last executing test programs: 8.759119111s ago: executing program 1 (id=1351): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.548726656s ago: executing program 1 (id=1355): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 7.388130482s ago: executing program 0 (id=1359): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) 6.959412873s ago: executing program 1 (id=1364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 6.661920759s ago: executing program 1 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x20000800) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4a23, 0x5, @mcast2, 0x4db1}}}, &(0x7f00000000c0)=0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 4.261804263s ago: executing program 0 (id=1372): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 4.261459273s ago: executing program 3 (id=1374): ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.257625684s ago: executing program 1 (id=1382): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) 3.870282532s ago: executing program 3 (id=1375): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1002}, 0x28) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}}, 0x4000050) 3.869202832s ago: executing program 2 (id=1376): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0xed8}}, {@debug}, {@data_err_ignore}, {@noload}, {@nobh}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="8cd62ad01d1f7cbf8522e970533d5b77", 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xdba2b9d3df201a65}, 0x4000814) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x280012, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}]}, 0xfe, 0x579, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x4008804) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.775313124s ago: executing program 3 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x663b, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) 3.774569855s ago: executing program 0 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="08000200000000440c"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 3.470887971s ago: executing program 0 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 2.21875765s ago: executing program 2 (id=1381): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x45c, &(0x7f0000001540)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1848b1, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, 0x0, 0x0) 2.117500832s ago: executing program 3 (id=1383): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20000) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10040042}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 1.988263784s ago: executing program 2 (id=1384): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 1.32420227s ago: executing program 0 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000008c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfd4e, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x20000800) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4a23, 0x5, @mcast2, 0x4db1}}}, &(0x7f00000000c0)=0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 1.32405372s ago: executing program 3 (id=1386): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getitimer(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, 0x0, 0x0, 0x42054) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 959.194118ms ago: executing program 2 (id=1387): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x24020400) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socket(0x29, 0x6, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0xf}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 644.147195ms ago: executing program 2 (id=1389): ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 319.083162ms ago: executing program 2 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 311.259253ms ago: executing program 3 (id=1391): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000000)=""/107, 0x6b) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_usb_connect(0x0, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) 2.4913ms ago: executing program 1 (id=1392): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./bus\x00', 0x181001a, &(0x7f0000002080)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0af3e9f7718732aaccc2158ad1dc498162eb5e87e3ec955164b6a97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b5e6b7d1c01f8b6423066333a94bb51f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebb5b396e66db522ca6f2ae2ca64ab0d9d3f0eeb890d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd824744057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d423077136da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efb9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f3", @ANYBLOB="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", @ANYRES8, @ANYBLOB="5a19495b7df91b324f913bb6183557", @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x1, 0x1e1, &(0x7f0000000340)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_fd={0x101, 0x8, 0x4, 0x806040, 0x6, {}, {0x2, 0x2, 0xa7, 0xf9, 0x78, 0x9, "d25e17cb"}, 0x48e, 0x4, {0x0}, 0x6}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000600)={0x0, 0x2, 0x8, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x41) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f00000004c0)='./bus/file0\x00', 0x2) 0s ago: executing program 0 (id=1400): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d000107000000090400ed050300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) kernel console output (not intermixed with test programs): : New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.280208][ T7346] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 220.299585][ T7346] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 220.319864][ T7346] BTRFS info (device loop0): using free space tree [ 220.387778][ T7346] BTRFS info (device loop0): enabling ssd optimizations [ 220.417208][ T7346] BTRFS info (device loop0): auto enabling async discard [ 220.649612][ T5778] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 220.675217][ T5771] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 220.842253][ T7349] i2c i2c-1: unsupported multi-msg i2c transaction [ 220.873018][ T7267] Set syz1 is full, maxelem 65536 reached [ 220.924373][ T5806] usb 2-1: USB disconnect, device number 15 [ 221.275842][ T5778] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 221.465707][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 221.493638][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.495472][ T7394] loop1: detected capacity change from 0 to 512 [ 221.502798][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.518245][ T5758] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 221.527032][ T7394] EXT4-fs: Ignoring removed orlov option [ 221.546272][ T7394] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.558379][ T5778] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 221.575847][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.591917][ T7394] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 221.595519][ T5778] usb 1-1: Product: syz [ 221.610206][ T5778] usb 1-1: Manufacturer: syz [ 221.614833][ T5778] usb 1-1: SerialNumber: syz [ 221.651303][ T7394] EXT4-fs (loop1): 1 truncate cleaned up [ 221.659313][ T7394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.705587][ T5758] usb 4-1: Using ep0 maxpacket: 8 [ 221.717775][ T5758] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.735665][ T5758] usb 4-1: config 0 has no interface number 0 [ 221.741980][ T5758] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.753306][ T5758] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.762539][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.875845][ T5758] usb 4-1: config 0 descriptor?? [ 221.894839][ T5778] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 221.924480][ T5758] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 221.963899][ T5778] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 222.629565][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.666737][ T5778] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 222.685776][ T5778] usb 1-1: USB disconnect, device number 17 [ 222.762313][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.915766][ T7410] tipc: Enabled bearer , priority 10 [ 223.095659][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 223.271888][ T5806] usb 4-1: USB disconnect, device number 23 [ 224.025473][ T5758] tipc: Node number set to 3222390541 [ 226.443512][ T7448] tipc: Enabled bearer , priority 2 [ 227.292991][ T7466] netlink: 'syz.1.437': attribute type 4 has an invalid length. [ 227.415766][ T7456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 228.186012][ T7474] netlink: 80 bytes leftover after parsing attributes in process `syz.3.441'. [ 228.448188][ T7468] kvm: kvm [7467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x7161 [ 228.796770][ T7480] loop3: detected capacity change from 0 to 40427 [ 228.816686][ T7468] kvm: kvm [7467]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1041 [ 228.835137][ T7480] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 228.843514][ T7480] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 228.854832][ T7480] F2FS-fs (loop3): invalid crc value [ 228.869716][ T7480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.922673][ T7480] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 228.929848][ T7480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.151588][ T149] Bluetooth: hci4: Frame reassembly failed (-84) [ 232.255184][ T5773] Bluetooth: hci4: command 0x1003 tx timeout [ 232.264801][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 234.357784][ T7529] syz.1.455 (7529): drop_caches: 2 [ 234.429419][ T7528] overlayfs: missing 'lowerdir' [ 234.524709][ T7531] overlayfs: failed to clone lowerpath [ 239.486387][ T176] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 239.514514][ T7574] trusted_key: encrypted_key: insufficient parameters specified [ 239.599006][ T7578] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 239.606887][ T7578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.470'. [ 239.616915][ T7578] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.625436][ T7578] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.633763][ T7578] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.642035][ T7578] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.660211][ T7578] team0: Port device geneve0 added [ 240.267103][ T7582] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 241.167148][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 242.406829][ T176] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.438286][ T176] usb 1-1: no configurations [ 242.452653][ T176] usb 1-1: can't read configurations, error -22 [ 242.580160][ T7599] xt_connbytes: Forcing CT accounting to be enabled [ 246.232301][ T7654] loop3: detected capacity change from 0 to 512 [ 246.265297][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 246.866225][ T5807] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 247.075511][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 247.098376][ T5807] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 247.137328][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.173884][ T5807] usb 2-1: config 0 descriptor?? [ 247.207683][ T5807] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 247.910150][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.946938][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.046124][ T7665] block device autoloading is deprecated and will be removed. [ 248.102388][ T7665] syz.1.495: attempt to access beyond end of device [ 248.102388][ T7665] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 248.196097][ T5807] gspca_vc032x: reg_w err -110 [ 248.210411][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.308500][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.390983][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.459740][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.523069][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.585311][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.666863][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.746078][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.810058][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.866665][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.900869][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.926721][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.932072][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.985568][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.990930][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.034617][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.062654][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.080912][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.110874][ T5807] gspca_vc032x: Unknown sensor... [ 249.199092][ T5807] vc032x: probe of 2-1:0.0 failed with error -22 [ 249.219245][ T5807] usb 2-1: USB disconnect, device number 16 [ 255.415317][ T7793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 255.997791][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.012554][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.908360][ T7822] Bluetooth: MGMT ver 1.22 [ 258.105782][ T5778] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 258.107315][ T7824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.132160][ T7824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.168939][ T7824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.187438][ T7824] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.303113][ T7824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.327272][ T5778] usb 4-1: config 0 has no interfaces? [ 258.333133][ T5778] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.357905][ T7824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.372361][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.425284][ T5778] usb 4-1: config 0 descriptor?? [ 258.665931][ T5778] usb 4-1: USB disconnect, device number 24 [ 259.909384][ T7846] syzkaller0: entered promiscuous mode [ 259.926907][ T7846] syzkaller0: entered allmulticast mode [ 260.138036][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 260.239460][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 260.376272][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 261.058556][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'. [ 262.494527][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 263.210808][ T7879] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 265.520302][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 265.529328][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 265.539224][ T51] Bluetooth: hci2: hardware error 0x00 [ 266.237135][ T7898] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 266.250929][ T7898] batman_adv: batadv0: Adding interface: wlan0 [ 266.257725][ T7898] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.285611][ T7898] batman_adv: batadv0: Interface activated: wlan0 [ 267.577353][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 268.785479][ T7910] Bluetooth: MGMT ver 1.22 [ 268.895989][ T7913] syzkaller0: entered promiscuous mode [ 268.916825][ T7915] loop0: detected capacity change from 0 to 512 [ 268.923563][ T7913] syzkaller0: entered allmulticast mode [ 268.949668][ T7915] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.977955][ T7913] tipc: Started in network mode [ 268.982890][ T7913] tipc: Node identity 3e243cf54562, cluster identity 4711 [ 269.003415][ T7915] EXT4-fs (loop0): 1 truncate cleaned up [ 269.015303][ T7913] tipc: Enabled bearer , priority 0 [ 269.030761][ T7915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.074529][ T7913] tipc: Resetting bearer [ 269.120896][ T7915] overlay: ./file1 is not a directory [ 269.130375][ T7912] tipc: Resetting bearer [ 269.204492][ T7912] tipc: Disabling bearer [ 270.005779][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.130211][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 270.142195][ T7931] loop0: detected capacity change from 0 to 512 [ 270.152440][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 270.173366][ T7930] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.183181][ T7930] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.192104][ T7930] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.200917][ T7930] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.260439][ T7931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.288190][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 270.300361][ T7931] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.327181][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 270.365690][ T5807] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 270.477879][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.567375][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.586972][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.617935][ T5807] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 270.640199][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.704853][ T5807] usb 4-1: config 0 descriptor?? [ 271.083415][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 271.092559][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 271.138031][ T7948] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.146847][ T7948] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.155614][ T7948] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.164322][ T7948] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.180763][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 271.189760][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 271.442241][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.622179][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.713370][ T5807] usbhid 4-1:0.0: can't add hid device: -71 [ 271.780848][ T5807] usbhid: probe of 4-1:0.0 failed with error -71 [ 271.832483][ T5807] usb 4-1: USB disconnect, device number 25 [ 272.139062][ T5758] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 272.363164][ T5758] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 272.371585][ T5758] usb 1-1: config 0 has no interface number 0 [ 272.435711][ T5758] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 272.481884][ T5758] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.680357][ T5758] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 272.693290][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.705015][ T5758] usb 1-1: Product: syz [ 272.713773][ T5758] usb 1-1: Manufacturer: syz [ 272.719030][ T5758] usb 1-1: SerialNumber: syz [ 272.886573][ T5758] usb 1-1: config 0 descriptor?? [ 272.907312][ T7953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.924080][ T7968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.576'. [ 272.942190][ T7968] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 272.951484][ T5758] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 272.976210][ T7968] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 272.981946][ T5758] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 273.069391][ T7972] loop3: detected capacity change from 0 to 512 [ 273.114312][ T7972] EXT4-fs: Ignoring removed nobh option [ 273.156679][ T7972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 273.166646][ T7972] System zones: 1-12 [ 273.186677][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.195956][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.215599][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 273.216768][ T7972] EXT4-fs (loop3): 1 truncate cleaned up [ 273.236366][ T7972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.489013][ T5806] usb 1-1: USB disconnect, device number 21 [ 273.509551][ T5806] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 273.526817][ T5806] cyberjack 1-1:0.69: device disconnected [ 273.667781][ T7988] overlayfs: upper fs needs to support d_type. [ 274.215105][ T5776] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 274.265303][ T5776] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 274.283045][ T5776] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 274.437616][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.935859][ T5758] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 275.200641][ T5758] usb 2-1: Using ep0 maxpacket: 8 [ 275.249042][ T5758] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.302652][ T5758] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.353166][ T5758] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.363340][ T5758] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.389918][ T5758] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.504113][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.311708][ T5758] usb 2-1: usb_control_msg returned -32 [ 276.325711][ T5758] usbtmc 2-1:16.0: can't read capabilities [ 276.336835][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.396857][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.482291][ T8012] 9pnet_virtio: no channels available for device syz [ 279.672901][ T5778] usb 2-1: USB disconnect, device number 17 [ 281.016816][ T8048] loop0: detected capacity change from 0 to 512 [ 281.041768][ T8048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 281.049325][ T8048] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 281.068580][ T8048] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.597: bad orphan inode 131083 [ 281.081624][ T8048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.182753][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.055827][ T176] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 283.259741][ T8074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'. [ 283.875272][ T8079] loop1: detected capacity change from 0 to 512 [ 283.886845][ T8079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 283.890380][ T176] usb 1-1: Using ep0 maxpacket: 32 [ 283.907366][ T176] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.925693][ T176] usb 1-1: config 0 has no interface number 0 [ 283.935467][ T176] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 283.947205][ T8079] EXT4-fs (loop1): 1 truncate cleaned up [ 283.954228][ T8079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.966495][ T176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.974556][ T176] usb 1-1: Product: syz [ 283.979026][ T176] usb 1-1: Manufacturer: syz [ 283.983662][ T176] usb 1-1: SerialNumber: syz [ 283.991669][ T176] usb 1-1: config 0 descriptor?? [ 284.000724][ T176] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 284.009890][ T176] usb 1-1: selecting invalid altsetting 1 [ 284.015768][ T176] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 284.029828][ T176] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.041553][ T176] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 284.049996][ T176] usb 1-1: media controller created [ 284.129607][ T176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.220727][ T8066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.767074][ T8087] can0: slcan on ttyS3. [ 285.508258][ T8066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.587023][ T8088] can0 (unregistered): slcan off ttyS3. [ 285.600901][ T8066] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.609892][ T8066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.617893][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 285.625237][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 285.632642][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 285.968425][ T8094] loop3: detected capacity change from 0 to 128 [ 286.214456][ T176] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 286.290537][ T8094] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 286.304135][ T8094] hpfs: filesystem error: improperly stopped [ 286.310295][ T8094] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 286.318789][ T8094] hpfs: You really don't want any checks? You are crazy... [ 286.326504][ T8094] hpfs: hpfs_map_sector(): read error [ 286.331911][ T8094] hpfs: code page support is disabled [ 286.338946][ T8094] hpfs: hpfs_map_4sectors(): unaligned read [ 286.346427][ T8094] hpfs: hpfs_map_4sectors(): unaligned read [ 286.350462][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.352365][ T8094] hpfs: filesystem error: unable to find root dir [ 286.380910][ T176] zl10353_read_register: readreg error (reg=127, ret==-71) [ 286.389466][ T176] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 286.438656][ T176] usb 1-1: USB disconnect, device number 22 [ 287.345604][ T5778] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 288.341399][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 288.350223][ T5778] usb 1-1: config 0 has no interfaces? [ 288.368355][ T5778] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 288.378713][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.387600][ T5778] usb 1-1: Product: syz [ 288.391795][ T5778] usb 1-1: Manufacturer: syz [ 288.398035][ T5778] usb 1-1: SerialNumber: syz [ 288.515281][ T8138] syzkaller0: entered promiscuous mode [ 288.520857][ T8138] syzkaller0: entered allmulticast mode [ 288.571802][ T5778] r8152-cfgselector 1-1: config 0 descriptor?? [ 289.071024][ T5778] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 289.151860][ T6463] usb 1-1: config 0 descriptor?? [ 289.288903][ T5806] usb 1-1: USB disconnect, device number 23 [ 289.295738][ T6463] usb 1-1: can't set config #0, error -71 [ 289.405765][ T5778] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 289.597363][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.607867][ T5778] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.617426][ T5778] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.626798][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.645068][ T5778] usb 2-1: config 0 descriptor?? [ 289.745521][ T5807] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 289.839268][ T8163] loop0: detected capacity change from 0 to 164 [ 290.067405][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.077767][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 290.088826][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.105206][ T5807] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 290.116198][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 290.124482][ T5807] usb 4-1: Product: syz [ 290.143277][ T5807] usb 4-1: Manufacturer: syz [ 290.162145][ T5807] usb 4-1: SerialNumber: syz [ 290.175883][ T5807] usb 4-1: config 0 descriptor?? [ 290.180542][ T8166] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 290.184532][ T5807] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 290.196935][ T5807] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 290.204100][ T5807] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 290.260663][ T5778] usb 2-1: USB disconnect, device number 18 [ 291.435097][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 293.178704][ T5778] usb 4-1: USB disconnect, device number 26 [ 293.504694][ T8197] loop1: detected capacity change from 0 to 4096 [ 293.561912][ T8201] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.708585][ T8205] hub 8-0:1.0: USB hub found [ 293.716976][ T8205] hub 8-0:1.0: 1 port detected [ 295.448992][ T8214] input: syz1 as /devices/virtual/input/input12 [ 295.551255][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 297.344083][ T8221] loop3: detected capacity change from 0 to 32768 [ 297.384588][ T8221] JBD2: Ignoring recovery information on journal [ 297.429358][ T8240] loop1: detected capacity change from 0 to 256 [ 297.460362][ T8221] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 297.494767][ T6463] (kworker/u4:9,6463,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 297.540292][ T6463] (kworker/u4:9,6463,1):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 297.550401][ T6463] (kworker/u4:9,6463,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 297.575560][ T28] audit: type=1800 audit(1782620084.723:28): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.649" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 297.658889][ T8240] FAT-fs (loop1): Directory bread(block 64) failed [ 297.685555][ T8240] FAT-fs (loop1): Directory bread(block 65) failed [ 297.692239][ T8240] FAT-fs (loop1): Directory bread(block 66) failed [ 297.715585][ T8240] FAT-fs (loop1): Directory bread(block 67) failed [ 297.731623][ T8221] (syz.3.649,8221,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0 [ 297.761431][ T8240] FAT-fs (loop1): Directory bread(block 68) failed [ 297.776193][ T8221] (syz.3.649,8221,0):__ocfs2_delete_entry:1162 ERROR: status = -5 [ 297.782928][ T8240] FAT-fs (loop1): Directory bread(block 69) failed [ 297.791145][ T8221] (syz.3.649,8221,0):ocfs2_orphan_del:2389 ERROR: status = -5 [ 297.807986][ T8240] FAT-fs (loop1): Directory bread(block 70) failed [ 297.816588][ T8221] (syz.3.649,8221,1):ocfs2_orphan_del:2404 ERROR: status = -5 [ 297.816670][ T8240] FAT-fs (loop1): Directory bread(block 71) failed [ 297.824192][ T8221] (syz.3.649,8221,1):ocfs2_del_inode_from_orphan:2737 ERROR: status = -5 [ 297.831946][ T8240] FAT-fs (loop1): Directory bread(block 72) failed [ 297.846251][ T8240] FAT-fs (loop1): Directory bread(block 73) failed [ 297.905558][ T8221] (syz.3.649,8221,0):ocfs2_dio_end_io_write:2409 ERROR: status = -5 [ 297.957129][ T8221] syz.3.649 (8221) used greatest stack depth: 18264 bytes left [ 298.032507][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 298.826397][ T8269] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 298.853397][ T8272] syz_tun: entered allmulticast mode [ 298.912777][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 299.154520][ T8280] xt_CONNSECMARK: invalid mode: 0 [ 300.380922][ T8290] loop3: detected capacity change from 0 to 256 [ 300.458832][ T8290] FAT-fs (loop3): Directory bread(block 64) failed [ 300.484253][ T8290] FAT-fs (loop3): Directory bread(block 65) failed [ 300.513198][ T8290] FAT-fs (loop3): Directory bread(block 66) failed [ 300.532370][ T8290] FAT-fs (loop3): Directory bread(block 67) failed [ 300.544727][ T8290] FAT-fs (loop3): Directory bread(block 68) failed [ 300.564336][ T8290] FAT-fs (loop3): Directory bread(block 69) failed [ 300.573665][ T8290] FAT-fs (loop3): Directory bread(block 70) failed [ 300.587484][ T8290] FAT-fs (loop3): Directory bread(block 71) failed [ 300.594383][ T8290] FAT-fs (loop3): Directory bread(block 72) failed [ 300.624728][ T8290] FAT-fs (loop3): Directory bread(block 73) failed [ 301.444883][ T5806] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.795614][ T5806] usb 2-1: Using ep0 maxpacket: 8 [ 301.823614][ T5806] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.881825][ T5806] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.965268][ T5806] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.015623][ T5806] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 302.024837][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.083145][ T5806] usb 2-1: config 0 descriptor?? [ 302.573215][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 302.584141][ T8311] team0: entered promiscuous mode [ 302.589320][ T8311] team_slave_0: entered promiscuous mode [ 302.596557][ T8311] team_slave_1: entered promiscuous mode [ 302.605581][ T8311] geneve0: entered promiscuous mode [ 302.615100][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.640624][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.656456][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.664091][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.675552][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.683204][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.706343][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.728594][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.745537][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.757167][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.766949][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.774744][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.782942][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.785576][ T5778] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 302.804370][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.812430][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.820229][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.849492][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.857241][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.864747][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.873134][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.880726][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.889195][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.896745][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.905091][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.913822][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.921887][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.929709][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.937785][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.945300][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.953180][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.970014][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.984903][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 302.985582][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 303.000852][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 303.010229][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 303.019978][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 303.029681][ T5806] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x0 [ 303.057937][ T5806] magicmouse 0003:05AC:0269.0007: hidraw0: USB HID v0.03 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 303.098085][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.117371][ T5806] usb 2-1: USB disconnect, device number 19 [ 303.118616][ T5778] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 303.167147][ T5778] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 303.181659][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.202350][ T5778] usb 1-1: Product: syz [ 303.214585][ T5778] usb 1-1: Manufacturer: syz [ 303.257243][ T5778] usb 1-1: SerialNumber: syz [ 303.373483][ T8323] fido_id[8323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 303.404966][ T8308] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 304.036740][ T5778] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 304.058175][ T5778] usb 1-1: MIDIStreaming interface descriptor not found [ 304.185692][ T5778] usb 1-1: USB disconnect, device number 24 [ 304.258486][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.883403][ T8338] syzkaller0: entered promiscuous mode [ 304.911282][ T8338] syzkaller0: entered allmulticast mode [ 304.930032][ T8338] tipc: Enabled bearer , priority 0 [ 304.938413][ T8337] tipc: Resetting bearer [ 304.964080][ T8341] loop3: detected capacity change from 0 to 512 [ 304.987647][ T8337] tipc: Disabling bearer [ 304.992325][ T8341] EXT4-fs: Ignoring removed oldalloc option [ 305.007803][ T8341] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.056504][ T8341] EXT4-fs (loop3): 1 truncate cleaned up [ 305.063839][ T8341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.218494][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.009406][ T8355] loop1: detected capacity change from 0 to 256 [ 306.097609][ T8355] FAT-fs (loop1): Directory bread(block 64) failed [ 306.121228][ T8355] FAT-fs (loop1): Directory bread(block 65) failed [ 306.146094][ T8355] FAT-fs (loop1): Directory bread(block 66) failed [ 306.167109][ T8355] FAT-fs (loop1): Directory bread(block 67) failed [ 306.181503][ T8355] FAT-fs (loop1): Directory bread(block 68) failed [ 306.191830][ T8355] FAT-fs (loop1): Directory bread(block 69) failed [ 306.209032][ T8355] FAT-fs (loop1): Directory bread(block 70) failed [ 306.227272][ T8355] FAT-fs (loop1): Directory bread(block 71) failed [ 306.244168][ T8355] FAT-fs (loop1): Directory bread(block 72) failed [ 306.264734][ T8355] FAT-fs (loop1): Directory bread(block 73) failed [ 306.512251][ T8364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.690'. [ 306.527483][ T8364] unsupported nlmsg_type 40 [ 307.225505][ T5778] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 308.352134][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 308.360505][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.371844][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.383617][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.393057][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.409268][ T5778] usb 1-1: Product: syz [ 308.413483][ T5778] usb 1-1: Manufacturer: syz [ 308.465507][ T5778] usb 1-1: SerialNumber: syz [ 308.696619][ T5778] usb 1-1: 0:2 : does not exist [ 308.727725][ T5778] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 308.792109][ T5778] usb 1-1: USB disconnect, device number 25 [ 308.905019][ T7565] udevd[7565]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.202860][ T8399] Set syz1 is full, maxelem 6117 reached [ 309.645875][ T5806] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 309.856640][ T5806] usb 2-1: Using ep0 maxpacket: 32 [ 309.914354][ T5806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.088584][ T5806] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.227125][ T5806] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 310.257979][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.279825][ T8419] loop3: detected capacity change from 0 to 256 [ 310.305996][ T5806] usb 2-1: Product: syz [ 310.320995][ T8419] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.330711][ T5806] usb 2-1: Manufacturer: syz [ 310.333354][ T8419] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 310.353264][ T8419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 310.375630][ T5806] usb 2-1: SerialNumber: syz [ 310.397294][ T5806] usb 2-1: config 0 descriptor?? [ 310.640143][ T5806] usb 2-1: USB disconnect, device number 20 [ 310.903907][ T8427] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 310.916365][ T8427] team0 (unregistering): Port device team_slave_0 removed [ 310.930931][ T8427] team0 (unregistering): Failed to send options change via netlink (err -105) [ 310.944076][ T8427] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 310.955331][ T8427] team0 (unregistering): Port device team_slave_1 removed [ 310.982271][ T8432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.709'. [ 312.330032][ T5806] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 312.515486][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 312.523461][ T5806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.535088][ T5807] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 312.543855][ T5806] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.569311][ T5806] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.578579][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.586786][ T5806] usb 1-1: Product: syz [ 312.592635][ T5806] usb 1-1: Manufacturer: syz [ 312.597552][ T5806] usb 1-1: SerialNumber: syz [ 312.735774][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 312.751462][ T5807] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 312.759908][ T5807] usb 2-1: config 0 has no interface number 0 [ 312.766475][ T5807] usb 2-1: config 0 interface 255 has no altsetting 0 [ 312.788971][ T5807] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 312.800572][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.808909][ T5807] usb 2-1: Product: syz [ 312.813254][ T5807] usb 2-1: Manufacturer: syz [ 312.818348][ T5807] usb 2-1: SerialNumber: syz [ 312.863634][ T5807] usb 2-1: config 0 descriptor?? [ 312.886500][ T5806] usb 1-1: 0:2 : does not exist [ 312.924480][ T5807] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 312.935981][ T5806] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 312.972456][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 313.000742][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.074978][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 313.112536][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.143537][ T5806] usb 1-1: USB disconnect, device number 26 [ 313.248302][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.276171][ T5807] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 313.284320][ T5807] usb 2-1: media controller created [ 313.352206][ T7565] udevd[7565]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.363453][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.427235][ T5807] ttusb2: set interface to alts=3 failed [ 313.504768][ T5807] DVB: Unable to find symbol tda10086_attach() [ 313.515501][ T5807] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 313.532465][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 313.543573][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.554670][ T5807] dvb-usb: bulk message failed: -22 (5/0) [ 313.560523][ T5807] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.570935][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 313.584824][ T5807] usb 2-1: USB disconnect, device number 21 [ 313.636019][ T5807] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 313.834721][ T8474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 317.420948][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.492940][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.739398][ T51] Bluetooth: hci0: link tx timeout [ 319.265552][ T5807] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 319.387364][ T8539] loop0: detected capacity change from 0 to 512 [ 322.202446][ T5807] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 322.210272][ T5807] usb 4-1: can't read configurations, error -71 [ 322.367408][ T8550] netlink: 'syz.3.750': attribute type 6 has an invalid length. [ 322.506858][ T8550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.625842][ T8552] bond1: (slave veth3): Enslaving as an active interface with an up link [ 326.178027][ T8604] loop3: detected capacity change from 0 to 4096 [ 326.621522][ T8611] Cannot find set identified by id 0 to match [ 328.363500][ T8625] syzkaller0: entered promiscuous mode [ 328.381643][ T8625] syzkaller0: entered allmulticast mode [ 330.975827][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 331.224799][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.245501][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.282259][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 331.299831][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.316357][ T23] usb 2-1: config 0 descriptor?? [ 332.247103][ T8656] hub 8-0:1.0: USB hub found [ 332.254558][ T8656] hub 8-0:1.0: 1 port detected [ 333.083300][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 333.100408][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 333.119297][ T23] usb 2-1: USB disconnect, device number 22 [ 334.274679][ T8652] syz.0.783 (8652): drop_caches: 2 [ 334.630866][ T8666] loop3: detected capacity change from 0 to 4096 [ 334.739024][ T8666] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 334.801457][ T8666] ucma_write: process 570 (syz.3.787) changed security contexts after opening file descriptor, this is not allowed. [ 334.952963][ T8668] loop0: detected capacity change from 0 to 128 [ 335.135238][ T8668] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 335.252246][ T8668] hpfs: filesystem error: improperly stopped [ 335.258600][ T8668] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 335.266670][ T8668] hpfs: You really don't want any checks? You are crazy... [ 335.274389][ T8668] hpfs: Code page index out of array [ 335.279847][ T8668] hpfs: code page support is disabled [ 335.345552][ T8668] hpfs: hpfs_map_4sectors(): unaligned read [ 335.351680][ T8668] hpfs: hpfs_map_4sectors(): unaligned read [ 335.585521][ T8668] hpfs: filesystem error: unable to find root dir [ 335.610904][ T8668] hpfs: hpfs_map_4sectors(): unaligned read [ 335.985996][ T8680] Device name cannot be null; rc = [-22] [ 336.372544][ T8682] loop1: detected capacity change from 0 to 256 [ 336.445098][ T8682] FAT-fs (loop1): Directory bread(block 64) failed [ 336.478471][ T8682] FAT-fs (loop1): Directory bread(block 65) failed [ 336.485181][ T8682] FAT-fs (loop1): Directory bread(block 66) failed [ 336.550246][ T8682] FAT-fs (loop1): Directory bread(block 67) failed [ 336.582819][ T8682] FAT-fs (loop1): Directory bread(block 68) failed [ 336.620255][ T8682] FAT-fs (loop1): Directory bread(block 69) failed [ 336.630190][ T8682] FAT-fs (loop1): Directory bread(block 70) failed [ 336.636956][ T8682] FAT-fs (loop1): Directory bread(block 