last executing test programs: 14.521870886s ago: executing program 3 (id=782): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 14.441279711s ago: executing program 3 (id=783): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000340)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host, 0x6}, @local, 0xd, 0x1, 0x0, 0x4, 0x401, 0x1, 0x8}) syz_clone3(0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.939648297s ago: executing program 2 (id=785): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='=', 0x1}], 0x1) 13.16053564s ago: executing program 2 (id=787): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) pipe2(0x0, 0x0) r4 = memfd_create(0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 9.661264384s ago: executing program 1 (id=795): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f00000003c0)={r3, &(0x7f0000000280)='\x00', 0x100, &(0x7f00000002c0)={@_ha_fsid={[0x5]}, {0x6, 0x0, 0x8, 0x10000}}, 0x2, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x9}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x0, 0xffff, 0x8}}, 0x26) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) timerfd_create(0x0, 0x180000) shutdown(r4, 0x1) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) ioctl$NBD_DISCONNECT(r5, 0xab08) 8.484702085s ago: executing program 1 (id=796): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000400)={0x1, 0xfffff6ea}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r3, &(0x7f0000000000)="41000200010001", 0x7) 8.458832552s ago: executing program 2 (id=797): r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='=', 0x1}], 0x1) 7.943755557s ago: executing program 2 (id=799): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c) r7 = syz_usb_connect$midi(0x3, 0x8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100300000020410e6130400001020301090279000101ff3097090400000301033007063f0200a40f0724010900070011240300040506040508b005130603810809050408ff0302f8060a25010650373a11692709050e100800c108061125010d1f5708bd3a7d692842cc9712be09050200ff03060400132501152979eeed2406f3db464c93dc0bbd"], &(0x7f00000009c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0xfd, 0x3, 0x8, 0x40, 0x1}, 0x11f, &(0x7f00000005c0)={0x5, 0xf, 0x11f, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "31c35ab27b123d6061a61bcec31b3ac2"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x4, 0xf00, 0x200, [0x6f, 0xc0cf, 0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0xe0, 0x24, 0x4000, 0x5}, @generic={0xe0, 0x10, 0x3, "af3b544d60ea612f33a7c92c9ef581115fa11a79925efa55ca7fed694659029b555f428ab061028a20c21da2c59486a18b4715552c16b5a339bdeabbf95f6e50eb5332157f413e7ac1c3677b4f94b538d03b05c0f4be46abaf54f12d7ddad2bac7b8e8b7ffab306e338e82c14d0a9f1e0b27af1ffd0e2737b8570533234d782d1b097123046e9794d145cedc138accc24fc339cbfed1181d266b2410e2ada9b518b8df97b8789af3db968c97cc4ffeb24bb3ab677913d46ea6231d831e818cb797b5211bbace16c3845d621845f38d275cf9ef50676693b30023b2fc0f"}]}, 0x5, [{0x0, 0x0}, {0x3b, &(0x7f0000000740)=@string={0x3b, 0x3, "4651071ce13d71bef3abe989a4223b6d47ee766001e0cc0b08b0a7730008b3274a26434e56231f793ef4bc9b197be2b62ef7ce998c81d6c316"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc0fa}}, {0xf4, &(0x7f00000008c0)=@string={0xf4, 0x3, "4d4f45e66912c75f7b1c75319248799ddb8125207338c02f2f38ab29bfd278ebad1a615c723a66d92cd9d3ece14ec7dc2b40322d3e5b6b656eacd43fb653cddd140fd9cf6fc097f292ff09afafad107fcb909ec1ad08e6001265f45c12ec8c595c43e17b9d34008798e636629ae0bd9ea13e76cee9a5512350c841bc11e489fb585d540b2d7275be2cb812180c4b38af5c434f898c64d146f0207e943e4cab9cda65893723ea5c8d60860aa7c1bc84bc7a590c7fe079ca711ec86346be2452ea3537f4df8d5eda42b3f9a73bc068bfe441ad31bb4c5addc32d412d3e5a0fc295e06a2cc4780d8970b56e68ee9963fdf65e5b"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x0, 0x4, 0x2c, {0x2c, 0x2, "249d55cec227cb61b50f8818ccc57c60f0db35ccce13b1477760248c27a74475e3ad03be004755d294e4"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000c00)={0x20, 0x16, 0xd8, "826de5932c2af37de1eac2e479421a7a63d3d7eb5fa1c7708491db52c1a8c28e0c11c6557359b7fabb9d584e66a619f580c5e99c83fb85c2f6577817d1db2c8869b6c1fb0f5f3121b77249745fbd0f303372e56ac8636605b2a0727e725403385c5aa25cced5824445287e4d28a64e7663d8d82d729e7c0ca935fe3d432acb5c1c056ebf64d75c9124b90c8c5b903316defa1ea0483d048129e0c69e3ffed8ee1cbf66ef0c1aff413f31609c138dd8b1bc58f4a70eb7ecfca67310152692b037081083556788dc3f195036b01625439b399ad6e3b4788708"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xff81, 0x0, 0x6, 0x6, 0x3, 0x1, 0xb, 0x5, 0xfb0, 0x1, 0xaf5c, 0x1}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x89, 0x2}}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) nanosleep(&(0x7f0000000300)={0x1}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000480)=[{0x0, 0x3}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x2}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x50) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20044040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 7.618415303s ago: executing program 3 (id=800): read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) 7.419901713s ago: executing program 1 (id=801): syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000080)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9043, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x8, 0x1, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 6.709853012s ago: executing program 1 (id=803): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r4 = dup(r2) inotify_rm_watch(r4, r3) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50) syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800422100c8006500000811907864010100ac1414bb831f0664010100000000006401010100000000640101017f0000010a0101014441e2ac35d31644009733640101007fffffff440cbe00000000070000009e00004e244e21008090786200000100000000d8d1af53af925fe03adbce03e43e9ad1bf008d58e7fb0b37801b54d222bb019b78508923cb93f2ff7969b8141642a9f8d0d62e48efdad99017e341ead5030ff7fa999ef46bcd19a08fc1b8a7e84b94da381741d2e1fe785e728a5ce49b5751cb875c1bb68c878ffefe47"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 6.680374889s ago: executing program 0 (id=804): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6.005780381s ago: executing program 4 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x10001, 0x109000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='127.0.0.', 0x8) 5.880147825s ago: executing program 0 (id=806): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f00000000c0)=0x8000) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) 5.830547948s ago: executing program 1 (id=807): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 5.752432976s ago: executing program 4 (id=808): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 5.704909924s ago: executing program 3 (id=809): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f00000003c0)={r3, &(0x7f0000000280)='\x00', 0x100, &(0x7f00000002c0)={@_ha_fsid={[0x5]}, {0x6, 0x0, 0x8, 0x10000}}, 0x2, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x9}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x0, 0xffff, 0x8}}, 0x26) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x24000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) timerfd_create(0x0, 0x180000) shutdown(r4, 0x1) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) ioctl$NBD_DISCONNECT(r5, 0xab08) 5.574105304s ago: executing program 1 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x37, 0x1, {0x1, 0x2, 0x4, 0x0, 0x5, 'ext4\x00'}}, 0x23) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) ioctl(0xffffffffffffffff, 0x8914, &(0x7f0000000300)='veth0:') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32315241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@errors_remount}, {@resuid}]}, 0x3, 0x4dc, &(0x7f0000000c40)="$eJzs3E9sFNUfAPDv7LZQ+MGPFREFUYtobCS2UFA4mBiMJh40MeJBj01bCFKooSURgmZJDB4NiXfj0asHr+iFGE8mXvFoYkiI4QKYGMfM7uyfbndb2m67Nv18kmXfmzcz771982bfvNclgA1rMPsnqYZvRcSOiCi07jBYfbt/98r4g7tXxqOcpif/TCqH3cviufw08b88MlSIKHyeNBKazFy6fHZsamryQh4fmT338cjMpcsvnTk3dnry9OT50ePHjx45fOyV0ZeXXqk2+WX1urf3s+l9e9768Po743217QP5e3M9umUwBtsVpeL5bmfWY9ubwklfDwvCkmTXf9Zc/ZX+vyOKofFgo0jTNN3cObmctro6bwuwbiXR6xIAvVH7os+ef2uvdgOBTasz/Oi5OyeqD0BZve/nr4hnKhtr8yD9Lc+33TQYER+U//o6e8UqzUMAADT74URtJNgy/itVV0b+vnjztez9//kaSikiHomInRHxaETsiojHImJ3RDweEU+0nL8YEekC+Q+2xOv51xehCre7VNW2svHfq/naVmP8N6cApWIe2x5RGzBPHso/k6Ho33zqzNTk4QXy+PGNX7/slNY8/steWf61sWBejtt9LRN0E2OzY8uucIs7VyP29rXWP+mLSOorAUlE7ImIvUs4b6kpfObFb/fVI/1z91u8/hVp23W0LixVpN9EvFBt/3LMaf9GjsnC65MjAzE1eWgkuwoOtc3j51+uvdsp/0Xr//3vrYe8eezGybxnrVzW/lubrv+ord826l9KIpL6eu3M0vO49tsXHZ9plnv9b0rer4Rrz6WfjM3OXjgcsSl5e/720caxtXj2HuVq/YcOtO//O/Njsk/iyYjILuKnIuLpqD4hZmXfHxHPRsSBBer/0+vPfbT8+q+urP4Tbe9/c9q/sV7fKZCUq3u3SSqe3X/rQYebx8O1/9FKaCjf0v7+l8y5RXQqae3bLtvyz0o/PAAAAFgnChGxrWkuaVsUCsPD1TmgXbG1MDU9M3vw1PTF8xNZWkQp+gu1ma4dlSMqz/2V+c9SNT3J0kdb4kfyeeOvilsq8eHx6amJ3lUbyOd6t0VSGK7fC6r9P/NHd6aYgf8yP/mBjWuh/p8N4ndfX8PCAGvq4b//b366qgUB1lxT/y932KW8jL/7AtYBz/9AQ6dhQIN7Bqx/qb4MG9qS+v/BxccGwPrRF+/Vw4WelgRYa8b/sCEt+rv+FQXSG2nbpIGYv3MMLHzCYiyaaTEi5iVtaZNXTwLZyKonuW9ZzlG1/02h4z5RWNoJN8ey2nRe4NQKP43yhZnTu7t+8af538p3uwW/W5N+2i7Qk9sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA1/0bAAD//7sD4XQ=") 4.646479128s ago: executing program 0 (id=811): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) r5 = memfd_create(0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) 3.040814047s ago: executing program 0 (id=814): syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000080)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9043, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x8, 0x1, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 2.876885307s ago: executing program 3 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000721000/0x4000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r3, 0x4b32, 0x8) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000df7f00006e45000041010000", @ANYRES32, @ANYBLOB="00000000fdffffff000000000000000000f92b00000000000000f200"], 0x50) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x0, 0x803}}, 'sys_mnt/block/zram0/disksize/file0\x00'}) write(r4, &(0x7f0000000400)='1', 0x1) 2.001950982s ago: executing program 4 (id=816): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.977218903s ago: executing program 0 (id=817): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000140)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20a50400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040150}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) memfd_create(&(0x7f0000000280)='\x00', 0x3) 1.843678509s ago: executing program 3 (id=818): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) gettid() clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r6 = getpid() rt_tgsigqueueinfo(r6, 0x0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) 1.675263334s ago: executing program 2 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x2c}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e50a0000ffffffff61115c0000000000850000007c00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b0000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b101) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000340)={'pcl818\x00', [0x1100, 0x5, 0x13600, 0x4, 0x2, 0x10005, 0xf9, 0x3, 0x80008, 0x5, 0x2, 0x1, 0x7, 0x800, 0x6, 0xfd, 0x0, 0x80000000, 0x8, 0x7fffffff, 0xb740, 0xca9e, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7, 0x1539b804, 0x9, 0x1, 0x5]}) 1.674141376s ago: executing program 4 (id=820): ioctl(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c458", 0x10) 401.174037ms ago: executing program 4 (id=821): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000140)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20a50400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040150}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) memfd_create(&(0x7f0000000280)='\x00', 0x3) 0s ago: executing program 0 (id=822): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) kernel console output (not intermixed with test programs): ][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.530943][ T5717] usb 2-1: Product: syz [ 113.530967][ T5717] usb 2-1: Manufacturer: syz [ 113.530985][ T5717] usb 2-1: SerialNumber: syz [ 113.554592][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 113.573446][ T990] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.643180][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.643251][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.643279][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.643302][ T990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.643326][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.692634][ T990] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.692666][ T990] usb 3-1: Manufacturer: syz [ 113.732126][ T6024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.753763][ T990] usb 3-1: config 0 descriptor?? [ 114.099350][ T6024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.202501][ T6038] CIFS: Attempting to mount //127.0.0.1/share [ 114.209453][ T6038] CIFS: VFS: Error connecting to socket. Aborting operation. [ 114.209675][ T6038] CIFS: VFS: cifs_mount failed w/return code = -111 [ 114.754598][ T6024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.59'. [ 114.774007][ T6024] netlink: 88 bytes leftover after parsing attributes in process `syz.1.59'. [ 114.786511][ T5717] usb 2-1: Incompatible driver and firmware versions [ 114.907276][ T5717] usb 2-1: USB disconnect, device number 2 [ 114.963036][ T990] rc_core: IR keymap rc-hauppauge not found [ 114.971652][ T990] Registered IR keymap rc-empty [ 114.979178][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.012672][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.017973][ T6040] loop0: detected capacity change from 0 to 512 [ 115.030349][ T6040] EXT4-fs: Ignoring removed i_version option [ 115.043478][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 115.060993][ T6040] EXT4-fs (loop0): 1 orphan inode deleted [ 115.065433][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.081769][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 115.117024][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.141386][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.161545][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.181287][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.201510][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.221461][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.243351][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.261308][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.283464][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.301405][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.353782][ T990] mceusb 3-1:0.0: Registered ￿ with mce emulator interface version 1 [ 115.366023][ T990] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.388788][ T990] usb 3-1: USB disconnect, device number 2 [ 115.458487][ T6046] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.65: Directory hole found for htree leaf block 0 [ 117.229869][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.554611][ T6056] loop3: detected capacity change from 0 to 256 [ 117.621590][ T990] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.781868][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 117.787690][ T990] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 117.806738][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.808205][ T990] usb 1-1: Product: syz [ 117.824469][ T990] usb 1-1: Manufacturer: syz [ 117.824513][ T990] usb 1-1: SerialNumber: syz [ 117.848211][ T990] usb 1-1: config 0 descriptor?? [ 117.880575][ T990] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 118.013269][ T5717] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.413045][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.422458][ T5717] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 118.432615][ T5717] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 118.440323][ T5717] usb 3-1: can't read configurations, error -71 [ 118.631173][ T5745] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.721891][ T6071] loop3: detected capacity change from 0 to 1024 [ 118.795588][ T5745] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.963475][ T5745] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.963554][ T5745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.963588][ T5745] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.967995][ T5745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.021752][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.024590][ T5745] usb 5-1: Product: syz [ 119.025588][ T5745] usb 5-1: Manufacturer: syz [ 119.107256][ T170] IPVS: starting estimator thread 0... [ 119.211486][ T6074] IPVS: using max 28 ests per chain, 67200 per kthread [ 119.342257][ T5745] cdc_wdm 5-1:1.0: skipping garbage [ 119.347703][ T5745] cdc_wdm 5-1:1.0: skipping garbage [ 119.353734][ T5745] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 119.679544][ T6079] CIFS: Attempting to mount //127.0.0.1/share [ 119.681474][ T6079] CIFS: VFS: Error connecting to socket. Aborting operation. [ 119.681531][ T6079] CIFS: VFS: cifs_mount failed w/return code = -111 [ 119.775787][ T25] usb 5-1: USB disconnect, device number 4 [ 120.529170][ T6064] loop4: detected capacity change from 0 to 3 [ 121.415586][ T990] gspca_sonixj: reg_w1 err -110 [ 121.415696][ T990] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 121.440396][ T6064] syz.4.72: attempt to access beyond end of device [ 121.440396][ T6064] loop4: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 121.480568][ T6064] SQUASHFS error: Failed to read block 0x0: -5 [ 121.487348][ T6064] unable to read squashfs_super_block [ 121.806037][ T6095] loop2: detected capacity change from 0 to 256 [ 122.841251][ T990] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.893322][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 123.894882][ T48] usb 1-1: USB disconnect, device number 2 [ 123.907151][ T990] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.062205][ T990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.062273][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.062315][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.062340][ T990] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.062363][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.193942][ T990] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.202147][ T990] usb 2-1: Manufacturer: syz [ 124.212594][ T990] usb 2-1: config 0 descriptor?? [ 124.271117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.301100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.391133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 124.471108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.561115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.808759][ T6104] loop3: detected capacity change from 0 to 131072 [ 124.874410][ T6104] F2FS-fs (loop3): invalid crc value [ 124.985377][ T6104] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 124.998111][ T6104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 125.234232][ T6119] Bluetooth: MGMT ver 1.23 [ 125.561218][ T990] rc_core: IR keymap rc-hauppauge not found [ 125.561257][ T990] Registered IR keymap rc-empty [ 125.561417][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.581322][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.607516][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 125.631763][ T6122] syz_tun: entered allmulticast mode [ 125.651875][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 125.682090][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.704747][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.721988][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.743704][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.754568][ T6125] process 'syz.1.89' launched './file2' with NULL argv: empty string added [ 125.764453][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.784833][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.793047][ T48] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.801429][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.822684][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.841927][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.862270][ T990] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 125.882608][ T6105] syz_tun: left allmulticast mode [ 125.888517][ T990] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 125.888564][ T990] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.924150][ T990] usb 2-1: USB disconnect, device number 3 [ 125.971975][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.981778][ T48] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 125.992793][ T48] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 126.001415][ T48] usb 3-1: can't read configurations, error -71 [ 126.411306][ T990] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.443564][ T6132] CIFS: Attempting to mount //127.0.0.1/share [ 126.452590][ T6132] CIFS: VFS: Error connecting to socket. Aborting operation. [ 126.452858][ T6132] CIFS: VFS: cifs_mount failed w/return code = -111 [ 126.624634][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 126.680849][ T990] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 126.749710][ T990] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.766572][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.775911][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.864783][ T990] usb 2-1: config 0 descriptor?? [ 127.755695][ T4933] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 127.757523][ T5616] Bluetooth: hci2: command 0x0401 tx timeout [ 127.960636][ T6139] loop4: detected capacity change from 0 to 128 [ 128.099268][ T6139] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.102217][ T6139] hpfs: filesystem error: improperly stopped [ 128.102277][ T6139] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.102336][ T6139] hpfs: You really don't want any checks? You are crazy... [ 128.102497][ T6139] hpfs: Code page index out of array [ 128.102556][ T6139] hpfs: code page support is disabled [ 128.251327][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.414989][ T25] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 128.430502][ T25] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 128.441532][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 128.504789][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.504875][ T25] usb 4-1: Product: syz [ 128.522655][ T25] usb 4-1: Manufacturer: syz [ 128.522693][ T25] usb 4-1: SerialNumber: syz [ 129.632229][ T6139] hpfs: hpfs_map_4sectors(): unaligned read [ 129.633162][ T6139] hpfs: hpfs_map_4sectors(): unaligned read [ 129.633204][ T6139] hpfs: filesystem error: unable to find root dir [ 129.769945][ T25] usb 4-1: config 0 descriptor?? [ 129.956331][ T25] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 130.273026][ T990] usbhid 2-1:0.0: can't add hid device: -71 [ 130.273176][ T990] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.308549][ T990] usb 2-1: USB disconnect, device number 4 [ 130.342479][ T5745] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.374497][ T6154] Zero length message leads to an empty skb [ 130.392574][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.408093][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.482523][ T25] gspca_sunplus: reg_r err -110 [ 130.482624][ T25] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 130.501218][ T5745] usb 3-1: Using ep0 maxpacket: 8 [ 130.507380][ T5745] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 130.519944][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.519990][ T5745] usb 3-1: Product: syz [ 130.520019][ T5745] usb 3-1: Manufacturer: syz [ 130.520032][ T5745] usb 3-1: SerialNumber: syz [ 130.537012][ T5745] usb 3-1: config 0 descriptor?? [ 130.557343][ T5745] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 130.681529][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.746207][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.748297][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.782329][ T6165] loop4: detected capacity change from 0 to 512 [ 130.789955][ T6165] EXT4-fs: Ignoring removed i_version option [ 130.820254][ T6165] EXT4-fs (loop4): 1 orphan inode deleted [ 130.822248][ T6165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.842707][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 130.849899][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 130.860297][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.860345][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.860370][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.860389][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.860409][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.894529][ T48] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 130.894558][ T48] usb 1-1: Manufacturer: syz [ 130.936081][ T48] usb 1-1: config 0 descriptor?? [ 131.100116][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.126237][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.339970][ T6173] EXT4-fs error (device loop4): __ext4_add_entry:2414: inode #2: comm syz.4.100: Directory hole found for htree leaf block 0 [ 132.026559][ T5745] gspca_sonixj: reg_w1 err -110 [ 132.102250][ T5745] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 132.251421][ T48] rc_core: IR keymap rc-hauppauge not found [ 132.251453][ T48] Registered IR keymap rc-empty [ 132.251605][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.281348][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.312645][ T48] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 132.314967][ T48] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 132.340989][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.361422][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.381588][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.411256][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.431453][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.453550][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.476260][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.636802][ T5616] Bluetooth: hci2: command 0x0401 tx timeout [ 132.643106][ T4933] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 132.731378][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.741893][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.756181][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.766781][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.793127][ T5716] usb 4-1: USB disconnect, device number 3 [ 132.893021][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900111][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906782][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.921988][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.957518][ T48] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.960380][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.054901][ T48] mceusb 1-1:0.0: Registered ￿ with mce emulator interface version 1 [ 133.054956][ T48] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 133.088467][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 133.091205][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 133.111933][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 133.114072][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 133.122006][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 133.122903][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 133.325518][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 133.326026][ T6183] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 133.326072][ T6183] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 133.366778][ T48] usb 1-1: USB disconnect, device number 3 [ 133.530719][ T990] usb 3-1: USB disconnect, device number 7 [ 133.914876][ T6197] syz_tun: entered allmulticast mode [ 134.520403][ T6193] syz_tun: left allmulticast mode [ 134.695535][ T6198] loop0: detected capacity change from 0 to 128 [ 135.325542][ T6198] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 135.339501][ T6198] hpfs: filesystem error: improperly stopped [ 135.339677][ T6198] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 135.339744][ T6198] hpfs: You really don't want any checks? You are crazy... [ 135.339810][ T6198] hpfs: Code page index out of array [ 135.339864][ T6198] hpfs: code page support is disabled [ 135.365925][ T6198] hpfs: hpfs_map_4sectors(): unaligned read [ 135.366934][ T6198] hpfs: hpfs_map_4sectors(): unaligned read [ 135.366993][ T6198] hpfs: filesystem error: unable to find root dir [ 135.442216][ T6198] hpfs: hpfs_map_4sectors(): unaligned read [ 136.380222][ T5349] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.584401][ T5745] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.653703][ T5349] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.659267][ T5349] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.659360][ T5349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.659417][ T5349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.659787][ T5349] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.774497][ T5349] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.783023][ T5349] usb 4-1: Product: syz [ 136.787524][ T5349] usb 4-1: Manufacturer: syz [ 137.100262][ T6219] fuse: Unknown parameter 'user_i00000000000000000000' [ 137.118987][ T5349] cdc_wdm 4-1:1.0: skipping garbage [ 137.125247][ T5349] cdc_wdm 4-1:1.0: skipping garbage [ 137.130852][ T5349] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 137.151484][ T5745] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 137.154140][ T5745] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 137.154164][ T5745] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 137.157700][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.157721][ T5745] usb 1-1: Product: syz [ 137.157735][ T5745] usb 1-1: Manufacturer: syz [ 137.157748][ T5745] usb 1-1: SerialNumber: syz [ 137.160680][ T5745] usb 1-1: config 0 descriptor?? [ 137.165000][ T5745] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 137.778779][ T5745] gspca_sunplus: reg_r err -110 [ 137.778881][ T5745] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 138.014068][ T5349] usb 4-1: USB disconnect, device number 4 [ 138.368195][ T6203] loop3: detected capacity