last executing test programs: 10m26.514898039s ago: executing program 1 (id=157): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) syz_open_dev$dri(0x0, 0xd21, 0x0) socket$inet6(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 10m22.91303455s ago: executing program 1 (id=169): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 10m15.73468143s ago: executing program 1 (id=184): r0 = open(0x0, 0x46342, 0x0) ftruncate(r0, 0x2008002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000500), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000003980)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 10m15.002452859s ago: executing program 1 (id=188): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f0000000280)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c636f6465706167653d63703835302c63726561746f723d40ff7f5c2c706172743d3078303030303030303030303030303030332c706172743d3078303030303030303030303030303030342c00e48ab395178be648515dde7dbbd8402d28d36cb164d46745a4cf24ce5284b400e3a8d9c404132f55024df3f9f2b9508b765f1578fb6a141c302cf307330a"], 0x11, 0x2e1, &(0x7f0000003280)="$eJzs3b1u014Yx/HfcdI2/3+r1qVFSIyFSrAgXhbEEoQycQVMCGhSqSIqAop4mQpiQgh2NgZugYtgAXEDMDFxAWUyOsdxnDjHcRqlcVu+HymR45xjP347fp5IrQXgn3Wj8ePTlV/2ZaSKKtKba1IgqSZVJZ3UqdqT7Z2tnXarOWxBFdfDvozinmagzcZ2y9fV9nM9OkL7qaqF3nmx+fE2ErmiKLr+s+wgUDp39XsE0pxm08+1KcY0ipdj9tudcByHzsDY2c/saU/PtDitcAAAh1Pn/h/EmbwWOvl7EEjrndu+yw8O2/1/XHtlB3DgoqHf9tz/XaYQGXt8l9xXab3nSjj7fZBUiaOseSbz2aWPQSbBNEVVpYsliJa22q0LGw/azUCvVO/oabbq3pvxqZsoiHbNU5sOMcK2G39G6erVYGZzq926HMf/VFJf/CtjrnFs5ov5Zm6bUB/U7OZ/1cjYw+SOVJg5UnH8F/OX6LYytK3UGTbq9XrQ12TZreS0ekuJoq2s+SsSJWfUcibJDYvidL1OZHrFW3epoNdKX6//kmOaLCOn12pfL7s1m8nZnL++g2bemVtmTb/1WY2e/D+w8a1r6JWZXjVmPb4VuD0eb8+sf3VVt8zQNu8bFwYvl+5enMsL/U92TLv5MRo+zCHPW93TVS0+fv7ifqXdbj2yE3c9Ew8XunNmXkveNiVPaDedM6fIGWicnHwHH49RMuf8RJdsx4/Cxvai3M+Sp7dbjtNE4+uR3GN2iB65cYljE6YmPehlR4KS2LzLxPVfWq9U42TPvoXePD37Q4AnB1ZaAUU2x+5WcGnfKM7IJf2/rwpuPr+CG6y5BmpGV3OdOSed9a/Rt+ywE+cxYRr6rjv8/g8AAAAAAAAAAAAAAAAAAHDUTONvD5J1FfxLCgAAAAAAAAAAAAAAAAAAAAAAkKP7/F8lz//VaM//zT53ZZLP/32/Lf/zfwFM0t8AAAD//walenI=") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x1261, 0x0) 10m14.316100395s ago: executing program 1 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 10m13.798565942s ago: executing program 1 (id=199): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000fe000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x8a}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2, 0xfaffff}) 10m12.572984918s ago: executing program 32 (id=199): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000fe000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x8a}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2, 0xfaffff}) 9m19.566034356s ago: executing program 4 (id=342): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x101800, 0x81) 9m18.847194845s ago: executing program 4 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 9m18.1750315s ago: executing program 4 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) unshare(0x62000000) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 9m16.140558928s ago: executing program 4 (id=352): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) vmsplice(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x6) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9m15.7085944s ago: executing program 4 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x10}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x800, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m15.059098445s ago: executing program 4 (id=356): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3, 0x4, 0x4, 0xfffffc01}, 0x50) 8m59.905670858s ago: executing program 33 (id=356): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x3, 0x4, 0x4, 0xfffffc01}, 0x50) 4.458534288s ago: executing program 6 (id=2961): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x10101d, 0x0) mount(0x0, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x80002, 0x0) syz_clone(0xd0a4000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) 3.653050829s ago: executing program 3 (id=2968): syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, 0x0) 3.556361565s ago: executing program 5 (id=2969): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x3, 0x801, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.540557626s ago: executing program 2 (id=2970): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="fd", 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xd2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="47ed81affa5ac5ae9296a47753b907a6f37210bc7d6eb4357e6a4b9fb342ad583c9b390ff71191df858d088e10cd39a0f168afa8010e61edf1fd", 0x3a, 0x10008095, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='umask=00000000000000000000010,nls=maciceland,umask=00000000000000000000003,umask=00000000000000000004000,part=0x0000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030dce9f10ec530303030303030303030303030303030"], 0xff, 0x5de, &(0x7f0000000d40)="$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") 3.475700219s ago: executing program 3 (id=2971): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 3.203834703s ago: executing program 3 (id=2972): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.090519918s ago: executing program 6 (id=2973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) close(r0) 2.526366618s ago: executing program 5 (id=2974): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416070807034d2f87e5890c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x154, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x50) 2.379157576s ago: executing