71) failed [ 336.643751][ T8682] FAT-fs (loop1): Directory bread(block 72) failed [ 336.673786][ T8682] FAT-fs (loop1): Directory bread(block 73) failed [ 336.896330][ T8694] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 338.507729][ T8702] loop1: detected capacity change from 0 to 256 [ 338.534936][ T8702] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 338.608288][ T28] audit: type=1800 audit(1782620125.783:29): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.798" name="file2" dev="loop1" ino=1048620 res=0 errno=0 [ 338.673261][ T8702] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 338.679907][ T8684] loop3: detected capacity change from 0 to 32768 [ 338.710156][ T8702] exFAT-fs (loop1): Filesystem has been set read-only [ 338.712535][ T8684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.794 (8684) [ 338.718749][ T8702] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 338.802334][ T8684] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 338.816902][ T8684] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 338.836042][ T8684] BTRFS info (device loop3): force clearing of disk cache [ 338.843401][ T8684] BTRFS info (device loop3): metadata ratio 0 [ 338.850897][ T8684] BTRFS info (device loop3): enabling disk space caching [ 338.885522][ T8684] BTRFS info (device loop3): disk space caching is enabled [ 339.024083][ T8721] trusted_key: encrypted_key: insufficient parameters specified [ 339.085624][ T8684] BTRFS info (device loop3): enabling ssd optimizations [ 339.106384][ T8684] BTRFS info (device loop3): auto enabling async discard [ 339.400231][ T8684] BTRFS info (device loop3): rebuilding free space tree [ 339.479714][ T8727] netlink: 'syz.1.801': attribute type 10 has an invalid length. [ 339.487754][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.801'. [ 339.516834][ T8727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.575744][ T8727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.657069][ T8727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.690952][ T8727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.714836][ T8727] team0: Port device geneve0 added [ 339.838199][ T8684] BTRFS info (device loop3): disabling free space tree [ 339.869553][ T8684] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 339.905884][ T8684] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 340.030814][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.065485][ T5807] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 340.316849][ T5807] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 340.332936][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.384714][ T5807] usb 2-1: Product: syz [ 340.394838][ T5807] usb 2-1: Manufacturer: syz [ 340.423283][ T5807] usb 2-1: SerialNumber: syz [ 340.440859][ T5807] usb 2-1: config 0 descriptor?? [ 340.478960][ T5807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 340.517926][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.532543][ T8738] tipc: Resetting bearer [ 340.548045][ T5807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 340.576148][ T5807] usb 2-1: media controller created [ 340.683502][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.930589][ T5807] DVB: Unable to find symbol mt352_attach() [ 341.874714][ T5807] DVB: Unable to find symbol nxt6000_attach() [ 341.886833][ T5807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 341.913412][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 341.939159][ T5807] dvb-usb: schedule remote query interval to 1000 msecs. [ 341.948827][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 341.960334][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 341.970439][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 342.080063][ T5807] usb 2-1: USB disconnect, device number 23 [ 342.216470][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.223741][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.273220][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 343.457971][ T8738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.070977][ T8738] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.080339][ T8738] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.089279][ T8738] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.098243][ T8738] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.157282][ T8738] batman_adv: batadv0: Interface deactivated: wlan0 [ 344.187691][ T8738] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.196705][ T8738] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.205646][ T8738] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.214525][ T8738] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.244223][ T8739] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 344.417796][ T8787] loop0: detected capacity change from 0 to 256 [ 344.433737][ T8787] exfat: Deprecated parameter 'namecase' [ 344.440198][ T8787] exfat: Deprecated parameter 'namecase' [ 344.458024][ T8787] exfat: Deprecated parameter 'namecase' [ 344.530597][ T8787] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 344.705227][ T8791] loop3: detected capacity change from 0 to 2048 [ 345.251667][ T8791] Alternate GPT is invalid, using primary GPT. [ 345.268332][ T8791] loop3: p2 p3 p7 [ 345.320354][ T8791] fuse: root generation should be zero [ 345.492823][ T8806] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 345.516114][ T8762] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 345.584511][ T8806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.621138][ T7565] udevd[7565]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 345.649373][ T7932] udevd[7932]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 345.661282][ T8330] udevd[8330]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 345.709850][ T8813] bond1: (slave dummy0): making interface the new active one [ 345.727473][ T8813] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 345.779283][ T8810] bond1: (slave veth3): Enslaving as an active interface with a down link [ 345.877292][ T8806] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 345.885159][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'. [ 345.940653][ T8806] dummy0: entered promiscuous mode [ 345.965991][ T8806] bond1: (slave dummy0): Releasing active interface [ 345.972730][ T8806] bond1: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 346.006824][ T5758] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 346.021709][ T8819] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 346.199044][ T5758] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 346.215867][ T5758] usb 4-1: config 0 has no interface number 0 [ 346.235645][ T5758] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 346.261076][ T5758] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 346.281530][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.292754][ T5758] usb 4-1: Product: syz [ 346.306183][ T5758] usb 4-1: Manufacturer: syz [ 346.321300][ T5758] usb 4-1: SerialNumber: syz [ 346.360192][ T5758] usb 4-1: config 0 descriptor?? [ 346.397317][ T8809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 346.624156][ T5758] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 12:e1:fe:16:c8:02 [ 346.811881][ T5758] usb 4-1: USB disconnect, device number 29 [ 346.938580][ T5758] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 347.403029][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.411675][ T8829] batman_adv: batadv0: Removing interface: wlan0 [ 348.515713][ T8762] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.527933][ T8837] loop3: detected capacity change from 0 to 32768 [ 350.006758][ T8762] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 350.014534][ T8762] usb 2-1: can't read configurations, error -71 [ 350.103413][ T8842] read_mapping_page failed! [ 350.108197][ T8842] ERROR: (device loop3): txCommit: [ 350.108197][ T8842] [ 351.312103][ T8856] loop1: detected capacity change from 0 to 256 [ 351.656106][ T5758] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 353.915509][ T5758] usb 4-1: Using ep0 maxpacket: 16 [ 354.093533][ T5758] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 354.122258][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.258656][ T5758] usb 4-1: Product: syz [ 354.452315][ T5758] usb 4-1: Manufacturer: syz [ 354.502270][ T5758] usb 4-1: SerialNumber: syz [ 354.789242][ T5758] usb 4-1: config 0 descriptor?? [ 354.850061][ T8867] xt_recent: Unsupported userspace flags (000000b1) [ 354.885808][ T5758] usb 4-1: can't set config #0, error -71 [ 354.963759][ T5758] usb 4-1: USB disconnect, device number 30 [ 355.125557][ T8764] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 355.928165][ T8764] usb 1-1: device descriptor read/64, error -71 [ 356.227250][ T8764] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 356.405496][ T8764] usb 1-1: device descriptor read/64, error -71 [ 356.551137][ T8764] usb usb1-port1: attempt power cycle [ 356.968544][ T8891] loop3: detected capacity change from 0 to 128 [ 356.976354][ T8764] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 356.989623][ T8891] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 357.029127][ T8764] usb 1-1: device descriptor read/8, error -71 [ 357.355521][ T8764] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 357.437597][ T8764] usb 1-1: device descriptor read/8, error -71 [ 357.568231][ T8764] usb usb1-port1: unable to enumerate USB device [ 358.365901][ T5758] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 358.563674][ T8764] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 358.715646][ T5758] usb 4-1: Using ep0 maxpacket: 32 [ 358.761856][ T8764] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 358.795539][ T8764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.813763][ T8764] usb 2-1: Product: syz [ 358.825926][ T8764] usb 2-1: Manufacturer: syz [ 358.830600][ T8764] usb 2-1: SerialNumber: syz [ 359.075753][ T8914] overlayfs: missing 'workdir' [ 359.165690][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 359.383535][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 359.694308][ T5758] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.704784][ T5758] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 359.712588][ T5758] usb 4-1: can't read configurations, error -71 [ 360.737187][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 361.111615][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 361.281401][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 361.397088][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 361.461834][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 361.501071][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 361.515628][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 361.537292][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 361.584008][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 361.631682][ T8764] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 361.753601][ T8937] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 361.794234][ T8764] lan78xx: probe of 2-1:1.0 failed with error -71 [ 361.842476][ T8764] usb 2-1: USB disconnect, device number 26 [ 362.233310][ T8948] loop3: detected capacity change from 0 to 2048 [ 362.269020][ T8948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.573261][ T8954] nbd: must specify at least one socket [ 364.102985][ T8972] loop1: detected capacity change from 0 to 2048 [ 364.256414][ T8976] loop0: detected capacity change from 0 to 512 [ 364.273298][ T8972] EXT4-fs: test_dummy_encryption requires encrypt feature [ 364.297343][ T8976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.362368][ T8976] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.578994][ T8980] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 365.093191][ T8976] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 365.113329][ T8976] EXT4-fs (loop0): This should not happen!! Data will be lost [ 365.113329][ T8976] [ 365.123708][ T8976] EXT4-fs (loop0): Total free blocks count 0 [ 365.130627][ T8976] EXT4-fs (loop0): Free/Dirty block details [ 365.136974][ T8976] EXT4-fs (loop0): free_blocks=65280 [ 365.143625][ T8976] EXT4-fs (loop0): dirty_blocks=33 [ 365.152659][ T8976] EXT4-fs (loop0): Block reservation details [ 365.161584][ T8976] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 365.268892][ T8985] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 365.693279][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.917136][ T8993] loop3: detected capacity change from 0 to 40427 [ 367.938776][ T8993] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 367.971408][ T8993] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 368.170379][ T8993] F2FS-fs (loop3): invalid crc value [ 368.393339][ T8993] F2FS-fs (loop3): Found nat_bits in checkpoint [ 368.590862][ T8991] loop0: detected capacity change from 0 to 32768 [ 368.718192][ T8991] JBD2: Ignoring recovery information on journal [ 368.845037][ T8991] JBD2: journal reset failed [ 368.845127][ T8993] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 368.850288][ T8991] (syz.0.879,8991,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 368.866876][ T8991] (syz.0.879,8991,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 368.880613][ T8993] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 370.103646][ T9045] loop0: detected capacity change from 0 to 64 [ 370.140531][ T28] audit: type=1800 audit(1782620157.323:30): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 370.170599][ T28] audit: type=1800 audit(1782620157.343:31): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 370.229945][ T28] audit: type=1800 audit(1782620157.413:32): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 370.765604][ T8764] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 370.964600][ T9059] loop1: detected capacity change from 0 to 512 [ 371.079040][ T9059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 371.101013][ T9059] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.172816][ T9064] netlink: 'syz.2.899': attribute type 4 has an invalid length. [ 371.212667][ T8764] usb 4-1: Using ep0 maxpacket: 32 [ 371.254855][ T8764] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 371.271180][ T8764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.812593][ T8764] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 371.823272][ T8764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.831444][ T8764] usb 4-1: Product: syz [ 371.835884][ T8764] usb 4-1: Manufacturer: syz [ 371.840507][ T8764] usb 4-1: SerialNumber: syz [ 371.866712][ T8764] usb 4-1: config 0 descriptor?? [ 371.913482][ T8764] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 372.618639][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 372.725633][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 372.743436][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 374.346224][ T8764] gspca_sunplus: reg_w_1 err -71 [ 374.393336][ T8764] sunplus: probe of 4-1:0.0 failed with error -71 [ 374.536464][ T8764] usb 4-1: USB disconnect, device number 33 [ 375.232584][ T9088] vlan0: entered promiscuous mode [ 376.720549][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 376.729600][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 376.743726][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 376.752629][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 377.186013][ T9111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.226797][ T9111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.317315][ T9115] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 377.543939][ T5758] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 377.647947][ T5758] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.859740][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.866214][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.885652][ T8763] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 379.115788][ T8763] usb 4-1: Using ep0 maxpacket: 8 [ 379.151900][ T8763] usb 4-1: config 0 has no interfaces? [ 379.159582][ T8763] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.175770][ T8763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.255552][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 379.268587][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 379.282318][ T8763] usb 4-1: config 0 descriptor?? [ 381.788646][ T9145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.825614][ T9145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.904591][ T5758] usb 4-1: USB disconnect, device number 34 [ 381.957306][ T9145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.985526][ T9145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.013414][ T9145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.030475][ T9145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.155328][ T9145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.168960][ T9145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.234206][ T9160] loop3: detected capacity change from 0 to 512 [ 383.448885][ T9160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.477048][ T9160] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.554051][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 383.563349][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 383.610789][ T9167] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.619109][ T9167] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.627344][ T9167] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.635607][ T9167] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.652683][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 383.661847][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 384.085594][ T9145] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.114556][ T9145] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.242239][ T176] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 384.264883][ T9145] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.273960][ T9145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.277794][ T9160] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 384.309358][ T9145] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.317910][ T9145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.326926][ T9160] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 384.358259][ T9145] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.377642][ T9145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.386401][ T9160] EXT4-fs (loop3): This should not happen!! Data will be lost [ 384.386401][ T9160] [ 384.426367][ T9160] EXT4-fs (loop3): Total free blocks count 0 [ 384.432510][ T9160] EXT4-fs (loop3): Free/Dirty block details [ 384.445724][ T176] usb 1-1: Using ep0 maxpacket: 8 [ 384.458139][ T176] usb 1-1: config 0 has no interfaces? [ 384.465852][ T176] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.491104][ T9160] EXT4-fs (loop3): free_blocks=65280 [ 384.502839][ T176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.511196][ T9160] EXT4-fs (loop3): dirty_blocks=33 [ 384.522350][ T9160] EXT4-fs (loop3): Block reservation details [ 384.591578][ T176] usb 1-1: config 0 descriptor?? [ 384.597176][ T9160] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 384.892690][ T9172] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 385.101492][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.254880][ T8764] usb 1-1: USB disconnect, device number 31 [ 385.481909][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 385.788867][ T9193] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 386.085776][ T8764] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 386.129640][ T9197] loop3: detected capacity change from 0 to 32768 [ 386.147950][ T9197] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.942 (9197) [ 386.172910][ T9197] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 386.188846][ T9197] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 386.199221][ T9197] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 386.210189][ T9197] BTRFS info (device loop3): use zstd compression, level 3 [ 386.217844][ T9197] BTRFS info (device loop3): using free space tree [ 386.288841][ T8764] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 386.300033][ T9206] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 386.309977][ T8764] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 386.321238][ T8764] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 386.330997][ T8764] usb 2-1: config 0 interface 0 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 386.341958][ T8764] usb 2-1: config 0 interface 0 has no altsetting 0 [ 386.348915][ T9197] BTRFS info (device loop3): enabling ssd optimizations [ 386.351308][ T8764] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 386.365444][ T8764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.373562][ T8764] usb 2-1: Product: syz [ 386.381027][ T9197] BTRFS info (device loop3): auto enabling async discard [ 386.385453][ T8764] usb 2-1: Manufacturer: syz [ 386.405480][ T8764] usb 2-1: SerialNumber: syz [ 386.437094][ T8764] usb 2-1: config 0 descriptor?? [ 386.445481][ T8764] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 386.453600][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 386.461769][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 386.471893][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 386.481696][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 386.492271][ T8764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 386.506808][ T28] audit: type=1800 audit(1782620173.683:33): pid=9197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.942" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 386.532485][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 386.548304][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 386.559183][ T8764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 386.572384][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 386.580906][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 386.591760][ T8764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 386.604873][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 386.613805][ T8764] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 386.624223][ T8764] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 386.716541][ T5776] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 386.835760][ T5758] usb 2-1: USB disconnect, device number 27 [ 386.868672][ T5758] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 386.921043][ T5758] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 387.016126][ T5758] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 387.056364][ T5758] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 387.075123][ T5758] keyspan 2-1:0.0: device disconnected [ 387.355529][ T176] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 388.416472][ T176] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.450541][ T176] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.658723][ T176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.668172][ T176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 388.679733][ T176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 388.709933][ T176] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.719183][ T176] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.727320][ T176] usb 4-1: Product: syz [ 388.731530][ T176] usb 4-1: Manufacturer: syz [ 388.743032][ T176] cdc_wdm 4-1:1.0: skipping garbage [ 388.761927][ T176] cdc_wdm 4-1:1.0: skipping garbage [ 388.787070][ T176] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 388.793121][ T176] cdc_wdm 4-1:1.0: Unknown control protocol [ 389.845620][ T176] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 390.127922][ T176] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 390.190588][ T176] usb 2-1: config 0 has no interfaces? [ 390.263189][ T176] usb 2-1: config 0 has no interfaces? [ 390.359983][ T176] usb 2-1: config 0 has no interfaces? [ 390.396236][ T176] usb 2-1: config 0 has no interfaces? [ 390.402848][ T176] usb 2-1: config 0 has no interfaces? [ 390.428870][ T5758] usb 4-1: USB disconnect, device number 35 [ 390.437183][ T176] usb 2-1: config 0 has no interfaces? [ 390.459320][ T176] usb 2-1: config 0 has no interfaces? [ 390.477035][ T176] usb 2-1: config 0 has no interfaces? [ 390.492130][ T176] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.527502][ T176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.557285][ T176] usb 2-1: Product: syz [ 390.562711][ T176] usb 2-1: Manufacturer: syz [ 390.587468][ T176] usb 2-1: SerialNumber: syz [ 390.626654][ T176] usb 2-1: config 0 descriptor?? [ 390.878073][ T9296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.972'. [ 390.909782][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.927475][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.958495][ T176] usb 2-1: USB disconnect, device number 28 [ 391.077050][ T9301] netlink: 'syz.0.973': attribute type 4 has an invalid length. [ 391.095264][ T9301] netlink: 116 bytes leftover after parsing attributes in process `syz.0.973'. [ 391.194635][ T9304] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 391.244576][ T9304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.308258][ T9304] bond2: (slave dummy0): making interface the new active one [ 391.319447][ T9304] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 391.333351][ T9308] netlink: 'syz.3.975': attribute type 10 has an invalid length. [ 391.351008][ T9308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 391.365032][ T9308] dummy0: entered promiscuous mode [ 391.393731][ T9308] bond2: (slave dummy0): Releasing active interface [ 391.635553][ T176] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 391.896412][ T176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 391.964315][ T176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 392.019993][ T176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 392.082619][ T176] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 392.180118][ T176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.298033][ T176] usb 2-1: Product: syz [ 392.337127][ T176] usb 2-1: Manufacturer: syz [ 392.802427][ T176] usb 2-1: SerialNumber: syz [ 392.831286][ T176] usb 2-1: config 0 descriptor?? [ 392.912708][ T176] usb 2-1: can't set config #0, error -71 [ 392.941526][ T176] usb 2-1: USB disconnect, device number 29 [ 395.710987][ T9323] loop0: detected capacity change from 0 to 40427 [ 395.728309][ T9323] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 395.778860][ T9323] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 395.809405][ T9323] F2FS-fs (loop0): Image doesn't support compression [ 395.852644][ T9323] F2FS-fs (loop0): Image doesn't support compression [ 395.893799][ T9323] F2FS-fs (loop0): invalid crc value [ 397.056225][ T9323] F2FS-fs (loop0): Start checkpoint disabled! [ 397.722397][ T9374] net_ratelimit: 2 callbacks suppressed [ 397.722449][ T9374] Set syz1 is full, maxelem 6117 reached [ 399.611247][ T9380] loop0: detected capacity change from 0 to 4096 [ 399.659222][ T28] audit: type=1326 audit(1782620186.843:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 399.865087][ T9380] ntfs3: loop0: Failed to load $Extend (-22). [ 399.875088][ T28] audit: type=1326 audit(1782620186.843:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.042334][ T28] audit: type=1326 audit(1782620186.843:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.068784][ T28] audit: type=1326 audit(1782620186.873:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.465560][ T28] audit: type=1326 audit(1782620186.873:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.487802][ T9380] ntfs3: loop0: Failed to initialize $Extend. [ 400.496928][ T28] audit: type=1326 audit(1782620186.873:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.614926][ T28] audit: type=1326 audit(1782620186.873:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.669329][ T28] audit: type=1326 audit(1782620186.873:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 400.958981][ T28] audit: type=1326 audit(1782620186.873:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 401.447569][ T9399] ntfs3: loop0: ino=5, "/" directory corrupted [ 401.500335][ T9399] ntfs3: loop0: ino=5, "/" directory corrupted [ 401.534825][ T9399] ntfs3: loop0: ino=5, "/" directory corrupted [ 401.636262][ T28] audit: type=1326 audit(1782620186.873:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9388 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7eeb59ce59 code=0x7ffc0000 [ 402.908103][ T9406] loop0: detected capacity change from 0 to 4096 [ 402.967048][ T9415] syz.3.1012: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 402.997919][ T9417] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 403.010567][ T9415] CPU: 1 PID: 9415 Comm: syz.3.1012 Not tainted syzkaller #0 [ 403.017994][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.028066][ T9415] Call Trace: [ 403.031417][ T9415] [ 403.034434][ T9415] dump_stack_lvl+0x18c/0x250 [ 403.039207][ T9415] ? show_regs_print_info+0x20/0x20 [ 403.044582][ T9415] ? load_image+0x420/0x420 [ 403.049122][ T9415] ? __rcu_read_unlock+0x7c/0xd0 [ 403.054059][ T9415] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.060479][ T9415] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 403.067013][ T9415] warn_alloc+0x246/0x340 [ 403.071383][ T9415] ? zone_watermark_ok_safe+0x230/0x230 [ 403.076937][ T9415] ? __mutex_trylock_common+0x160/0x270 [ 403.082485][ T9415] __vmalloc_node_range+0x129/0x1320 [ 403.087775][ T9415] ? tomoyo_path_number_perm+0x217/0x5e0 [ 403.093448][ T9415] ? rcu_is_watching+0x15/0xb0 [ 403.098214][ T9415] ? trace_contention_end+0x39/0xe0 [ 403.103414][ T9415] ? __mutex_lock+0x30d/0xc80 [ 403.108189][ T9415] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 403.113820][ T9415] ? tomoyo_path_number_perm+0x217/0x5e0 [ 403.119474][ T9415] ? free_vm_area+0x50/0x50 [ 403.123981][ T9415] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 403.129038][ T9415] vmalloc+0x79/0x90 [ 403.132932][ T9415] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 403.137960][ T9415] dvb_dvr_do_ioctl+0x12e/0x220 [ 403.143169][ T9415] dvb_usercopy+0x195/0x2b0 [ 403.147681][ T9415] ? dvb_dvr_release+0x3e0/0x3e0 [ 403.152624][ T9415] ? dvb_generic_ioctl+0xb0/0xb0 [ 403.157571][ T9415] ? dvb_dvr_poll+0x230/0x230 [ 403.162246][ T9415] dvb_dvr_ioctl+0x29/0x30 [ 403.166678][ T9415] __se_sys_ioctl+0xfd/0x170 [ 403.171409][ T9415] do_syscall_64+0x55/0xb0 [ 403.175824][ T9415] ? clear_bhb_loop+0x40/0x90 [ 403.180569][ T9415] ? clear_bhb_loop+0x40/0x90 [ 403.185255][ T9415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.191230][ T9415] RIP: 0033:0x7f7eeb59ce59 [ 403.195715][ T9415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.215378][ T9415] RSP: 002b:00007f7eec51c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.224307][ T9415] RAX: ffffffffffffffda RBX: 00007f7eeb815fa0 RCX: 00007f7eeb59ce59 [ 403.232291][ T9415] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 403.240265][ T9415] RBP: 00007f7eeb632e6f R08: 0000000000000000 R09: 0000000000000000 [ 403.248239][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.256240][ T9415] R13: 00007f7eeb816038 R14: 00007f7eeb815fa0 R15: 00007ffcb483eee8 [ 403.264229][ T9415] [ 403.305092][ T9415] Mem-Info: [ 403.308509][ T9415] active_anon:45071 inactive_anon:0 isolated_anon:0 [ 403.308509][ T9415] active_file:17634 inactive_file:40141 isolated_file:0 [ 403.308509][ T9415] unevictable:768 dirty:204 writeback:0 [ 403.308509][ T9415] slab_reclaimable:8069 slab_unreclaimable:93929 [ 403.308509][ T9415] mapped:27913 shmem:40529 pagetables:581 [ 403.308509][ T9415] sec_pagetables:0 bounce:0 [ 403.308509][ T9415] kernel_misc_reclaimable:0 [ 403.308509][ T9415] free:1298143 free_pcp:8518 free_cma:0 [ 403.355152][ T9415] Node 0 active_anon:180284kB inactive_anon:0kB active_file:70536kB inactive_file:160364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111652kB dirty:816kB writeback:0kB shmem:160580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11420kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 403.404674][ T9415] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 403.845026][ T9415] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.705660][ T9415] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 404.934188][ T9415] Node 0 DMA32 free:1276964kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:168680kB inactive_anon:0kB active_file:70536kB inactive_file:159504kB unevictable:1536kB writepending:836kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:33660kB local_pcp:21460kB free_cma:0kB [ 405.227223][ T9415] lowmem_reserve[]: 0 0 0 0 0 [ 405.265081][ T9415] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 405.528954][ T9415] lowmem_reserve[]: 0 0 0 0 0 [ 405.590034][ T9415] Node 1 Normal free:3891064kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20736kB local_pcp:9920kB free_cma:0kB [ 405.704912][ T9439] loop1: detected capacity change from 0 to 512 [ 405.719034][ T9415] lowmem_reserve[]: 0 0 0 0 0 [ 405.740894][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.791142][ T9439] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 405.990406][ T9415] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.012503][ T9415] Node 0 DMA32: 2*4kB (ME) 548*8kB (UE) 277*16kB (UME) 306*32kB (UME) 175*64kB (UME) 120*128kB [ 406.013977][ T9439] EXT4-fs (loop1): 1 truncate cleaned up [ 406.034020][ T9415] (UME) 43*256kB (UME) 19*512kB (UME) 8*1024kB (UM) 5*2048kB (UM) 291*4096kB (UM) = 1276280kB [ 406.096735][ T9439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.379516][ T9415] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.498069][ T9415] Node 1 Normal: 230*4kB (U) 50*8kB (UE) 37*16kB (UE) 96*32kB (UE) 30*64kB (UM) 5*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3891064kB [ 406.636127][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.999501][ T9415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.009416][ T9415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.019266][ T9415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.030377][ T9415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.040410][ T9415] 94958 total pagecache pages [ 407.048211][ T9415] 0 pages in swap cache [ 407.052374][ T9415] Free swap = 124676kB [ 407.056702][ T9415] Total swap = 124996kB [ 407.061080][ T9415] 2097051 pages RAM [ 407.064889][ T9415] 0 pages HighMem/MovableOnly [ 407.069650][ T9415] 416931 pages reserved [ 407.073820][ T9415] 0 pages cma reserved [ 407.086653][ T9449] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 411.957089][ T9501] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 415.082484][ T9542] loop0: detected capacity change from 0 to 4096 [ 415.425704][ T8764] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 415.663284][ T8764] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.694822][ T9542] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 415.700735][ T8764] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.736849][ T8764] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.749783][ T8764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 415.761351][ T8764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 415.837667][ T8764] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.911449][ T8764] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.981224][ T8764] usb 4-1: Product: syz [ 416.008547][ T8764] usb 4-1: Manufacturer: syz [ 416.066360][ T8764] cdc_wdm 4-1:1.0: skipping garbage [ 416.077679][ T8764] cdc_wdm 4-1:1.0: skipping garbage [ 416.094187][ T8764] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 416.110929][ T8764] cdc_wdm 4-1:1.0: Unknown control protocol [ 416.155617][ T8762] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 416.300821][ T5778] usb 4-1: USB disconnect, device number 36 [ 416.359516][ T8762] usb 2-1: Using ep0 maxpacket: 8 [ 416.367157][ T8762] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.379792][ T8762] usb 2-1: config 179 has no interface number 0 [ 416.386828][ T8762] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 416.415526][ T8762] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 416.434953][ T8762] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.447150][ T8762] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 416.459053][ T8762] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 416.473120][ T8762] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 416.482570][ T8762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.485924][ T5758] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 416.501103][ T9549] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 416.690184][ T5758] usb 1-1: config 2 has an invalid interface number: 193 but max is 0 [ 416.698584][ T5758] usb 1-1: config 2 has no interface number 0 [ 416.704724][ T5758] usb 1-1: config 2 interface 193 has no altsetting 0 [ 416.717697][ T5758] usb 1-1: New USB device found, idVendor=2040, idProduct=6502, bcdDevice=17.aa [ 416.729772][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.737049][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.741497][ T5758] usb 1-1: Product: syz [ 416.749382][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.752178][ T5758] usb 1-1: Manufacturer: syz [ 416.763661][ T5758] usb 1-1: SerialNumber: syz [ 416.803706][ T8764] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 416.996983][ T5758] em28xx 1-1:2.193: New device syz syz @ 480 Mbps (2040:6502, interface 193, class 193) [ 417.010724][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.021734][ T5758] em28xx 1-1:2.193: Video interface 193 found: bulk [ 417.027572][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.036621][ T8762] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 417.047500][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.056526][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.106716][ T5758] em28xx 1-1:2.193: unknown em28xx chip ID (0) [ 417.219053][ T5758] em28xx 1-1:2.193: reading from i2c device at 0xa0 failed (error=-5) [ 417.239067][ T8762] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 417.240339][ T5758] em28xx 1-1:2.193: board has no eeprom [ 417.254694][ T8762] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 417.274793][ T8762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.291523][ T8762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 417.303301][ T8762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 417.322664][ T8762] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.332262][ T8762] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.346115][ T5758] em28xx 1-1:2.193: Identified as Hauppauge WinTV HVR 900 (R2) (card=18) [ 417.348233][ T8762] usb 4-1: Product: syz [ 417.360959][ T8762] usb 4-1: Manufacturer: syz [ 417.361412][ T5758] em28xx 1-1:2.193: analog set to bulk mode. [ 417.386769][ T8762] cdc_wdm 4-1:1.0: skipping garbage [ 417.392499][ T8762] cdc_wdm 4-1:1.0: skipping garbage [ 417.394267][ T5778] em28xx 1-1:2.193: Registering V4L2 extension [ 417.405698][ T8762] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 417.431886][ T8762] cdc_wdm 4-1:1.0: Unknown control protocol [ 417.440959][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.443563][ T5758] usb 1-1: USB disconnect, device number 32 [ 417.478241][ T5758] em28xx 1-1:2.193: Disconnecting em28xx [ 417.492141][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.685110][ T9576] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 417.702188][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.707956][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.713936][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.720159][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.726750][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.732785][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.738867][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.744987][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.751121][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.765570][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.765945][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.771296][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.790777][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.796558][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.804528][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.810254][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.816162][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.822074][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.832004][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.837843][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.843917][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.849647][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.856669][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.862432][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.868679][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.871196][ T5778] em28xx 1-1:2.193: Config register raw data: 0xffffffed [ 417.874409][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.888694][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.892737][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.894420][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.910748][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.916607][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.923266][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.929285][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.929321][ T5778] em28xx 1-1:2.193: AC97 chip type couldn't be determined [ 417.934996][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.935329][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.953649][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.959635][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.965389][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.971748][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.972903][ T5778] em28xx 1-1:2.193: No AC97 audio processor [ 417.977436][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 417.977940][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 417.994937][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.000851][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.006907][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.012808][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.016523][ T5778] usb 1-1: Decoder not found [ 418.018796][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.023461][ T5778] em28xx 1-1:2.193: failed to create media graph [ 418.035584][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.041576][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.055811][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.061558][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.067342][ T5778] em28xx 1-1:2.193: V4L2 device video103 deregistered [ 418.074297][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.074358][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.074714][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.091352][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.097671][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.103406][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.109590][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.115494][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.121640][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.127397][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.133460][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.139270][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.145319][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.151047][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.154031][ T5778] em28xx 1-1:2.193: Binding DVB extension [ 418.157579][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.168589][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.174438][ T5778] em28xx 1-1:2.193: no endpoint for DVB mode and transfer type 0 [ 418.174463][ T5778] em28xx 1-1:2.193: failed to pre-allocate USB transfer buffers for DVB. [ 418.174661][ T5778] em28xx 1-1:2.193: Registering input extension [ 418.182761][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.202667][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.208837][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.212955][ T5758] em28xx 1-1:2.193: Closing input extension [ 418.214635][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.227165][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.232904][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.238768][ C1] cdc_wdm 4-1:1.0: Stall on int endpoint [ 418.244597][ C1] cdc_wdm 4-1:1.0: Cannot schedule work [ 418.250253][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 418.262360][ T5778] usb 4-1: USB disconnect, device number 37 [ 418.303434][ T5758] em28xx 1-1:2.193: Freeing device [ 418.980157][ T9587] loop3: detected capacity change from 0 to 4096 [ 419.109497][ T9587] ntfs3: loop3: Failed to load $Extend (-22). [ 419.130586][ T9587] ntfs3: loop3: Failed to initialize $Extend. [ 419.155496][ T5758] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 420.025621][ T9594] ntfs3: loop3: ino=5, "/" directory corrupted [ 420.082363][ T5758] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.093135][ T9593] ntfs3: loop3: ino=5, "/" directory corrupted [ 420.103831][ T9593] ntfs3: loop3: ino=5, "/" directory corrupted [ 420.136513][ T5758] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 420.177195][ T5758] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.206602][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 420.227653][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 420.227662][ T5778] usb 2-1: USB disconnect, device number 30 [ 420.227699][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 420.257210][ T5778] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 420.273367][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 420.393770][ T5758] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.404004][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 421.216033][ T5758] usb 1-1: Product: syz [ 421.220305][ T5758] usb 1-1: Manufacturer: syz [ 421.230885][ T5758] cdc_wdm 1-1:1.0: skipping garbage [ 421.249482][ T5758] cdc_wdm 1-1:1.0: skipping garbage [ 421.278579][ T9604] loop3: detected capacity change from 0 to 512 [ 421.278731][ T5758] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 421.292107][ T9604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.301615][ T5758] cdc_wdm 1-1:1.0: Unknown control protocol [ 421.318707][ T9604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.424600][ T9604] EXT4-fs (loop3): 1 truncate cleaned up [ 421.560768][ T9604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.124964][ T5778] usb 1-1: USB disconnect, device number 33 [ 422.148791][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.224056][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 422.257956][ T9609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 423.375594][ T5758] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 423.787081][ T5758] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.963509][ T5758] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 423.995675][ T5758] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.004728][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 424.095753][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 424.164396][ T5758] usb 1-1: string descriptor 0 read error: -71 [ 424.195815][ T5758] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.204961][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.265201][ T5758] usb 1-1: can't set config #1, error -71 [ 424.283241][ T5758] usb 1-1: USB disconnect, device number 34 [ 424.334135][ T9645] loop3: detected capacity change from 0 to 512 [ 424.349791][ T9645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.399927][ T9645] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 424.549135][ T9645] EXT4-fs (loop3): 1 truncate cleaned up [ 424.597509][ T9645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.682811][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.677959][ T5758] libceph: connect (1)[c::]:6789 error -101 [ 426.696594][ T5758] libceph: mon0 (1)[c::]:6789 connect error [ 426.815723][ T9674] ceph: No mds server is up or the cluster is laggy [ 426.982696][ T5758] libceph: connect (1)[c::]:6789 error -101 [ 427.060257][ T5758] libceph: mon0 (1)[c::]:6789 connect error [ 427.488210][ T9690] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 427.868116][ T9694] loop1: detected capacity change from 0 to 512 [ 427.901175][ T9694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.954514][ T9694] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 428.006361][ T9694] EXT4-fs (loop1): 1 truncate cleaned up [ 428.139280][ T9694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.693637][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.148320][ T9718] overlayfs: overlapping lowerdir path [ 430.586656][ T9727] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 433.041497][ T9732] loop1: detected capacity change from 0 to 32768 [ 433.061317][ T9732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1099 (9732) [ 433.079296][ T9732] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.090335][ T9732] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 433.100036][ T9732] BTRFS info (device loop1): using free space tree [ 433.156490][ T9732] BTRFS info (device loop1): enabling ssd optimizations [ 433.175607][ T9732] BTRFS info (device loop1): auto enabling async discard [ 433.257827][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.811962][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 436.176570][ T9809] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 437.575732][ T9826] loop1: detected capacity change from 0 to 8 [ 438.405339][ T9815] loop3: detected capacity change from 0 to 32768 [ 438.447668][ T9815] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 438.628935][ T9815] XFS (loop3): Ending clean mount [ 438.729056][ T9815] XFS (loop3): Quotacheck needed: Please wait. [ 438.864466][ T9833] loop1: detected capacity change from 0 to 32768 [ 438.898740][ T9815] XFS (loop3): Quotacheck: Done. [ 438.921014][ T9833] (syz.1.1130,9833,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 438.962219][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 438.962311][ T28] audit: type=1804 audit(1782620226.133:47): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1124" name="/newroot/260/file0/bus" dev="loop3" ino=4428 res=1 errno=0 [ 439.003160][ T9833] (syz.1.1130,9833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 439.043488][ T9815] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 439.072060][ T28] audit: type=1800 audit(1782620226.173:48): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1124" name="bus" dev="loop3" ino=4428 res=0 errno=0 [ 439.082359][ T9833] JBD2: Ignoring recovery information on journal [ 439.129463][ T9833] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 439.339102][ T28] audit: type=1800 audit(1782620226.523:49): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1130" name="file1" dev="loop1" ino=16978 res=0 errno=0 [ 439.652385][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 440.297603][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.304003][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.653850][ T9879] loop0: detected capacity change from 0 to 32768 [ 443.692572][ T9879] (syz.0.1141,9879,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 443.718996][ T9879] (syz.0.1141,9879,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 444.938747][ T9879] JBD2: Ignoring recovery information on journal [ 445.515261][ T9879] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 446.714824][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 448.921313][ T9933] loop0: detected capacity change from 0 to 512 [ 448.947350][ T9933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.978848][ T9933] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 449.110150][ T9933] EXT4-fs (loop0): 1 truncate cleaned up [ 449.145318][ T9933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.344858][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.645413][ T9952] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 451.746487][ T9981] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 453.169740][T10012] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 453.244274][T10013] Cannot find set identified by id 0 to match [ 454.227192][T10030] loop0: detected capacity change from 0 to 512 [ 454.238133][T10030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.277302][T10030] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 454.291654][T10030] EXT4-fs (loop0): 1 truncate cleaned up [ 454.300168][T10030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.422746][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.461133][T10023] loop1: detected capacity change from 0 to 32768 [ 454.483102][T10023] (syz.1.1189,10023,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 454.514876][T10023] (syz.1.1189,10023,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 454.559224][T10023] JBD2: Ignoring recovery information on journal [ 454.664583][T10023] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 454.803673][ T28] audit: type=1800 audit(1782620241.983:50): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1189" name="file1" dev="loop1" ino=16978 res=0 errno=0 [ 455.091919][T10042] loop0: detected capacity change from 0 to 512 [ 455.108824][T10042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 455.313223][T10042] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 455.340444][T10042] EXT4-fs (loop0): 1 truncate cleaned up [ 455.348070][T10042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.167691][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.443656][T10056] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 456.520478][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 458.531513][T10085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 458.541933][T10085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 458.898837][T10091] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 464.451004][T10119] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 465.458392][T10131] loop0: detected capacity change from 0 to 512 [ 465.502875][T10131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.531492][T10131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 465.554440][T10131] EXT4-fs (loop0): 1 truncate cleaned up [ 465.574470][T10131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.830232][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.982654][T10148] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 466.741922][T10173] loop0: detected capacity change from 0 to 512 [ 466.796529][T10173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.826601][T10173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 466.895044][T10173] EXT4-fs (loop0): 1 truncate cleaned up [ 466.910167][T10173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.001976][T10178] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 467.296331][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.408110][T10212] loop0: detected capacity change from 0 to 512 [ 469.424716][T10212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.465677][T10212] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 469.614885][T10212] EXT4-fs (loop0): 1 truncate cleaned up [ 469.627730][T10212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.226207][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.454649][T10225] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 471.374763][T10230] overlayfs: failed to clone lowerpath [ 472.161138][T10235] loop1: detected capacity change from 0 to 128 [ 472.308949][T10237] syz.1.1259: attempt to access beyond end of device [ 472.308949][T10237] loop1: rw=2049, sector=145, nr_sectors = 440 limit=128 [ 472.483549][T10235] syz.1.1259: attempt to access beyond end of device [ 472.483549][T10235] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 472.515558][T10235] syz.1.1259: attempt to access beyond end of device [ 472.515558][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.530619][T10235] syz.1.1259: attempt to access beyond end of device [ 472.530619][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.546734][T10235] syz.1.1259: attempt to access beyond end of device [ 472.546734][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.561027][T10235] syz.1.1259: attempt to access beyond end of device [ 472.561027][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.575815][T10235] syz.1.1259: attempt to access beyond end of device [ 472.575815][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.589472][T10235] syz.1.1259: attempt to access beyond end of device [ 472.589472][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.603057][T10235] syz.1.1259: attempt to access beyond end of device [ 472.603057][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 472.616702][T10235] syz.1.1259: attempt to access beyond end of device [ 472.616702][T10235] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 474.031022][T10257] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1272'. [ 476.258247][T10282] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 476.278654][T10285] loop0: detected capacity change from 0 to 128 [ 476.331470][T10285] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.351840][T10285] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.426874][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.489899][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 477.118234][T10309] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 478.584570][T10321] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1286'. [ 479.577861][T10345] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 480.584115][T10366] loop1: detected capacity change from 0 to 512 [ 480.596957][T10366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 480.626471][T10366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 480.647163][T10366] EXT4-fs (loop1): 1 truncate cleaned up [ 480.676979][T10366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.831610][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.011416][T10381] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 482.527747][ T5758] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 482.889307][ T5758] usb 2-1: device descriptor read/64, error -71 [ 483.138963][T10410] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1316'. [ 483.215683][ T5758] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 483.313765][T10412] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 483.365514][ T5758] usb 2-1: device descriptor read/64, error -71 [ 483.576062][ T5758] usb usb2-port1: attempt power cycle [ 484.505594][ T5758] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 484.554505][ T5758] usb 2-1: device descriptor read/8, error -71 [ 484.745283][T10438] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 485.506470][ T5778] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 485.525514][ T5758] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 485.615970][ T5758] usb 2-1: device descriptor read/8, error -71 [ 486.080735][ T5758] usb usb2-port1: unable to enumerate USB device [ 486.222676][ T5778] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 486.356626][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.605460][ T5778] usb 1-1: Product: syz [ 486.617326][ T5778] usb 1-1: Manufacturer: syz [ 486.653480][ T5778] usb 1-1: SerialNumber: syz [ 486.705016][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1330'. [ 486.878569][ T5778] usb 1-1: config 0 descriptor?? [ 487.149604][ T5778] usb 1-1: ignoring: probably an ADSL modem [ 487.485828][ T5778] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 487.498165][ T5778] usb 1-1: USB disconnect, device number 35 [ 488.435497][ T8764] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 488.647453][ T8764] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 488.672497][ T8764] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 488.694422][ T8764] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 488.714103][ T8764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.319821][T10489] team_slave_0: left promiscuous mode [ 489.331858][T10489] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 489.353361][T10489] team0 (unregistering): Port device team_slave_0 removed [ 489.360904][T10489] team_slave_1: left promiscuous mode [ 489.367284][T10489] team0 (unregistering): Failed to send options change via netlink (err -105) [ 489.376424][T10489] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 489.387597][T10489] team0 (unregistering): Port device team_slave_1 removed [ 489.395012][T10489] geneve0: left promiscuous mode [ 489.401506][T10489] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.410149][T10489] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.419060][T10489] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.427749][T10489] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.473817][T10489] team0 (unregistering): Failed to send options change via netlink (err -105) [ 489.483374][T10489] team0 (unregistering): Failed to send port change of device geneve0 via netlink (err -105) [ 489.497377][T10489] team0 (unregistering): Port device geneve0 removed [ 490.743373][ T5778] usb 2-1: USB disconnect, device number 35 [ 490.977838][T10520] syzkaller0: entered promiscuous mode [ 490.983544][T10520] syzkaller0: entered allmulticast mode [ 491.241581][T10531] loop0: detected capacity change from 0 to 512 [ 491.248580][T10528] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 491.249142][T10531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.270043][T10528] team0 (unregistering): Port device team_slave_0 removed [ 491.281782][T10531] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 491.326051][T10528] team0 (unregistering): Failed to send options change via netlink (err -105) [ 491.337494][T10528] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 491.370066][T10528] team0 (unregistering): Port device team_slave_1 removed [ 491.391326][T10531] EXT4-fs (loop0): 1 truncate cleaned up [ 491.408475][T10531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.433568][T10528] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.483085][T10528] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.493848][T10528] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.503147][T10528] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.610329][T10528] team0 (unregistering): Failed to send options change via netlink (err -105) [ 491.718243][T10528] team0 (unregistering): Failed to send port change of device geneve0 via netlink (err -105) [ 491.942621][T10528] team0 (unregistering): Port device geneve0 removed [ 492.226111][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.737749][ T5778] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 492.972967][ T5778] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 492.993582][ T5778] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 493.029462][ T5778] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 493.063503][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.339565][ T5778] usb 1-1: USB disconnect, device number 36 [ 495.598937][T10587] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 495.611296][T10587] team0 (unregistering): Port device team_slave_0 removed [ 495.621156][T10587] team0 (unregistering): Failed to send options change via netlink (err -105) [ 495.630339][T10587] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 495.641683][T10587] team0 (unregistering): Port device team_slave_1 removed [ 495.745478][ T8764] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 496.151505][ T8764] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 496.766085][T10601] overlay: ./file0 is not a directory [ 496.965730][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1377'. [ 497.354871][ T8764] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 497.365090][ T8764] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 497.374214][ T8764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.929532][T10625] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 499.368961][T10634] trusted_key: encrypted_key: insufficient parameters specified [ 499.514014][ T5778] usb 2-1: USB disconnect, device number 36 [ 499.564144][T10634] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 499.572423][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1391'. [ 499.997483][ T6463] ------------[ cut here ]------------ [ 500.003438][ T6463] WARNING: CPU: 0 PID: 6463 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.014735][ T6463] Modules linked in: [ 500.018776][ T6463] CPU: 0 PID: 6463 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 500.026412][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.036522][ T6463] Workqueue: phy10 ieee80211_csa_finalize_work [ 500.042843][ T6463] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.050271][ T6463] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 500.069966][ T6463] RSP: 0018:ffffc900039279c0 EFLAGS: 00010293 [ 500.076116][ T6463] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88802a1e5a00 [ 500.084110][ T6463] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 500.091993][ C1] ------------[ cut here ]------------ [ 500.093217][ T6463] RBP: dffffc0000000000 R08: ffff88805d38d62f R09: 1ffff1100ba71ac5 [ 500.098129][ C1] WARNING: CPU: 1 PID: 10639 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 500.098174][ C1] Modules linked in: [ 500.106292][ T6463] R10: dffffc0000000000 R11: ffffed100ba71ac6 R12: 0000000000000001 [ 500.116275][ C1] [ 500.116286][ C1] CPU: 1 PID: 10639 Comm: syz.2.1390 Not tainted syzkaller #0 [ 500.120243][ T6463] R13: ffff88805d38e659 R14: ffff88807b4b2d48 R15: ffff88804ba9eb00 [ 500.128323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.128339][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 500.130655][ T6463] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 500.138135][ C1] Code: f7 4c 89 ef e8 b0 a4 c2 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 7b c6 84 f7 0f 0b e9 61 f8 ff ff e8 6f c6 84 f7 <0f> 0b e9 85 fb ff ff e8 63 c6 84 f7 48 c7 c7 40 50 64 8e 4c 89 e6 [ 500.138155][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 500.138173][ C1] RAX: ffffffff8a021ee1 RBX: dffffc0000000000 RCX: ffff88804850da00 [ 500.138188][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.138200][ C1] RBP: 0000000000000000 R08: ffff88804850da00 R09: 0000000000000003 [ 500.138211][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d376440 [ 500.138224][ C1] R13: ffff888054629024 R14: ffff88805d376930 R15: ffff888054629000 [ 500.138236][ C1] FS: 00007f8e59d826c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 500.138251][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.146257][ T6463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.156414][ C1] CR2: 000055e8d5090040 CR3: 0000000050cf5000 CR4: 00000000003506e0 [ 500.162735][ T6463] CR2: 00007f8e58fea540 CR3: 0000000050cf5000 CR4: 00000000003506f0 [ 500.171734][ C1] Call Trace: [ 500.171752][ C1] [ 500.171762][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 500.191452][ T6463] Call Trace: [ 500.197500][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 500.197536][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 500.197575][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 500.197614][ C1] __iterate_interfaces+0x225/0x4c0 [ 500.197636][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 500.197663][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 500.197689][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 500.197715][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 500.205765][ T6463] [ 500.213758][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 500.221763][ T6463] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 500.230444][ C1] ? hw_scan_work+0xf10/0xf10 [ 500.238532][ T6463] ieee80211_csa_finalize+0x571/0xeb0 [ 500.247460][ C1] __hrtimer_run_queues+0x525/0xc10 [ 500.247508][ C1] ? hrtimer_interrupt+0x980/0x980 [ 500.254063][ T6463] ? mutex_lock_nested+0x20/0x20 [ 500.260691][ C1] ? read_tsc+0x9/0x20 [ 500.260725][ C1] hrtimer_run_softirq+0x177/0x290 [ 500.260752][ C1] handle_softirqs+0x27d/0x820 [ 500.268760][ T6463] ? lockdep_hardirqs_on+0x98/0x150 [ 500.276824][ C1] ? read_tsc+0x9/0x20 [ 500.280097][ T6463] ? ieee80211_csa_finalize_work+0x140/0x140 [ 500.282933][ C1] ? ktime_get+0x24b/0x280 [ 500.288598][ T6463] ? read_lock_is_recursive+0x20/0x20 [ 500.291859][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 500.297682][ T6463] ieee80211_csa_finalize_work+0xf6/0x140 [ 500.304188][ C1] ? do_softirq+0x1a0/0x1a0 [ 500.309805][ T6463] ? process_scheduled_works+0x975/0x1600 [ 500.315408][ C1] __irq_exit_rcu+0xd3/0x190 [ 500.321637][ T6463] process_scheduled_works+0xa60/0x1600 [ 500.328915][ C1] ? irq_exit_rcu+0x20/0x20 [ 500.328947][ C1] irq_exit_rcu+0x9/0x20 [ 500.335201][ T6463] ? worker_attach_to_pool+0x370/0x370 [ 500.342219][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 500.342253][ C1] [ 500.345177][ T6463] ? assign_work+0x3cc/0x5d0 [ 500.350381][ C1] [ 500.350392][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 500.356927][ T6463] worker_thread+0xa5e/0xfe0 [ 500.361588][ C1] RIP: 0010:__might_resched+0x17d/0x5f0 [ 500.367008][ T6463] ? _raw_spin_unlock+0x40/0x40 [ 500.372241][ C1] Code: 00 00 8b 02 c1 e0 08 44 01 e0 3b 44 24 2c 75 72 43 c6 44 2f 0c 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 84 24 a0 00 00 00 00 02 00 00 43 c6 44 2f 0c f8 74 45 4d 8d 66 [ 500.377386][ T6463] ? __kthread_parkme+0x71/0x1c0 [ 500.382311][ C1] RSP: 0018:ffffc9000473fb60 EFLAGS: 00000246 [ 500.386445][ T6463] kthread+0x2fa/0x390 [ 500.391530][ C1] [ 500.391538][ C1] RAX: 0000000000000000 RBX: 1ffff110090a1bc7 RCX: e832adabb8c49b00 [ 500.396314][ T6463] ? pr_cont_work+0x550/0x550 [ 500.401581][ C1] RDX: ffff88804850de3c RSI: ffffffff8acadce0 RDI: ffffffff8b1c7be0 [ 500.401599][ C1] RBP: ffffc9000473fc70 R08: ffffffff8e8ae5ef R09: 1ffffffff1d15cbd [ 500.401611][ C1] R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: 0000000000000000 [ 500.401623][ C1] R13: dffffc0000000000 R14: ffff88804850da00 R15: 1ffff920008e7f74 [ 500.401657][ C1] ? __might_sleep+0xe0/0xe0 [ 500.401686][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 500.401713][ C1] ? __might_fault+0xc6/0x120 [ 500.401733][ C1] ? __might_fault+0xaa/0x120 [ 500.401755][ C1] do_recvmmsg+0x559/0x810 [ 500.405981][ T6463] ? kthread_blkcg+0xd0/0xd0 [ 500.412072][ C1] ? __sys_recvmmsg+0x290/0x290 [ 500.416503][ T6463] ret_from_fork+0x48/0x80 [ 500.421878][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 500.426732][ T6463] ? kthread_blkcg+0xd0/0xd0 [ 500.432433][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 500.437007][ T6463] ret_from_fork_asm+0x11/0x20 [ 500.442674][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 500.447304][ T6463] [ 500.452808][ C1] ? do_recvmmsg+0x810/0x810 [ 500.452843][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 500.457409][ T6463] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 500.457420][ T6463] CPU: 0 PID: 6463 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 500.457438][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.457450][ T6463] Workqueue: phy10 ieee80211_csa_finalize_work [ 500.457479][ T6463] Call Trace: [ 500.457487][ T6463] [ 500.457494][ T6463] dump_stack_lvl+0x18c/0x250 [ 500.457518][ T6463] ? show_regs_print_info+0x20/0x20 [ 500.457538][ T6463] ? load_image+0x420/0x420 [ 500.457574][ T6463] panic+0x2ca/0x720 [ 500.457644][ T6463] ? bpf_jit_dump+0xd0/0xd0 [ 500.457678][ T6463] ? ret_from_fork_asm+0x11/0x20 [ 500.457705][ T6463] __warn+0x2e0/0x470 [ 500.457725][ T6463] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.457752][ T6463] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.457775][ T6463] report_bug+0x2be/0x4f0 [ 500.457860][ T6463] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.457884][ T6463] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.457907][ T6463] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 500.457929][ T6463] handle_bug+0xcf/0x120 [ 500.457949][ T6463] exc_invalid_op+0x1a/0x50 [ 500.457970][ T6463] asm_exc_invalid_op+0x1a/0x20 [ 500.457993][ T6463] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 500.458017][ T6463] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 500.458031][ T6463] RSP: 0018:ffffc900039279c0 EFLAGS: 00010293 [ 500.458046][ T6463] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88802a1e5a00 [ 500.458059][ T6463] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 500.458069][ T6463] RBP: dffffc0000000000 R08: ffff88805d38d62f R09: 1ffff1100ba71ac5 [ 500.458082][ T6463] R10: dffffc0000000000 R11: ffffed100ba71ac6 R12: 0000000000000001 [ 500.458093][ T6463] R13: ffff88805d38e659 R14: ffff88807b4b2d48 R15: ffff88804ba9eb00 [ 500.458113][ T6463] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 500.458155][ T6463] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 500.458183][ T6463] ieee80211_csa_finalize+0x571/0xeb0 [ 500.458207][ T6463] ? mutex_lock_nested+0x20/0x20 [ 500.458229][ T6463] ? lockdep_hardirqs_on+0x98/0x150 [ 500.458250][ T6463] ? ieee80211_csa_finalize_work+0x140/0x140 [ 500.458274][ T6463] ? read_lock_is_recursive+0x20/0x20 [ 500.458303][ T6463] ieee80211_csa_finalize_work+0xf6/0x140 [ 500.458325][ T6463] ? process_scheduled_works+0x975/0x1600 [ 500.458348][ T6463] process_scheduled_works+0xa60/0x1600 [ 500.458397][ T6463] ? worker_attach_to_pool+0x370/0x370 [ 500.458424][ T6463] ? assign_work+0x3cc/0x5d0 [ 500.458449][ T6463] worker_thread+0xa5e/0xfe0 [ 500.458482][ T6463] ? _raw_spin_unlock+0x40/0x40 [ 500.458502][ T6463] ? __kthread_parkme+0x71/0x1c0 [ 500.458529][ T6463] kthread+0x2fa/0x390 [ 500.458544][ T6463] ? pr_cont_work+0x550/0x550 [ 500.458564][ T6463] ? kthread_blkcg+0xd0/0xd0 [ 500.458581][ T6463] ret_from_fork+0x48/0x80 [ 500.458600][ T6463] ? kthread_blkcg+0xd0/0xd0 [ 500.458616][ T6463] ret_from_fork_asm+0x11/0x20 [ 500.458658][ T6463] [ 500.461882][ T6463] Kernel Offset: disabled