change from 0 to 3 [ 138.499664][ T6203] syz.3.110: attempt to access beyond end of device [ 138.499664][ T6203] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 138.513512][ T6203] SQUASHFS error: Failed to read block 0x0: -5 [ 138.524112][ T6203] unable to read squashfs_super_block [ 138.587581][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.589118][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.858787][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.859079][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.389221][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.403148][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.434338][ T990] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 139.578897][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.578964][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.579019][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.579054][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.615452][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 139.621393][ T990] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.634473][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.634536][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.634564][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.634578][ T990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.634592][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.657650][ T990] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.657680][ T990] usb 3-1: Manufacturer: syz [ 139.707601][ T990] usb 3-1: config 0 descriptor?? [ 140.429798][ T990] rc_core: IR keymap rc-hauppauge not found [ 140.429835][ T990] Registered IR keymap rc-empty [ 140.429983][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.454126][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.469923][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 140.484805][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 140.503014][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.529360][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.549757][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.570293][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.590970][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.611150][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.631424][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.651866][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.673933][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.693425][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 140.744629][ T48] usb 1-1: USB disconnect, device number 4 [ 140.754264][ T990] mceusb 3-1:0.0: Registered ￿ with mce emulator interface version 1 [ 140.762725][ T990] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.901982][ T5349] usb 3-1: USB disconnect, device number 8 [ 142.169850][ T30] audit: type=1800 audit(1787125720.244:5): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.128" name="ipv4_address" dev="configfs" ino=10268 res=0 errno=0 [ 142.222654][ T30] audit: type=1800 audit(1787125720.303:6): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.128" name="ipv4_port" dev="configfs" ino=10269 res=0 errno=0 [ 142.248895][ T30] audit: type=1800 audit(1787125720.323:7): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.128" name="local" dev="configfs" ino=10274 res=0 errno=0 [ 143.717697][ T6282] loop1: detected capacity change from 0 to 256 [ 143.729720][ T6282] vfat: Deprecated parameter 'posix' [ 143.739637][ T6282] FAT-fs: "posix" option is obsolete, not supported now [ 144.447184][ T6272] loop0: detected capacity change from 0 to 4096 [ 146.511643][ T6301] loop3: detected capacity change from 0 to 512 [ 146.567530][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.580750][ T6301] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.724390][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.009930][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.507157][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 147.510537][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.510585][ T10] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 147.514235][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.514257][ T10] usb 1-1: Product: syz [ 147.514271][ T10] usb 1-1: Manufacturer: syz [ 147.514284][ T10] usb 1-1: SerialNumber: syz [ 147.637455][ T6322] loop2: detected capacity change from 0 to 4096 [ 147.763461][ T6311] hsr_slave_0: left promiscuous mode [ 147.764581][ T6311] hsr_slave_1: left promiscuous mode [ 147.799722][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.825507][ T6322] EXT4-fs (loop2): shut down requested (2) [ 147.837607][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.868064][ T6326] loop3: detected capacity change from 0 to 256 [ 147.874385][ T6326] vfat: Deprecated parameter 'posix' [ 147.874410][ T6326] FAT-fs: "posix" option is obsolete, not supported now [ 149.185177][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.203899][ T10] usb 1-1: 1:1 : bogus bTerminalLink 5 [ 149.298269][ T10] usb 1-1: unit 5 not found! [ 149.298330][ T10] usb 1-1: unit 0 not found! [ 149.390226][ T6342] loop3: detected capacity change from 0 to 512 [ 149.393589][ T6342] EXT4-fs: Ignoring removed i_version option [ 149.422077][ T10] usb 1-1: USB disconnect, device number 5 [ 149.447933][ T6342] EXT4-fs (loop3): 1 orphan inode deleted [ 149.471756][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.697877][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.808206][ T6349] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.148: Directory hole found for htree leaf block 0 [ 152.165119][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.589647][ T6360] CIFS: Attempting to mount //127.0.0.1/share [ 153.262266][ T6360] CIFS: VFS: Error connecting to socket. Aborting operation. [ 153.262355][ T6360] CIFS: VFS: cifs_mount failed w/return code = -4 [ 153.323307][ T6381] loop2: detected capacity change from 0 to 512 [ 153.666582][ T6381] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.155: invalid block [ 153.667602][ T6381] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.681822][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 153.681849][ C0] EXT4-fs (loop2): initial error at time 1787125731: ext4_get_branch:178: inode 11: block 4294967295 [ 153.681896][ C0] EXT4-fs (loop2): last error at time 1787125731: ext4_get_branch:178: inode 11: block 4294967295 [ 153.774388][ T6381] EXT4-fs (loop2): Remounting filesystem read-only [ 153.777453][ T6381] EXT4-fs (loop2): 2 truncates cleaned up [ 153.790113][ T6381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.111566][ T6376] loop1: detected capacity change from 0 to 8192 [ 155.194802][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.284128][ T6395] loop4: detected capacity change from 0 to 512 [ 155.285169][ T6395] EXT4-fs: Ignoring removed i_version option [ 155.507033][ T6395] EXT4-fs (loop4): 1 orphan inode deleted [ 155.528650][ T6395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.614364][ T6404] syz_tun: entered allmulticast mode [ 156.096051][ T6391] syz_tun: left allmulticast mode [ 157.311396][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.422687][ T6422] EXT4-fs error (device loop4): __ext4_add_entry:2414: inode #2: comm syz.4.160: Directory hole found for htree leaf block 0 [ 158.511109][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 158.524296][ T10] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 159.028896][ T6430] CIFS: Attempting to mount //127.0.0.1/share [ 159.042298][ T6430] CIFS: VFS: Error connecting to socket. Aborting operation. [ 159.042572][ T6430] CIFS: VFS: cifs_mount failed w/return code = -111 [ 159.160116][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 159.231970][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.232017][ T10] usb 1-1: Product: syz [ 159.232047][ T10] usb 1-1: Manufacturer: syz [ 159.232065][ T10] usb 1-1: SerialNumber: syz [ 159.287083][ T10] usb 1-1: config 0 descriptor?? [ 159.334283][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 159.363350][ T6438] 9p: Bad value for 'rfdno' [ 159.379800][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.345535][ T6445] loop3: detected capacity change from 0 to 512 [ 161.611858][ T6445] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.170: invalid block [ 161.611899][ T6445] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.623997][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 161.624015][ C0] EXT4-fs (loop3): initial error at time 1787125739: ext4_get_branch:178: inode 11: block 4294967295 [ 161.624036][ C0] EXT4-fs (loop3): last error at time 1787125739: ext4_get_branch:178: inode 11: block 4294967295 [ 161.624938][ T6445] EXT4-fs (loop3): Remounting filesystem read-only [ 161.625162][ T6445] EXT4-fs (loop3): 2 truncates cleaned up [ 161.626400][ T6445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.638932][ T6447] loop1: detected capacity change from 0 to 128 [ 161.661502][ T6447] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 161.664687][ T6447] hpfs: filesystem error: improperly stopped [ 161.664703][ T6447] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 161.664716][ T6447] hpfs: You really don't want any checks? You are crazy... [ 161.664844][ T6447] hpfs: Code page index out of array [ 161.664852][ T6447] hpfs: code page support is disabled [ 161.667943][ T6447] hpfs: hpfs_map_4sectors(): unaligned read [ 161.668480][ T6447] hpfs: hpfs_map_4sectors(): unaligned read [ 161.668493][ T6447] hpfs: filesystem error: unable to find root dir [ 161.695260][ T6447] hpfs: hpfs_map_4sectors(): unaligned read [ 161.827711][ T10] gspca_sunplus: reg_r err -71 [ 161.827798][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 162.211026][ T10] usb 1-1: USB disconnect, device number 6 [ 162.224642][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.429677][ T6462] fuse: Unknown parameter 'user_id00000000000000000000' [ 162.596969][ T6460] loop1: detected capacity change from 0 to 512 [ 162.638375][ T6460] EXT4-fs: Ignoring removed i_version option [ 163.617682][ T6460] EXT4-fs (loop1): 1 orphan inode deleted [ 163.690895][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.036035][ T6473] loop4: detected capacity change from 0 to 1024 [ 164.289850][ T6479] EXT4-fs error (device loop1): __ext4_add_entry:2414: inode #2: comm syz.1.175: Directory hole found for htree leaf block 0 [ 165.801427][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.280647][ T6487] CIFS: Attempting to mount //127.0.0.1/share [ 166.281811][ T6487] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.281868][ T6487] CIFS: VFS: cifs_mount failed w/return code = -111 [ 166.945815][ T6497] loop2: detected capacity change from 0 to 128 [ 167.019601][ T152] IPVS: starting estimator thread 0... [ 167.060130][ T6497] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.064325][ T6497] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.082014][ T6497] EXT4-fs (loop2): shut down requested (2) [ 167.138508][ T6500] IPVS: using max 53 ests per chain, 127200 per kthread [ 167.143887][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.172683][ T6484] loop3: detected capacity change from 0 to 4096 [ 167.324283][ T990] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 167.477571][ T990] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 167.480054][ T990] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 167.480080][ T990] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 167.488460][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.488485][ T990] usb 1-1: Product: syz [ 167.488499][ T990] usb 1-1: Manufacturer: syz [ 167.488512][ T990] usb 1-1: SerialNumber: syz [ 167.539737][ T990] usb 1-1: config 0 descriptor?? [ 167.543650][ T990] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 167.661155][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.908679][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.908775][ T10] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 167.931650][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.931677][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.931717][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 167.931750][ T10] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 167.931805][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 167.931829][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 167.937255][ T10] usb 3-1: string descriptor 0 read error: -22 [ 167.937409][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.457641][ T990] gspca_sunplus: reg_r err -110 [ 168.457769][ T990] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 168.710937][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.712226][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.750753][ T10] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 168.758966][ T10] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 168.770088][ T10] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 169.276368][ T6530] loop1: detected capacity change from 0 to 2048 [ 169.286870][ T10] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 169.328394][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.872449][ T10] usb 3-1: USB disconnect, device number 9 [ 170.303654][ T6537] fuse: Bad value for 'user_id' [ 170.303705][ T6537] fuse: Bad value for 'user_id' [ 170.369243][ T6538] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.370031][ T6538] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 170.370066][ T6538] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.370066][ T6538] [ 170.370084][ T6538] EXT4-fs (loop1): Total free blocks count 0 [ 170.370100][ T6538] EXT4-fs (loop1): Free/Dirty block details [ 170.370155][ T6538] EXT4-fs (loop1): free_blocks=2415919104 [ 170.370226][ T6538] EXT4-fs (loop1): dirty_blocks=16 [ 170.370282][ T6538] EXT4-fs (loop1): Block reservation details [ 170.370332][ T6538] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 171.373857][ T6540] loop3: detected capacity change from 0 to 512 [ 171.376557][ T6540] EXT4-fs: Ignoring removed i_version option [ 171.431943][ T6540] EXT4-fs (loop3): 1 orphan inode deleted [ 171.479285][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.534548][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.544125][ T10] usb 1-1: USB disconnect, device number 7 [ 171.622453][ T6543] loop4: detected capacity change from 0 to 256 [ 171.634390][ T6543] vfat: Deprecated parameter 'posix' [ 171.634442][ T6543] FAT-fs: "posix" option is obsolete, not supported now [ 172.223591][ T6550] loop2: detected capacity change from 0 to 131072 [ 172.242129][ T6550] F2FS-fs (loop2): invalid crc value [ 172.431520][ T6550] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 172.445265][ T6550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 172.526716][ T6557] 9p: Bad value for 'rfdno' [ 172.593606][ T6558] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.189: Directory hole found for htree leaf block 0 [ 174.766251][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.869312][ T6576] loop4: detected capacity change from 0 to 4096 [ 175.969266][ T6579] loop3: detected capacity change from 0 to 