last executing test programs: 1m9.28907236s ago: executing program 4 (id=1122): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000200)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb5e530554ebc8154bf392bcf9c46a259c62be8c1cd5b367b66", 0x2d}], 0x2}}], 0x1, 0x0) 1m9.126517938s ago: executing program 4 (id=1126): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xe9) 1m8.600110265s ago: executing program 4 (id=1131): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x10040004) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) io_setup(0x3, &(0x7f0000002640)=0x0) io_submit(r10, 0x2, &(0x7f0000003b00)=[&(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x3088, r9, 0x0}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0x8, r9, 0x0, 0x0, 0x6, 0x0, 0x1}]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000240)=[{0xc7, 0x5, 0xc3, 0xa5c}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000300)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1m7.441674005s ago: executing program 4 (id=1138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m7.119850432s ago: executing program 4 (id=1141): r0 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x1000000) 1m5.959035182s ago: executing program 4 (id=1149): r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) 1m4.724291706s ago: executing program 32 (id=1149): r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) 8.670229182s ago: executing program 0 (id=1418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000340)=ANY=[]) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @raw_data="6e6aa1b0d844001f1bc6be7f2fd5d9f2569081e6aa07dc6584555465ba268102c2632af0a437a090d074487cd75f089648471e7701b2b38a3c95b7114a261ed9295b9154bbc7e92d3728019f9b6f047b7e7caefcfe4be3eb727bbbbf70b86bbef7cf647538ea80dcb94c8357a257537e503edf22910ac79f3338622efc33e63a6bad85dbbb09ce8f6380f76504796605825af3f604bd869831b7ea4cb84830ac185c9a5537e4928b238dba151f5616e49c3262c99fcb7f8a42965b9b28067ef4f511a85aa08932d8"}) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, &(0x7f0000003000)=""/4128, 0x0, 0x1020, 0x1}, 0x28) 7.978779218s ago: executing program 2 (id=1421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000340)=ANY=[]) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @raw_data="6e6aa1b0d844001f1bc6be7f2fd5d9f2569081e6aa07dc6584555465ba268102c2632af0a437a090d074487cd75f089648471e7701b2b38a3c95b7114a261ed9295b9154bbc7e92d3728019f9b6f047b7e7caefcfe4be3eb727bbbbf70b86bbef7cf647538ea80dcb94c8357a257537e503edf22910ac79f3338622efc33e63a6bad85dbbb09ce8f6380f76504796605825af3f604bd869831b7ea4cb84830ac185c9a5537e4928b238dba151f5616e49c3262c99fcb7f8a42965b9b28067ef4f511a85aa08932d8"}) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, &(0x7f0000003000)=""/4128, 0x0, 0x1020, 0x1}, 0x28) 7.023186587s ago: executing program 0 (id=1423): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002540)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x3, 0xd, 0xb, 0x8, 0x5, 0x1, 0xc, 0xd, 0x6, 0xa, 0xa, 0xd, 0xe, 0x10, 0x1, 0xe], 0x0, [0x1, 0x4, 0x8, 0x101, 0x5, 0x981, 0x7, 0x6, 0x8, 0x8, 0x51, 0x7, 0x2, 0x4, 0x7, 0xff1f], [0x6, 0x0, 0x3, 0x8, 0x5, 0x7, 0xe87, 0xc0, 0xe, 0x99f3, 0x1, 0xa692, 0x3, 0x8, 0x9, 0x8]}}}}]}, 0x88}}, 0x0) 6.437631327s ago: executing program 2 (id=1424): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10040004) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) io_setup(0x3, &(0x7f0000002640)=0x0) io_submit(r10, 0x2, &(0x7f0000003b00)=[&(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x3088, r9, 0x0}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0x8, r9, 0x0, 0x0, 0x6, 0x0, 0x1}]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000300)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 6.235688188s ago: executing program 0 (id=1425): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r3}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 5.23510825s ago: executing program 2 (id=1428): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5.187596142s ago: executing program 0 (id=1429): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 4.789765252s ago: executing program 1 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 4.655850519s ago: executing program 2 (id=1435): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100", 0x4c}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4.482475839s ago: executing program 1 (id=1436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000340)=ANY=[]) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @raw_data="6e6aa1b0d844001f1bc6be7f2fd5d9f2569081e6aa07dc6584555465ba268102c2632af0a437a090d074487cd75f089648471e7701b2b38a3c95b7114a261ed9295b9154bbc7e92d3728019f9b6f047b7e7caefcfe4be3eb727bbbbf70b86bbef7cf647538ea80dcb94c8357a257537e503edf22910ac79f3338622efc33e63a6bad85dbbb09ce8f6380f76504796605825af3f604bd869831b7ea4cb84830ac185c9a5537e4928b238dba151f5616e49c3262c99fcb7f8a42965b9b28067ef4f511a85aa08932d8"}) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, &(0x7f0000003000)=""/4128, 0x0, 0x1020, 0x1}, 0x28) 4.170519685s ago: executing program 2 (id=1437): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 3.341573727s ago: executing program 1 (id=1439): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10040004) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) io_setup(0x3, &(0x7f0000002640)=0x0) io_submit(r10, 0x2, &(0x7f0000003b00)=[&(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x3088, r9, 0x0}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0x8, r9, 0x0, 0x0, 0x6, 0x0, 0x1}]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000300)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.10800184s ago: executing program 3 (id=1441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010055, 0x0, 0x4}]}) 2.143804979s ago: executing program 5 (id=1442): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 2.065616383s ago: executing program 5 (id=1443): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x3}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f0000000380)) 2.047027634s ago: executing program 1 (id=1444): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x8d48, 0x3, 0x0, 0xfc, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) ioctl$TIOCMSET(r1, 0x5418, 0x0) 2.018437216s ago: executing program 3 (id=1445): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xc, 0x1, 0x1, 0x0, 0xc}) 1.876405093s ago: executing program 5 (id=1446): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0xb1, 0x0, 0x0, 0x5d}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 1.784289288s ago: executing program 0 (id=1447): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r0, 0xf, 0x7929, 0x1, 0x0, 0x0) 1.679751943s ago: executing program 1 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32], 0xfd, 0x1508, &(0x7f0000001b00)="$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") ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000006c0)={0x8f, 0x0, 0x2c960413a29d1673}) 1.630505196s ago: executing program 3 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004200)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x22000800) 1.587139848s ago: executing program 5 (id=1450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r5 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r5, 0x401054d5, &(0x7f0000000340)=ANY=[]) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r7, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @raw_data="6e6aa1b0d844001f1bc6be7f2fd5d9f2569081e6aa07dc6584555465ba268102c2632af0a437a090d074487cd75f089648471e7701b2b38a3c95b7114a261ed9295b9154bbc7e92d3728019f9b6f047b7e7caefcfe4be3eb727bbbbf70b86bbef7cf647538ea80dcb94c8357a257537e503edf22910ac79f3338622efc33e63a6bad85dbbb09ce8f6380f76504796605825af3f604bd869831b7ea4cb84830ac185c9a5537e4928b238dba151f5616e49c3262c99fcb7f8a42965b9b28067ef4f511a85aa08932d8"}) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, &(0x7f0000003000)=""/4128, 0x0, 0x1020, 0x1}, 0x28) 1.452395885s ago: executing program 0 (id=1451): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x40) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1.15585036s ago: executing program 3 (id=1452): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1}) 335.712993ms ago: executing program 5 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 313.577754ms ago: executing program 3 (id=1454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 175.316901ms ago: executing program 3 (id=1455): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10040004) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) io_setup(0x3, &(0x7f0000002640)=0x0) io_submit(r10, 0x2, &(0x7f0000003b00)=[&(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x3088, r9, 0x0}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0x8, r9, 0x0, 0x0, 0x6, 0x0, 0x1}]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000000300)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 167.746471ms ago: executing program 1 (id=1456): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 66.496376ms ago: executing program 5 (id=1457): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x434, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x8, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0xffffffff, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x4006, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x6522, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0x9, 0x1, 0x0, 0x3, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x1, 0x3ff]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x9) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 0s ago: executing program 2 (id=1458): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x240c0841) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) kernel console output (not intermixed with test programs): etected capacity change from 0 to 32768 [ 352.228069][ T7160] JBD2: Ignoring recovery information on journal [ 352.349577][ T7160] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 352.600632][ T7184] loop0: detected capacity change from 0 to 256 [ 352.624035][ T26] audit: type=1800 audit(1776719660.101:11): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.854" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 352.688508][ T7184] exfat: Deprecated parameter 'utf8' [ 352.761511][ T7184] exfat: Deprecated parameter 'utf8' [ 352.825095][ T7184] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 352.874739][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 352.888733][ T7186] loop1: detected capacity change from 0 to 1764 [ 353.328329][ T7169] loop4: detected capacity change from 0 to 32768 [ 353.343628][ T7190] loop0: detected capacity change from 0 to 512 [ 353.361016][ T7169] XFS (loop4): Invalid device [./file1], error=-15 [ 353.404691][ T7194] loop3: detected capacity change from 0 to 128 [ 353.467690][ T7190] EXT4-fs (loop0): 1 truncate cleaned up [ 353.512782][ T7190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 353.625432][ T7194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 353.625779][ T7194] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.634934][ T26] audit: type=1800 audit(1776719661.111:12): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.868" name="file0" dev="overlay" ino=13 res=0 errno=0 [ 353.650378][ T7201] loop1: detected capacity change from 0 to 256 [ 353.778372][ T7201] FAT-fs (loop1): Directory bread(block 64) failed [ 353.778414][ T7201] FAT-fs (loop1): Directory bread(block 65) failed [ 353.778491][ T7201] FAT-fs (loop1): Directory bread(block 66) failed [ 353.778521][ T7201] FAT-fs (loop1): Directory bread(block 67) failed [ 353.778604][ T7201] FAT-fs (loop1): Directory bread(block 68) failed [ 353.778633][ T7201] FAT-fs (loop1): Directory bread(block 69) failed [ 353.778712][ T7201] FAT-fs (loop1): Directory bread(block 70) failed [ 353.778740][ T7201] FAT-fs (loop1): Directory bread(block 71) failed [ 353.778816][ T7201] FAT-fs (loop1): Directory bread(block 72) failed [ 353.778845][ T7201] FAT-fs (loop1): Directory bread(block 73) failed [ 353.795893][ T7181] loop2: detected capacity change from 0 to 32768 [ 353.811269][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.895738][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.903675][ T4267] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 353.994736][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 354.095125][ T7181] XFS (loop2): Mounting V5 Filesystem [ 354.146570][ T4267] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 465: padding at end of block bitmap is not set [ 354.188199][ T4267] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 354.211064][ T4267] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 354.292562][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 354.329550][ T7181] XFS (loop2): Ending clean mount [ 354.665144][ T4269] XFS (loop2): Unmounting Filesystem [ 355.981543][ T7212] loop3: detected capacity change from 0 to 32768 [ 356.109864][ T7214] loop0: detected capacity change from 0 to 32768 [ 356.187592][ T6745] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 356.218378][ T7214] JBD2: Ignoring recovery information on journal [ 356.403519][ T6745] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 356.423872][ T7214] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 356.443304][ T6745] usb 3-1: config 0 has no interface number 0 [ 356.449488][ T6745] usb 3-1: config 0 interface 90 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 356.538333][ T6745] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 356.585700][ T6745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.679739][ T7227] loop1: detected capacity change from 0 to 32768 [ 356.700408][ T6745] usb 3-1: Product: syz [ 356.705399][ T6745] usb 3-1: Manufacturer: syz [ 356.710149][ T6745] usb 3-1: SerialNumber: syz [ 356.754538][ T7237] No such timeout policy "syz1" [ 356.901166][ T6745] usb 3-1: config 0 descriptor?? [ 357.156755][ T7227] XFS (loop1): Mounting V5 Filesystem [ 357.241674][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 357.407552][ T6745] powermate: Expected payload of 3--6 bytes, found 17 bytes! [ 357.430252][ T6745] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.90/input/input17 [ 357.516836][ T7227] XFS (loop1): Ending clean mount [ 357.528573][ T7227] XFS (loop1): Quotacheck needed: Please wait. [ 357.553848][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 357.562996][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 357.584541][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 357.754849][ T22] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 357.766213][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.775079][ T22] usb 4-1: Product: syz [ 357.779372][ T22] usb 4-1: Manufacturer: syz [ 357.785445][ T7227] XFS (loop1): Quotacheck: Done. [ 357.806617][ T22] usb 4-1: SerialNumber: syz [ 357.842751][ T22] usb 4-1: config 0 descriptor?? [ 357.848866][ T7235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 357.878613][ T22] hub 4-1:0.0: bad descriptor, ignoring hub [ 357.920541][ T22] hub: probe of 4-1:0.0 failed with error -5 [ 357.931299][ C1] powermate: config urb returned -71 [ 357.932301][ T14] usb 3-1: USB disconnect, device number 8 [ 357.936649][ C1] powermate: usb_submit_urb(config) failed [ 357.943389][ C1] powermate 3-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 357.960267][ T4271] XFS (loop1): Unmounting Filesystem [ 357.983459][ T22] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 358.244108][ T6706] usb 4-1: USB disconnect, device number 15 [ 358.548228][ T7253] loop4: detected capacity change from 0 to 64 [ 359.074940][ T7249] loop0: detected