.754901][ T4923] usb 5-1: config 0 descriptor?? [ 395.359981][ T4923] lenovo 0003:17EF:6062.0006: unknown main item tag 0x2 [ 395.367112][ T4923] lenovo 0003:17EF:6062.0006: unknown main item tag 0x6 [ 395.374512][ T4923] lenovo 0003:17EF:6062.0006: ignoring exceeding usage max [ 395.385827][ T4923] lenovo 0003:17EF:6062.0006: hidraw0: USB HID v0.bc Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 396.140435][ T4923] usb 5-1: USB disconnect, device number 15 [ 396.230501][ T26] audit: type=1326 audit(1783066686.679:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.843" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 398.148529][ T7118] fido_id[7118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 398.202173][ T7129] loop4: detected capacity change from 0 to 512 [ 398.263080][ T7129] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 398.311626][ T7129] EXT4-fs warning (device loop4): ext4_begin_enable_verity:137: inode #15: comm syz.4.848: verity is only allowed on extent-based files [ 398.362616][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 398.485792][ T7136] device gretap0 entered promiscuous mode [ 398.494583][ T7136] device vlan2 entered promiscuous mode [ 399.275908][ T7142] fuse: Bad value for 'fd' [ 399.351913][ T7149] loop1: detected capacity change from 0 to 128 [ 399.424769][ T7149] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 399.461888][ T7149] hpfs: filesystem error: improperly stopped [ 399.476532][ T7149] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 399.497224][ T7149] hpfs: You really don't want any checks? You are crazy... [ 399.511111][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 399.520432][ T7149] hpfs: Code page index out of array [ 399.525864][ T7149] hpfs: code page support is disabled [ 399.550979][ T7149] hpfs: hpfs_map_4sectors(): unaligned read [ 399.597070][ T7149] hpfs: hpfs_map_4sectors(): unaligned read [ 399.630337][ T4361] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 399.632514][ T7149] hpfs: filesystem error: unable to find root dir [ 399.861591][ T4361] usb 1-1: Using ep0 maxpacket: 32 [ 400.301195][ T4361] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 400.339656][ T4361] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 400.369180][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.383108][ T4361] usb 1-1: Product: syz [ 400.394690][ T4361] usb 1-1: Manufacturer: syz [ 400.409475][ T4361] usb 1-1: SerialNumber: syz [ 402.002887][ T4361] usb 1-1: config 0 descriptor?? [ 402.156143][ T4361] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 402.254663][ T4361] dvb-usb: bulk message failed: -22 (2/0) [ 402.447417][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.569465][ T4361] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 402.644263][ T4361] usb 1-1: media controller created [ 402.994744][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.166018][ T4361] usb 1-1: selecting invalid altsetting 7 [ 403.172465][ T4361] cxusb: set interface failed [ 403.177194][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 403.459775][ T4361] DVB: Unable to find symbol lgdt330x_attach() [ 403.470118][ T4361] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 403.656281][ T7190] device ipip0 entered promiscuous mode [ 403.695864][ T7190] team0: Device ipip0 is of different type [ 403.780121][ T4361] rc_core: IR keymap rc-dvico-portable not found [ 403.786834][ T4361] Registered IR keymap rc-empty [ 403.798378][ T4361] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 404.129596][ T4361] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 404.271381][ T7169] loop4: detected capacity change from 0 to 32768 [ 404.279551][ T4361] dvb-usb: schedule remote query interval to 100 msecs. [ 404.335679][ T4361] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 404.348992][ T7169] JBD2: Ignoring recovery information on journal [ 404.369502][ T4361] usb 1-1: USB disconnect, device number 11 [ 404.508699][ T7169] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 405.454377][ T4361] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 405.585441][ T7192] fuse: Bad value for 'fd' [ 405.751590][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 406.386627][ T26] audit: type=1326 audit(1783066696.839:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.0.880" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 407.795639][ T5551] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 408.550428][ T5551] usb 1-1: Using ep0 maxpacket: 16 [ 408.575153][ T5551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.622037][ T7239] loop3: detected capacity change from 0 to 4096 [ 408.640129][ T5551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.659865][ T5551] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 408.710217][ T5551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.779128][ T5551] usb 1-1: config 0 descriptor?? [ 408.867936][ T7246] fuse: Bad value for 'fd' [ 409.262818][ T5551] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 409.270679][ T5551] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 409.270697][ T7248] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.278078][ T5551] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 409.316792][ T5551] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 409.379329][ T5551] konepure 0003:1E7D:2DB4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 409.526636][ T5551] usb 1-1: USB disconnect, device number 12 [ 409.760428][ T7258] loop2: detected capacity change from 0 to 1024 [ 409.806487][ T7250] fido_id[7250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 409.821912][ T7258] EXT4-fs: Ignoring removed bh option [ 409.985481][ T7258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 410.212148][ T26] audit: type=1326 audit(1783066700.609:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.3.894" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 410.992834][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 411.300536][ T6602] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 411.551100][ T6602] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 411.562307][ T6602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.582603][ T6602] usb 4-1: Product: syz [ 411.587048][ T6602] usb 4-1: Manufacturer: syz [ 411.598503][ T6602] usb 4-1: SerialNumber: syz [ 411.636095][ T6602] usb 4-1: config 0 descriptor?? [ 411.689715][ T6602] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 411.767321][ T7289] fuse: Unknown parameter '0x000000000000000b' [ 412.446637][ T6602] gspca_stk1135: reg_w 0x3 err -71 [ 412.461348][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.488250][ T6602] gspca_stk1135: Sensor write failed [ 412.494165][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.520889][ T6602] gspca_stk1135: Sensor write failed [ 412.526478][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.546652][ T6602] gspca_stk1135: Sensor read failed [ 412.576490][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.600156][ T6602] gspca_stk1135: Sensor read failed [ 412.608714][ T7307] loop2: detected capacity change from 0 to 512 [ 412.611874][ T6602] gspca_stk1135: Detected sensor type unknown (0x0) [ 412.640147][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.660767][ T7307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 412.684590][ T6602] gspca_stk1135: Sensor read failed [ 412.692225][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.700316][ T6602] gspca_stk1135: Sensor read failed [ 412.710954][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.720667][ T6602] gspca_stk1135: Sensor write failed [ 412.727233][ T6602] gspca_stk1135: serial bus timeout: status=0x00 [ 412.734889][ T7307] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.906: bad orphan inode 131083 [ 412.739639][ T6602] gspca_stk1135: Sensor write failed [ 412.760129][ T6602] stk1135: probe of 4-1:0.0 failed with error -71 [ 412.804916][ T6602] usb 4-1: USB disconnect, device number 10 [ 412.845320][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 412.929840][ T26] audit: type=1326 audit(1783066703.379:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.907" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf3bd9de59 code=0x0 [ 414.416241][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 414.595620][ T6141] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 414.694482][ T7329] loop3: detected capacity change from 0 to 128 [ 414.800255][ T7329] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 414.805010][ T6141] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.850002][ T6141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.875028][ T6141] usb 1-1: config 0 descriptor?? [ 414.902860][ T6141] cp210x 1-1:0.0: cp210x converter detected [ 415.076244][ T4279] sysv_free_block: trying to free block not in datazone [ 415.180294][ T4279] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 415.622633][ T6141] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 415.652491][ T6141] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 415.682038][ T6141] usb 1-1: cp210x converter now attached to ttyUSB0 [ 415.715840][ T7331] fuse: Unknown parameter '0x000000000000000b' [ 415.755582][ T6141] usb 1-1: USB disconnect, device number 13 [ 415.829476][ T6141] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 415.855765][ T6141] cp210x 1-1:0.0: device disconnected [ 415.989111][ T7347] loop2: detected capacity change from 0 to 256 [ 416.142818][ T7348] loop1: detected capacity change from 0 to 4096 [ 416.171857][ T7348] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 416.288857][ T7348] ntfs3: loop1: failed to convert "c46c" to default [ 416.300144][ T4774] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 416.490319][ T4774] usb 4-1: Using ep0 maxpacket: 8 [ 416.505810][ T4774] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.556147][ T4774] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.610119][ T4774] usb 4-1: config 0 interface 0 has no altsetting 0 [ 416.616831][ T4774] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 416.670111][ T4774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.693384][ T4774] usb 4-1: config 0 descriptor?? [ 417.250227][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.328031][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.420373][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.479642][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.553783][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.627433][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.695256][ T4774] wacom 0003:056A:0315.0008: unknown main item tag 0x0 [ 417.738991][ T4774] wacom 0003:056A:0315.0008: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 417.770631][ T4774] wacom 0003:056A:0315.0008: hidraw0: USB HID v0.03 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 417.811304][ T4774] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0008/input/input9 [ 417.914881][ T4774] usb 4-1: USB disconnect, device number 11 [ 418.123983][ T7367] fido_id[7367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 418.327331][ T7358] cgroup: fork rejected by pids controller in /syz0 [ 419.109761][ T7492] fuse: Unknown parameter '0x000000000000000b' [ 419.373049][ T7494] loop3: detected capacity change from 0 to 512 [ 419.431459][ T7494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.442973][ T7494] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.714692][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 419.879779][ T7510] loop2: detected capacity change from 0 to 512 [ 419.903194][ T7510] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.982529][ T7510] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.941: invalid indirect mapped block 256 (level 2) [ 420.021910][ T7510] EXT4-fs (loop2): 2 truncates cleaned up [ 420.027761][ T7510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 420.078483][ T7507] loop4: detected capacity change from 0 to 4096 [ 420.199408][ T7507] ntfs: volume version 3.1. [ 420.212048][ T7510] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.941: bg 0: block 5: invalid block bitmap [ 420.257725][ T7510] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 420.303594][ T7510] EXT4-fs (loop2): This should not happen!! Data will be lost [ 420.303594][ T7510] [ 420.332550][ T7510] EXT4-fs (loop2): Total free blocks count 0 [ 420.339180][ T7510] EXT4-fs (loop2): Free/Dirty block details [ 420.365013][ T7510] EXT4-fs (loop2): free_blocks=0 [ 420.383462][ T7510] EXT4-fs (loop2): dirty_blocks=2 [ 420.388672][ T7510] EXT4-fs (loop2): Block reservation details [ 420.424290][ T7510] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 420.635403][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 422.179710][ T7529] fuse: Unknown parameter '0x000000000000000b' [ 424.070569][ T5551] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 424.277920][ T5551] usb 1-1: config 0 interface 0 has no altsetting 0 [ 424.286250][ T5551] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 424.296139][ T5551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.307903][ T5551] usb 1-1: config 0 descriptor?? [ 424.657254][ T7582] fuse: Unknown parameter '0x000000000000000b' [ 424.746219][ T5551] lenovo 0003:17EF:6062.0009: unknown main item tag 0x2 [ 424.773767][ T5551] lenovo 0003:17EF:6062.0009: unknown main item tag 0x6 [ 424.786049][ T5551] lenovo 0003:17EF:6062.0009: ignoring exceeding usage max [ 424.807665][ T5551] lenovo 0003:17EF:6062.0009: hidraw0: USB HID v0.bc Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 424.993700][ T4316] usb 1-1: USB disconnect, device number 14 [ 425.206367][ T7585] fido_id[7585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 425.269231][ T7595] loop3: detected capacity change from 0 to 512 [ 425.346290][ T7595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 425.382811][ T7595] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.969: bad orphan inode 131083 [ 425.400683][ T7595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 425.817455][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 426.353050][ T7604] netlink: 68 bytes leftover after parsing attributes in process `syz.0.974'. [ 426.362322][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.974'. [ 426.371617][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.974'. [ 426.381170][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 427.252012][ T4923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 427.487690][ T4923] usb 4-1: Using ep0 maxpacket: 16 [ 427.506436][ T4923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.518745][ T4923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.597669][ T4923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.636411][ T4923] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 427.826416][ T4923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.921047][ T4923] usb 4-1: config 0 descriptor?? [ 428.559984][ T4923] gembird 0003:11FF:3331.000A: unknown main item tag 0xe [ 429.350678][ T4923] gembird 0003:11FF:3331.000A: unknown global tag 0xc [ 429.460676][ T4923] gembird 0003:11FF:3331.000A: item 0 4 1 12 parsing failed [ 429.571642][ T4923] gembird: probe of 0003:11FF:3331.000A failed with error -22 [ 429.720741][ T7616] fuse: Unknown parameter '0x000000000000000b' [ 429.732171][ T4923] usb 4-1: USB disconnect, device number 12 [ 430.928677][ T7640] loop1: detected capacity change from 0 to 1024 [ 430.958836][ T7640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 431.191749][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 431.310430][ T4321] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 431.512070][ T4321] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 431.539099][ T4321] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 431.569383][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.611767][ T4321] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 432.173324][ T4923] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 432.318994][ T7647] loop3: detected capacity change from 0 to 32768 [ 432.337321][ T7647] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.986 (7647) [ 432.380106][ T4923] usb 2-1: Using ep0 maxpacket: 16 [ 432.385467][ T7647] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 432.397943][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.414141][ T7647] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 432.430293][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.440832][ T7647] BTRFS info (device loop3): enabling auto defrag [ 432.450815][ T7647] BTRFS info (device loop3): max_inline at 4096 [ 432.457510][ T7647] BTRFS info (device loop3): using free space tree [ 432.465098][ T4923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.504454][ T4923] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.527256][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.571879][ T4923] usb 2-1: config 0 descriptor?? [ 432.637129][ T7647] BTRFS info (device loop3): enabling ssd optimizations [ 432.656753][ T7681] loop2: detected capacity change from 0 to 256 [ 432.863339][ T4321] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 432.890391][ T4321] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 432.923246][ T4321] usb 5-1: USB disconnect, device number 16 [ 433.019683][ T4923] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input12 [ 433.067656][ T4279] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 433.418061][ T4923] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 433.674918][ T4923] usb 2-1: USB disconnect, device number 7 [ 434.412478][ T7689] fido_id[7689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 434.866346][ T7702] binder_alloc: 7695: binder_alloc_buf, no vma [ 436.108258][ T7691] fuse: Unknown parameter 'fd0x000000000000000b' [ 436.214420][ T7709] loop0: detected capacity change from 0 to 512 [ 436.580847][ T7709] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 436.759040][ T7709] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1000: bad orphan inode 131083 [ 436.929291][ T7709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 436.940833][ T7720] loop4: detected capacity change from 0 to 256 [ 437.191844][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 439.387693][ T7742] binder_alloc: 7740: binder_alloc_buf, no vma [ 439.520313][ T4316] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 440.092163][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098600][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.320422][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 440.327590][ T4316] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 440.347718][ T4316] usb 4-1: config 0 has no interface number 0 [ 440.364809][ T4316] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 440.396917][ T4316] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 440.422761][ T4316] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 440.470188][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 440.497618][ T4316] usb 4-1: Product: syz [ 440.510122][ T4316] usb 4-1: SerialNumber: syz [ 440.529150][ T4316] usb 4-1: config 0 descriptor?? [ 440.556741][ T4316] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 440.580178][ T4316] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13 [ 440.866658][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 440.877595][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 440.890241][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 440.897588][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 440.907086][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 440.914434][ T4316] usb 4-1: USB disconnect, device number 13 [ 440.938987][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 440.946048][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 440.957863][ T4316] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 441.191148][ T7748] loop2: detected capacity change from 0 to 32768 [ 441.369968][ T7767] loop4: detected capacity change from 0 to 512 [ 441.432723][ T7767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 441.523953][ T7748] XFS (loop2): Mounting V5 Filesystem [ 441.594678][ T7767] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1019: bad orphan inode 131083 [ 441.699245][ T7767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 441.826721][ T7748] XFS (loop2): Ending clean mount [ 442.807541][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 442.966632][ T4280] XFS (loop2): Unmounting Filesystem [ 443.308145][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 443.525608][ T7780] loop0: detected capacity change from 0 to 32768 [ 443.566789][ T7803] loop1: detected capacity change from 0 to 128 [ 443.598335][ T7780] JBD2: Ignoring recovery information on journal [ 443.731080][ T7803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 443.771181][ T7780] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 443.807389][ T7803] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 443.915531][ T26] audit: type=1800 audit(1783066734.369:64): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1021" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 444.289717][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 444.359216][ T7803] fscrypt: Error allocating hmac(sha512): -2 [ 444.586841][ T4277] EXT4-fs (loop1): unmounting filesystem. [ 444.995021][ T26] audit: type=1326 audit(1783066735.449:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.3.1042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1918d9de59 code=0x0 [ 446.030827][ T7854] netlink: 'syz.4.1048': attribute type 27 has an invalid length. [ 449.366710][ T7994] loop3: detected capacity change from 0 to 4096 [ 449.518436][ T7994] ntfs: volume version 3.1. [ 449.663421][ T7991] loop0: detected capacity change from 0 to 32768 [ 449.789273][ T7991] JBD2: Ignoring recovery information on journal [ 449.906924][ T8004] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 449.996550][ T7991] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 450.299581][ T26] audit: type=1800 