1024 [ 176.032316][ T6576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.068729][ T6576] EXT4-fs (loop4): shut down requested (2) [ 176.241858][ T6572] loop1: detected capacity change from 0 to 131072 [ 176.254767][ T6572] F2FS-fs (loop1): invalid crc value [ 176.384364][ T6572] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.393774][ T6572] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 177.295379][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.998876][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 178.473437][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.532103][ T6609] comedi comedi3: pcl818: I/O base address or length out of range [ 178.656085][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 178.667135][ T10] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 178.667183][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 178.690746][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.690790][ T10] usb 4-1: Product: syz [ 178.690821][ T10] usb 4-1: Manufacturer: syz [ 178.690836][ T10] usb 4-1: SerialNumber: syz [ 178.694557][ T10] usb 4-1: config 0 descriptor?? [ 178.705378][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 179.184537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 179.215802][ T10] gspca_sunplus: reg_r err -110 [ 179.215912][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 179.478773][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.488716][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.556748][ T6623] syz_tun: entered allmulticast mode [ 180.147952][ T6615] syz_tun: left allmulticast mode [ 180.385025][ T6619] loop2: detected capacity change from 0 to 4096 [ 180.881909][ T6640] CIFS: Attempting to mount //127.0.0.1/share [ 181.486401][ T6640] CIFS: VFS: Error connecting to socket. Aborting operation. [ 181.486796][ T6640] CIFS: VFS: cifs_mount failed w/return code = -4 [ 181.968751][ T48] usb 4-1: USB disconnect, device number 5 [ 183.038882][ T6664] loop1: detected capacity change from 0 to 4096 [ 183.117143][ T6664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.164650][ T6664] EXT4-fs (loop1): shut down requested (2) [ 183.772648][ T6659] loop2: detected capacity change from 0 to 131072 [ 183.947810][ T6659] F2FS-fs (loop2): invalid crc value [ 184.019175][ T6659] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.566971][ T6659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 184.793396][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.276688][ T6690] syz_tun: entered allmulticast mode [ 186.898762][ T6685] syz_tun: left allmulticast mode [ 187.560040][ T6699] comedi comedi3: pcl818: I/O base address or length out of range [ 187.590422][ T6698] loop0: detected capacity change from 0 to 512 [ 187.611147][ T6698] EXT4-fs: Ignoring removed i_version option [ 188.432154][ T6698] EXT4-fs (loop0): 1 orphan inode deleted [ 188.461501][ T6698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.359926][ T6714] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.221: Directory hole found for htree leaf block 0 [ 189.593835][ T4933] Bluetooth: hci2: command 0x0401 tx timeout [ 189.700008][ T5616] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 190.906873][ T6716] fuse: Bad value for 'user_id' [ 190.906961][ T6716] fuse: Bad value for 'user_id' [ 192.726050][ T6718] loop3: detected capacity change from 0 to 4096 [ 192.854069][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.581057][ T5745] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 193.787740][ T6725] loop2: detected capacity change from 0 to 4096 [ 193.820949][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 193.828793][ T5745] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.879071][ T6730] syz_tun: entered allmulticast mode [ 193.970960][ T5745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.982562][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.982678][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.982742][ T5745] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.982805][ T5745] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.236195][ T6718] ntfs3(loop3): Failed to read $UpCase (-4). [ 194.247263][ T5745] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.247311][ T5745] usb 2-1: Manufacturer: syz [ 194.302372][ T5745] usb 2-1: config 0 descriptor?? [ 194.411120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 194.807272][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.807363][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825697][ T5745] rc_core: IR keymap rc-hauppauge not found [ 194.825735][ T5745] Registered IR keymap rc-empty [ 194.825885][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.357867][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 195.530127][ T5745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 197.338551][ T5745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 197.347024][ T6739] loop3: detected capacity change from 0 to 4096 [ 197.360072][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.372983][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.393133][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.423166][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.453184][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.483033][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.503091][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.533204][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.553066][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.583128][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 197.637334][ T5745] mceusb 2-1:0.0: Registered ￿ with mce emulator interface version 1 [ 197.647727][ T5745] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.672683][ T5745] usb 2-1: USB disconnect, device number 5 [ 197.846100][ T6757] comedi comedi3: pcl818: I/O base address or length out of range [ 198.813682][ T6762] loop4: detected capacity change from 0 to 131072 [ 198.827143][ T6762] F2FS-fs (loop4): invalid crc value [ 198.883933][ T6762] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 198.898420][ T6762] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 199.016162][ T5745] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.541230][ T5745] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 199.623005][ T5745] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 199.623049][ T5745] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 199.651206][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.651276][ T5745] usb 4-1: Product: syz [ 199.651306][ T5745] usb 4-1: Manufacturer: syz [ 199.651324][ T5745] usb 4-1: SerialNumber: syz [ 199.682490][ T5745] usb 4-1: config 0 descriptor?? [ 199.695651][ T5745] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 200.134669][ T6781] loop0: detected capacity change from 0 to 512 [ 200.147930][ T6781] EXT4-fs: Ignoring removed i_version option [ 200.207768][ T6781] EXT4-fs (loop0): 1 orphan inode deleted [ 200.222162][ T5745] gspca_sunplus: reg_r err -110 [ 200.222267][ T5745] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 200.246546][ T6781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.499172][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.510500][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.546082][ T6787] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.242: Directory hole found for htree leaf block 0 [ 200.570008][ T6786] loop4: detected capacity change from 0 to 1024 [ 201.005038][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.715468][ T6797] loop0: detected capacity change from 0 to 131072 [ 201.735006][ T6797] F2FS-fs (loop0): invalid crc value [ 201.797868][ T6797] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.807663][ T6797] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 201.888315][ T5828] usb 4-1: USB disconnect, device number 6 [ 202.016757][ T6778] Bluetooth: hci0: command 0x0406 tx timeout [ 202.022993][ T6778] Bluetooth: hci1: command 0x0406 tx timeout [ 202.023054][ T6778] Bluetooth: hci2: command 0x0401 tx timeout [ 202.023084][ T6778] Bluetooth: hci3: command 0x0406 tx timeout [ 202.725281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 203.251759][ T6815] comedi comedi3: pcl818: I/O base address or length out of range [ 204.827007][ T6804] 9p: Bad value for 'rfdno' [ 205.516869][ T6822] hub 5-0:1.0: USB hub found [ 205.521577][ T6822] hub 5-0:1.0: 1 port detected [ 206.074100][ T6824] loop2: detected capacity change from 0 to 2048 [ 206.238377][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.765362][ T6838] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.250' sets config #0 [ 206.838015][ T6838] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.250' sets config #1 [ 207.095336][ T6839] fuse: Bad value for 'user_id' [ 207.095391][ T6839] fuse: Bad value for 'user_id' [ 207.210796][ T6840] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.211077][ T6840] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 207.211102][ T6840] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.211102][ T6840] [ 207.211117][ T6840] EXT4-fs (loop2): Total free blocks count 0 [ 207.211130][ T6840] EXT4-fs (loop2): Free/Dirty block details [ 207.211144][ T6840] EXT4-fs (loop2): free_blocks=2415919104 [ 207.211158][ T6840] EXT4-fs (loop2): dirty_blocks=16 [ 207.211171][ T6840] EXT4-fs (loop2): Block reservation details [ 207.211183][ T6840] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 207.951943][ T6842] loop1: detected capacity change from 0 to 512 [ 207.953028][ T6842] EXT4-fs: Ignoring removed i_version option [ 207.998605][ T6842] EXT4-fs (loop1): 1 orphan inode deleted [ 208.027210][ T6842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.869679][ T6849] EXT4-fs error (device loop1): __ext4_add_entry:2414: inode #2: comm syz.1.256: Directory hole found for htree leaf block 0 [ 210.684144][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.766149][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.306349][ T6861] loop2: detected capacity change from 0 to 4096 [ 212.766026][ T6869] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.913466][ T6874] syz_tun: entered allmulticast mode [ 212.980293][ T6875] CIFS: Attempting to mount //127.0.0.1/share [ 213.416349][ T6866] syz_tun: left allmulticast mode [ 213.529177][ T6875] CIFS: VFS: Error connecting to socket. Aborting operation. [ 213.529242][ T6875] CIFS: VFS: cifs_mount failed w/return code = -4 [ 216.092908][ T6890] loop2: detected capacity change from 0 to 131072 [ 216.275158][ T6890] F2FS-fs (loop2): invalid crc value [ 216.321168][ T6890] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.336932][ T6890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 219.104391][ T6924] CIFS: Attempting to mount //127.0.0.1/share [ 219.113608][ T6924] CIFS: VFS: Error connecting to socket. Aborting operation. [ 219.113881][ T6924] CIFS: VFS: cifs_mount failed w/return code = -111 [ 219.174648][ T6922] loop4: detected capacity change from 0 to 4096 [ 219.469147][ T4933] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 219.479192][ T4933] Bluetooth: hci2: command 0x0401 tx timeout [ 220.452628][ T6928] loop1: detected capacity change from 0 to 256 [ 220.574035][ T6928] vfat: Deprecated parameter 'posix' [ 220.582062][ T6928] FAT-fs: "posix" option is obsolete, not supported now [ 222.224949][ T6936] 9p: Bad value for 'rfdno' [ 222.418239][ T6938] loop1: detected capacity change from 0 to 1024 [ 222.427077][ T6938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.472034][ T6938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 222.472177][ T6938] System zones: 0-1, 3-12 [ 222.498578][ T6938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.515806][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.908000][ T6951] loop1: detected capacity change from 0 to 512 [ 224.014393][ T6951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.027373][ T6951] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.161303][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.738245][ T6966] loop4: detected capacity change from 0 to 512 [ 224.748613][ T6966] EXT4-fs: Ignoring removed i_version option [ 224.783934][ T6966] EXT4-fs (loop4): 1 orphan inode deleted [ 224.793946][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.414572][ T6981] EXT4-fs error (device loop4): __ext4_add_entry:2414: inode #2: comm syz.4.289: Directory hole found for htree leaf block 0 [ 226.446743][ T6987] syz_tun: entered allmulticast mode [ 226.694259][ T6982] syz_tun: left allmulticast mode [ 227.015862][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.262388][ T6996] syz_tun: entered allmulticast mode [ 227.763928][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 227.785215][ T6988] syz_tun: left allmulticast mode [ 228.656080][ T7002] loop1: detected capacity change from 0 to 4096 [ 228.733997][ T7011] fuse: Unknown parameter '0x0000000000000004' [ 228.769039][ T7013] loop2: detected capacity change from 0 to 512 [ 229.663967][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.664072][ T7013] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.751927][ T7019] loop0: detected capacity change from 0 to 256 [ 229.854700][ T7019] vfat: Deprecated parameter 'posix' [ 229.854770][ T7019] FAT-fs: "posix" option is obsolete, not supported now [ 231.938136][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.014447][ T7034] loop4: detected capacity change from 0 to 256 [ 232.023725][ T7035] loop0: detected capacity change from 0 to 512 [ 232.032330][ T7034] vfat: Deprecated parameter 'posix' [ 232.038210][ T7034] FAT-fs: "posix" option is obsolete, not supported now [ 232.078762][ T7035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.078887][ T7035] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.773820][ T7041] syz_tun: entered allmulticast mode [ 232.884297][ T7032] syz_tun: left allmulticast mode [ 232.984580][ T7046] CIFS: Attempting to mount //127.0.0.1/share [ 232.986434][ T7046] CIFS: VFS: Error connecting to socket. Aborting operation. [ 232.986499][ T7046] CIFS: VFS: cifs_mount failed w/return code = -111 [ 234.225151][ T7065] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.315200][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.328288][ T7069] loop4: detected capacity change from 0 to 4096 [ 236.549712][ T7076] 9p: Bad value for 'rfdno' [ 236.840074][ T7077] loop0: detected capacity change from 0 to 512 [ 236.854234][ T7077] EXT4-fs: Ignoring removed i_version option [ 236.963674][ T7079] loop4: detected capacity change from 0 to 4096 [ 236.974524][ T7077] EXT4-fs (loop0): 1 orphan inode deleted [ 236.978556][ T7077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.295029][ T7089] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.319: Directory hole found for htree leaf block 0 [ 239.211510][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.305471][ T7093] syz_tun: entered allmulticast mode [ 239.745254][ T7086] syz_tun: left allmulticast mode [ 240.042572][ T7096] loop4: detected capacity change from 0 to 512 [ 240.066427][ T7096] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.325: invalid block [ 240.066479][ T7096] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.078505][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 240.078523][ C1] EXT4-fs (loop4): initial error at time 1787125817: ext4_get_branch:178: inode 11: block 4294967295 [ 240.078544][ C1] EXT4-fs (loop4): last error at time 1787125817: ext4_get_branch:178: inode 11: block 4294967295 [ 240.078663][ T7096] EXT4-fs (loop4): Remounting filesystem read-only [ 240.078863][ T7096] EXT4-fs (loop4): 2 truncates cleaned up [ 240.079993][ T7096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.221089][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.090401][ T7110] loop0: detected capacity change from 0 to 4096 [ 241.760680][ T7113] syz_tun: entered allmulticast mode [ 241.760913][ T7113] syz_tun: left allmulticast mode [ 243.823027][ T7124] zram0: detected capacity change from 0 to 8 [ 244.166653][ T7130] syz_tun: entered allmulticast mode [ 244.411809][ T7116] syz_tun: left allmulticast mode [ 244.965526][ T7141] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 244.965648][ T7141] CIFS: Attempting to mount //127.0.0.1/share [ 245.616765][ T7141] CIFS: VFS: Error connecting to socket. Aborting operation. [ 245.616841][ T7141] CIFS: VFS: cifs_mount failed w/return code = -4 [ 245.720927][ T7150] loop2: detected capacity change from 0 to 512 [ 245.858873][ T7150] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.339: invalid block [ 245.858932][ T7150] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 245.871127][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 245.871154][ C0] EXT4-fs (loop2): initial error at time 1787125823: ext4_get_branch:178: inode 11: block 4294967295 [ 245.871195][ C0] EXT4-fs (loop2): last error at time 1787125823: ext4_get_branch:178: inode 11: block 4294967295 [ 245.917765][ T7150] EXT4-fs (loop2): Remounting filesystem read-only [ 245.918030][ T7150] EXT4-fs (loop2): 2 truncates cleaned up [ 245.919993][ T7150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.636133][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.073552][ T7174] 9p: Bad value for 'rfdno' [ 248.192458][ T7180] syz_tun: entered allmulticast mode [ 248.192683][ T7180] syz_tun: left allmulticast mode [ 248.698175][ T7188] loop1: detected capacity change from 0 to 1024 [ 248.755330][ T7187] loop0: detected capacity change from 0 to 2048 [ 248.956392][ T7187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.035672][ T7196] CIFS: Attempting to mount //127.0.0.1/share [ 249.528117][ T161] IPVS: starting estimator thread 0... [ 249.594185][ T7196] CIFS: VFS: Error connecting to socket. Aborting operation. [ 249.594266][ T7196] CIFS: VFS: cifs_mount failed w/return code = -4 [ 249.681763][ T7198] IPVS: using max 53 ests per chain, 127200 per kthread [ 249.937330][ T7200] fuse: Bad value for 'user_id' [ 249.937376][ T7200] fuse: Bad value for 'user_id' [ 249.987032][ T7200] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 249.987260][ T7200] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 249.987287][ T7200] EXT4-fs (loop0): This should not happen!! Data will be lost [ 249.987287][ T7200] [ 249.987304][ T7200] EXT4-fs (loop0): Total free blocks count 0 [ 249.987320][ T7200] EXT4-fs (loop0): Free/Dirty block details [ 249.987337][ T7200] EXT4-fs (loop0): free_blocks=2415919104 [ 249.987355][ T7200] EXT4-fs (loop0): dirty_blocks=16 [ 249.987370][ T7200] EXT4-fs (loop0): Block reservation details [ 249.987384][ T7200] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 250.880276][ T7207] loop3: detected capacity change from 0 to 256 [ 251.389311][ T7207] vfat: Deprecated parameter 'posix' [ 251.399099][ T7207] FAT-fs: "posix" option is obsolete, not supported now [ 252.672248][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.230902][ T48] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.507335][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 253.513488][ T48] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 253.525876][ T48] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.525927][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.525983][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.097513][ T48] usb 1-1: config 0 descriptor?? [ 254.145583][ T7231] loop3: detected capacity change from 0 to 512 [ 254.267899][ T7231] EXT4-fs: Ignoring removed i_version option [ 254.295307][ T7231] EXT4-fs (loop3): 1 orphan inode deleted [ 254.334661][ T7231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.706373][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 254.706500][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 254.714799][ T48] usb 1-1: USB disconnect, device number 8 [ 254.802424][ T7240] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.357: Directory hole found for htree leaf block 0 [ 256.025658][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.256225][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.256307][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.771861][ T7254] fuse: Unknown parameter '0x0000000000000004' [ 258.657075][ T7266] loop3: detected capacity change from 0 to 256 [ 258.666272][ T7266] vfat: Deprecated parameter 'posix' [ 258.671762][ T7266] FAT-fs: "posix" option is obsolete, not supported now [ 258.829974][ T7269] hub 5-0:1.0: USB hub found [ 258.830412][ T7269] hub 5-0:1.0: 1 port detected [ 259.302245][ T7268] loop2: detected capacity change from 0 to 512 [ 259.349954][ T7268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.377399][ T7268] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.785675][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.865459][ T7298] loop3: detected capacity change from 0 to 256 [ 261.888826][ T7298] vfat: Deprecated parameter 'posix' [ 261.896066][ T7298] FAT-fs: "posix" option is obsolete, not supported now [ 262.188797][ T7296] loop0: detected capacity change from 0 to 4096 [ 262.499108][ T7299] loop2: detected capacity change from 0 to 2048 [ 263.741316][ T7299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 263.848935][ T7308] 9p: Bad value for 'rfdno' [ 265.197132][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 266.512865][ T7331] loop4: detected capacity change from 0 to 512 [ 266.519857][ T7331] EXT4-fs: Ignoring removed i_version option [ 266.534970][ T7331] EXT4-fs (loop4): 1 orphan inode deleted [ 266.549263][ T7331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.769078][ T7346] EXT4-fs error (device loop4): __ext4_add_entry:2414: inode #2: comm syz.4.383: Directory hole found for htree leaf block 0 [ 269.530374][ T7351] loop0: detected capacity change from 0 to 512 [ 269.595221][ T7351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.608430][ T7351] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.701580][ T4933] Bluetooth: hci2: command 0x0401 tx timeout [ 269.707954][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 269.820646][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.955844][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.184067][ T7372] loop4: detected capacity change from 0 to 256 [ 271.188236][ T7372] vfat: Deprecated parameter 'posix' [ 271.188258][ T7372] FAT-fs: "posix" option is obsolete, not supported now [ 271.587131][ T7376] loop3: detected capacity change from 0 to 256 [ 271.605130][ T7376] vfat: Deprecated parameter 'posix' [ 271.605182][ T7376] FAT-fs: "posix" option is obsolete, not supported now [ 273.421938][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 273.422316][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 273.778648][ T7399] loop0: detected capacity change from 0 to 512 [ 273.866175][ T7399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.866274][ T7399] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.904885][ T7404] loop4: detected capacity change from 0 to 2048 [ 273.949320][ T7404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.333869][ T7416] fuse: Bad value for 'user_id' [ 274.333913][ T7416] fuse: Bad value for 'user_id' [ 274.389125][ T7418] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 274.390476][ T7418] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 274.390508][ T7418] EXT4-fs (loop4): This should not happen!! Data will be lost [ 274.390508][ T7418] [ 274.390544][ T7418] EXT4-fs (loop4): Total free blocks count 0 [ 274.391017][ T7418] EXT4-fs (loop4): Free/Dirty block details [ 274.391091][ T7418] EXT4-fs (loop4): free_blocks=2415919104 [ 274.391145][ T7418] EXT4-fs (loop4): dirty_blocks=16 [ 274.391195][ T7418] EXT4-fs (loop4): Block reservation details [ 274.391244][ T7418] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 274.927695][ T144] IPVS: starting estimator thread 0... [ 275.021099][ T7419] IPVS: using max 25 ests per chain, 60000 per kthread [ 275.181071][ T5738] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 275.309124][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.381097][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 275.388488][ T5738] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 275.401579][ T5738] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 275.401625][ T5738] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 275.429852][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.429894][ T5738] usb 3-1: Product: ␁ [ 275.429922][ T5738] usb 3-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎膌쏖 [ 275.429943][ T5738] usb 3-1: SerialNumber: 샺 [ 275.672647][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.527827][ T7437] loop4: detected capacity change from 0 to 512 [ 276.594699][ T7417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.600841][ T7437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.603044][ T7437] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.081447][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.750276][ T5738] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.900173][ T5738] usb 3-1: MIDIStreaming interface descriptor not found [ 278.170030][ T5738] usb 3-1: USB disconnect, device number 10 [ 278.330654][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.673063][ T7481] syz_tun: entered allmulticast mode [ 279.209441][ T7476] syz_tun: left allmulticast mode [ 279.511890][ T5349] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 279.591023][ T7494] 9p: Bad value for 'rfdno' [ 279.665958][ T5349] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 279.685125][ T5349] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 279.685173][ T5349] usb 2-1: config 1 has no interface number 0 [ 279.685228][ T5349] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 279.685257][ T5349] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 279.685284][ T5349] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.745000][ T5349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.745045][ T5349] usb 2-1: Product: syz [ 279.745074][ T5349] usb 2-1: Manufacturer: syz [ 279.745091][ T5349] usb 2-1: SerialNumber: syz [ 279.780823][ T7501] loop2: detected capacity change from 0 to 256 [ 279.790370][ T7474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 279.797066][ T7501] vfat: Deprecated parameter 'posix' [ 279.797087][ T7501] FAT-fs: "posix" option is obsolete, not supported now [ 280.128536][ T7474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.285378][ T7505] zram: Cannot change disksize for initialized device [ 280.920872][ T7474] netlink: 88 bytes leftover after parsing attributes in process `syz.1.412'. [ 281.648550][ T5349] usb 2-1: Incompatible driver and firmware versions [ 281.686123][ T5349] usb 2-1: USB disconnect, device number 6 [ 282.272236][ T7521] zram: Cannot change disksize for initialized device [ 284.352638][ T7525] loop4: detected capacity change from 0 to 4096 [ 285.831087][ T5738] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 286.046818][ T1479] IPVS: starting estimator thread 0... [ 286.564076][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 286.570418][ T5738] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 286.580640][ T5738] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 286.591073][ T5738] usb 2-1: config 155 has 0 interfaces, different from the descriptor's value: 1 [ 286.605700][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.605747][ T5738] usb 2-1: Product: syz [ 286.605776][ T5738] usb 2-1: Manufacturer: syz [ 286.605793][ T5738] usb 2-1: SerialNumber: syz [ 286.632696][ T7546] IPVS: using max 30 ests per chain, 72000 per kthread [ 286.706961][ T7544] loop4: detected capacity change from 0 to 1024 [ 286.722174][ T7544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.747509][ T7544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 286.756086][ T7544] System zones: 0-1, 3-12 [ 286.764199][ T7544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.821127][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 287.011280][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 287.018466][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 287.029302][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 287.593424][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 287.629432][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.637803][ T10] usb 1-1: Product: ␁ [ 287.637846][ T10] usb 1-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢 [ 287.637869][ T10] usb 1-1: SerialNumber: 샺 [ 287.714859][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.894668][ T7559] comedi comedi3: pcl818: I/O base address or length out of range [ 288.946269][ T7562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.960706][ T7567] loop3: detected capacity change from 0 to 512 [ 288.970438][ T7567] EXT4-fs: Ignoring removed i_version option [ 289.000475][ T7567] EXT4-fs (loop3): 1 orphan inode deleted [ 289.013857][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.044690][ T5745] usb 2-1: USB disconnect, device number 7 [ 289.378860][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.378932][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 290.053417][ T7576] EXT4-fs error (device loop3): __ext4_add_entry:2414: inode #2: comm syz.3.433: Directory hole found for htree leaf block 0 [ 290.714080][ T7577] syz_tun: entered allmulticast mode [ 291.387071][ T7572] syz_tun: left allmulticast mode [ 292.121704][ T10] usb 1-1: USB disconnect, device number 9 [ 292.272605][ T7582] loop4: detected capacity change from 0 to 2048 [ 292.338195][ T7582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 292.608937][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 292.627720][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.840108][ T6159] udevd[6159]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.483125][ T7590] syz_tun: entered allmulticast mode [ 293.615903][ T7585] syz_tun: left allmulticast mode [ 294.450100][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 295.872776][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 297.137325][ T10] usb 5-1: device descriptor read/64, error -71 [ 297.666861][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 298.755372][ T7623] fuse: Unknown parameter 'mnt' [ 298.920598][ T30] audit: type=1800 audit(1787125876.704:8): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.451" name="ipv4_address" dev="configfs" ino=14130 res=0 errno=0 [ 298.928713][ T30] audit: type=1800 