capacity change from 0 to 40427 [ 359.097602][ T7249] F2FS-fs (loop0): invalid crc value [ 359.117731][ T7249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 359.267949][ T7249] F2FS-fs (loop0): Start checkpoint disabled! [ 359.302247][ T7249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 359.357165][ T7264] loop4: detected capacity change from 0 to 512 [ 359.420058][ T7264] EXT4-fs: Ignoring removed orlov option [ 359.464135][ T7264] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 359.548476][ T7264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 359.618512][ T7264] System zones: 1-12 [ 359.698301][ T7264] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.889: corrupted in-inode xattr [ 359.745448][ T7264] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.889: couldn't read orphan inode 15 (err -117) [ 359.791307][ T7264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 359.845599][ T7259] loop3: detected capacity change from 0 to 32768 [ 359.865616][ T4421] kworker/u4:12: attempt to access beyond end of device [ 359.865616][ T4421] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 359.950603][ T7259] XFS (loop3): Mounting V5 Filesystem [ 360.090756][ T7259] XFS (loop3): Ending clean mount [ 360.401197][ T4268] XFS (loop3): Unmounting Filesystem [ 360.532230][ T7260] loop2: detected capacity change from 0 to 32768 [ 360.611701][ T7286] No such timeout policy "syz1" [ 361.018308][ T7260] JBD2: Ignoring recovery information on journal [ 361.033808][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 361.458405][ T7260] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 361.540058][ T7291] loop0: detected capacity change from 0 to 2048 [ 361.692010][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 361.968479][ T7291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 362.191206][ T7291] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.605025][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 362.641803][ T7270] loop1: detected capacity change from 0 to 32768 [ 362.716907][ T7270] (syz.1.890,7270,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 362.762363][ T7270] (syz.1.890,7270,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 362.843624][ T7298] overlayfs: Failed to create volatile/dirty file. [ 363.013309][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 363.114489][ T7305] loop3: detected capacity change from 0 to 128 [ 363.181804][ T7305] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 363.299655][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.399119][ T7305] overlayfs: upper fs needs to support d_type. [ 363.416376][ T7305] overlayfs: upper fs does not support tmpfile. [ 363.463437][ T7313] loop2: detected capacity change from 0 to 2048 [ 363.479478][ T7309] loop0: detected capacity change from 0 to 4096 [ 363.592541][ T7313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 364.643169][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 364.700832][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 366.718255][ T7348] loop1: detected capacity change from 0 to 1024 [ 366.749856][ T7327] loop0: detected capacity change from 0 to 32768 [ 366.806698][ T7348] syz.1.914: attempt to access beyond end of device [ 366.806698][ T7348] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 366.858771][ T7348] Buffer I/O error on dev loop1, logical block 2889, async page read [ 366.927620][ T7352] syz.1.914: attempt to access beyond end of device [ 366.927620][ T7352] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 366.945067][ T7358] loop3: detected capacity change from 0 to 512 [ 366.971022][ T7327] XFS (loop0): Mounting V5 Filesystem [ 367.015589][ T7327] XFS (loop0): Ending clean mount [ 367.025558][ T7348] syz.1.914: attempt to access beyond end of device [ 367.025558][ T7348] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 367.053609][ T7358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 367.069910][ T7358] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.103508][ T7348] Buffer I/O error on dev loop1, logical block 2889, async page read [ 367.114788][ T7327] XFS (loop0): Quotacheck needed: Please wait. [ 367.121329][ T26] audit: type=1800 audit(1776719674.591:13): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.914" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 367.261727][ T7333] loop2: detected capacity change from 0 to 32768 [ 367.293104][ T7327] XFS (loop0): Quotacheck: Done. [ 367.304573][ T7337] loop4: detected capacity change from 0 to 32768 [ 367.357934][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 367.434132][ T7333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 367.453723][ T7337] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 367.499192][ T7337] JBD2: Ignoring recovery information on journal [ 367.609953][ T4267] XFS (loop0): Unmounting Filesystem [ 367.680151][ T7375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.919'. [ 368.461731][ T7337] JBD2: recovery failed [ 368.465980][ T7337] (syz.4.911,7337,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 368.501590][ T7337] (syz.4.911,7337,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 368.573219][ T7337] (syz.4.911,7337,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 368.580967][ T7337] (syz.4.911,7337,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 368.605609][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 368.640453][ T7337] (syz.4.911,7337,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 369.734579][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 370.838639][ T7386] loop4: detected capacity change from 0 to 32768 [ 370.922656][ T7413] siw: device registration error -23 [ 371.928874][ T7419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.933'. [ 372.807717][ T7423] loop1: detected capacity change from 0 to 512 [ 373.093705][ T7431] loop3: detected capacity change from 0 to 256 [ 373.100873][ T7431] exfat: Deprecated parameter 'namecase' [ 373.140377][ T7431] exfat: Deprecated parameter 'namecase' [ 373.404841][ T7436] loop0: detected capacity change from 0 to 4096 [ 374.847113][ T7431] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 374.882643][ T7439] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.861586][ T7449] siw: device registration error -23 [ 376.411552][ T7449] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 377.310749][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 378.625048][ T7487] loop4: detected capacity change from 0 to 128 [ 378.702159][ T7487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 378.763520][ T7487] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.824617][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.831116][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.546053][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 379.830960][ T7501] loop4: detected capacity change from 0 to 4096 [ 381.054854][ T7502] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.715795][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 382.511012][ T7513] loop4: detected capacity change from 0 to 512 [ 382.557743][ T7513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.668860][ T7513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 382.757961][ T7513] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 382.842563][ T7513] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 382.850188][ T7513] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.963: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 382.873149][ T7526] loop2: detected capacity change from 0 to 512 [ 382.888003][ T7526] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 382.920932][ T7513] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.963: couldn't read orphan inode 13 (err -117) [ 382.949489][ T7526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 382.968490][ T7526] System zones: 1-12 [ 382.975676][ T7513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.010072][ T7526] EXT4-fs (loop2): 1 truncate cleaned up [ 383.018422][ T7526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 383.068988][ T7513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.100817][ T7513] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 383.203591][ T7513] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 383.225781][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 383.350302][ T7513] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 383.421911][ T7513] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 383.494400][ T7544] loop2: detected capacity change from 0 to 512 [ 383.697392][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 383.747118][ T7546] loop1: detected capacity change from 0 to 4096 [ 383.825177][ T7544] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 383.852685][ T7549] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.367248][ T7544] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 384.377510][ T7544] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.973: Corrupt directory, running e2fsck is recommended [ 384.426468][ T7544] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 384.502292][ T7544] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.973: corrupted in-inode xattr [ 384.583030][ T7552] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 384.787124][ T7544] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.973: couldn't read orphan inode 15 (err -117) [ 384.858527][ T7556] capability: warning: `syz.3.978' uses deprecated v2 capabilities in a way that may be insecure [ 384.885628][ T7544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 385.288415][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 385.331705][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.979'. [ 385.767614][ T7577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.996'. [ 386.121057][ T7570] loop1: detected capacity change from 0 to 4096 [ 386.310398][ T7570] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 386.682033][ T7570] ntfs: volume version 3.1. [ 387.251226][ T7592] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 388.473922][ T7580] loop4: detected capacity change from 0 to 32768 [ 388.561061][ T7580] JBD2: Ignoring recovery information on journal [ 388.775355][ T7580] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 388.910298][ T26] audit: type=1800 audit(1776719696.381:14): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.986" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 388.950421][ T7620] No such timeout policy "syz1" [ 389.114873][ T4270] ocfs2: Unmounting device (7,4) on (node local) [ 389.348549][ T7627] loop2: detected capacity change from 0 to 512 [ 389.426216][ T7627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.479228][ T7627] EXT4-fs (loop2): orphan cleanup on readonly fs [ 389.528855][ T7627] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 389.583203][ T7606] loop3: detected capacity change from 0 to 32768 [ 389.585763][ T7627] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 389.619577][ T7606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.997 (7606) [ 389.633102][ T7627] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1003: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 389.692263][ T7606] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.728365][ T7606] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 389.749328][ T7627] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1003: couldn't read orphan inode 13 (err -117) [ 389.749723][ T7627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 389.789111][ T7606] BTRFS info (device loop3): using free space tree [ 389.820356][ T7627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.859986][ T7627] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 389.884229][ T7627] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 389.890406][ T7627] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 389.918303][ T7627] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 390.008297][ T7635] loop4: detected capacity change from 0 to 4096 [ 390.102167][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 390.109444][ T7648] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.307487][ T7606] BTRFS info (device loop3): enabling ssd optimizations [ 390.743571][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.891707][ T6295] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 391.093322][ T6295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.119912][ T6295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.158301][ T7668] loop2: detected capacity change from 0 to 512 [ 391.164865][ T6295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.201640][ T6295] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 391.242999][ T7668] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.254231][ T6295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.326321][ T6295] usb 5-1: config 0 descriptor?? [ 391.360269][ T7668] EXT4-fs (loop2): 1 truncate cleaned up [ 391.411608][ T7668] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 391.490204][ T7676] loop3: detected capacity change from 0 to 512 [ 391.590395][ T7680] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1015'. [ 391.594298][ T7678] loop0: detected capacity change from 0 to 4096 [ 391.607050][ T7676] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 391.619093][ T7676] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 391.636423][ T7676] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1008: Corrupt directory, running e2fsck is recommended [ 391.644361][ T7678] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 391.659818][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 391.662911][ T7676] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 391.675046][ T7676] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1008: corrupted in-inode xattr [ 391.697685][ T7676] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1008: couldn't read orphan inode 15 (err -117) [ 391.710614][ T7676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 391.778858][ T6295] wacom 0003:056A:0010.0007: unexpected long global item [ 391.801135][ T7678] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 391.813260][ T6295] wacom 0003:056A:0010.0007: parse failed [ 391.829672][ T6295] wacom: probe of 0003:056A:0010.0007 failed with error -22 [ 391.927920][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 391.964046][ T4457] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 391.980130][ T4267] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 392.043165][ T4267] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 392.050245][ T4267] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 392.054761][ T6295] usb 5-1: USB disconnect, device number 15 [ 392.088131][ T4457] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 392.102568][ T4267] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 392.166884][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1018'. [ 392.235718][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'. [ 392.429086][ T7701] loop0: detected capacity change from 0 to 64 [ 392.617324][ T4452] kworker/u4:13: attempt to access beyond end of device [ 392.617324][ T4452] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 392.669327][ T4452] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 392.849218][ T7713] loop4: detected capacity change from 0 to 16 [ 392.866334][ T7710] Bluetooth: MGMT ver 1.22 [ 392.901275][ T7713] erofs: (device loop4): mounted with root inode @ nid 36. [ 392.957871][ T26] audit: type=1800 