audit(1783066740.749:66): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1063" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 450.515207][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 450.557596][ T8016] loop2: detected capacity change from 0 to 512 [ 450.595359][ T8016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.630384][ T8015] loop3: detected capacity change from 0 to 256 [ 450.738306][ T8020] tipc: Started in network mode [ 450.759026][ T8020] tipc: Node identity ac14140f, cluster identity 4711 [ 450.795578][ T8020] tipc: New replicast peer: 255.255.255.255 [ 450.823050][ T8020] tipc: Enabled bearer , priority 10 [ 450.844843][ T8016] EXT4-fs (loop2): 1 orphan inode deleted [ 450.870269][ T8016] EXT4-fs (loop2): 1 truncate cleaned up [ 450.906560][ T8016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 451.087271][ T8016] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 255: comm syz.2.1070: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 451.802267][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 451.952520][ T4923] tipc: Node number set to 2886997007 [ 452.799410][ T8039] loop0: detected capacity change from 0 to 256 [ 452.893038][ T8039] FAT-fs (loop0): Directory bread(block 64) failed [ 452.933630][ T8042] loop1: detected capacity change from 0 to 1764 [ 452.956760][ T8039] FAT-fs (loop0): Directory bread(block 65) failed [ 452.964008][ T8039] FAT-fs (loop0): Directory bread(block 66) failed [ 452.999490][ T8039] FAT-fs (loop0): Directory bread(block 67) failed [ 453.016064][ T8039] FAT-fs (loop0): Directory bread(block 68) failed [ 453.023006][ T8039] FAT-fs (loop0): Directory bread(block 69) failed [ 453.029656][ T8039] FAT-fs (loop0): Directory bread(block 70) failed [ 453.070355][ T8039] FAT-fs (loop0): Directory bread(block 71) failed [ 453.077081][ T8039] FAT-fs (loop0): Directory bread(block 72) failed [ 453.104130][ T8039] FAT-fs (loop0): Directory bread(block 73) failed [ 453.153734][ T8044] loop2: detected capacity change from 0 to 512 [ 453.280661][ T8044] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.342669][ T8044] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1083: bad orphan inode 131083 [ 453.533891][ T8044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 453.775029][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 456.510204][ T6599] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 456.710548][ T6599] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 456.724400][ T6599] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 456.740964][ T6599] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.756324][ T6599] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 456.770655][ T6599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.890143][ T6599] usb 1-1: invalid MIDI out EP 0 [ 457.180536][ T6599] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 457.340349][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.400416][ T4321] usb 1-1: USB disconnect, device number 15 [ 459.152287][ T8124] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1113'. [ 459.265737][ T8128] loop0: detected capacity change from 0 to 512 [ 459.316551][ T8128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1115: inode #1: comm syz.0.1115: iget: illegal inode # [ 459.348947][ T8128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1115: error while reading EA inode 1 err=-117 [ 459.418704][ T8128] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 459.435753][ T8128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1115: inode #1: comm syz.0.1115: iget: illegal inode # [ 459.456157][ T8128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1115: error while reading EA inode 1 err=-117 [ 459.475071][ T8128] EXT4-fs (loop0): 1 orphan inode deleted [ 459.483706][ T8128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 460.114021][ T4923] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 460.528393][ T4923] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 460.637332][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.650247][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 460.684400][ T4923] usb 2-1: config 0 descriptor?? [ 461.882505][ T4923] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 461.890144][ T4923] [drm] Initialized udl on minor 2 [ 461.901311][ T4923] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 461.912130][ T4923] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 464.021239][ T126] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 464.021462][ T129] usb 2-1: USB disconnect, device number 8 [ 464.103810][ T126] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 464.734659][ T126] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 464.739000][ T8166] loop3: detected capacity change from 0 to 1024 [ 465.152497][ T26] audit: type=1804 audit(1783066755.599:67): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1128" name="/newroot/236/file0/file1" dev="loop3" ino=20 res=1 errno=0 [ 466.080748][ T8193] netlink: 'syz.3.1136': attribute type 8 has an invalid length. [ 466.209351][ T8170] loop2: detected capacity change from 0 to 32768 [ 466.252496][ T8170] JBD2: Ignoring recovery information on journal [ 466.394754][ T8170] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 466.466454][ T26] audit: type=1800 audit(1783066756.919:68): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1130" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 466.643199][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 467.059972][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 468.503551][ T4923] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 468.630283][ T129] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 468.700508][ T4923] usb 2-1: Using ep0 maxpacket: 8 [ 468.730942][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 468.770312][ T4923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.801429][ T4923] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 468.816774][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.827741][ T4923] usb 2-1: config 0 descriptor?? [ 468.851978][ T129] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 468.883545][ T129] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 468.920111][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.928202][ T129] usb 4-1: Product: syz [ 468.956776][ T129] usb 4-1: Manufacturer: syz [ 468.961786][ T129] usb 4-1: SerialNumber: syz [ 468.988419][ T129] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 469.272431][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.306933][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.355136][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.431886][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.466281][ T129] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 469.566357][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.733529][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.814256][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 469.907294][ T4923] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 470.020840][ T4923] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 470.437624][ T4923] lenovo 0003:17EF:6047.000C: Failed to switch middle button: -71 [ 470.455316][ T4923] lenovo 0003:17EF:6047.000C: Fn-lock setting failed: -71 [ 470.505156][ T4923] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 470.556983][ T4923] usb 2-1: USB disconnect, device number 9 [ 470.795595][ T8272] fido_id[8272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 471.413610][ T6599] usb 4-1: USB disconnect, device number 14 [ 472.077061][ T8269] loop0: detected capacity change from 0 to 40427 [ 472.137016][ T8269] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 472.192251][ T8295] loop1: detected capacity change from 0 to 2048 [ 472.204620][ T8295] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 472.215914][ T8295] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 472.227039][ T8269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 472.237152][ T8295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.301326][ T8269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 472.546342][ T8269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 472.583313][ T8269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 472.787689][ T8311] Bluetooth: MGMT ver 1.22 [ 473.088118][ T8318] loop1: detected capacity change from 0 to 64 [ 473.164760][ T26] audit: type=1800 audit(1783066763.619:69): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1185" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 473.481586][ T8309] loop4: detected capacity change from 0 to 16 [ 473.544683][ T8309] erofs: (device loop4): mounted with root inode @ nid 36. [ 474.147458][ T8326] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 475.060398][ T8346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1194'. [ 475.069487][ T8346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1194'. [ 475.134779][ T8346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1194'. [ 475.150809][ T8348] loop3: detected capacity change from 0 to 128 [ 475.190199][ T8348] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 475.201916][ T8346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1194'. [ 475.230633][ T8348] hpfs: filesystem error: improperly stopped [ 475.267287][ T8348] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 475.350225][ T8348] hpfs: You really don't want any checks? You are crazy... [ 475.373704][ T8348] hpfs: hpfs_map_sector(): read error [ 475.397478][ T8348] hpfs: code page support is disabled [ 475.421128][ T8348] hpfs: hpfs_map_4sectors(): unaligned read [ 475.439619][ T8348] hpfs: hpfs_map_4sectors(): unaligned read [ 475.490267][ T8348] hpfs: filesystem error: unable to find root dir [ 475.548164][ T8348] hpfs: hpfs_map_4sectors(): unaligned read [ 475.586675][ T8348] hpfs: hpfs_map_sector(): read error [ 475.623356][ T8361] hpfs: hpfs_map_4sectors(): unaligned read [ 475.713598][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1201'. [ 475.758675][ T8365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'. [ 475.853558][ T4361] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 476.102147][ T4361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.136148][ T4361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.221126][ T26] audit: type=1326 audit(1783066766.629:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.2.1204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06d4d9de59 code=0x0 [ 476.250453][ T4361] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 476.932254][ T4361] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 476.941481][ T4361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.958843][ T4361] usb 5-1: config 0 descriptor?? [ 477.640178][ T4774] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 477.738637][ T4361] steelseries_srws1 0003:1038:1410.000D: unknown main item tag 0x0 [ 477.766197][ T4361] steelseries_srws1 0003:1038:1410.000D: unknown main item tag 0x0 [ 477.806826][ T4361] steelseries_srws1 