audit(1787125876.714:9): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.451" name="ipv4_port" dev="configfs" ino=14131 res=0 errno=0 [ 298.931993][ T30] audit: type=1800 audit(1787125876.724:10): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.451" name="local" dev="configfs" ino=14132 res=0 errno=0 [ 299.511672][ T5828] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 300.387734][ T7634] fuse: Bad value for 'user_id' [ 300.387786][ T7634] fuse: Bad value for 'user_id' [ 300.494493][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 300.508380][ T5828] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 300.523063][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 300.534978][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 300.899350][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.899402][ T5828] usb 3-1: Product: ␁ [ 300.899435][ T5828] usb 3-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢 [ 300.899457][ T5828] usb 3-1: SerialNumber: 샺 [ 302.059058][ T7642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.636191][ T5828] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.636273][ T5828] usb 3-1: MIDIStreaming interface descriptor not found [ 303.809249][ T5828] usb 3-1: USB disconnect, device number 11 [ 304.406886][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.532998][ T5738] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 306.589641][ T5738] usb 4-1: device descriptor read/64, error -71 [ 307.379824][ T5738] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 307.553419][ T7677] fuse: Unknown parameter '0x0000000000000003' [ 307.853384][ T7687] loop4: detected capacity change from 0 to 2048 [ 308.190165][ T7687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.839971][ T7698] fuse: Bad value for 'user_id' [ 308.840056][ T7698] fuse: Bad value for 'user_id' [ 308.906273][ T7699] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.906596][ T7699] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 308.906624][ T7699] EXT4-fs (loop4): This should not happen!! Data will be lost [ 308.906624][ T7699] [ 308.906642][ T7699] EXT4-fs (loop4): Total free blocks count 0 [ 308.906657][ T7699] EXT4-fs (loop4): Free/Dirty block details [ 308.906673][ T7699] EXT4-fs (loop4): free_blocks=2415919104 [ 308.906728][ T7699] EXT4-fs (loop4): dirty_blocks=16 [ 308.906784][ T7699] EXT4-fs (loop4): Block reservation details [ 308.906837][ T7699] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 309.511847][ T7696] comedi comedi3: pcl818: I/O base address or length out of range [ 311.052577][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.152638][ T5828] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 311.361069][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 311.433037][ T7721] syz_tun: entered allmulticast mode [ 311.960243][ T5828] usb 2-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 311.980972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 311.991572][ T7716] syz_tun: left allmulticast mode [ 312.125664][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 312.125719][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 312.305274][ T7722] loop4: detected capacity change from 0 to 4096 [ 312.363758][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.363805][ T5828] usb 2-1: Product: ␁ [ 312.363835][ T5828] usb 2-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢 [ 312.363856][ T5828] usb 2-1: SerialNumber: 샺 [ 312.904510][ T5349] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 313.084133][ T5349] usb 1-1: device descriptor read/64, error -71 [ 313.108018][ T5828] usb 2-1: can't set config #1, error -71 [ 313.118005][ T5828] usb 2-1: USB disconnect, device number 8 [ 313.977283][ T5349] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 315.264538][ T7746] 9pnet_virtio: no channels available for device 127.0.0.1 [ 315.452007][ T5349] usb 1-1: device descriptor read/64, error -71 [ 316.064359][ T5349] usb usb1-port1: attempt power cycle [ 316.673021][ T7754] comedi comedi3: pcl818: I/O base address or length out of range [ 316.741174][ T5349] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 316.763136][ T5349] usb 1-1: device descriptor read/8, error -71 [ 317.025952][ T5349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 317.049453][ T5349] usb 1-1: device descriptor read/8, error -71 [ 317.160685][ T5349] usb usb1-port1: unable to enumerate USB device [ 317.694853][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.694926][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.103159][ T7763] loop4: detected capacity change from 0 to 2048 [ 318.162586][ T7763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.483209][ T7774] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 319.513036][ T7774] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 319.513098][ T7774] EXT4-fs (loop4): This should not happen!! Data will be lost [ 319.513098][ T7774] [ 319.537751][ T7774] EXT4-fs (loop4): Total free blocks count 0 [ 319.537777][ T7774] EXT4-fs (loop4): Free/Dirty block details [ 319.537792][ T7774] EXT4-fs (loop4): free_blocks=2415919104 [ 319.537806][ T7774] EXT4-fs (loop4): dirty_blocks=16 [ 319.537818][ T7774] EXT4-fs (loop4): Block reservation details [ 319.537829][ T7774] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 319.641168][ T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 319.795702][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 319.821981][ T48] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 319.844724][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 319.844862][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 319.894286][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.894357][ T48] usb 1-1: Product: ␁ [ 319.894459][ T48] usb 1-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎 [ 319.894512][ T48] usb 1-1: SerialNumber: 샺 [ 320.812446][ T7785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.665266][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.923128][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.930376][ T48] usb 1-1: MIDIStreaming interface descriptor not found [ 322.604135][ T7796] 9p: Bad value for 'rfdno' [ 322.750116][ T48] usb 1-1: USB disconnect, device number 14 [ 322.796997][ T7802] loop4: detected capacity change from 0 to 2048 [ 322.852711][ T7802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.748044][ T7817] fuse: Bad value for 'user_id' [ 323.748103][ T7817] fuse: Bad value for 'user_id' [ 323.803346][ T7818] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 323.803766][ T7818] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 323.803833][ T7818] EXT4-fs (loop4): This should not happen!! Data will be lost [ 323.803833][ T7818] [ 323.803889][ T7818] EXT4-fs (loop4): Total free blocks count 0 [ 323.803925][ T7818] EXT4-fs (loop4): Free/Dirty block details [ 323.803941][ T7818] EXT4-fs (loop4): free_blocks=2415919104 [ 323.803957][ T7818] EXT4-fs (loop4): dirty_blocks=16 [ 323.803972][ T7818] EXT4-fs (loop4): Block reservation details [ 323.804025][ T7818] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 324.649494][ T7812] comedi comedi3: pcl818: I/O base address or length out of range [ 324.832832][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.092823][ T48] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 325.263678][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 325.275556][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.296822][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.308720][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.308759][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.308791][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.308841][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.322745][ T5349] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 325.441518][ T48] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.441717][ T48] usb 1-1: Manufacturer: syz [ 325.595151][ T5349] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.627233][ T48] usb 1-1: config 0 descriptor?? [ 325.710229][ T5349] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.722366][ T5349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.736981][ T5349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.755047][ T5349] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.831216][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.863319][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.863353][ T5349] usb 3-1: Product: syz [ 325.863390][ T5349] usb 3-1: Manufacturer: syz [ 325.881355][ T5349] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 325.964883][ T48] usb 1-1: can't set config #0, error -71 [ 325.974052][ T48] usb 1-1: USB disconnect, device number 15 [ 326.082005][ T5349] usb 3-1: USB disconnect, device number 12 [ 326.157849][ T7829] loop4: detected capacity change from 0 to 2048 [ 327.260316][ T7838] fuse: Bad value for 'user_id' [ 327.260372][ T7838] fuse: Bad value for 'user_id' [ 327.457393][ T7829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.870745][ T7847] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.871217][ T7847] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 328.871284][ T7847] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.871284][ T7847] [ 328.871341][ T7847] EXT4-fs (loop4): Total free blocks count 0 [ 328.871397][ T7847] EXT4-fs (loop4): Free/Dirty block details [ 328.871448][ T7847] EXT4-fs (loop4): free_blocks=2415919104 [ 328.871506][ T7847] EXT4-fs (loop4): dirty_blocks=16 [ 328.871573][ T7847] EXT4-fs (loop4): Block reservation details [ 328.871625][ T7847] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 329.846462][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.521091][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 330.564822][ T7866] comedi comedi3: pcl818: I/O base address or length out of range [ 330.701112][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 330.952172][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 330.994352][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 330.994411][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 331.611161][ T5349] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 331.771108][ T5349] usb 3-1: Using ep0 maxpacket: 16 [ 331.780130][ T5349] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 331.836268][ T5349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.849224][ T5349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.865252][ T5349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 331.876602][ T5349] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 331.876681][ T5349] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.914090][ T5349] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 331.914136][ T5349] usb 3-1: Manufacturer: syz [ 331.929670][ T5349] usb 3-1: config 0 descriptor?? [ 331.945809][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.117788][ T10] usb 1-1: can't set config #1, error -71 [ 332.129301][ T10] usb 1-1: USB disconnect, device number 16 [ 332.972496][ T7885] loop4: detected capacity change from 0 to 256 [ 332.986060][ T7885] vfat: Deprecated parameter 'posix' [ 332.993736][ T7885] FAT-fs: "posix" option is obsolete, not supported now [ 333.059267][ T5349] rc_core: IR keymap rc-hauppauge not found [ 333.059306][ T5349] Registered IR keymap rc-empty [ 333.059460][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.097054][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.112161][ T5349] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 333.118467][ T5349] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 333.140171][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.152471][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.184845][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.207697][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.259717][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.118863][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.326239][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.342001][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.361154][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.395833][ T5349] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.425986][ T5349] mceusb 3-1:0.0: Registered ￿ with mce emulator interface version 1 [ 334.438261][ T5349] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 334.459669][ T5349] usb 3-1: USB disconnect, device number 13 [ 334.977512][ T5630] udevd[5630]: setting owner of /dev/bus/usb/003/013 to uid=0, gid=0 failed: No such file or directory [ 335.514933][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 335.671881][ T48] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.682203][ T48] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.682246][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.682284][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.682331][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.728617][ T48] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.728661][ T48] usb 4-1: Product: syz [ 335.728694][ T48] usb 4-1: Manufacturer: syz [ 335.759719][ T48] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 335.931418][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 335.963432][ T48] usb 4-1: USB disconnect, device number 9 [ 336.231182][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 336.232953][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 336.233981][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 336.234017][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 336.236339][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.236367][ T10] usb 3-1: Product: ␁ [ 336.236384][ T10] usb 3-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎 [ 336.236406][ T10] usb 3-1: SerialNumber: 샺 [ 337.378392][ T7924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.701220][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.708462][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 339.591177][ T48] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 339.604974][ T10] usb 3-1: USB disconnect, device number 14 [ 339.638886][ T7947] syz_tun: entered allmulticast mode [ 339.672737][ T7946] syz_tun: left allmulticast mode [ 339.741694][ T48] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 339.748800][ T48] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 339.748832][ T48] usb 1-1: config 1 has no interface number 0 [ 339.748870][ T48] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 339.748893][ T48] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 339.748917][ T48] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.757417][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.757446][ T48] usb 1-1: Product: syz [ 339.757459][ T48] usb 1-1: Manufacturer: syz [ 339.757473][ T48] usb 1-1: SerialNumber: syz [ 339.794471][ T7940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.838908][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.152042][ T5349] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 340.205642][ T7940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 340.303354][ T5349] usb 5-1: Using ep0 maxpacket: 16 [ 340.322177][ T5349] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 340.350486][ T5349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.362919][ T5349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.363024][ T5349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 340.363072][ T5349] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 340.363148][ T5349] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.452198][ T5349] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 340.460664][ T5349] usb 5-1: Manufacturer: syz [ 340.799918][ T5349] usb 5-1: config 0 descriptor?? [ 342.884288][ T7940] netlink: 88 bytes leftover after parsing attributes in process `syz.0.532'. [ 342.901083][ T5349] rc_core: IR keymap rc-hauppauge not found [ 342.901147][ T5349] Registered IR keymap rc-empty [ 342.901326][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.921246][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.938098][ T48] usb 1-1: Incompatible driver and firmware versions [ 342.942346][ T5349] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 342.945415][ T5349] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 342.956821][ T48] usb 1-1: USB disconnect, device number 17 [ 342.960853][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 342.985133][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.003675][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.021647][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.041403][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.061147][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.085050][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.102314][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.121280][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.141148][ T5349] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 343.192033][ T5349] mceusb 5-1:0.0: Registered ￿ with mce emulator interface version 1 [ 343.205802][ T5349] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 343.761454][ T5349] usb 5-1: USB disconnect, device number 7 [ 344.140292][ T7973] Bluetooth: MGMT ver 1.23 [ 344.155508][ T7973] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 344.336758][ T7977] zram: Cannot change disksize for initialized device [ 345.901502][ T5745] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 346.061721][ T5745] usb 1-1: Using ep0 maxpacket: 32 [ 346.089204][ T5745] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 346.114809][ T5745] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 346.126622][ T5745] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 346.188037][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.188085][ T5745] usb 1-1: Product: ␁ [ 346.188113][ T5745] usb 1-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎膌 [ 346.188134][ T5745] usb 1-1: SerialNumber: 샺 [ 346.539548][ T7998] syz_tun: entered allmulticast mode [ 347.333920][ T8003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.434554][ T5745] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.435418][ T5745] usb 1-1: MIDIStreaming interface descriptor not found [ 348.610461][ T30] audit: type=1800 audit(1787125926.394:11): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.552" name="ipv4_address" dev="configfs" ino=16389 res=0 errno=0 [ 348.664475][ T30] audit: type=1800 audit(1787125926.454:12): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.552" name="ipv4_port" dev="configfs" ino=16390 res=0 errno=0 [ 349.235119][ T30] audit: type=1800 audit(1787125927.024:13): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.552" name="local" dev="configfs" ino=15743 res=0 errno=0 [ 349.456614][ T5745] usb 1-1: USB disconnect, device number 18 [ 349.745226][ T8019] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 351.000672][ T6159] udevd[6159]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.791438][ T5349] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 358.043440][ T8080] loop4: detected capacity change from 0 to 256 [ 358.049744][ T8080] vfat: Deprecated parameter 'posix' [ 358.049770][ T8080] FAT-fs: "posix" option is obsolete, not supported now [ 358.291058][ T5349] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 358.761446][ T5349] usb 3-1: Using ep0 maxpacket: 32 [ 358.770334][ T5349] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 358.783602][ T5349] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 358.783653][ T5349] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 358.808119][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.808161][ T5349] usb 3-1: Product: ␁ [ 358.808197][ T5349] usb 3-1: Manufacturer: 兆ᰇ㷡빱꯳觩⊤活恶ௌ뀈玧ࠀ➳♊乃⍖礟鮼笙뛢駎膌 [ 358.808219][ T5349] usb 3-1: SerialNumber: 샺 [ 359.098150][ T5349] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.110705][ T5349] usb 3-1: MIDIStreaming interface descriptor not found [ 359.380749][ T5745] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 360.111181][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 360.113113][ T5745] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.117287][ T5745] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.117385][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.117441][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.117507][ T5745] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 360.117577][ T5745] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.127705][ T5745] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.128446][ T5745] usb 2-1: Manufacturer: syz [ 361.166064][ T5745] usb 2-1: config 0 descriptor?? [ 361.436911][ T5349] usb 3-1: USB disconnect, device number 15 [ 362.279862][ T6812] udevd[6812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.297721][ T5745] rc_core: IR keymap rc-hauppauge not found [ 362.297746][ T5745] Registered IR keymap rc-empty [ 362.298102][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.367753][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.388055][ T5745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 362.399704][ T5745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 362.448123][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.462186][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.483065][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.501584][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.522023][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.542103][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.561339][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.582055][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.724539][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.741443][ T5745] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 362.772756][ T5745] mceusb 2-1:0.0: Registered ￿ with mce emulator interface version 1 [ 362.772811][ T5745] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 362.820127][ T5745] usb 2-1: USB disconnect, device number 9 [ 367.673846][ T30] audit: type=1800 audit(1787125945.464:14): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.589" name="ipv4_port" dev="configfs" ino=15968 res=0 errno=0 [ 367.962825][ T30] audit: type=1800 audit(1787125945.754:15): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.589" name="local" dev="configfs" ino=15969 res=0 errno=0 [ 368.418997][ T30] audit: type=1800 audit(1787125946.204:16): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.589" name="ipv4_address" dev="configfs" ino=16642 res=0 errno=0 [ 369.661076][ T990] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 369.832582][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 369.834251][ T990] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 369.837161][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.837211][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.837238][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.837258][ T990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 369.837279][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.850262][ T990] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 369.850290][ T990] usb 3-1: Manufacturer: syz [ 369.859962][ T990] usb 3-1: config 0 descriptor?? [ 370.160634][ T8182] 9pnet_virtio: no channels available for device 127.0.0.1 [ 370.241481][ T990] rc_core: IR keymap rc-hauppauge not found [ 370.241528][ T990] Registered IR keymap rc-empty [ 370.241709][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.262952][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.700399][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 370.710758][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 370.724990][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.741247][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.761773][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.820596][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.831355][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.851734][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.871220][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.892732][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.911140][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.932583][ T990] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 370.958657][ T990] mceusb 3-1:0.0: Registered ￿ with mce emulator interface version 1 [ 370.958683][ T990] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 371.010109][ T990] usb 3-1: USB disconnect, device number 16 [ 371.696349][ T52] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 375.680199][ T8221] CIFS: Attempting to mount //127.0.0.1/share [ 375.690045][ T8221] CIFS: VFS: Error connecting to socket. Aborting operation. [ 375.690481][ T8221] CIFS: VFS: cifs_mount failed w/return code = -111 [ 375.854108][ T8223] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 377.453044][ T8232] fuse: Bad value for 'user_id' [ 377.453135][ T8232] fuse: Bad value for 'user_id' [ 379.136442][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.136535][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.159710][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 379.159753][ T8247] netlink: 101 bytes leftover after parsing attributes in process `syz.2.614'. [ 380.309046][ T8254] syz_tun: entered allmulticast mode [ 381.329493][ T8268] zram: Cannot change disksize for initialized device [ 382.099191][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 382.824983][ T25] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 382.842263][ T25] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 382.842308][ T25] usb 3-1: config 1 has no interface number 0 [ 382.842365][ T25] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 382.842396][ T25] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 382.842424][ T25] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.221540][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.221598][ T25] usb 3-1: Product: syz [ 383.221633][ T25] usb 3-1: Manufacturer: syz [ 383.221650][ T25] usb 3-1: SerialNumber: syz [ 383.255617][ T8260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.362733][ T8281] loop4: detected capacity change from 0 to 2048 [ 383.425343][ T8281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.511509][ T8260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.684966][ T8288] hub 5-0:1.0: USB hub found [ 383.685361][ T8288] hub 5-0:1.0: 1 port detected [ 383.901439][ T48] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 384.103361][ T8260] netlink: 76 bytes leftover after parsing attributes in process `syz.2.618'. [ 384.143040][ T8293] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 384.144358][ T8293] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 384.144411][ T8293] EXT4-fs (loop4): This should not happen!! Data will be lost [ 384.144411][ T8293] [ 384.144432][ T8293] EXT4-fs (loop4): Total free blocks count 0 [ 384.144508][ T8293] EXT4-fs (loop4): Free/Dirty block details [ 384.144578][ T8293] EXT4-fs (loop4): free_blocks=2415919104 [ 384.144653][ T8293] EXT4-fs (loop4): dirty_blocks=16 [ 384.144704][ T8293] EXT4-fs (loop4): Block reservation details [ 384.144777][ T8293] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 384.177027][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 384.663020][ T48] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 384.679156][ T48] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 384.679203][ T48] usb 1-1: config 155 has 0 interfaces, different from the descriptor's value: 1 [ 384.708539][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.708595][ T48] usb 1-1: Product: syz [ 384.708626][ T48] usb 1-1: Manufacturer: syz [ 384.708643][ T48] usb 1-1: SerialNumber: syz [ 384.747191][ T8260] netlink: 88 bytes leftover after parsing attributes in process `syz.2.618'. [ 384.767071][ T25] usb 3-1: Incompatible driver and firmware versions [ 384.795687][ T25] usb 3-1: USB disconnect, device number 17 [ 385.419573][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.711745][ T5745] usb 1-1: USB disconnect, device number 19 [ 396.524669][ T8386] No such timeout policy "syz1" [ 398.652029][ T8401] fuse: Unknown parameter 'mnt' [ 402.937284][ T30] audit: type=1800 audit(1787125980.724:17): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.666" name="ipv4_address" dev="configfs" ino=17061 res=0 errno=0 [ 404.708842][ T8459] syz_tun: entered allmulticast mode [ 404.843831][ T8450] syz_tun: left allmulticast mode [ 409.541810][ T1226] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 409.692835][ T1226] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 409.703998][ T1226] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 409.704051][ T1226] usb 1-1: config 1 has no interface number 0 [ 409.704103][ T1226] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 409.704132][ T1226] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 409.704159][ T1226] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.820292][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.820342][ T1226] usb 1-1: Product: syz [ 409.820357][ T1226] usb 1-1: Manufacturer: syz [ 409.820369][ T1226] usb 1-1: SerialNumber: syz [ 409.846984][ T8510] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.620834][ T8507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.115123][ T8507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.685'. [ 411.142065][ T8507] netlink: 88 bytes leftover after parsing attributes in process `syz.0.685'. [ 411.162335][ T1226] usb 1-1: Incompatible driver and firmware versions [ 411.174481][ T1226] usb 1-1: USB disconnect, device number 20 [ 413.693903][ T8562] syz_tun: entered allmulticast mode [ 414.147017][ T8554] syz_tun: left allmulticast mode [ 415.261531][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 415.261585][ T8576] netlink: 101 bytes leftover after parsing attributes in process `syz.0.707'. [ 415.485650][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 416.111214][ T990] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 416.272682][ T990] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.283601][ T8590] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 416.283834][ T990] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.283875][ T990] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 