audit(1776719700.431:15): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1029" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 393.824467][ T7733] loop4: detected capacity change from 0 to 32768 [ 393.864670][ T7733] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 393.872408][ T7733] gfs2: fsid=.: Now mounting FS (format 0)... [ 393.889702][ T7733] gfs2: fsid=.: can't read superblock: -22 [ 393.929688][ T7706] loop3: detected capacity change from 0 to 32768 [ 394.013271][ T7706] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1026 (7706) [ 394.372095][ T7706] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 394.401724][ T7706] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 394.410611][ T7706] BTRFS info (device loop3): using free space tree [ 394.623480][ T7706] BTRFS info (device loop3): enabling ssd optimizations [ 394.902496][ T4268] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 395.064513][ T7764] loop4: detected capacity change from 0 to 4096 [ 395.322023][ T7764] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 395.358784][ T7764] ntfs3: loop4: Failed to load $Extend. [ 395.556256][ T7731] loop0: detected capacity change from 0 to 40427 [ 395.681715][ T7775] No such timeout policy "syz1" [ 396.014616][ T7731] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 396.085963][ T7731] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 396.172467][ T7731] F2FS-fs (loop0): invalid crc value [ 396.372415][ T7731] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 397.356517][ T7785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.381762][ T7796] loop3: detected capacity change from 0 to 8 [ 397.471283][ T7796] SQUASHFS error: lzo decompression failed, data probably corrupt [ 397.513959][ T7796] SQUASHFS error: Failed to read block 0x28d: -5 [ 397.520390][ T7796] SQUASHFS error: Unable to read metadata cache entry [28b] [ 397.583569][ T7796] SQUASHFS error: Unable to read inode 0x11f [ 397.871512][ T6747] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 397.986149][ T7812] loop0: detected capacity change from 0 to 256 [ 398.248987][ T7812] FAT-fs (loop0): Directory bread(block 64) failed [ 398.266138][ T7812] FAT-fs (loop0): Directory bread(block 65) failed [ 398.301487][ T6747] usb 2-1: Using ep0 maxpacket: 32 [ 398.319757][ T7812] FAT-fs (loop0): Directory bread(block 66) failed [ 398.321549][ T6747] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 398.329203][ T7812] FAT-fs (loop0): Directory bread(block 67) failed [ 398.365855][ T6747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.370540][ T7812] FAT-fs (loop0): Directory bread(block 68) failed [ 398.386881][ T6747] usb 2-1: Product: syz [ 398.391219][ T6747] usb 2-1: Manufacturer: syz [ 398.396294][ T7812] FAT-fs (loop0): Directory bread(block 69) failed [ 398.413294][ T6747] usb 2-1: SerialNumber: syz [ 398.415231][ T7812] FAT-fs (loop0): Directory bread(block 70) failed [ 398.428922][ T6747] usb 2-1: config 0 descriptor?? [ 398.445211][ T7812] FAT-fs (loop0): Directory bread(block 71) failed [ 398.449523][ T6747] dw2102: su3000_identify_state [ 398.461723][ T7812] FAT-fs (loop0): Directory bread(block 72) failed [ 398.461875][ T6747] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 398.468615][ T7812] FAT-fs (loop0): Directory bread(block 73) failed [ 398.497640][ T6747] dw2102: su3000_power_ctrl: 1, initialized 0 [ 398.522528][ T6747] dvb-usb: bulk message failed: -22 (2/0) [ 398.538072][ T6747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.548754][ T6747] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 398.559220][ T6747] usb 2-1: media controller created [ 398.565244][ T6747] dvb-usb: bulk message failed: -22 (6/0) [ 398.581473][ T6747] dw2102: i2c transfer failed. [ 398.591697][ T6747] dvb-usb: bulk message failed: -22 (6/0) [ 398.597511][ T6747] dw2102: i2c transfer failed. [ 398.621432][ T6747] dvb-usb: bulk message failed: -22 (6/0) [ 398.638805][ T6747] dw2102: i2c transfer failed. [ 398.659324][ T7805] dvb-usb: bulk message failed: -22 (4/0) [ 398.684217][ T7805] dw2102: i2c transfer failed. [ 398.689609][ T6747] dvb-usb: bulk message failed: -22 (6/0) [ 398.701461][ T6747] dw2102: i2c transfer failed. [ 398.706307][ T6747] dvb-usb: bulk message failed: -22 (6/0) [ 398.715197][ T6747] dw2102: i2c transfer failed. [ 398.722190][ T6747] dvb-usb: bulk message failed: -22 (6/0) [ 398.728032][ T6747] dw2102: i2c transfer failed. [ 398.735713][ T6747] dvb-usb: MAC address: 02:02:02:02:02:02 [ 398.757087][ T6747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.776395][ T6747] dvb-usb: bulk message failed: -22 (3/0) [ 398.782494][ T6747] dw2102: command 0x0e transfer failed. [ 398.788713][ T6747] dvb-usb: bulk message failed: -22 (3/0) [ 398.794636][ T6747] dw2102: command 0x0e transfer failed. [ 399.081244][ T7825] tipc: Enabling not permitted [ 399.111677][ T6747] dvb-usb: bulk message failed: -22 (3/0) [ 399.117602][ T6747] dw2102: command 0x0e transfer failed. [ 399.155092][ T7825] tipc: Enabling of bearer rejected, failed to enable media [ 399.185251][ T6747] dvb-usb: bulk message failed: -22 (3/0) [ 399.204116][ T7827] No such timeout policy "syz1" [ 399.217007][ T6747] dw2102: command 0x0e transfer failed. [ 399.263731][ T6747] dvb-usb: bulk message failed: -22 (1/0) [ 399.295187][ T6747] dw2102: command 0x51 transfer failed. [ 399.446855][ T6747] DVB: Unable to find symbol ds3000_attach() [ 399.471007][ T6747] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 399.565247][ T7832] syz.3.1065 (7832) used obsolete PPPIOCDETACH ioctl [ 399.591603][ T128] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 399.761671][ T6747] rc_core: IR keymap rc-su3000 not found [ 399.767725][ T6747] Registered IR keymap rc-empty [ 399.773069][ T128] usb 3-1: Using ep0 maxpacket: 8 [ 399.783069][ T128] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 399.799241][ T6747] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 399.829173][ T128] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 399.849365][ T6747] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input19 [ 399.863682][ T128] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 399.872402][ T128] usb 3-1: Product: syz [ 399.878645][ T6747] dvb-usb: schedule remote query interval to 150 msecs. [ 399.902963][ T128] usb 3-1: Manufacturer: syz [ 399.909273][ T128] usb 3-1: SerialNumber: syz [ 399.914284][ T6747] dw2102: su3000_power_ctrl: 0, initialized 1 [ 399.930809][ T6747] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 399.986967][ T6747] usb 2-1: USB disconnect, device number 13 [ 400.078835][ T6747] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 400.150572][ T128] usb 3-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 400.162648][ T128] usb 3-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 400.176947][ T128] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 400.360232][ T128] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 400.378031][ T128] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 400.402601][ T128] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 400.442194][ T128] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 400.503908][ T128] usb 3-1: USB disconnect, device number 9 [ 400.541967][ T128] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 400.559894][ T128] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 400.593392][ T128] visor 3-1:1.0: device disconnected [ 400.864560][ T7861] loop4: detected capacity change from 0 to 1024 [ 401.060585][ T4393] hfsplus: b-tree write err: -5, ino 25 [ 401.086103][ T4393] hfsplus: b-tree write err: -5, ino 4 [ 401.105794][ T4393] hfsplus: b-tree write err: -5, ino 2 [ 401.282736][ T26] audit: type=1326 audit(1776719708.761:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 401.339042][ T26] audit: type=1326 audit(1776719708.791:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 401.449467][ T26] audit: type=1326 audit(1776719708.791:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 401.601475][ T128] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 401.641961][ T26] audit: type=1326 audit(1776719708.791:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 401.793981][ T26] audit: type=1326 audit(1776719708.791:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 401.963084][ T26] audit: type=1326 audit(1776719708.791:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 402.110499][ T26] audit: type=1326 audit(1776719708.791:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a95f9c819 code=0x7ffc0000 [ 402.361616][ T7877] loop4: detected capacity change from 0 to 1024 [ 402.373473][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 402.373515][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 402.373544][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.373584][ T128] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 402.373609][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.375709][ T128] usb 3-1: config 0 descriptor?? [ 402.377582][ T7871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 402.469548][ T7881] siw: device registration error -23 [ 402.476244][ T7862] loop1: detected capacity change from 0 to 32768 [ 402.487569][ T7862] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1074 (7862) [ 402.527492][ T7862] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 402.527612][ T7862] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 402.527646][ T7862] BTRFS info (device loop1): using free space tree [ 402.542846][ T4531] hfsplus: b-tree write err: -5, ino 25 [ 402.543055][ T4531] hfsplus: b-tree write err: -5, ino 4 [ 402.543129][ T4531] hfsplus: b-tree write err: -5, ino 2 [ 402.792063][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x3 [ 402.816203][ T7862] BTRFS info (device loop1): enabling ssd optimizations [ 402.830211][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 402.877776][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 402.928455][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 402.961460][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 402.985174][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 402.999790][ T128] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 403.017416][ T128] sony 0003:1345:3008.0008: unbalanced collection at end of report description [ 403.037236][ T128] sony 0003:1345:3008.0008: parse failed [ 403.058491][ T128] sony: probe of 0003:1345:3008.0008 failed with error -22 [ 403.095747][ T128] usb 3-1: USB disconnect, device number 10 [ 403.261610][ T4271] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 403.444556][ T7905] No such timeout policy "syz1" [ 403.531669][ T6715] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop1 scanned by udevd (6715) [ 404.208285][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 406.068671][ T7944] loop1: detected capacity change from 0 to 512 [ 406.768106][ T7960] loop2: detected capacity change from 0 to 512 [ 406.862774][ T7960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 406.946134][ T7960] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1105: bad orphan inode 131083 [ 406.959006][ T7945] loop3: detected capacity change from 0 to 32768 [ 406.974027][ T7945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1099 (7945) [ 406.996210][ T7945] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 406.996884][ T7960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 407.007498][ T7945] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 407.024684][ T7945] BTRFS info (device loop3): using free space tree [ 407.192587][ T7945] BTRFS info (device loop3): enabling ssd optimizations [ 407.230565][ T7960] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.1105: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 407.264490][ T7960] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 407.282788][ T4268] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 407.562289][ T4261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop3 scanned by udevd (4261) [ 407.756674][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 407.981512][ T4571] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 408.188370][ T4571] usb 2-1: Using ep0 maxpacket: 16 [ 408.218581][ T4571] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 408.253707][ T4571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.297687][ T4571] usb 2-1: config 1 has no interface number 0 [ 408.304884][ T4571] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 408.325270][ T4571] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.369828][ T4571] usb 2-1: config 1 interface 105 has no altsetting 0 [ 408.446917][ T4571] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 408.572672][ T4571] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 408.676352][ T4571] usb 2-1: Product: syz [ 408.724978][ T4571] usb 2-1: Manufacturer: syz [ 408.785597][ T4571] usb 2-1: SerialNumber: syz [ 408.998438][ T7991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.285256][ T4571] aqc111: probe of 2-1:1.105 failed with error -22 [ 409.345422][ T7992] loop0: detected capacity change from 0 to 32768 [ 409.400601][ T7992] JBD2: Ignoring recovery information on journal [ 409.466978][ T8016] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 409.487243][ T7992] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 409.497462][ T6747] usb 2-1: USB disconnect, device number 14 [ 409.596357][ T8018] loop3: detected capacity change from 0 to 2048 [ 409.688364][ T8018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 409.768604][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 409.824059][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 409.989307][ T8028] sp0: Synchronizing with TNC [ 410.025319][ T8032] sp0: Found TNC [ 410.058609][ T8027] [U] è` [ 411.427544][ T8052] loop0: detected capacity change from 0 to 2048 [ 411.512977][ T8052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 411.537331][ T26] audit: type=1800 audit(1776719719.011:23): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1135" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 411.566162][ T8061] loop4: detected capacity change from 0 to 1024 [ 411.672995][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 411.682316][ T8061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 411.751625][ T6747] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 411.790420][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 411.805866][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 411.879211][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 411.904864][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 411.921637][ T8067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1140'. [ 411.947523][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 411.961645][ T6747] usb 2-1: Using ep0 maxpacket: 16 [ 411.968723][ T6747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.991667][ T6747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.002088][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 412.018360][ T6747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.032496][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 412.056151][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 412.071473][ T6747] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.083560][ T8066] loop0: detected capacity change from 0 to 8192 [ 412.101536][ T6747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.110052][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 412.124111][ T8071] loop3: detected capacity change from 0 to 64 [ 412.133714][ T6747] usb 2-1: config 0 descriptor?? [ 412.141102][ T8066] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.158872][ T4270] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 412.186104][ T8066] exFAT-fs (loop0): invalid fs_name [ 412.217537][ T8066] exFAT-fs (loop0): failed to read boot sector [ 412.246904][ T8066] exFAT-fs (loop0): failed to recognize exfat type [ 412.556149][ T8075] loop3: detected capacity change from 0 to 256 [ 412.566568][ T6747] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 412.601507][ T6747] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 412.654452][ T8078] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1146'. [ 412.715931][ T8075] FAT-fs (loop3): Directory bread(block 64) failed [ 412.731530][ T8075] FAT-fs (loop3): Directory bread(block 65) failed [ 412.741615][ T8075] FAT-fs (loop3): Directory bread(block 66) failed [ 412.769815][ T8075] FAT-fs (loop3): Directory bread(block 67) failed [ 412.779838][ T6747] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 412.802520][ T6747] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 412.815848][ T8075] FAT-fs (loop3): Directory bread(block 68) failed [ 412.841585][ T8075] FAT-fs (loop3): Directory bread(block 69) failed [ 412.848268][ T8075] FAT-fs (loop3): Directory bread(block 70) failed [ 412.855631][ T6747] microsoft 0003:045E:07DA.0009: no inputs found [ 412.881661][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 412.886387][ T6747] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 412.905932][ T8075] FAT-fs (loop3): Directory bread(block 71) failed [ 412.957985][ T8075] FAT-fs (loop3): Directory bread(block 72) failed [ 412.968839][ T6747] usb 2-1: USB disconnect, device number 15 [ 413.007514][ T8075] FAT-fs (loop3): Directory bread(block 73) failed [ 413.282278][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.963448][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.010332][ T8083] fido_id[8083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 414.040214][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 414.114407][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.215565][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.329743][ T8094] loop2: detected capacity change from 0 to 1024 [ 414.352604][ T8096] loop3: detected capacity change from 0 to 2048 [ 414.394930][ T8096] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 414.484626][ T8096] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 414.608339][ T8096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.004715][ T8105] No such timeout policy "syz1" [ 415.119982][ T8108] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1160'. [ 415.497724][ T8120] loop1: detected capacity change from 0 to 512 [ 415.538886][ T8117] loop2: detected capacity change from 0 to 764 [ 415.550806][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.557685][ T8120] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1162: inode #1: comm syz.1.1162: iget: illegal inode # [ 415.572141][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.582187][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.592442][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.602069][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 415.609484][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.737615][ T8120] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1162: error while reading EA inode 1 err=-117 [ 415.778295][ T8120] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1162: inode #1: comm syz.1.1162: iget: illegal inode # [ 415.828160][ T8120] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1162: error while reading EA inode 1 err=-117 [ 415.897352][ T8120] EXT4-fs (loop1): 1 orphan inode deleted [ 415.921433][ T8120] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 416.002885][ T8114] lo speed is unknown, defaulting to 1000 [ 416.768402][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 417.310592][ T8143] loop2: detected capacity change from 0 to 512 [ 417.362531][ T8143] EXT4-fs: Ignoring removed nobh option [ 417.404619][ T8143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 417.512778][ T8143] EXT4-fs (loop2): 1 truncate cleaned up [ 417.531535][ T8143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.621583][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 417.703845][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 417.970311][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 418.522713][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.542964][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.561906][ T8114] device bridge_slave_0 entered promiscuous mode [ 418.610408][ T8169] loop3: detected capacity change from 0 to 32768 [ 418.659974][ T8169] JBD2: Ignoring recovery information on journal [ 418.661256][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.750591][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.760210][ T8169] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 418.808301][ T8114] device bridge_slave_1 entered promiscuous mode [ 418.860921][ T8184] loop1: detected capacity change from 0 to 256 [ 419.046484][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 419.261630][ T8190] No such timeout policy "syz1" [ 419.553046][ T8192] loop3: detected capacity change from 0 to 2048 [ 419.596833][ T8192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.596931][ T8192] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.641933][ T8196] loop1: detected capacity change from 0 to 1024 [ 419.678144][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.688199][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.703151][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 419.791767][ T8196] hfsplus: can't free extent [ 419.860870][ T8114] team0: Port device team_slave_0 added [ 419.951740][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 420.131870][ T46] device hsr_slave_0 left promiscuous mode [ 420.159526][ T46] device hsr_slave_1 left promiscuous mode [ 420.190878][ T8205] loop2: detected capacity change from 0 to 2048 [ 420.208794][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.221796][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.273431][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.282914][ T8205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 420.319534][ T8210] loop1: detected capacity change from 0 to 2048 [ 420.334726][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.375970][ T46] device bridge_slave_1 left promiscuous mode [ 420.394035][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.404456][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 420.412854][ T8210] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 420.427652][ T46] device bridge_slave_0 left promiscuous mode [ 420.451574][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.528408][ T8210] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 420.595019][ T8210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.647171][ T46] device veth1_macvtap left promiscuous mode [ 420.715421][ T46] device veth0_macvtap left promiscuous mode [ 420.779070][ T46] device veth1_vlan left promiscuous mode [ 420.831701][ T46] device veth0_vlan left promiscuous mode [ 421.027692][ T8226] loop2: detected capacity change from 0 to 512 [ 421.107585][ T8226] EXT4-fs: Ignoring removed bh option [ 421.192819][ T8226] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 421.344060][ T8226] EXT4-fs (loop2): 1 truncate cleaned up [ 421.349806][ T8226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 421.379157][ T8207] loop3: detected capacity change from 0 to 32768 [ 421.389047][ T8207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1182 (8207) [ 421.471273][ T8207] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.487045][ T8207] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 421.493398][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 421.517537][ T8207] BTRFS info (device loop3): using free space tree [ 421.781618][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 421.927446][ T8207] BTRFS info (device loop3): enabling ssd optimizations [ 422.821953][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.015765][ T8267] No such timeout policy "syz1" [ 423.764688][ T6295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 423.867442][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 423.880270][ T46] team0 (unregistering): Port device team_slave_1 removed [ 423.930794][ T46] team0 (unregistering): Port device team_slave_0 removed [ 423.951411][ T6295] usb 4-1: Using ep0 maxpacket: 32 [ 423.971047][ T6295] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 423.992586][ T6295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.000929][ T6295] usb 4-1: Product: syz [ 424.005319][ T6295] usb 4-1: Manufacturer: syz [ 424.009941][ T6295] usb 4-1: SerialNumber: syz [ 424.017993][ T6295] usb 4-1: config 0 descriptor?? [ 424.029022][ T6295] dw2102: su3000_identify_state [ 424.034299][ T6295] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 424.043649][ T6295] dw2102: su3000_power_ctrl: 1, initialized 0 [ 424.049745][ T6295] dvb-usb: bulk message failed: -22 (2/0) [ 424.057514][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.060286][ T6295] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.077275][ T6295] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 424.098299][ T6295] usb 4-1: media controller created [ 424.103794][ T6295] dvb-usb: bulk message failed: -22 (6/0) [ 424.109538][ T6295] dw2102: i2c transfer failed. [ 424.114626][ T6295] dvb-usb: bulk message failed: -22 (6/0) [ 424.120375][ T6295] dw2102: i2c transfer failed. [ 424.125532][ T6295] dvb-usb: bulk message failed: -22 (6/0) [ 424.131719][ T6295] dw2102: i2c transfer failed. [ 424.136516][ T6295] dvb-usb: bulk message failed: -22 (6/0) [ 424.142312][ T6295] dw2102: i2c transfer failed. [ 424.147103][ T6295] dvb-usb: bulk message failed: -22 (6/0) [ 424.153156][ T6295] dw2102: i2c transfer failed. [ 424.157981][ T6295] dvb-usb: bulk message failed: -22 (6/0) [ 424.163803][ T6295] dw2102: i2c transfer failed. [ 424.168596][ T6295] dvb-usb: MAC address: 02:02:02:02:02:02 [ 424.182237][ T6295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.222197][ T6295] dvb-usb: bulk message failed: -22 (3/0) [ 424.228044][ T6295] dw2102: command 0x0e transfer failed. [ 424.245364][ T6295] dvb-usb: bulk message failed: -22 (3/0) [ 424.251248][ T6295] dw2102: command 0x0e transfer failed. [ 424.258981][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.581630][ T6295] dvb-usb: bulk message failed: -22 (3/0) [ 424.588306][ T6295] dw2102: command 0x0e transfer failed. [ 424.594319][ T6295] dvb-usb: bulk message failed: -22 (3/0) [ 424.610768][ T6295] dw2102: command 0x0e transfer failed. [ 424.617301][ T6295] dvb-usb: bulk message failed: -22 (1/0) [ 424.623343][ T6295] dw2102: command 0x51 transfer failed. [ 424.632371][ T8272] dvb-usb: bulk message failed: -22 (4/0) [ 424.638174][ T8272] dw2102: i2c transfer failed. [ 424.678986][ T46] bond0 (unregistering): Released all slaves [ 424.719757][ T6295] DVB: Unable to find symbol ds3000_attach() [ 424.728722][ T6295] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 424.821782][ T6295] rc_core: IR keymap rc-su3000 not found [ 424.822895][ T8114] team0: Port device team_slave_1 added [ 424.827620][ T6295] Registered IR keymap rc-empty [ 424.847066][ T6295] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 424.865581][ T6295] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21 [ 424.892160][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 424.902633][ T6295] dvb-usb: schedule remote query interval to 150 msecs. [ 424.919192][ T6295] dw2102: su3000_power_ctrl: 0, initialized 1 [ 424.935263][ T6295] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 424.980762][ T6295] usb 4-1: USB disconnect, device number 16 [ 425.189457][ T6295] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 425.269173][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.297284][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.341543][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.451032][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.480937][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.496580][ T8285] loop3: detected capacity change from 0 to 128 [ 425.599622][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.693134][ T8285] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 425.739805][ T8285] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.743425][ T8114] device hsr_slave_0 entered promiscuous mode [ 425.757952][ T8114] device hsr_slave_1 entered promiscuous mode [ 425.769693][ T8114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.777477][ T8114] Cannot create hsr debugfs directory [ 425.990743][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 426.348277][ T8303] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 426.367715][ T8114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.393224][ T8306] use of bytesused == 0 is deprecated and will be removed in the future, [ 426.415686][ T8114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.455469][ T8114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.458937][ T8306] use the actual size instead. [ 426.524102][ T8114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.761844][ T8316] loop3: detected capacity change from 0 to 64 [ 426.886798][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.940410][ T8319] syz.0.1209 uses obsolete (PF_INET,SOCK_PACKET) [ 426.953850][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.985023][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.020926][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.070297][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.132205][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.181789][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.188956][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.232571][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.281728][ T8287] loop1: detected capacity change from 0 to 40427 [ 427.302349][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.310202][ T8287] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 427.314687][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.341137][ T8287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 427.348787][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.356773][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.363628][ T8287] F2FS-fs (loop1): invalid crc value [ 427.418258][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.438450][ T8287] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 427.536754][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.571098][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.628556][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.656213][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.684516][ T8287] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 427.704659][ T8287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 427.722419][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.762573][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.802658][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.812826][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.858354][ T8114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.913027][ T8312] loop2: detected capacity change from 0 to 32768 [ 427.924262][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.970210][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.017014][ T4271] syz-executor: attempt to access beyond end of device [ 428.017014][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 428.042691][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.217172][ T4316] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 428.431733][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.471453][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.514051][ T4316] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 428.552402][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.600530][ T4316] usb 4-1: config 0 descriptor?? [ 428.761720][ T4571] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 428.981924][ T4571] usb 1-1: Using ep0 maxpacket: 8 [ 428.990174][ T4571] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 429.008718][ T8357] loop1: detected capacity change from 0 to 4096 [ 429.026454][ T4316] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 429.032797][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.041820][ T4571] usb 1-1: config 2 has no interface number 0 [ 429.044117][ T7287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.049042][ T4316] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 429.063205][ T4571] usb 1-1: config 2 interface 31 has no altsetting 0 [ 429.083327][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.083332][ T4571] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 429.083362][ T4571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.115619][ T4316] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 429.148014][ T4316] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 429.157776][ T4316] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 429.175567][ T4316] pyra 0003:1E7D:2CF6.000A: unbalanced collection at end of report description [ 429.188463][ T4571] usb 1-1: Product: syz [ 429.204152][ T4571] usb 1-1: Manufacturer: syz [ 429.212257][ T4316] pyra 0003:1E7D:2CF6.000A: parse failed [ 429.217995][ T4316] pyra: probe of 0003:1E7D:2CF6.000A failed with error -22 [ 429.226788][ T4571] usb 1-1: SerialNumber: syz [ 429.279972][ T4316] usb 4-1: USB disconnect, device number 17 [ 429.681028][ T8352] loop2: detected capacity change from 0 to 32768 [ 429.748725][ T8352] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 429.869791][ T4571] ch9200: probe of 1-1:2.31 failed with error -22 [ 429.924739][ T4571] usb 1-1: USB disconnect, device number 7 [ 430.195399][ T6716] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 430.301443][ T6747] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 430.491443][ T6747] usb 4-1: Using ep0 maxpacket: 16 [ 430.497652][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.507884][ T6747] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.552334][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.592337][ T6747] usb 4-1: config 0 interface 0 has no altsetting 0 [ 430.598518][ T8114] device veth0_vlan entered promiscuous mode [ 430.620269][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.621910][ T6747] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 430.630097][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.668119][ T6747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.702132][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.705808][ T6747] usb 4-1: config 0 descriptor?? [ 430.724750][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.749806][ T8114] device veth1_vlan entered promiscuous mode [ 430.801624][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 430.941111][ T4271] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 430.953573][ T4271] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 430.980015][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.996311][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.004264][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 431.014892][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.042738][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.051710][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.071593][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.095925][ T8114] device veth0_macvtap entered promiscuous mode [ 431.109701][ T14] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 431.128657][ T8114] device veth1_macvtap entered promiscuous mode [ 431.136719][ T14] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 431.156202][ T6747] uclogic 0003:2179:0077.000B: interface is invalid, ignoring [ 431.187552][ T14] usb 1-1: Product: syz [ 431.209951][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.237849][ T14] usb 1-1: Manufacturer: syz [ 431.242915][ T14] usb 1-1: SerialNumber: syz [ 431.262745][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.284488][ T14] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input22 [ 431.312454][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.341428][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.368440][ T14] usb 4-1: USB disconnect, device number 18 [ 431.378223][ T8394] loop2: detected capacity change from 0 to 1024 [ 431.389761][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.442012][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.499254][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.576657][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.609263][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.625711][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 431.626175][ T4571] usb 1-1: USB disconnect, device number 8 [ 431.629308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.669269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.669986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.670669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.677571][ T37] hfsplus: b-tree write err: -5, ino 25 [ 431.677742][ T37] hfsplus: b-tree write err: -5, ino 4 [ 431.677818][ T37] hfsplus: b-tree write err: -5, ino 2 [ 431.677887][ T37] hfsplus: b-tree write err: -5, ino 26 [ 431.678057][ T4571] appletouch 1-1:1.0: input: appletouch disconnected [ 431.699537][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.699555][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.699562][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.699570][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.699576][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.699587][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.699593][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.699601][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.700483][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.704826][ T8114] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.704863][ T8114] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.704891][ T8114] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.704920][ T8114] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.730936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.134349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.316447][ T7287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.316483][ T7287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.316730][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 432.361559][ T4316] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 432.419335][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.419359][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.419610][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.630042][ T8413] Unsupported ieee802154 address type: 0 [ 432.637447][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 432.639306][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.639340][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.639363][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.640436][ T4316] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 432.640463][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 432.640484][ T4316] usb 4-1: Product: syz [ 432.643275][ T4316] usb 4-1: config 0 descriptor?? [ 432.701662][ T8415] loop0: detected capacity change from 0 to 128 [ 432.708359][ T8415] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 432.787778][ T8400] loop2: detected capacity change from 0 to 32768 [ 432.866218][ T8400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1227 (8400) [ 432.894828][ T8400] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 432.894915][ T8400] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 432.894954][ T8400] BTRFS info (device loop2): setting nodatasum [ 432.894972][ T8400] BTRFS info (device loop2): force zlib compression, level 3 [ 432.894997][ T8400] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 432.895055][ T8400] BTRFS info (device loop2): use lzo compression, level 0 [ 432.895077][ T8400] BTRFS info (device loop2): turning on flush-on-commit [ 432.895096][ T8400] BTRFS info (device loop2): enabling auto defrag [ 432.895147][ T8400] BTRFS info (device loop2): max_inline at 4096 [ 432.895170][ T8400] BTRFS info (device loop2): using free space tree [ 432.932908][ T8415] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 433.020435][ T8420] tipc: Started in network mode [ 433.020482][ T8420] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 433.020525][ T8420] tipc: Enabling of bearer rejected, failed to enable media [ 433.066002][ T4316] uclogic 0003:28BD:0075.000C: interface is invalid, ignoring [ 433.206585][ T46] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 433.270550][ T4571] usb 4-1: USB disconnect, device number 19 [ 433.274761][ T8400] BTRFS info (device loop2): enabling ssd optimizations [ 433.334095][ T8441] loop0: detected capacity change from 0 to 64 [ 433.463357][ T4269] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 433.862397][ T4571] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 433.970505][ T8453] loop5: detected capacity change from 0 to 16 [ 433.987094][ T8453] erofs: (device loop5): mounted with root inode @ nid 36. [ 434.051525][ T4571] usb 1-1: Using ep0 maxpacket: 16 [ 434.053486][ T4571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.053521][ T4571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.053545][ T4571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.053585][ T4571] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 434.053612][ T4571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.055584][ T4571] usb 1-1: config 0 descriptor?? [ 434.521068][ T4571] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 434.521144][ T4571] microsoft 0003:045E:07DA.000D: unknown global tag 0xd [ 434.521162][ T4571] microsoft 0003:045E:07DA.000D: item 0 0 1 13 parsing failed [ 434.866337][ T6747] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 435.212024][ T4571] microsoft 0003:045E:07DA.000D: parse failed [ 435.212062][ T4571] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 435.214194][ T4571] usb 1-1: USB disconnect, device number 9 [ 435.231451][ T6747] usb 4-1: Using ep0 maxpacket: 32 [ 435.234082][ T6747] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.234119][ T6747] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.235922][ T6747] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 435.235954][ T6747] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 435.235975][ T6747] usb 4-1: Product: syz [ 435.235992][ T6747] usb 4-1: Manufacturer: syz [ 435.240391][ T6747] hub 4-1:4.0: USB hub found [ 435.455136][ T6747] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 435.704501][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1243'. [ 435.782116][ T6747] usb 4-1: USB disconnect, device number 20 [ 435.856260][ T8473] siw: device registration error -23 [ 435.870560][ T8473] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 436.030988][ T8457] loop2: detected capacity change from 0 to 32768 [ 436.042296][ T8457] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1235 (8457) [ 436.048700][ T8457] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 436.048788][ T8457] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 436.048850][ T8457] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 436.048876][ T8457] BTRFS info (device loop2): use zstd compression, level 3 [ 436.048898][ T8457] BTRFS info (device loop2): using free space tree [ 436.067883][ T8479] loop0: detected capacity change from 0 to 512 [ 436.106206][ T8479] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1244: inode has both inline data and extents flags [ 436.160775][ T8479] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1244: couldn't read orphan inode 15 (err -117) [ 436.160966][ T8479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.386477][ T8487] No such timeout policy "syz1" [ 436.651552][ T8457] BTRFS info (device loop2): enabling ssd optimizations [ 436.683924][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 436.752229][ T4571] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 436.943600][ T4571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.970311][ T4571] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 436.982034][ T8519] loop1: detected capacity change from 0 to 256 [ 436.991136][ T4571] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 437.008877][ T4571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.054956][ T4571] usb 4-1: config 0 descriptor?? [ 437.089573][ T4571] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 437.113886][ T4269] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 437.121483][ T4571] dvb-usb: bulk message failed: -22 (3/0) [ 437.154129][ T4571] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 437.172864][ T4571] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 437.212255][ T4571] usb 4-1: media controller created [ 437.218788][ T4571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.254842][ T4571] dvb-usb: bulk message failed: -22 (6/0) [ 437.260701][ T4571] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 437.304983][ T8498] dvb-usb: bulk message failed: -22 (2/0) [ 437.332836][ T4571] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 437.367228][ T4571] dvb-usb: schedule remote query interval to 150 msecs. [ 437.396303][ T4571] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 437.421504][ T4315] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 437.445797][ T4571] usb 4-1: USB disconnect, device number 21 [ 437.636205][ T4315] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.706209][ T4315] usb 1-1: config 0 has no interface number 0 [ 437.771750][ T4315] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 437.861514][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.869597][ T4315] usb 1-1: Product: syz [ 437.908514][ T4315] usb 1-1: Manufacturer: syz [ 437.908677][ T4571] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 437.991395][ T4315] usb 1-1: SerialNumber: syz [ 438.062678][ T4315] usb 1-1: config 0 descriptor?? [ 438.096788][ T4315] usb 1-1: selecting invalid altsetting 1 [ 438.130146][ T8533] loop2: detected capacity change from 0 to 512 [ 438.137551][ T4315] dvb_ttusb_budget: ttusb_init_controller: error [ 438.176670][ T8533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 438.199380][ T4315] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 438.377241][ T8535] siw: device registration error -23 [ 438.387527][ T8528] loop5: detected capacity change from 0 to 4096 [ 438.395275][ T8533] EXT4-fs (loop2): 1 truncate cleaned up [ 438.434249][ T8533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 438.597514][ T8533] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.1251: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 438.626916][ T4315] DVB: Unable to find symbol stv0299_attach() [ 438.762583][ T8533] EXT4-fs (loop2): Remounting filesystem read-only [ 438.782951][ T8533] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 438.829414][ T8533] EXT4-fs (loop2): Remounting filesystem read-only [ 438.929589][ T4315] DVB: Unable to find symbol tda8083_attach() [ 438.951449][ T4315] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 439.023026][ T4315] usb 1-1: USB disconnect, device number 10 [ 439.179523][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 439.251456][ T6748] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 439.527683][ T8570] device sit1 entered promiscuous mode [ 439.592848][ T8570] team0: Device sit1 is of different type [ 439.601652][ T6748] usb 6-1: Using ep0 maxpacket: 8 [ 439.610215][ T6748] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 439.633235][ T6748] usb 6-1: config 179 has no interface number 0 [ 439.640153][ T8571] No such timeout policy "syz1" [ 439.652557][ T6748] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 439.676262][ T6748] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 439.705183][ T6748] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 439.732499][ T6748] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 439.750758][ T6748] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.772761][ T6748] usb 6-1: config 179 interface 65 has no altsetting 0 [ 439.780363][ T6748] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 439.999400][ T8577] siw: device registration error -23 [ 440.007599][ T8577] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 440.273892][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.280371][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.550696][ T6748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.674202][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 440.715508][ T6748] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input24 [ 440.927705][ T8591] loop2: detected capacity change from 0 to 256 [ 441.003809][ T8591] exfat: Deprecated parameter 'namecase' [ 441.025740][ T8591] exfat: Deprecated parameter 'namecase' [ 441.074203][ T4571] usb 6-1: USB disconnect, device number 2 [ 441.085705][ T8591] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9b7485c9, utbl_chksum : 0xe619d30d) [ 441.099509][ T4571] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 441.196645][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.215981][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.227768][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.246798][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.256267][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.278010][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.295773][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.311639][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.328274][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.345545][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.361797][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.378403][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.394287][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.399539][ T4434] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 441.402020][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.431512][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.456231][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.478878][ T6748] hid-generic 0006:0004:0009.000E: unknown main item tag 0x0 [ 441.525083][ T6748] hid-generic 0006:0004:0009.000E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 441.603512][ T4434] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 441.640663][ T4434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.680295][ T4434] usb 1-1: config 0 descriptor?? [ 441.714662][ T4434] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 441.955697][ T8602] fido_id[8602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 442.129274][ T4434] gspca_cpia1: usb_control_msg 03, error -32 [ 442.147505][ T4434] gspca_cpia1: usb_control_msg 03, error -71 [ 442.156553][ T8590] loop3: detected capacity change from 0 to 32768 [ 442.166095][ T4434] gspca_cpia1: usb_control_msg 01, error -71 [ 442.190898][ T4434] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 442.250282][ T4434] usb 1-1: USB disconnect, device number 11 [ 442.325483][ T8590] XFS (loop3): Mounting V5 Filesystem [ 442.394519][ T8590] XFS (loop3): Ending clean mount [ 442.416932][ T8590] XFS (loop3): Quotacheck needed: Please wait. [ 442.426872][ T8628] No such timeout policy "syz1" [ 442.572148][ T8590] XFS (loop3): Quotacheck: Done. [ 442.961130][ T4268] XFS (loop3): Unmounting Filesystem [ 443.371002][ T8647] No such timeout policy "syz1" [ 443.742217][ T4571] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 443.936929][ T4571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.962749][ T4571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.988509][ T4571] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 444.087689][ T4571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.129975][ T4571] usb 1-1: config 0 descriptor?? [ 444.197305][ T8662] loop2: detected capacity change from 0 to 512 [ 444.315823][ T8662] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1288: couldn't read orphan inode 26 (err -116) [ 444.329051][ T8662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 444.338442][ T8662] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.522980][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 444.722237][ T4571] sony 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 444.729817][ T8673] No such timeout policy "syz1" [ 444.737432][ T8657] loop1: detected capacity change from 0 to 32768 [ 444.750817][ T4571] sony 0003:054C:0BA0.000F: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 444.762836][ T4571] sony 0003:054C:0BA0.000F: failed to claim input [ 444.782119][ T4571] usb 1-1: USB disconnect, device number 12 [ 444.803609][ T8657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1287 (8657) [ 444.844003][ T8657] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.877954][ T8657] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 444.901991][ T6303] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 444.959619][ T8657] BTRFS info (device loop1): using free space tree [ 445.101281][ T8681] fido_id[8681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 445.121715][ T4434] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.141764][ T6303] usb 6-1: Using ep0 maxpacket: 16 [ 445.153022][ T6303] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 445.169521][ T6303] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 445.188301][ T6303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.196673][ T6303] usb 6-1: Product: syz [ 445.200882][ T6303] usb 6-1: Manufacturer: syz [ 445.221976][ T6303] usb 6-1: SerialNumber: syz [ 445.228550][ T6303] r8152-cfgselector 6-1: config 0 descriptor?? [ 445.286289][ T6747] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 445.332279][ T8657] BTRFS info (device loop1): enabling ssd optimizations [ 445.339771][ T4434] usb 3-1: Using ep0 maxpacket: 16 [ 445.364228][ T4434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.375589][ T4434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.387680][ T4434] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 445.416191][ T4434] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 445.435888][ T4434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.452926][ T6303] r8152-cfgselector 6-1: Unknown version 0x0000 [ 445.473997][ T4434] usb 3-1: config 0 descriptor?? [ 445.520281][ T4271] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 445.524130][ T6747] usb 4-1: Using ep0 maxpacket: 8 [ 445.568497][ T6747] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.609849][ T6747] usb 4-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 445.643685][ T6747] usb 4-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.666755][ T6303] r8152-cfgselector 6-1: Unknown version 0x0000 [ 445.677678][ T6747] usb 4-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.689895][ T6303] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 445.715607][ T6747] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 445.741559][ T4315] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 445.751787][ T6747] usb 4-1: config 0 interface 0 has no altsetting 0 [ 445.774617][ T6747] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 445.796005][ T6747] usb 4-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 445.804551][ T6747] usb 4-1: Manufacturer: syz [ 445.830399][ T6747] usb 4-1: config 0 descriptor?? [ 445.892669][ T4434] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 445.912074][ T4434] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 445.962298][ T4315] usb 1-1: Using ep0 maxpacket: 8 [ 445.978885][ T4315] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 446.008676][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.028982][ T4315] usb 1-1: Product: syz [ 446.049182][ T4315] usb 1-1: Manufacturer: syz [ 446.054123][ T4315] usb 1-1: SerialNumber: syz [ 446.072119][ T4315] usb 1-1: config 0 descriptor?? [ 446.091276][ T4434] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 446.126189][ T4434] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 446.167710][ T4434] microsoft 0003:045E:07DA.0010: no inputs found [ 446.178617][ T4434] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 446.200255][ T4434] usb 3-1: USB disconnect, device number 11 [ 446.221153][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 446.271014][ T6747] itetech 0003:06CB:73F5.0011: unbalanced collection at end of report description [ 446.287430][ T4315] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 446.302746][ T6747] itetech: probe of 0003:06CB:73F5.0011 failed with error -22 [ 446.438092][ T8718] loop5: detected capacity change from 0 to 128 [ 446.537905][ T8715] fido_id[8715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 446.539832][ T6747] usb 4-1: USB disconnect, device number 22 [ 446.810289][ T4315] usb write operation failed. (-71) [ 446.835360][ T4315] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 446.846365][ T4315] dvbdev: DVB: registering new adapter (Terratec H7) [ 446.853541][ T4315] usb 1-1: media controller created [ 446.864312][ T4315] usb read operation failed. (-71) [ 446.870171][ T8723] No such timeout policy "syz1" [ 446.893189][ T4315] usb write operation failed. (-71) [ 446.904715][ T4315] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 446.944508][ T4315] usb 1-1: USB disconnect, device number 13 [ 447.054403][ T8729] tipc: Started in network mode [ 447.065184][ T8729] tipc: Node identity e0000002, cluster identity 4711 [ 447.100750][ T8729] tipc: Enabling of bearer rejected, failed to enable media [ 447.551432][ T6747] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 447.722433][ T8746] loop3: detected capacity change from 0 to 164 [ 447.741600][ T6747] usb 3-1: Using ep0 maxpacket: 8 [ 447.752910][ T6747] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 447.767926][ T6747] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 447.776377][ T6747] usb 3-1: Product: syz [ 447.780583][ T6747] usb 3-1: Manufacturer: syz [ 447.786915][ T6747] usb 3-1: SerialNumber: syz [ 447.794426][ T6747] usb 3-1: config 0 descriptor?? [ 447.833553][ T6747] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 447.846000][ T8746] Unable to read rock-ridge attributes [ 447.924201][ T8746] Unable to read rock-ridge attributes [ 447.988797][ T8746] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 448.407922][ T8763] loop0: detected capacity change from 0 to 512 [ 448.416674][ T6747] gspca_zc3xx: reg_w_i err -71 [ 448.421820][ T6747] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 448.458752][ T6747] usb 3-1: USB disconnect, device number 12 [ 448.468765][ T8763] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 448.480394][ T8763] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 448.491811][ T8763] System zones: 0-1, 15-15, 18-18, 34-34 [ 448.498314][ T8763] EXT4-fs (loop0): orphan cleanup on readonly fs [ 448.566192][ T8763] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 448.603881][ T8763] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 448.631415][ T8763] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 448.666550][ T8763] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1316: bg 0: block 40: padding at end of block bitmap is not set [ 448.699962][ T8767] loop1: detected capacity change from 0 to 4096 [ 448.707316][ T8763] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 448.729782][ T8742] loop5: detected capacity change from 0 to 32768 [ 448.744491][ T8763] EXT4-fs (loop0): 1 truncate cleaned up [ 448.759392][ T8763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 448.794832][ T8768] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.855989][ T8763] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1316: bad symlink. [ 448.957183][ T8742] XFS (loop5): Mounting V5 Filesystem [ 449.068008][ T8780] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 449.122388][ T8742] XFS (loop5): Ending clean mount [ 449.228453][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 449.280376][ T8780] Remounting filesystem read-only [ 449.347340][ T8114] XFS (loop5): Unmounting Filesystem [ 449.830364][ T8793] lo speed is unknown, defaulting to 1000 [ 450.201785][ T4434] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 450.257230][ T8795] loop3: detected capacity change from 0 to 8192 [ 450.295471][ T8795] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 450.367933][ T8811] No such timeout policy "syz1" [ 450.413724][ T4434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.457532][ T4434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 450.487466][ T4434] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 450.521784][ T4434] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 450.566977][ T4434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.609558][ T4434] usb 1-1: config 0 descriptor?? [ 450.631023][ T8800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 450.941024][ T8819] siw: device registration error -23 [ 451.140211][ T4434] elecom 0003:056E:00FD.0012: unknown global tag 0xe [ 451.191920][ T4434] elecom 0003:056E:00FD.0012: item 0 1 1 14 parsing failed [ 451.228061][ T4434] elecom: probe of 0003:056E:00FD.0012 failed with error -22 [ 451.350440][ T4434] usb 1-1: USB disconnect, device number 14 [ 451.575130][ T4315] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 451.691434][ T8834] loop3: detected capacity change from 0 to 64 [ 451.788334][ T4315] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 451.808040][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.838831][ T4315] usb 6-1: Product: syz [ 451.853719][ T4315] usb 6-1: Manufacturer: syz [ 451.858399][ T4315] usb 6-1: SerialNumber: syz [ 451.885670][ T4315] usb 6-1: config 0 descriptor?? [ 451.919025][ T4315] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 452.468383][ T8845] loop1: detected capacity change from 0 to 2048 [ 452.545558][ T8845] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 452.562805][ T4315] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 452.583688][ T4315] sq905c: probe of 6-1:0.0 failed with error -71 [ 452.610593][ T4315] usb 6-1: USB disconnect, device number 4 [ 452.676499][ T8849] No such timeout policy "syz1" [ 452.786754][ T8850] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 453.310855][ T8861] loop5: detected capacity change from 0 to 512 [ 453.439924][ T8862] No such timeout policy "syz1" [ 454.243021][ T8861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 454.291711][ T8861] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.477816][ T4315] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 