0003:1038:1410.000D: unknown main item tag 0x0 [ 477.851730][ T4361] steelseries_srws1 0003:1038:1410.000D: unknown main item tag 0x0 [ 477.868931][ T4361] steelseries_srws1 0003:1038:1410.000D: item fetching failed at offset 6/7 [ 477.915862][ T4361] steelseries_srws1 0003:1038:1410.000D: parse failed [ 477.944158][ T4774] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 477.964812][ T4361] steelseries_srws1: probe of 0003:1038:1410.000D failed with error -22 [ 477.985612][ T4774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.010429][ T4361] usb 5-1: USB disconnect, device number 17 [ 478.038536][ T4774] usb 4-1: config 0 descriptor?? [ 478.065306][ T4774] cp210x 4-1:0.0: cp210x converter detected [ 478.470936][ T4774] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 478.735377][ T4774] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 478.770229][ T4774] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 478.888560][ T4774] usb 4-1: cp210x converter now attached to ttyUSB0 [ 478.934192][ T4774] usb 4-1: USB disconnect, device number 15 [ 478.985411][ T4774] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 479.028450][ T4774] cp210x 4-1:0.0: device disconnected [ 480.196188][ T26] audit: type=1326 audit(1783066769.909:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.2.1220" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06d4d9de59 code=0x0 [ 480.760303][ T6599] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 480.960098][ T6599] usb 2-1: Using ep0 maxpacket: 8 [ 480.967292][ T6599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.989101][ T6599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.005547][ T6599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.029075][ T6599] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 481.047920][ T6599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.083187][ T6599] usb 2-1: config 0 descriptor?? [ 481.660417][ T6599] kye 0003:0458:4018.000E: unknown main item tag 0x0 [ 481.690187][ T6599] kye 0003:0458:4018.000E: unknown main item tag 0x0 [ 481.707891][ T6599] kye 0003:0458:4018.000E: item fetching failed at offset 3/5 [ 481.737010][ T6599] kye 0003:0458:4018.000E: parse failed [ 481.742869][ T6599] kye: probe of 0003:0458:4018.000E failed with error -22 [ 481.854104][ T6599] usb 2-1: USB disconnect, device number 10 [ 481.920322][ T129] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 482.100109][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 482.107400][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.175813][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.209085][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 482.235453][ T129] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 482.245071][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.255457][ T129] usb 4-1: config 0 descriptor?? [ 482.338927][ T8463] loop2: detected capacity change from 0 to 512 [ 482.359292][ T8463] EXT4-fs: Ignoring removed bh option [ 482.425247][ T8463] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1236: corrupted in-inode xattr [ 482.461190][ T8463] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1236: couldn't read orphan inode 15 (err -117) [ 482.480647][ T8463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 482.560291][ T22] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 482.735035][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.766351][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.783554][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.792649][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.799971][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.808477][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.817060][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.828348][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.836044][ T22] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 482.869980][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.878272][ T129] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 482.888333][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.905921][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.916560][ T129] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input14 [ 482.951497][ T22] usb 1-1: Product: syz [ 482.955880][ T22] usb 1-1: Manufacturer: syz [ 482.961307][ T22] usb 1-1: SerialNumber: syz [ 482.981270][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 483.262576][ T8459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 483.285232][ T129] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 483.357919][ T129] usb 4-1: USB disconnect, device number 16 [ 484.106076][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. [ 484.109490][ T22] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 484.268420][ T22] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 484.419711][ T22] cdc_ncm 1-1:1.0: bind() failure [ 484.493438][ T22] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 484.653249][ T22] cdc_ncm 1-1:1.1: bind() failure [ 484.735117][ T22] usb 1-1: USB disconnect, device number 16 [ 484.753161][ T8475] fido_id[8475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 484.770260][ T4361] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 485.020727][ T4361] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 485.103268][ T4361] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.415326][ T4361] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.620185][ T4361] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.728630][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.761368][ T8493] loop4: detected capacity change from 0 to 32768 [ 485.797743][ T8493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1246 (8493) [ 485.822911][ T4361] usb 4-1: invalid MIDI out EP 0 [ 485.870937][ T8493] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 485.899104][ T8493] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 485.948889][ T8493] BTRFS info (device loop4): allowing degraded mounts [ 485.976412][ T8493] BTRFS info (device loop4): turning on flush-on-commit [ 485.999107][ T8493] BTRFS info (device loop4): max_inline at 0 [ 486.031826][ T8493] BTRFS info (device loop4): setting nodatasum [ 486.056453][ T8493] BTRFS info (device loop4): turning on sync discard [ 486.102064][ T4361] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 486.109296][ T8493] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 486.172978][ T8493] BTRFS info (device loop4): trying to use backup root at mount time [ 486.184757][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.201045][ T4361] usb 4-1: USB disconnect, device number 17 [ 486.230400][ T8493] BTRFS info (device loop4): using free space tree [ 486.526219][ T8493] BTRFS info (device loop4): enabling ssd optimizations [ 486.746421][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 486.851057][ T8533] loop3: detected capacity change from 0 to 4096 [ 486.970112][ T4376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4376) [ 486.993687][ T8534] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.037922][ T26] audit: type=1800 audit(1783066777.489:72): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1253" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 489.104741][ T8565] tap0: tun_chr_ioctl cmd 1074025677 [ 489.180565][ T129] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 489.341613][ T8565] tap0: linktype set to 784 [ 489.410327][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 489.430348][ T129] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 489.456961][ T129] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 489.466921][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.475225][ T129] usb 5-1: Product: syz [ 489.480161][ T129] usb 5-1: Manufacturer: syz [ 489.484902][ T129] usb 5-1: SerialNumber: syz [ 489.520636][ T129] usb 5-1: config 0 descriptor?? [ 489.546150][ T129] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 489.556247][ T129] usb 5-1: setting power ON [ 489.562986][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 489.620597][ T129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.633612][ T129] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 489.645003][ T129] usb 5-1: media controller created [ 489.722444][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.745316][ T8555] dvb-usb: bulk message failed: -22 (3/0) [ 489.781758][ T8555] dvb-usb: bulk message failed: -22 (4/0) [ 489.803026][ T8569] cxusb: i2c rd: len=212 is too big! [ 489.803026][ T8569] [ 489.822397][ T129] usb 5-1: selecting invalid altsetting 6 [ 489.828460][ T129] usb 5-1: digital interface selection failed (-22) [ 489.848074][ T129] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 489.863951][ T129] usb 5-1: setting power OFF [ 489.874592][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 489.884768][ T129] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 489.900508][ T129] (NULL device *): no alternate interface [ 489.950167][ T4361] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 489.982504][ T129] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 490.014138][ T129] usb 5-1: USB disconnect, device number 18 [ 490.098419][ T8573] loop1: detected capacity change from 0 to 4096 [ 490.151265][ T4361] usb 4-1: Using ep0 maxpacket: 16 [ 490.158621][ T4361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.194668][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.215361][ T8576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.241598][ T4361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 490.262672][ T26] audit: type=1800 audit(1783066780.719:73): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1267" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 490.287684][ T4361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 490.322690][ T4361] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.369183][ T4361] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 490.391574][ T4361] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 490.408974][ T4361] usb 4-1: Manufacturer: syz [ 490.426754][ T4361] usb 4-1: config 0 descriptor?? [ 491.430844][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.501012][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.820166][ T4361] rc_core: IR keymap rc-hauppauge not found [ 491.826176][ T4361] Registered IR keymap rc-empty [ 491.831609][ T126] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 491.847833][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 491.900324][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 491.940992][ T4361] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 491.959329][ T4361] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 492.011316][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.020548][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 492.039652][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.075651][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.084410][ T126] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.119378][ T126] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 492.128854][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.144158][ T126] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 492.173210][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.193474][ T126] usb 5-1: Product: syz [ 492.197772][ T126] usb 5-1: Manufacturer: syz [ 492.205567][ T126] usb 5-1: SerialNumber: syz [ 492.222171][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.232580][ T8606] loop2: detected capacity change from 0 to 1024 [ 492.247305][ T126] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input16 [ 492.257482][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.310331][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.350519][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.400399][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.433856][ T4361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 492.461824][ T4361] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 492.461854][ T4361] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 492.471770][ T4361] usb 4-1: USB disconnect, device number 18 [ 492.503159][ T26] audit: type=1800 audit(1783066782.959:74): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1278" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 492.511768][ T129] usb 5-1: USB disconnect, device number 19 [ 492.552864][ T129] appletouch 5-1:1.0: input: appletouch disconnected [ 492.864661][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 493.080122][ T129] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 493.851083][ T8630] program syz.4.1287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.931913][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.947229][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.958117][ T129] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 493.977958][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.004132][ T129] usb 3-1: config 0 descriptor?? [ 494.432045][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.438933][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.476822][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.486317][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.494557][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.502794][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.509765][ T129] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 494.526863][ T129] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 494.769780][ T8657] loop0: detected capacity change from 0 to 512 [ 494.900520][ T8657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 495.190828][ T8661] loop3: detected capacity change from 0 to 512 [ 495.213842][ T8657] EXT4-fs (loop0): 1 truncate cleaned up [ 495.283559][ T6599] usb 3-1: USB disconnect, device number 11 [ 495.304752][ T8657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 495.363307][ T8661] EXT4-fs: Ignoring removed bh option [ 495.499742][ T8655] fido_id[8655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 495.650439][ T8661] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1299: corrupted in-inode xattr [ 495.768595][ T8661] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1299: couldn't read orphan inode 15 (err -117) [ 495.868633][ T8661] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 496.077750][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 496.089519][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 496.350259][ T6599] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 496.560270][ T6599] usb 2-1: Using ep0 maxpacket: 16 [ 496.577933][ T6599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 496.630542][ T6599] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 496.657183][ T6599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.676447][ T6599] usb 2-1: Product: syz [ 496.677668][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 496.697072][ T6599] usb 2-1: Manufacturer: syz [ 496.705364][ T6599] usb 2-1: SerialNumber: syz [ 496.724055][ T6599] usb 2-1: config 0 descriptor?? [ 496.777259][ T6599] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 496.796391][ T6599] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 497.564793][ T8670] loop2: detected capacity change from 0 to 32768 [ 497.716412][ T6599] em28xx 2-1:0.0: chip ID is em2800 [ 498.088803][ T6599] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 498.570952][ T6599] em28xx 2-1:0.0: board has no eeprom [ 498.680275][ T6599] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 498.690531][ T6599] em28xx 2-1:0.0: dvb set to bulk mode. [ 498.754144][ T6599] usb 2-1: USB disconnect, device number 11 [ 498.783389][ T6599] em28xx 2-1:0.0: Disconnecting em28xx [ 498.822923][ T22] em28xx 2-1:0.0: Binding DVB extension [ 501.533278][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539843][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.123389][ T22] em28xx 2-1:0.0: Registering input extension [ 502.159623][ T6599] em28xx 2-1:0.0: Closing input extension [ 502.315744][ T6599] em28xx 2-1:0.0: Freeing device [ 502.921294][ T6599] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 502.976425][ T8742] Set syz1 is full, maxelem 0 reached [ 503.014864][ T8738] loop0: detected capacity change from 0 to 4096 [ 503.024810][ T8740] loop2: detected capacity change from 0 to 4096 [ 503.042395][ T8740] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 503.150138][ T6599] usb 2-1: Using ep0 maxpacket: 16 [ 503.162005][ T8740] ntfs: volume version 3.1. [ 503.173535][ T6599] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.218868][ T6599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.262484][ T6599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 503.316718][ T6599] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 503.345986][ T6599] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.405553][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 503.563816][ T6599] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 503.718742][ T6599] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 503.875951][ T6599] usb 2-1: Manufacturer: syz [ 504.034930][ T6599] usb 2-1: config 0 descriptor?? [ 504.149418][ T8738] overlayfs: upper fs does not support tmpfile. [ 504.215310][ T8738] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 504.354653][ T8738] overlayfs: conflicting lowerdir path [ 504.685857][ T8757] loop2: detected capacity change from 0 to 512 [ 504.733452][ T8757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.760251][ T6599] rc_core: IR keymap rc-hauppauge not found [ 504.766354][ T6599] Registered IR keymap rc-empty [ 504.791679][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.827705][ T8757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 504.850221][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 504.884546][ T8757] System zones: 1-2, 4-12, 8-8 [ 504.911205][ T6599] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 504.941890][ T6599] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 505.000396][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.008163][ T8757] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1326: iget: bad i_size value: 38620345925642 [ 505.050271][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.060887][ T8757] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1326: couldn't read orphan inode 15 (err -117) [ 505.110176][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.117709][ T8757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 505.170202][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.199890][ T26] audit: type=1800 audit(1783066795.649:75): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1326" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 505.241630][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.310143][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.361144][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.405997][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.430153][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.460199][ T6599] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 505.472815][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 505.504096][ T6599] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.504124][ T6599] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.521520][ T6599] usb 2-1: USB disconnect, device number 12 [ 506.314273][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 507.590150][ T22] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 507.782078][ T22] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 507.791550][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.801881][ T22] usb 4-1: config 0 descriptor?? [ 508.226194][ T22] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 508.273762][ T22] [drm] Initialized udl on minor 2 [ 508.423543][ T22] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 508.436392][ T22] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 508.667312][ T22] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 508.675559][ T6599] usb 4-1: USB disconnect, device number 19 [ 508.699749][ T22] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 508.739887][ T22] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 509.140265][ T22] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 509.336590][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.376430][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.400276][ T22] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 509.424978][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.460164][ T8539] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 509.475252][ T22] usb 5-1: config 0 descriptor?? [ 509.530269][ T4361] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 509.675288][ T8539] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 509.694978][ T8539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.720374][ T4361] usb 1-1: Using ep0 maxpacket: 32 [ 509.738236][ T4361] usb 1-1: config 0 has no interfaces? [ 509.769074][ T4361] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 509.779080][ T8539] usb 3-1: Product: syz [ 509.808088][ T8539] usb 3-1: Manufacturer: syz [ 509.820222][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.828624][ T8539] usb 3-1: SerialNumber: syz [ 509.835632][ T8539] usb 3-1: config 0 descriptor?? [ 509.848310][ T4361] usb 1-1: config 0 descriptor?? [ 510.015122][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.032185][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.070069][ T4361] usb 1-1: USB disconnect, device number 17 [ 510.085402][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.098403][ T8539] usb 3-1: ignoring: probably an ADSL modem [ 510.110576][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.137161][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 510.150096][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.168218][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.186879][ T22] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 510.212632][ T22] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 510.455048][ T4361] usb 5-1: USB disconnect, device number 20 [ 510.504989][ T8539] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 510.657850][ T8854] fido_id[8854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 510.752926][ T8539] usb 3-1: USB disconnect, device number 12 [ 511.158247][ T8870] loop3: detected capacity change from 0 to 512 [ 511.319552][ T8870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 511.329701][ T8870] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.737958][ T8862] loop0: detected capacity change from 0 to 40427 [ 511.802886][ T8862] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 511.838500][ T8862] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 512.073025][ T8862] F2FS-fs (loop0): Found nat_bits in checkpoint [ 512.282617][ T8862] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 512.304864][ T8862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 512.417004][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 512.454208][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 513.100860][ T8908] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1376'. [ 519.678365][ T9015] device netdevsim0 entered promiscuous mode [ 520.349334][ T9002] loop0: detected capacity change from 0 to 32768 [ 520.780211][ T9002] XFS (loop0): Mounting V5 Filesystem [ 521.090271][ T9002] XFS (loop0): Ending clean mount [ 521.181958][ T9002] XFS (loop0): Quotacheck needed: Please wait. [ 521.476506][ T9002] XFS (loop0): Quotacheck: Done. [ 522.164694][ T4273] XFS (loop0): Unmounting Filesystem [ 522.602115][ T9063] loop2: detected capacity change from 0 to 64 [ 522.877459][ T9063] MINIX-fs: mounting file system with errors, running fsck is recommended [ 523.460356][ T9063] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 523.498501][ T9063] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 523.947673][ T9077] loop4: detected capacity change from 0 to 1024 [ 523.975040][ T9077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.014319][ T9077] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 524.086954][ T9077] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 524.120265][ T9077] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 524.231140][ T126] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 524.460488][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 524.477699][ T126] usb 1-1: config 6 has an invalid interface number: 221 but max is 0 [ 524.585981][ T126] usb 1-1: config 6 has no interface number 0 [ 524.658599][ T126] usb 1-1: config 6 interface 221 has no altsetting 0 [ 524.777540][ T126] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 524.906338][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.997407][ T126] usb 1-1: Product: syz [ 525.020394][ T126] usb 1-1: Manufacturer: syz [ 525.025092][ T126] usb 1-1: SerialNumber: syz [ 525.990683][ T126] f81534a_ctrl 1-1:6.221: failed to enable ports: -71 [ 526.005747][ T126] f81534a_ctrl: probe of 1-1:6.221 failed with error -71 [ 526.074134][ T126] usb 1-1: USB disconnect, device number 18 [ 528.352040][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 529.484761][ T9113] loop3: detected capacity change from 0 to 8192 [ 529.610721][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 530.679704][ T9214] loop1: detected capacity change from 0 to 256 [ 530.755793][ T9214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 530.904477][ T9214] binfmt_misc: register: failed to install interpreter file ./file0 [ 531.484982][ T9237] loop3: detected capacity change from 0 to 512 [ 531.582809][ T9237] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1456: iget: bad i_size value: 38620345925642 [ 531.606602][ T9237] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1456: couldn't read orphan inode 15 (err -117) [ 531.689451][ T9237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 531.897324][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 532.051494][ T9249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1460'. [ 533.202523][ T9244] loop1: detected capacity change from 0 to 32768 [ 533.267494][ T9244] XFS (loop1): Mounting V5 Filesystem [ 533.408867][ T9244] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 533.460511][ T9244] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 533.529459][ T9244] XFS (loop1): Ending clean mount [ 533.754781][ T4277] XFS (loop1): Unmounting Filesystem [ 533.803937][ T9272] loop0: detected capacity change from 0 to 512 [ 533.852505][ T9272] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 533.961373][ T9272] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1466: bad orphan inode 131083 [ 533.999187][ T9272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 534.239670][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 535.326478][ T9270] loop3: detected capacity change from 0 to 32768 [ 535.412174][ T9270] XFS (loop3): Mounting V5 Filesystem [ 535.494747][ T9270] XFS (loop3): Ending clean mount [ 535.719061][ T9305] loop0: detected capacity change from 0 to 256 [ 535.766670][ T4279] XFS (loop3): Unmounting Filesystem [ 535.807749][ C0] operation not supported error, dev loop0, sector 32 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 536.011817][ T4273] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 536.058205][ T4273] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 536.350964][ T9307] loop4: detected capacity change from 0 to 8192 [ 536.478204][ T9307] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 536.569269][ T9307] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 536.624204][ T9307] REISERFS (device loop4): using ordered data mode [ 536.717301][ T9307] reiserfs: using flush barriers [ 536.769811][ T9307] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 536.793202][ T9291] loop1: detected capacity change from 0 to 32768 [ 536.862429][ T9307] REISERFS (device loop4): checking transaction log (loop4) [ 537.502832][ T9317] cgroup: fork rejected by pids controller in /syz3 [ 537.664377][ T9291] XFS (loop1): Mounting V5 Filesystem [ 537.857316][ T9307] REISERFS (device loop4): Using tea hash to sort names [ 537.880936][ T9307] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 537.988248][ T9315] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 537.998270][ T9315] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 538.007944][ T9315] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 538.061822][ T9291] XFS (loop1): Ending clean mount [ 538.312323][ T4700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.568879][ T4277] XFS (loop1): Unmounting Filesystem [ 538.625753][ T4700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.822825][ T4700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.936190][ T4700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.693528][ T4700] tipc: Disabling bearer [ 540.723777][ T4700] tipc: Left network mode [ 540.828658][ T4324] Bluetooth: hci0: Frame reassembly failed (-84) [ 540.837530][ T4324] Bluetooth: hci0: Frame reassembly failed (-84) [ 541.150481][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 541.168689][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.182088][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.215027][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.223076][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 541.232845][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.303830][ T9459] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 541.624720][ T9469] loop2: detected capacity change from 0 to 2048 [ 541.697755][ T9469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.890370][ T4285] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 543.114216][ T9454] chnl_net:caif_netlink_parms(): no params data found [ 543.290364][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 544.472051][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.520711][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.555802][ T9454] device bridge_slave_0 entered promiscuous mode [ 544.641627][ T4700] device hsr_slave_0 left promiscuous mode [ 544.659681][ T4700] device hsr_slave_1 left promiscuous mode [ 544.796793][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.836097][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.013086][ T4700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.062182][ T4700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.169622][ T4700] device bridge_slave_1 left promiscuous mode [ 545.249906][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.370095][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 545.393876][ T4700] device bridge_slave_0 left promiscuous mode [ 545.448292][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.248821][ T4700] device veth1_macvtap left promiscuous mode [ 546.443650][ T4700] device veth0_macvtap left promiscuous mode [ 546.491793][ T4700] device veth1_vlan left promiscuous mode [ 546.498169][ T4700] device veth0_vlan left promiscuous mode [ 547.460409][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 548.045915][ T9560] loop1: detected capacity change from 0 to 131072 [ 548.079654][ T9560] F2FS-fs (loop1): invalid crc value [ 548.133669][ T9560] F2FS-fs (loop1): Found nat_bits in checkpoint [ 548.198969][ T9560] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 548.230292][ T9560] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 548.949840][ T9579] loop3: detected capacity change from 0 to 8 [ 548.982219][ T9579] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 549.013253][ T4451] udevd[4451]: incorrect cramfs checksum on /dev/loop3 [ 549.023065][ T9579] cramfs: empty filesystem [ 549.126277][ T4451] udevd[4451]: incorrect cramfs checksum on /dev/loop3 [ 549.289770][ T4700] team0 (unregistering): Port device team_slave_1 removed [ 549.389526][ T4700] team0 (unregistering): Port device team_slave_0 removed [ 549.459725][ T4700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.516702][ T4700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.542887][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 549.955318][ T4700] bond0 (unregistering): Released all slaves [ 550.116614][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.124213][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.152950][ T9454] device bridge_slave_1 entered promiscuous mode [ 550.227205][ T9535] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.342759][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.474948][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.773391][ T9454] team0: Port device team_slave_0 added [ 550.811283][ T9454] team0: Port device team_slave_1 added [ 550.899022][ T9598] loop1: detected capacity change from 0 to 128 [ 550.927911][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.947157][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.009009][ T9598] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 551.029347][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.070145][ T9598] hpfs: filesystem error: improperly stopped [ 