416.283908][ T990] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.283954][ T990] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.320845][ T990] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.320876][ T990] usb 3-1: Product: syz [ 416.320889][ T990] usb 3-1: Manufacturer: syz [ 416.506735][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 416.506780][ T8596] netlink: 101 bytes leftover after parsing attributes in process `syz.4.714'. [ 416.581286][ T990] cdc_wdm 3-1:1.0: skipping garbage [ 416.586623][ T990] cdc_wdm 3-1:1.0: skipping garbage [ 416.592090][ T990] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 417.006636][ T25] usb 3-1: USB disconnect, device number 18 [ 419.594668][ T8626] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 419.621216][ T8627] fuse: Bad value for 'fd' [ 419.771194][ T5828] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 420.471720][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 420.503769][ T5828] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 420.557638][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 420.557738][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 420.659470][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.668375][ T5828] usb 1-1: Product: 샺 [ 420.668454][ T5828] usb 1-1: Manufacturer: ␁ [ 420.678154][ T5828] usb 1-1: SerialNumber: 位ቩ忇ᱻㅵ䢒鵹臛‥㡳⿀㠯⦫튿᪭屡㩲仡䀫ⴲ嬾敫걮㿔厶༔쿙쁯ﾒ꼉궯缐郋솞ࢭæ攒峴妌䍜篡㒝蜀戶麽㺡칶ꗩ⍑졐뱁ﮉ嵘୔爭빵렬᠒䬌꼸䍜襏撌䛑⃰鑾䰾鲫旚㞉赜虠꜊볁버奺缌秠燊젞䙣Ⓘ㜵庍䋚靈㮧检굁묱婌쏝䄭㸭ཚ闂櫠쐬൸炉溵掙孞 [ 421.537529][ T8637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.397407][ T5828] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.397741][ T5828] usb 1-1: MIDIStreaming interface descriptor not found [ 422.515024][ T5828] usb 1-1: USB disconnect, device number 21 [ 422.780985][ T8653] warning: `syz.2.731' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 423.556820][ T8657] udevd[8657]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.851109][ T8663] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 426.556061][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 426.556110][ T8688] netlink: 101 bytes leftover after parsing attributes in process `syz.2.742'. [ 428.331454][ T8700] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 429.374435][ T5828] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 429.721014][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 429.727155][ T5828] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.744321][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.744399][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.744430][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.744453][ T5828] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 429.744486][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.894725][ T5828] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.894776][ T5828] usb 4-1: Manufacturer: syz [ 429.950177][ T8726] No such timeout policy "syz1" [ 429.959997][ T5828] usb 4-1: config 0 descriptor?? [ 430.782834][ T5828] rc_core: IR keymap rc-hauppauge not found [ 430.782883][ T5828] Registered IR keymap rc-empty [ 430.783077][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.900191][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 430.969187][ T5828] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 431.673095][ T5828] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 431.821418][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.565773][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.581063][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.594007][ T8742] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 432.601195][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.621074][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.645505][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.667586][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.681049][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.701113][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.788008][ T8750] 9pnet_virtio: no channels available for device 127.0.0.1 [ 432.838397][ T5828] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 432.878336][ T5828] mceusb 4-1:0.0: Registered ￿ with mce emulator interface version 1 [ 432.886848][ T5828] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.901227][ T5828] usb 4-1: USB disconnect, device number 10 [ 432.936789][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'. [ 432.936841][ T8755] netlink: 101 bytes leftover after parsing attributes in process `syz.4.763'. [ 433.971619][ T8760] syz_tun: entered allmulticast mode [ 434.412159][ T8753] syz_tun: left allmulticast mode [ 435.488743][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 436.082961][ T8782] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 438.876055][ T8801] 9pnet_virtio: no channels available for device 127.0.0.1 [ 439.351146][ T1226] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 439.361276][ T5828] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 439.511058][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 439.513270][ T5828] usb 5-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 439.514564][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 439.514594][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 439.517710][ T5828] usb 5-1: string descriptor 0 read error: -22 [ 439.517859][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.530196][ T5828] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.530252][ T5828] usb 5-1: MIDIStreaming interface descriptor not found [ 439.591815][ T1226] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 439.602383][ T1226] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 439.610513][ T1226] usb 3-1: config 1 has no interface number 0 [ 439.617184][ T1226] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 439.617252][ T1226] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 439.617290][ T1226] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.652654][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.652700][ T1226] usb 3-1: Product: syz [ 439.652736][ T1226] usb 3-1: Manufacturer: syz [ 439.652751][ T1226] usb 3-1: SerialNumber: syz [ 439.682476][ T8805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.898225][ T8805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.160127][ T8805] netlink: 76 bytes leftover after parsing attributes in process `syz.2.775'. [ 440.595316][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.595408][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.619734][ T8828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.644582][ T8805] netlink: 88 bytes leftover after parsing attributes in process `syz.2.775'. [ 440.710847][ T1226] usb 3-1: Incompatible driver and firmware versions [ 440.738297][ T1226] usb 3-1: USB disconnect, device number 19 [ 440.873037][ T8837] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 442.355220][ T5828] usb 5-1: USB disconnect, device number 9 [ 444.003597][ T8872] zram: Cannot change disksize for initialized device [ 445.473392][ T8882] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 446.040445][ T8890] block nbd1: NBD_DISCONNECT [ 446.251060][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 446.718765][ T8892] hub 5-0:1.0: USB hub found [ 446.720092][ T8892] hub 5-0:1.0: 1 port detected [ 448.059037][ T5828] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 448.221072][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 448.232146][ T5828] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 448.243179][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 448.243234][ T5828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 448.269544][ T5828] usb 3-1: string descriptor 0 read error: -22 [ 448.276637][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.313596][ T5828] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.320819][ T5828] usb 3-1: MIDIStreaming interface descriptor not found [ 448.800739][ T8914] zram: Cannot change disksize for initialized device [ 449.185240][ T8918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.378134][ T4933] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 449.379619][ T4933] Bluetooth: hci2: command 0x0401 tx timeout [ 449.379884][ T8917] syz_tun: entered allmulticast mode [ 449.408058][ T8915] syz_tun: left allmulticast mode [ 449.425096][ T8921] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 451.871508][ T10] usb 3-1: USB disconnect, device number 20 [ 452.053978][ T8942] block nbd3: NBD_DISCONNECT [ 452.097314][ T8939] No such timeout policy "syz1" [ 453.485589][ T8969] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 454.931203][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 455.788932][ T8980] ------------[ cut here ]------------ [ 455.788969][ T8980] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 455.789019][ T8980] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.3.818/8980 [ 455.814805][ T8980] Modules linked in: [ 455.818760][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.3.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.829688][ T8980] Tainted: [L]=SOFTLOCKUP [ 455.834073][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.845154][ T8980] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 455.851486][ T8980] Code: 63 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 455.871169][ T8980] RSP: 0018:ffffc900039ffcf0 EFLAGS: 00010206 [ 455.877290][ T8980] RAX: 1ffffd1ffff813dd RBX: 0000607edaf0de00 RCX: dffffc0000000000 [ 455.885336][ T8980] RDX: 0000000000000001 RSI: ffffffff8e45c43e RDI: 00000000ffffffff [ 455.893692][ T8980] RBP: ffffe8ffffc09e00 R08: ffffffff9079847f R09: 1ffffffff20f308f [ 455.902021][ T8980] R10: dffffc0000000000 R11: fffffbfff20f3090 R12: ffff88802685d800 [ 455.910021][ T8980] R13: 0000000000000000 R14: ffffe8ffffc09ee8 R15: 1ffffffff1ce5dde [ 455.918076][ T8980] FS: 00007f77887d56c0(0000) GS:ffff888124cfc000(0000) knlGS:0000000000000000 [ 455.927149][ T8980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.933973][ T8980] CR2: 00007f2c48405000 CR3: 000000007f170000 CR4: 00000000003526f0 [ 455.942097][ T8980] Call Trace: [ 455.945473][ T8980] [ 455.948500][ T8980] blk_mq_free_tag_set+0x617/0x780 [ 455.953801][ T8980] loop_remove+0x4e/0xc0 [ 455.958179][ T8980] loop_control_ioctl+0x4a6/0x5a0 [ 455.963253][ T8980] ? __pfx_loop_control_ioctl+0x10/0x10 [ 455.968826][ T8980] ? __fget_files+0x2a/0x420 [ 455.973513][ T8980] ? bpf_lsm_file_ioctl+0x9/0x20 [ 455.978493][ T8980] ? __pfx_loop_control_ioctl+0x10/0x10 [ 455.984101][ T8980] __se_sys_ioctl+0xfc/0x170 [ 455.988736][ T8980] do_syscall_64+0x166/0x520 [ 455.993529][ T8980] ? trace_irq_disable+0x3b/0x140 [ 455.998593][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.004728][ T8980] ? clear_bhb_loop+0x70/0xc0 [ 456.009434][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.015508][ T8980] RIP: 0033:0x7f778a59e0d9 [ 456.019949][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.039824][ T8980] RSP: 002b:00007f77887d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.048315][ T8980] RAX: ffffffffffffffda RBX: 00007f778a826180 RCX: 00007f778a59e0d9 [ 456.056336][ T8980] RDX: 0000000000000008 RSI: 0000000000004c81 RDI: 0000000000000007 [ 456.064398][ T8980] RBP: 00007f778a635024 R08: 0000000000000000 R09: 0000000000000000 [ 456.072424][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.080416][ T8980] R13: 00007f778a826218 R14: 00007f778a826180 R15: 00007ffc88eb25c8 [ 456.088542][ T8980] [ 456.091742][ T8980] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 456.099037][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.3.818 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.109811][ T8980] Tainted: [L]=SOFTLOCKUP [ 456.114140][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.124206][ T8980] Call Trace: [ 456.127500][ T8980] [ 456.130444][ T8980] vpanic+0x56d/0xa60 [ 456.134561][ T8980] ? __pfx__printk+0x10/0x10 [ 456.139170][ T8980] ? __pfx_vpanic+0x10/0x10 [ 456.143693][ T8980] ? is_bpf_text_address+0x292/0x2b0 [ 456.149086][ T8980] ? is_bpf_text_address+0x26/0x2b0 [ 456.154311][ T8980] panic+0xc5/0xd0 [ 456.158056][ T8980] ? __pfx_panic+0x10/0x10 [ 456.162501][ T8980] __warn+0x315/0x4c0 [ 456.166498][ T8980] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 456.171803][ T8980] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 456.177104][ T8980] __report_bug+0x276/0x570 [ 456.181723][ T8980] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 456.187027][ T8980] ? __pfx___report_bug+0x10/0x10 [ 456.192154][ T8980] ? irqentry_exit+0x218/0x910 [ 456.197008][ T8980] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 456.202308][ T8980] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 456.207614][ T8980] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 456.212941][ T8980] report_bug+0x16b/0x220 [ 456.217297][ T8980] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 456.222599][ T8980] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 456.227903][ T8980] handle_bug+0x9c/0x200 [ 456.232160][ T8980] exc_invalid_op+0x1a/0x50 [ 456.236674][ T8980] asm_exc_invalid_op+0x1a/0x20 [ 456.241553][ T8980] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 456.247465][ T8980] Code: 63 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 456.267084][ T8980] RSP: 0018:ffffc900039ffcf0 EFLAGS: 00010206 [ 456.273175][ T8980] RAX: 1ffffd1ffff813dd RBX: 0000607edaf0de00 RCX: dffffc0000000000 [ 456.281167][ T8980] RDX: 0000000000000001 RSI: ffffffff8e45c43e RDI: 00000000ffffffff [ 456.289159][ T8980] RBP: ffffe8ffffc09e00 R08: ffffffff9079847f R09: 1ffffffff20f308f [ 456.297148][ T8980] R10: dffffc0000000000 R11: fffffbfff20f3090 R12: ffff88802685d800 [ 456.305133][ T8980] R13: 0000000000000000 R14: ffffe8ffffc09ee8 R15: 1ffffffff1ce5dde [ 456.313170][ T8980] blk_mq_free_tag_set+0x617/0x780 [ 456.318324][ T8980] loop_remove+0x4e/0xc0 [ 456.322592][ T8980] loop_control_ioctl+0x4a6/0x5a0 [ 456.327641][ T8980] ? __pfx_loop_control_ioctl+0x10/0x10 [ 456.333195][ T8980] ? __fget_files+0x2a/0x420 [ 456.337805][ T8980] ? bpf_lsm_file_ioctl+0x9/0x20 [ 456.342763][ T8980] ? __pfx_loop_control_ioctl+0x10/0x10 [ 456.348340][ T8980] __se_sys_ioctl+0xfc/0x170 [ 456.353134][ T8980] do_syscall_64+0x166/0x520 [ 456.357751][ T8980] ? trace_irq_disable+0x3b/0x140 [ 456.362795][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.368897][ T8980] ? clear_bhb_loop+0x70/0xc0 [ 456.373596][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.379588][ T8980] RIP: 0033:0x7f778a59e0d9 [ 456.384103][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.403723][ T8980] RSP: 002b:00007f77887d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.412165][ T8980] RAX: ffffffffffffffda RBX: 00007f778a826180 RCX: 00007f778a59e0d9 [ 456.420329][ T8980] RDX: 0000000000000008 RSI: 0000000000004c81 RDI: 0000000000000007 [ 456.428332][ T8980] RBP: 00007f778a635024 R08: 0000000000000000 R09: 0000000000000000 [ 456.436340][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.444333][ T8980] R13: 00007f778a826218 R14: 00007f778a826180 R15: 00007ffc88eb25c8 [ 456.452351][ T8980] [ 456.455744][ T8980] Kernel Offset: disabled [ 456.460089][ T8980] Rebooting in 86400 seconds..