454.558893][ T8873] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 454.561587][ T2187] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 454.685481][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 454.694131][ T8114] EXT4-fs (loop5): unmounting filesystem. [ 454.705660][ T4315] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 454.732290][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1351'. [ 454.734543][ T4315] usb 3-1: config 0 has no interface number 0 [ 454.768255][ T4315] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 454.801498][ T2187] usb 4-1: config 127 has an invalid interface number: 84 but max is 0 [ 454.810820][ T2187] usb 4-1: config 127 has no interface number 0 [ 454.818140][ T4315] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 454.840144][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.853289][ T2187] usb 4-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 454.870014][ T8860] loop1: detected capacity change from 0 to 40427 [ 454.876935][ T4315] usb 3-1: Product: syz [ 454.881172][ T4315] usb 3-1: Manufacturer: syz [ 454.893786][ T2187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.910709][ T4315] usb 3-1: SerialNumber: syz [ 454.918473][ T8860] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 454.947529][ T2187] usb 4-1: Product: syz [ 454.953545][ T2187] usb 4-1: Manufacturer: syz [ 454.958286][ T2187] usb 4-1: SerialNumber: syz [ 454.964541][ T4315] usb 3-1: config 0 descriptor?? [ 454.970434][ T8869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.979295][ T8860] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 454.998285][ T8860] F2FS-fs (loop1): inline encryption not supported [ 455.012635][ T8860] F2FS-fs (loop1): invalid crc value [ 455.041528][ T8860] F2FS-fs (loop1): Found nat_bits in checkpoint [ 455.137333][ T8881] loop0: detected capacity change from 0 to 4096 [ 455.179971][ T8860] F2FS-fs (loop1): Start checkpoint disabled! [ 455.183787][ T8881] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 455.194262][ T8869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.227193][ T2187] gspca_main: spca501-2.14.0 probing 040a:0002 [ 455.274604][ T8860] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 455.351008][ T8881] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 455.410180][ T8881] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 455.436796][ T8860] F2FS-fs (loop1) : inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x77/0x340 [ 455.444097][ T8881] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 455.526785][ T8881] ntfs: volume version 3.1. [ 455.660389][ T2187] gspca_spca501: reg write: error -71 [ 455.670503][ T2187] spca501 4-1:127.84: Reg write failed for 0x00,0x02,0x01 [ 455.712859][ T4315] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 455.741584][ T4315] asix: probe of 3-1:0.188 failed with error -71 [ 455.751061][ T2187] spca501: probe of 4-1:127.84 failed with error -22 [ 455.773688][ T2187] usb 4-1: USB disconnect, device number 23 [ 455.791823][ T4315] usb 3-1: USB disconnect, device number 13 [ 455.895768][ T46] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 455.910854][ T7287] kworker/u4:20: attempt to access beyond end of device [ 455.910854][ T7287] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 455.918433][ T4267] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 456.268802][ T8883] loop5: detected capacity change from 0 to 32768 [ 456.445465][ T8902] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1355'. [ 456.464975][ T8883] XFS (loop5): Mounting V5 Filesystem [ 456.522657][ T8910] loop0: detected capacity change from 0 to 256 [ 456.535050][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1355'. [ 456.569451][ T8911] program syz.1.1353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.583237][ T8883] XFS (loop5): Ending clean mount [ 456.607600][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1355'. [ 456.672502][ T8114] XFS (loop5): Unmounting Filesystem [ 457.091787][ T6303] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 457.223403][ T8922] program syz.0.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.281868][ T6303] usb 3-1: Using ep0 maxpacket: 16 [ 457.289457][ T8924] No such timeout policy "syz1" [ 457.304528][ T6303] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.565229][ T6303] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 457.722946][ T6303] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 457.910485][ T6303] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 457.980103][ T6303] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.010473][ T6303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.048972][ T6303] usb 3-1: SerialNumber: syz [ 458.069766][ T8930] loop5: detected capacity change from 0 to 256 [ 458.089138][ T8930] exfat: Deprecated parameter 'namecase' [ 458.100853][ T8930] exfat: Deprecated parameter 'namecase' [ 458.197773][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 458.206848][ T8930] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 458.212800][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 458.292341][ T6303] hub 3-1:1.0: bad descriptor, ignoring hub [ 458.298332][ T6303] hub: probe of 3-1:1.0 failed with error -5 [ 458.345987][ T8935] input: syz1 as /devices/virtual/input/input26 [ 458.555604][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 458.596318][ T8915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 459.091186][ T6303] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 459.151459][ T2187] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 459.354449][ T6295] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 459.404646][ T2187] usb 4-1: config 9 interface 0 has no altsetting 0 [ 459.415436][ T2187] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 459.435335][ T2187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.460658][ T2187] usb 4-1: Product: syz [ 459.481155][ T2187] usb 4-1: Manufacturer: syz [ 459.491835][ T2187] usb 4-1: SerialNumber: syz [ 459.533812][ T4315] usb 3-1: USB disconnect, device number 14 [ 459.544490][ T4315] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 459.581987][ T6295] usb 1-1: Using ep0 maxpacket: 16 [ 459.600496][ T6295] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 459.662317][ T6295] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.713210][ T6295] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.721848][ T8944] loop5: detected capacity change from 0 to 131072 [ 459.732896][ T8944] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 459.741039][ T8944] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 459.750490][ T8944] F2FS-fs (loop5): invalid crc value [ 459.782151][ T6295] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 459.813463][ T8944] F2FS-fs (loop5): Found nat_bits in checkpoint [ 459.825109][ T6295] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.883596][ T8944] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 459.885971][ T6295] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 459.890690][ T8944] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 459.921483][ T6745] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 460.017250][ T6295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.052981][ T6295] usb 1-1: config 0 descriptor?? [ 460.121473][ T6745] usb 2-1: Using ep0 maxpacket: 32 [ 460.130888][ T6745] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 460.149541][ T2187] snd-usb-caiaq 4-1:9.0: invalid EPs [ 460.158154][ T2187] usb 4-1: unable to init card! (ret=-22) [ 460.170962][ T2187] snd-usb-caiaq: probe of 4-1:9.0 failed with error -22 [ 460.178732][ T6745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.178765][ T6745] usb 2-1: Product: syz [ 460.178782][ T6745] usb 2-1: Manufacturer: syz [ 460.178798][ T6745] usb 2-1: SerialNumber: syz [ 460.202834][ T6745] usb 2-1: config 0 descriptor?? [ 460.360746][ T2187] usb 4-1: USB disconnect, device number 24 [ 460.418595][ T6745] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 016 [ 460.469059][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.515653][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.547094][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.570614][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.599258][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.620963][ T8942] i2c i2c-1: adapter quirk: no zero length (addr 0x07ff, size 0, read) [ 460.632818][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.640369][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.653988][ T6745] usb 2-1: USB disconnect, device number 16 [ 460.667350][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.695591][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.724237][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.747307][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x1 [ 460.783952][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.798480][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.807770][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.830713][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x4 [ 460.846736][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x0 [ 460.871434][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x6 [ 460.911500][ T6295] smartjoyplus 0003:6666:8801.0013: unknown main item tag 0x6 [ 460.919246][ T6295] smartjoyplus 0003:6666:8801.0013: invalid report_size 29535 [ 460.957898][ T6295] smartjoyplus 0003:6666:8801.0013: item 0 2 1 7 parsing failed [ 460.978406][ T6295] smartjoyplus 0003:6666:8801.0013: parse failed [ 460.997690][ T6295] smartjoyplus: probe of 0003:6666:8801.0013 failed with error -22 [ 461.028031][ T6295] usb 1-1: USB disconnect, device number 15 [ 461.467628][ T8991] loop0: detected capacity change from 0 to 256 [ 461.509097][ T8991] exfat: Deprecated parameter 'utf8' [ 461.561207][ T8991] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 461.627507][ T8993] loop2: detected capacity change from 0 to 1024 [ 461.686314][ T6748] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 461.882178][ T4621] hfsplus: b-tree write err: -5, ino 25 [ 461.883653][ T6748] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 461.888080][ T4621] hfsplus: b-tree write err: -5, ino 4 [ 461.913435][ T6748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.934110][ T6748] usb 2-1: config 0 descriptor?? [ 461.971283][ T6748] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 461.975799][ T4621] hfsplus: b-tree write err: -5, ino 2 [ 462.352413][ T6748] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 462.554171][ T6748] gspca_cpia1: usb_control_msg 01, error -32 [ 462.570623][ T6748] gspca_cpia1: usb_control_msg 01, error -71 [ 462.583778][ T6748] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 462.613830][ T6748] usb 2-1: USB disconnect, device number 17 [ 463.405289][ T9018] siw: device registration error -23 [ 463.412489][ T9018] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 463.431209][ T9026] loop3: detected capacity change from 0 to 256 [ 463.438686][ T9026] exfat: Deprecated parameter 'utf8' [ 463.489924][ T9026] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 463.576857][ T9028] loop1: detected capacity change from 0 to 512 [ 463.668202][ T9002] loop0: detected capacity change from 0 to 32768 [ 463.688703][ T9033] loop2: detected capacity change from 0 to 1024 [ 463.774306][ T9033] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.933517][ T9033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 463.984826][ T9033] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.110443][ T9033] EXT4-fs (loop2): shut down requested (2) [ 464.231415][ T6295] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 464.257035][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 464.424705][ T6295] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.462429][ T6295] usb 2-1: not running at top speed; connect to a high speed hub [ 464.507919][ T6295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.529351][ T9048] loop2: detected capacity change from 0 to 256 [ 464.560819][ T6295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.610698][ T6295] usb 2-1: string descriptor 0 read error: -22 [ 464.648037][ T6295] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.678312][ T6295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.755043][ T6295] usb 2-1: 0:2 : does not exist [ 464.941062][ T9031] loop5: detected capacity change from 0 to 32768 [ 465.030704][ T9058] loop2: detected capacity change from 0 to 256 [ 465.096758][ T9031] XFS (loop5): Mounting V5 Filesystem [ 465.147448][ T6715] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.224874][ T9031] XFS (loop5): Ending clean mount [ 465.281662][ T9031] XFS (loop5): Quotacheck needed: Please wait. [ 465.419340][ T9031] XFS (loop5): Quotacheck: Done. [ 465.590885][ T6295] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 465.647454][ T6295] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 465.666539][ T9044] loop0: detected capacity change from 0 to 32768 [ 465.681189][ T8114] XFS (loop5): Unmounting Filesystem [ 465.745985][ T6295] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 465.765688][ T6295] usb 2-1: USB disconnect, device number 18 [ 465.869356][ T9044] XFS (loop0): Mounting V5 Filesystem [ 466.062297][ T9044] XFS (loop0): Ending clean mount [ 466.101679][ T6716] udevd[6716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.552889][ T4267] XFS (loop0): Unmounting Filesystem [ 466.675485][ T9086] siw: device registration error -23 [ 466.790712][ T9093] loop1: detected capacity change from 0 to 512 [ 466.907078][ T9072] loop2: detected capacity change from 0 to 32768 [ 466.932586][ T9072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1396 (9072) [ 466.993950][ T9093] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 467.014805][ T9097] loop3: detected capacity change from 0 to 1024 [ 467.025037][ T9072] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 467.034998][ T9093] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.081965][ T9072] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 467.112702][ T9072] BTRFS info (device loop2): force clearing of disk cache [ 467.119963][ T9072] BTRFS info (device loop2): metadata ratio 0 [ 467.127604][ T9097] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 467.151422][ T9097] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 467.211529][ T9072] BTRFS info (device loop2): enabling ssd optimizations [ 467.228833][ T9097] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.1402: unexpected bad inode w/o EXT4_IGET_BAD [ 467.361778][ T9072] BTRFS info (device loop2): using spread ssd allocation scheme [ 467.369520][ T9072] BTRFS info (device loop2): using free space tree [ 467.381755][ T9097] EXT4-fs (loop3): no journal found [ 467.387049][ T9097] EXT4-fs (loop3): can't get journal size [ 467.394947][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 467.492253][ T9102] No such timeout policy "syz1" [ 467.520526][ T9097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 467.640958][ T9097] EXT4-fs (loop3): shut down requested (2) [ 467.667137][ T9097] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 467.758799][ T9072] BTRFS info (device loop2): rebuilding free space tree [ 467.824295][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 468.103435][ T9130] netlink: 'syz.3.1404': attribute type 21 has an invalid length. [ 468.116758][ T9130] netlink: 'syz.3.1404': attribute type 6 has an invalid length. [ 468.129452][ T9130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1404'. [ 468.260379][ T4269] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.532976][ T9141] loop3: detected capacity change from 0 to 64 [ 468.854428][ T9146] loop2: detected capacity change from 0 to 128 [ 468.871936][ T4268] hfs: node 4:3 still has 1 user(s)! [ 469.391534][ T4316] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 469.499363][ T9166] loop5: detected capacity change from 0 to 24 [ 469.511678][ T6748] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 469.599617][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.637930][ T4316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.675245][ T4316] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.703429][ T6748] usb 2-1: config 0 has no interfaces? [ 469.709074][ T6748] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.728275][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.746676][ T6748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.754993][ T4316] usb 4-1: SerialNumber: syz [ 469.796238][ T6748] usb 2-1: config 0 descriptor?? [ 469.981782][ T4316] usb 4-1: 0:2 : does not exist [ 470.041949][ T4316] usb 4-1: USB disconnect, device number 25 [ 470.053479][ T9171] loop5: detected capacity change from 0 to 4096 [ 470.060660][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.077156][ T9154] loop0: detected capacity change from 0 to 32768 [ 470.122658][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.154427][ T9154] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 470.154427][ T9154] [ 470.180125][ T6748] usb 2-1: USB disconnect, device number 19 [ 470.373872][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.430480][ T8114] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 470.573091][ T8114] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 470.583575][ T9176] loop2: detected capacity change from 0 to 2048 [ 470.637721][ T9176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.674051][ T9181] No such timeout policy "syz1" [ 470.735842][ T26] audit: type=1800 audit(1776719778.211:24): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1417" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 470.771518][ T6748] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 470.965902][ T6748] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 470.988061][ T6748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 375, setting to 64 [ 471.029410][ T6748] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.077585][ T6748] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 471.232262][ T14] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 471.291544][ T6748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.302348][ T6748] usb 2-1: config 0 descriptor?? [ 471.947808][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.094044][ T14] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 472.147401][ T6748] ath6kl: Failed to submit usb control message: -71 [ 472.155090][ T6748] ath6kl: unable to send the bmi data to the device: -71 [ 472.169305][ T6748] ath6kl: Unable to send get target info: -71 [ 472.183142][ T6748] ath6kl: Failed to init ath6kl core: -71 [ 472.212346][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.231849][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 472.274999][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 472.288681][ T6748] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 472.290756][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.311285][ T6748] usb 2-1: USB disconnect, device number 20 [ 472.343103][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.379460][ T14] usb 4-1: Product: syz [ 472.389764][ T14] usb 4-1: Manufacturer: syz [ 472.418377][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 472.433278][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 472.471166][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 472.508579][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 472.518338][ T9206] team0: Caught tx_queue_len zero misconfig [ 472.701835][ T6748] usb 4-1: USB disconnect, device number 26 [ 472.962634][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 473.880350][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 473.909966][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 473.933523][ T9229] loop2: detected capacity change from 0 to 128 [ 474.216813][ T9238] loop3: detected capacity change from 0 to 256 [ 474.387937][ T9238] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.463871][ T9245] No such timeout policy "syz1" [ 474.468953][ T9238] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 474.482029][ T4432] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 474.522197][ T9238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 474.551803][ T9249] program syz.2.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.622090][ T4432] usb 1-1: Using ep0 maxpacket: 8 [ 475.729372][ T4432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.752395][ T4432] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.765478][ T4432] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 475.774609][ T4432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.797419][ T4432] usb 1-1: config 0 descriptor?? [ 476.054076][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'. [ 476.108989][ T4432] usbhid 1-1:0.0: can't add hid device: -71 [ 476.136982][ T4432] usbhid: probe of 1-1:0.0 failed with error -71 [ 476.295788][ T4432] usb 1-1: USB disconnect, device number 16 [ 477.428526][ T9258] loop2: detected capacity change from 0 to 32768 [ 477.462910][ T9294] loop1: detected capacity change from 0 to 256 [ 477.608244][ T9294] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 477.670767][ T9258] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 477.670767][ T9258] [ 477.761560][ T9258] ERROR: (device loop2): remounting filesystem as read-only [ 478.751622][ T4332] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 478.903218][ T106] BUG: Bad page state in process jfsCommit pfn:42c06 [ 478.910086][ T106] page:ffffea00010b0180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x42c06 [ 478.943942][ T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 478.974501][ T4332] usb 1-1: Using ep0 maxpacket: 32 [ 478.982383][ T4332] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 478.995164][ T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 479.006416][ T4332] usb 1-1: config 0 has no interface number 0 [ 479.023026][ T106] raw: 000000000000001c ffff8880445f94d8 00000000ffffffff 0000000000000000 [ 479.034311][ T4332] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 479.046306][ T106] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 479.063302][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.073868][ T106] page_owner tracks the page as allocated [ 479.080208][ T4332] usb 1-1: Product: syz [ 479.084994][ T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9258, tgid 9257 (syz.2.1437), ts 477557228597, free_ts 477518536728 [ 479.104347][ T4332] usb 1-1: Manufacturer: syz [ 479.109122][ T4332] usb 1-1: SerialNumber: syz [ 479.117062][ T4332] usb 1-1: config 0 descriptor?? [ 479.132227][ T4332] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 479.132375][ T106] post_alloc_hook+0x173/0x1a0 [ 479.151276][ T106] get_page_from_freelist+0x1a1e/0x1ab0 [ 479.157172][ T106] __alloc_pages+0x1ec/0x4f0 [ 479.162096][ T106] folio_alloc+0x1c/0x60 [ 479.166411][ T106] filemap_alloc_folio+0xdb/0x480 [ 479.171569][ T106] do_read_cache_folio+0x1bb/0x760 [ 479.176865][ T106] do_read_cache_page+0x32/0x220 [ 479.183498][ T106] __get_metapage+0x316/0xfa0 [ 479.188351][ T106] diRead+0x6f7/0xbb0 [ 479.192597][ T106] jfs_iget+0x89/0x3f0 [ 479.196734][ T106] jfs_fill_super+0x70e/0xad0 [ 479.201636][ T106] mount_bdev+0x287/0x3c0 [ 479.206061][ T106] legacy_get_tree+0xe6/0x180 [ 479.210884][ T106] vfs_get_tree+0x88/0x270 [ 479.215435][ T106] do_new_mount+0x24a/0xa40 [ 479.220992][ T106] __se_sys_mount+0x2e3/0x3d0 [ 479.225865][ T106] page last free stack trace: [ 479.230580][ T106] free_unref_page_prepare+0x8b4/0x9a0 [ 479.236311][ T106] free_unref_page_list+0xbb/0x8e0 [ 479.241559][ T106] release_pages+0x1fa6/0x2220 [ 479.246741][ T106] tlb_flush_mmu+0x105/0x220 [ 479.251566][ T106] tlb_finish_mmu+0xf5/0x220 [ 479.256232][ T106] exit_mmap+0x384/0x960 [ 479.260512][ T106] __mmput+0x118/0x3c0 [ 479.264692][ T106] exit_mm+0x1fe/0x2d0 [ 479.268834][ T106] do_exit+0x905/0x2480 [ 479.273099][ T106] do_group_exit+0x217/0x2d0 [ 479.277731][ T106] __x64_sys_exit_group+0x3b/0x40 [ 479.282962][ T106] do_syscall_64+0x4c/0xa0 [ 479.287456][ T106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.295233][ T106] Modules linked in: [ 479.299201][ T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 479.306525][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.316617][ T106] Call Trace: [ 479.319935][ T106] [ 479.322892][ T106] dump_stack_lvl+0x188/0x24e [ 479.327624][ T106] ? show_regs_print_info+0x12/0x12 [ 479.332866][ T106] ? swiotlb_print_info+0x60/0x60 [ 479.336684][ T4332] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 479.337928][ T106] bad_page+0x14b/0x170 [ 479.337958][ T106] free_unref_page_prepare+0x42a/0x9a0 [ 479.357072][ T106] free_unref_page+0x2e/0x3f0 [ 479.361842][ T106] ? __folio_put+0xf1/0x210 [ 479.361964][ T4332] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 479.366388][ T106] txUnlock+0x27e/0xcb0 [ 479.366427][ T106] ? lockdep_hardirqs_on+0x94/0x140 [ 479.366455][ T106] jfs_lazycommit+0x56a/0xa70 [ 479.389752][ T106] ? txFreelock+0x5a0/0x5a0 [ 479.394406][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 479.400354][ T106] ? do_task_dead+0xd0/0xd0 [ 479.404902][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 479.410834][ T106] ? __kthread_parkme+0x162/0x1c0 [ 479.416087][ T106] kthread+0x29d/0x330 [ 479.420209][ T106] ? txFreelock+0x5a0/0x5a0 [ 479.424751][ T106] ? kthread_blkcg+0xd0/0xd0 [ 479.429379][ T106] ret_from_fork+0x1f/0x30 [ 479.433839][ T106] [ 479.436947][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.504197][ T106] Disabling lock debugging due to kernel taint [ 479.510652][ T106] page:ffffea00010b0180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x42c06 [ 479.523706][ T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 479.535644][ T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 479.546048][ T106] raw: 000000000000001c ffff8880445f94d8 00000000ffffffff 0000000000000000 [ 479.558462][ T106] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 479.569831][ T106] page_owner tracks the page as allocated [ 479.585087][ T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9258, tgid 9257 (syz.2.1437), ts 477557228597, free_ts 477518536728 [ 479.606164][ T106] post_alloc_hook+0x173/0x1a0 [ 479.611024][ T106] get_page_from_freelist+0x1a1e/0x1ab0 [ 479.616652][ T106] __alloc_pages+0x1ec/0x4f0 [ 479.621285][ T106] folio_alloc+0x1c/0x60 [ 479.625732][ T106] filemap_alloc_folio+0xdb/0x480 [ 479.631043][ T106] do_read_cache_folio+0x1bb/0x760 [ 479.636430][ T106] do_read_cache_page+0x32/0x220 [ 479.641436][ T106] __get_metapage+0x316/0xfa0 [ 479.646168][ T106] diRead+0x6f7/0xbb0 [ 479.650267][ T106] jfs_iget+0x89/0x3f0 [ 479.654396][ T106] jfs_fill_super+0x70e/0xad0 [ 479.659140][ T106] mount_bdev+0x287/0x3c0 [ 479.663753][ T106] legacy_get_tree+0xe6/0x180 [ 479.668498][ T106] vfs_get_tree+0x88/0x270 [ 479.673002][ T106] do_new_mount+0x24a/0xa40 [ 479.677561][ T106] __se_sys_mount+0x2e3/0x3d0 [ 479.682308][ T106] page last free stack trace: [ 479.687047][ T106] free_unref_page_prepare+0x8b4/0x9a0 [ 479.692762][ T106] free_unref_page_list+0xbb/0x8e0 [ 479.697916][ T106] release_pages+0x1fa6/0x2220 [ 479.702756][ T106] tlb_flush_mmu+0x105/0x220 [ 479.707396][ T106] tlb_finish_mmu+0xf5/0x220 [ 479.712146][ T106] exit_mmap+0x384/0x960 [ 479.716449][ T106] __mmput+0x118/0x3c0 [ 479.720547][ T106] exit_mm+0x1fe/0x2d0 [ 479.724947][ T106] do_exit+0x905/0x2480 [ 479.729171][ T106] do_group_exit+0x217/0x2d0 [ 479.734092][ T106] __x64_sys_exit_group+0x3b/0x40 [ 479.739196][ T106] do_syscall_64+0x4c/0xa0 [ 479.743714][ T106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.749854][ T106] ------------[ cut here ]------------ [ 479.755557][ T106] kernel BUG at include/linux/mm.h:1146! [ 479.761265][ T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 479.767349][ T106] CPU: 0 PID: 106 Comm: jfsCommit Tainted: G B syzkaller #0 [ 479.773312][ T6748] usb 1-1: USB disconnect, device number 17 [ 479.776039][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.776057][ T106] RIP: 0010:put_metapage+0x24f/0x340 [ 479.797365][ T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 40 32 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f [ 479.817019][ T106] RSP: 0018:ffffc90002d37ce0 EFLAGS: 00010246 [ 479.823110][ T106] RAX: 472fe50f65034400 RBX: ffff8880445f94d8 RCX: 472fe50f65034400 [ 479.831098][ T106] RDX: 0000000000000000 RSI: ffffffff8adf1380 RDI: ffffffff8adf1340 [ 479.839095][ T106] RBP: 000000000000007f R08: ffffffff8e1ff42f R09: 1ffffffff1c3fe85 [ 479.847114][ T106] R10: dffffc0000000000 R11: fffffbfff1c3fe86 R12: ffff8880445f9500 [ 479.855182][ T106] R13: ffffea00010b01b4 R14: 1ffff110088bf2a0 R15: 1ffff110088bf2ad [ 479.863159][ T106] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 479.872185][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.878796][ T106] CR2: 000000110c2fef5e CR3: 000000005b999000 CR4: 00000000003506f0 [ 479.886784][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 479.894775][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 479.902764][ T106] Call Trace: [ 479.906050][ T106] [ 479.908997][ T106] txUnlock+0x427/0xcb0 [ 479.913180][ T106] jfs_lazycommit+0x56a/0xa70 [ 479.917901][ T106] ? txFreelock+0x5a0/0x5a0 [ 479.922425][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 479.928327][ T106] ? do_task_dead+0xd0/0xd0 [ 479.932857][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 479.938765][ T106] ? __kthread_parkme+0x162/0x1c0 [ 479.943812][ T106] kthread+0x29d/0x330 [ 479.947885][ T106] ? txFreelock+0x5a0/0x5a0 [ 479.952400][ T106] ? kthread_blkcg+0xd0/0xd0 [ 479.957011][ T106] ret_from_fork+0x1f/0x30 [ 479.961449][ T106] [ 479.964474][ T106] Modules linked in: [ 479.969231][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 479.977989][ T106] ---[ end trace 0000000000000000 ]--- [ 479.983809][ T106] RIP: 0010:put_metapage+0x24f/0x340 [ 479.986523][ T6748] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 479.989235][ T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 40 32 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f [ 480.021198][ T106] RSP: 0018:ffffc90002d37ce0 EFLAGS: 00010246 [ 480.024561][ T6748] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 480.027920][ T106] RAX: 472fe50f65034400 RBX: ffff8880445f94d8 RCX: 472fe50f65034400 [ 480.042582][ T6748] quatech2 1-1:0.51: device disconnected [ 480.049095][ T106] RDX: 0000000000000000 RSI: ffffffff8adf1380 RDI: ffffffff8adf1340 [ 480.060680][ T106] RBP: 000000000000007f R08: ffffffff8e1ff42f R09: 1ffffffff1c3fe85 [ 480.069055][ T106] R10: dffffc0000000000 R11: fffffbfff1c3fe86 R12: ffff8880445f9500 [ 480.077321][ T106] R13: ffffea00010b01b4 R14: 1ffff110088bf2a0 R15: 1ffff110088bf2ad [ 480.086948][ T106] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 480.096170][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.103138][ T106] CR2: 000000110c2fef5e CR3: 000000005bc9b000 CR4: 00000000003506f0 [ 480.111136][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.119171][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.127181][ T106] Kernel panic - not syncing: Fatal exception [ 480.133376][ T106] Kernel Offset: disabled [ 480.137720][ T106] Rebooting in 86400 seconds..