551.077590][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.100304][ T9598] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 551.110598][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.181960][ T9598] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 551.195351][ T9598] hpfs: You really don't want any checks? You are crazy... [ 551.203876][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.216078][ T9598] hpfs: hpfs_map_sector(): read error [ 551.230389][ T9598] hpfs: code page support is disabled [ 551.235978][ T9598] hpfs: hpfs_map_4sectors(): unaligned read [ 551.276994][ T9598] hpfs: hpfs_map_4sectors(): unaligned read [ 551.304021][ T9598] hpfs: filesystem error: unable to find root dir [ 551.372598][ T9454] device hsr_slave_0 entered promiscuous mode [ 551.420934][ T9454] device hsr_slave_1 entered promiscuous mode [ 552.839952][ T9454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 552.890573][ T4285] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 552.890617][ T4281] Bluetooth: hci0: command 0x1003 tx timeout [ 552.978823][ T9454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 553.058425][ T9454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 553.137797][ T9454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.374157][ T9631] loop4: detected capacity change from 0 to 1024 [ 553.604842][ T9631] EXT4-fs: Ignoring removed orlov option [ 553.804901][ T9631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 554.123503][ T9631] EXT4-fs (loop4): shut down requested (1) [ 555.595195][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 555.979307][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.065132][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.093311][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.124762][ T9649] loop1: detected capacity change from 0 to 256 [ 556.133752][ T9454] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.199139][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.220763][ T9649] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 556.243543][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.270759][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.277998][ T4700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.332859][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.350218][ T4361] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 556.367694][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.389741][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.440806][ T4700] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.447985][ T4700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.511025][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.551073][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.572365][ T4361] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 556.591074][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.608398][ T9656] loop2: detected capacity change from 0 to 2048 [ 556.610189][ T4361] usb 5-1: config 0 has no interface number 0 [ 556.628002][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.637114][ T4361] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.789574][ T9656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 556.851237][ T4361] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 556.880453][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.016340][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.031857][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.147391][ T4361] usb 5-1: Product: syz [ 557.203911][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.240535][ T4361] usb 5-1: Manufacturer: syz [ 557.298665][ T4361] usb 5-1: SerialNumber: syz [ 557.451668][ T4361] usb 5-1: config 0 descriptor?? [ 557.556734][ T4361] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 557.617971][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 557.722487][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.741315][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.765623][ T4321] usb 5-1: USB disconnect, device number 21 [ 557.788502][ T4321] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 557.789340][ T9772] loop2: detected capacity change from 0 to 256 [ 557.828198][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.842095][ T9772] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 557.887234][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.932212][ T9454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.358634][ T9787] loop2: detected capacity change from 0 to 512 [ 558.471240][ T9787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 558.501884][ T9787] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 558.717467][ T9794] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 559.841394][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 560.049721][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 560.121015][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.128619][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 560.150785][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 560.185598][ T9454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.193841][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 560.212337][ T9785] loop1: detected capacity change from 0 to 40427 [ 560.233203][ T9804] loop4: detected capacity change from 0 to 1024 [ 560.264936][ T9785] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 560.281984][ T9804] EXT4-fs: Ignoring removed bh option [ 560.307875][ T9785] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 560.350246][ T9785] F2FS-fs (loop1): invalid crc value [ 560.393071][ T9785] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 560.421392][ T9804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 560.470398][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 560.500658][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 560.614790][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 560.674670][ T9795] loop3: detected capacity change from 0 to 32768 [ 560.741274][ T9785] F2FS-fs (loop1): Start checkpoint disabled! [ 560.754095][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 560.847612][ T9795] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 560.847612][ T9795] [ 560.876391][ T9785] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 560.890240][ T9785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 560.933570][ T9795] ERROR: (device loop3): remounting filesystem as read-only [ 561.446812][ T9819] syz.1.1548: attempt to access beyond end of device [ 561.446812][ T9819] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 561.779681][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 561.875645][ T4700] kworker/u4:14: attempt to access beyond end of device [ 561.875645][ T4700] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 561.942465][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 562.000627][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 562.973775][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.980483][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.026560][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 563.056448][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 563.090429][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 563.207710][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 563.252591][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 563.336728][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.352695][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.388946][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 563.399619][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.418069][ T9454] device veth0_vlan entered promiscuous mode [ 563.427541][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 563.442870][ T108] BUG: Bad page state in process jfsCommit pfn:7e833 [ 563.457047][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.466801][ T108] page:ffffea0001fa0cc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7e833 [ 563.513389][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.524886][ T108] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 563.555866][ T9454] device veth1_vlan entered promiscuous mode [ 563.565713][ T108] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 563.607016][ T108] raw: 000000000000001c ffff88805814c0f8 00000000ffffffff 0000000000000000 [ 563.637916][ T108] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 563.649036][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 563.667928][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 563.679373][ T108] page_owner tracks the page as allocated [ 563.695159][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 563.707150][ T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9795, tgid 9793 (syz.3.1549), ts 560788079039, free_ts 560692291261 [ 563.744082][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 563.761429][ T9454] device veth0_macvtap entered promiscuous mode [ 563.795381][ T108] post_alloc_hook+0x173/0x1a0 [ 563.818454][ T9454] device veth1_macvtap entered promiscuous mode [ 563.825592][ T108] get_page_from_freelist+0x206b/0x2180 [ 563.838087][ T108] __alloc_pages+0x1ec/0x4f0 [ 563.843188][ T108] folio_alloc+0x1c/0x60 [ 563.847678][ T108] filemap_alloc_folio+0xdb/0x480 [ 563.858978][ T108] do_read_cache_folio+0x1b9/0x790 [ 563.864674][ T108] do_read_cache_page+0x32/0x230 [ 563.869793][ T108] __get_metapage+0x319/0xfb0 [ 563.884064][ T108] diRead+0x6e6/0xbb0 [ 563.888230][ T108] jfs_iget+0x89/0x3f0 [ 563.898814][ T108] jfs_fill_super+0x6f8/0xab0 [ 563.902950][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.914418][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 563.923041][ T108] mount_bdev+0x28a/0x3c0 [ 563.937221][ T108] legacy_get_tree+0xe6/0x180 [ 563.943121][ T108] vfs_get_tree+0x88/0x270 [ 563.947693][ T108] do_new_mount+0x247/0xa40 [ 563.958240][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.968951][ T108] __se_sys_mount+0x2e3/0x3d0 [ 563.979554][ T108] page last free stack trace: [ 563.985280][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.003570][ T108] free_unref_page_prepare+0x8e5/0x9e0 [ 564.015008][ T108] free_unref_page_list+0xbb/0x8e0 [ 564.023808][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.037646][ T108] release_pages+0x20d1/0x2340 [ 564.045530][ T108] tlb_flush_mmu+0x105/0x220 [ 564.053993][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.067418][ T108] tlb_finish_mmu+0xf0/0x220 [ 564.076230][ T108] exit_mmap+0x388/0x970 [ 564.083317][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.104262][ T108] __mmput+0x118/0x3a0 [ 564.113057][ T108] exit_mm+0x24d/0x350 [ 564.122382][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.141463][ T108] do_exit+0x958/0x2570 [ 564.153697][ T108] do_group_exit+0x229/0x2e0 [ 564.158462][ T108] get_signal+0x1259/0x1340 [ 564.165947][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.184545][ T108] arch_do_signal_or_restart+0xc4/0x1310 [ 564.192098][ T108] exit_to_user_mode_loop+0x70/0x110 [ 564.199341][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.216023][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 564.225986][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 564.238943][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 564.257611][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 564.265726][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 564.274190][ T108] do_syscall_64+0x58/0xa0 [ 564.286082][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 564.286662][ T9839] loop1: detected capacity change from 0 to 256 [ 564.300877][ T108] Modules linked in: [ 564.304980][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 564.312227][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.322341][ T108] Call Trace: [ 564.325729][ T108] [ 564.328770][ T108] dump_stack_lvl+0x188/0x24e [ 564.333584][ T108] ? show_regs_print_info+0x12/0x12 [ 564.338964][ T108] ? swiotlb_print_info+0x60/0x60 [ 564.344075][ T108] ? dump_page+0x9df/0x1290 [ 564.348696][ T108] bad_page+0x14b/0x170 [ 564.352996][ T108] free_unref_page_prepare+0x447/0x9e0 [ 564.358534][ T108] free_unref_page+0x2e/0x3f0 [ 564.363265][ T108] txUnlock+0x275/0xcb0 [ 564.367478][ T108] ? _raw_spin_lock_irqsave+0x100/0x100 [ 564.373161][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 564.378424][ T108] jfs_lazycommit+0x588/0xa90 [ 564.383169][ T108] ? txFreelock+0x5a0/0x5a0 [ 564.387728][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 564.393681][ T108] ? do_task_dead+0xd0/0xd0 [ 564.398324][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 564.404279][ T108] ? __kthread_parkme+0x71/0x1c0 [ 564.409403][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 564.414506][ T108] kthread+0x29d/0x330 [ 564.418624][ T108] ? txFreelock+0x5a0/0x5a0 [ 564.423192][ T108] ? kthread_blkcg+0xd0/0xd0 [ 564.427841][ T108] ret_from_fork+0x1f/0x30 [ 564.432411][ T108] [ 564.444200][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 564.456341][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.467723][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.480661][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.498153][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.539191][ T9839] FAT-fs (loop1): Directory bread(block 64) failed [ 564.559868][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.580644][ T9839] FAT-fs (loop1): Directory bread(block 65) failed [ 564.587497][ T9839] FAT-fs (loop1): Directory bread(block 66) failed [ 564.588203][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.607561][ T9839] FAT-fs (loop1): Directory bread(block 67) failed [ 564.630075][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 564.642014][ T9839] FAT-fs (loop1): Directory bread(block 68) failed [ 564.645625][ T9454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.648586][ T9839] FAT-fs (loop1): Directory bread(block 69) failed [ 564.676590][ T9454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.713292][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.718876][ T9839] FAT-fs (loop1): Directory bread(block 70) failed [ 564.732804][ T9839] FAT-fs (loop1): Directory bread(block 71) failed [ 564.747341][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 564.757353][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.777419][ T9839] FAT-fs (loop1): Directory bread(block 72) failed [ 564.801171][ T9454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.811203][ T108] Disabling lock debugging due to kernel taint [ 564.817499][ T108] page:ffffea0001fa0cc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7e833 [ 564.820834][ T9839] FAT-fs (loop1): Directory bread(block 73) failed [ 564.831071][ T9454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.843261][ T108] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 564.854830][ T9454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.864458][ T108] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 564.874718][ T9454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.885201][ T108] raw: 000000000000001c ffff88805814c0f8 00000000ffffffff 0000000000000000 [ 564.906991][ T108] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 564.922132][ T4280] EXT4-fs error: 9 callbacks suppressed [ 564.922148][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 564.922993][ T108] page_owner tracks the page as allocated [ 564.966923][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 565.003780][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.009590][ T108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9795, tgid 9793 (syz.3.1549), ts 560788079039, free_ts 560692291261 [ 565.043281][ T108] post_alloc_hook+0x173/0x1a0 [ 565.048118][ T108] get_page_from_freelist+0x206b/0x2180 [ 565.054112][ T108] __alloc_pages+0x1ec/0x4f0 [ 565.058770][ T108] folio_alloc+0x1c/0x60 [ 565.063274][ T108] filemap_alloc_folio+0xdb/0x480 [ 565.068563][ T108] do_read_cache_folio+0x1b9/0x790 [ 565.074148][ T108] do_read_cache_page+0x32/0x230 [ 565.090184][ T108] __get_metapage+0x319/0xfb0 [ 565.094987][ T108] diRead+0x6e6/0xbb0 [ 565.099019][ T108] jfs_iget+0x89/0x3f0 [ 565.120010][ T108] jfs_fill_super+0x6f8/0xab0 [ 565.129403][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.149203][ T108] mount_bdev+0x28a/0x3c0 [ 565.153648][ T108] legacy_get_tree+0xe6/0x180 [ 565.158369][ T108] vfs_get_tree+0x88/0x270 [ 565.163096][ T108] do_new_mount+0x247/0xa40 [ 565.167785][ T108] __se_sys_mount+0x2e3/0x3d0 [ 565.172727][ T108] page last free stack trace: [ 565.177502][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 565.189173][ T108] free_unref_page_prepare+0x8e5/0x9e0 [ 565.194894][ T108] free_unref_page_list+0xbb/0x8e0 [ 565.202397][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.218364][ T108] release_pages+0x20d1/0x2340 [ 565.231298][ T108] tlb_flush_mmu+0x105/0x220 [ 565.236010][ T108] tlb_finish_mmu+0xf0/0x220 [ 565.241459][ T108] exit_mmap+0x388/0x970 [ 565.245795][ T108] __mmput+0x118/0x3a0 [ 565.249934][ T108] exit_mm+0x24d/0x350 [ 565.255209][ T108] do_exit+0x958/0x2570 [ 565.259444][ T108] do_group_exit+0x229/0x2e0 [ 565.265138][ T108] get_signal+0x1259/0x1340 [ 565.269850][ T108] arch_do_signal_or_restart+0xc4/0x1310 [ 565.276701][ T108] exit_to_user_mode_loop+0x70/0x110 [ 565.282846][ T108] exit_to_user_mode_prepare+0xee/0x180 [ 565.288496][ T108] syscall_exit_to_user_mode+0x16/0x40 [ 565.296094][ T108] do_syscall_64+0x58/0xa0 [ 565.301216][ T108] ------------[ cut here ]------------ [ 565.306734][ T108] kernel BUG at include/linux/mm.h:1146! [ 565.326868][ T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 565.333175][ T108] CPU: 0 PID: 108 Comm: jfsCommit Tainted: G B syzkaller #0 [ 565.341888][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.344591][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.351982][ T108] RIP: 0010:put_metapage+0x244/0x330 [ 565.352018][ T108] Code: 38 c1 0f 8c 31 ff ff ff 4c 89 ef e8 86 27 e1 fe e9 24 ff ff ff e8 cc ff 8f fe 48 8b 3c 24 48 c7 c6 c0 02 c6 8a e8 fc 1d cb fe <0f> 0b 48 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 89 03 90 fe 48 89 2c [ 565.396267][ T108] RSP: 0018:ffffc90002d07cf0 EFLAGS: 00010246 [ 565.402397][ T108] RAX: 56093580ec6f7a00 RBX: ffff88805814c0f8 RCX: 56093580ec6f7a00 [ 565.410399][ T108] RDX: 0000000000000000 RSI: ffffffff8adf4140 RDI: ffffffff8adf4100 [ 565.418420][ T108] RBP: 000000000000007f R08: ffffffff8e2123ef R09: 1ffffffff1c4247d [ 565.426476][ T108] R10: dffffc0000000000 R11: fffffbfff1c4247e R12: ffff88805814c120 [ 565.432612][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 565.434469][ T108] R13: ffffea0001fa0cf4 R14: 1ffff1100b029824 R15: 1ffff1100b029831 [ 565.448953][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.453833][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 565.453854][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.453869][ T108] CR2: 00007f14153ed2f8 CR3: 000000005b7bd000 CR4: 00000000003506f0 [ 565.453888][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.453901][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.453915][ T108] Call Trace: [ 565.453922][ T108] [ 565.453933][ T108] txUnlock+0x426/0xcb0 [ 565.453970][ T108] jfs_lazycommit+0x588/0xa90 [ 565.529512][ T108] ? txFreelock+0x5a0/0x5a0 [ 565.534086][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 565.540041][ T108] ? do_task_dead+0xd0/0xd0 [ 565.544615][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 565.550568][ T108] ? __kthread_parkme+0x71/0x1c0 [ 565.555572][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 565.560661][ T108] kthread+0x29d/0x330 [ 565.564774][ T108] ? txFreelock+0x5a0/0x5a0 [ 565.569332][ T108] ? kthread_blkcg+0xd0/0xd0 [ 565.573976][ T108] ret_from_fork+0x1f/0x30 [ 565.578465][ T108] [ 565.581530][ T108] Modules linked in: [ 565.587137][ T108] ---[ end trace 0000000000000000 ]--- [ 565.592750][ T108] RIP: 0010:put_metapage+0x244/0x330 [ 565.598180][ T108] Code: 38 c1 0f 8c 31 ff ff ff 4c 89 ef e8 86 27 e1 fe e9 24 ff ff ff e8 cc ff 8f fe 48 8b 3c 24 48 c7 c6 c0 02 c6 8a e8 fc 1d cb fe <0f> 0b 48 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 89 03 90 fe 48 89 2c [ 565.620894][ T108] RSP: 0018:ffffc90002d07cf0 EFLAGS: 00010246 [ 565.627125][ T108] RAX: 56093580ec6f7a00 RBX: ffff88805814c0f8 RCX: 56093580ec6f7a00 [ 565.635302][ T108] RDX: 0000000000000000 RSI: ffffffff8adf4140 RDI: ffffffff8adf4100 [ 565.646544][ T9454] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 565.659030][ T108] RBP: 000000000000007f R08: ffffffff8e2123ef R09: 1ffffffff1c4247d [ 565.659101][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.678797][ T108] R10: dffffc0000000000 R11: fffffbfff1c4247e R12: ffff88805814c120 [ 565.695048][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 565.695887][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.755858][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.762670][ T9454] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 565.778783][ T108] R13: ffffea0001fa0cf4 R14: 1ffff1100b029824 R15: 1ffff1100b029831 [ 565.787185][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.806558][ T4280] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.826341][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.833635][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 565.855339][ T4280] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 565.867073][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.870743][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.884304][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.892680][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 565.900838][ T4280] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /300/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 565.903065][ T108] CR2: 00007f5862273a90 CR3: 00000000681ec000 CR4: 00000000003506f0 [ 565.960452][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.973901][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.983310][ T108] Kernel panic - not syncing: Fatal exception [ 565.990060][ T108] Kernel Offset: disabled [ 565.994425][ T108] Rebooting in 86400 seconds..