program 2 (id=2975): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0x5}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, r0, 0x40099d}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0x20) 2.330758229s ago: executing program 6 (id=2976): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xf) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.279346131s ago: executing program 5 (id=2977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9b, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 2.206247505s ago: executing program 3 (id=2978): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 2.202110215s ago: executing program 0 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, 0x0, 0x0) 2.083293831s ago: executing program 2 (id=2980): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@remote, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0x100, 0x0, 0xffffffffffffffff, 0x6, 0x6, 0x400800000000001}, {0x9, 0xfffffffffffffffe, 0x1, 0x9}, 0xffff, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@remote, 0x210000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x34ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 2.010456205s ago: executing program 5 (id=2981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdfbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.973790867s ago: executing program 2 (id=2982): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 1.91118287s ago: executing program 3 (id=2983): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) 1.884291662s ago: executing program 0 (id=2984): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) 1.759604998s ago: executing program 2 (id=2985): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="fd", 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xd2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="47ed81affa5ac5ae9296a47753b907a6f37210bc7d6eb4357e6a4b9fb342ad583c9b390ff71191df858d088e10cd39a0f168afa8010e61edf1fd", 0x3a, 0x10008095, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='umask=00000000000000000000010,nls=maciceland,umask=00000000000000000000003,umask=00000000000000000004000,part=0x0000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030dce9f10ec530303030303030303030303030303030"], 0xff, 0x5de, &(0x7f0000000d40)="$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") 1.431328296s ago: executing program 0 (id=2986): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, 0x0) 1.382579588s ago: executing program 6 (id=2987): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137000059aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416070807034d2f87e5890c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x154, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x50) 822.254497ms ago: executing program 5 (id=2988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) close(r0) 767.24807ms ago: executing program 3 (id=2989): syz_usb_ep_write(0xffffffffffffffff, 0xf, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd9, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559000905"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x142, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f21"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/238, 0xee) syz_usb_ep_write(r4, 0x81, 0x0, &(0x7f00000002c0)) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x0, 0x1a, 0x4, 0x8, "f467df4f75efc50635b76ae00382441152e60a08c1548ee5e3edab8d45cbc708"}) 703.537623ms ago: executing program 0 (id=2990): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0x5}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, r1, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0x20) 554.150641ms ago: executing program 0 (id=2991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 500.651224ms ago: executing program 6 (id=2992): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000280)="66b9030100c066b87a00000066ba000000000f300f7961f066b97508000066b80162000066ba000000000f30ba2100b0f7ee670f01c366b80500000066b9e10000000f01c1baf80c66b88c9d4e8066efbafc0c66edba2000ecbad004b8399aef2e0fed08", 0x64}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 475.373165ms ago: executing program 2 (id=2993): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)={0x40, 0x31, 0xb, {0xb, 0xd, "5d768d97c37e80aa81"}}, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x32}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 474.047355ms ago: executing program 5 (id=2994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000734000/0x1000)=nil, 0x1000, 0x3000007, 0x11, r2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 280.902846ms ago: executing program 0 (id=2995): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a", 0x49}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e0918c5d3fa469152f3ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4235", 0x7d}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9", 0x8e}, {0x0}], 0x3}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 0s ago: executing program 6 (id=2996): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000440)={[{@oldalloc}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@usrjquota}, {@resuid}]}, 0x1, 0xbcc, &(0x7f00000007c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ed capacity change from 0 to 1024 [ 642.802098][T12111] hfsplus: unable to parse mount options [ 642.909324][ T8703] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 642.937106][ T8703] em28xx 7-1:0.89: analog set to bulk mode. [ 642.971911][ T8703] em28xx 7-1:0.89: Registering V4L2 extension [ 643.070883][T12069] team0: Port device team_slave_0 added [ 643.220388][T12069] team0: Port device team_slave_1 added [ 643.265911][ T8703] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 643.323844][T12131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2180'. [ 643.392508][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.418615][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.491747][ T8703] em28xx 7-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 643.496000][ T4312] usb 7-1: USB disconnect, device number 65 [ 643.519446][ T4312] em28xx 7-1:0.89: Disconnecting em28xx [ 643.523903][ T8703] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 643.549776][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.578513][ T8703] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 643.586823][ T8703] em28xx 7-1:0.89: No AC97 audio processor [ 643.621957][ T8703] usb 7-1: Decoder not found [ 643.626756][ T8703] em28xx 7-1:0.89: failed to create media graph [ 643.644612][ T8703] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 643.670097][ T8703] em28xx 7-1:0.89: Registering snapshot button... [ 643.687773][ T8703] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input42 [ 643.768978][ T8703] em28xx 7-1:0.89: Remote control support is not available for this card. [ 643.808914][ T4312] em28xx 7-1:0.89: Closing input extension [ 643.819024][ T4312] em28xx 7-1:0.89: Deregistering snapshot button [ 643.911475][ T4312] em28xx 7-1:0.89: Freeing device [ 643.926000][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.938973][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 643.955462][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.989010][T12149] program syz.0.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.298825][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.816868][T12150] loop3: detected capacity change from 0 to 1024 [ 644.836739][T12150] hfsplus: unable to parse mount options [ 645.001989][T12069] device hsr_slave_0 entered promiscuous mode [ 645.044176][T12069] device hsr_slave_1 entered promiscuous mode [ 645.129751][T12069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.137856][T12069] Cannot create hsr debugfs directory [ 645.198597][ T8703] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 645.358837][T12171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2193'. [ 645.408466][ T8703] usb 6-1: Using ep0 maxpacket: 32 [ 645.416059][ T8703] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 645.448605][ T8703] usb 6-1: config 0 has no interface number 0 [ 645.454885][ T8703] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 645.499848][ T8703] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 645.520489][ T8703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.538481][ T8703] usb 6-1: Product: syz [ 645.546394][ T8703] usb 6-1: Manufacturer: syz [ 645.558677][ T8703] usb 6-1: SerialNumber: syz [ 645.574830][ T8703] usb 6-1: config 0 descriptor?? [ 645.609345][T12164] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 645.795811][ T7309] device hsr_slave_0 left promiscuous mode [ 645.804181][ T7309] device hsr_slave_1 left promiscuous mode [ 645.825924][T12164] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 645.835981][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.848546][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.879515][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.887015][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.926134][ T7309] device bridge_slave_1 left promiscuous mode [ 645.934429][T12184] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2199'. [ 645.944036][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.954183][ T7309] device bridge_slave_0 left promiscuous mode [ 645.967500][T12184] loop6: detected capacity change from 0 to 512 [ 645.974253][ T27] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 645.982216][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.014115][T12184] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 646.026332][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 646.065034][T12184] EXT4-fs (loop6): 1 truncate cleaned up [ 646.078940][ T7309] device veth1_macvtap left promiscuous mode [ 646.085235][ T7309] device veth0_macvtap left promiscuous mode [ 646.089824][T12184] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 646.091606][ T7309] device veth1_vlan left promiscuous mode [ 646.106066][ T7309] device veth0_vlan left promiscuous mode [ 646.186058][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 646.193821][ T27] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 646.211088][ T27] usb 4-1: config 0 has no interface number 0 [ 646.238426][ T27] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 646.268377][ T27] usb 4-1: config 0 interface 89 has no altsetting 0 [ 646.278061][ T8703] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 646.281212][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 646.311002][ T8703] asix: probe of 6-1:0.188 failed with error -61 [ 646.318506][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.330441][ T27] usb 4-1: Product: syz [ 646.365826][ T27] usb 4-1: Manufacturer: syz [ 646.378425][ T27] usb 4-1: SerialNumber: syz [ 646.398503][ T27] usb 4-1: config 0 descriptor?? [ 646.406807][ T27] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 646.428494][ T27] em28xx 4-1:0.89: Video interface 89 found: [ 646.983116][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 647.021132][ T27] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 647.058561][ T4273] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 647.059247][ T4282] Bluetooth: hci6: command 0x1003 tx timeout [ 647.433507][T12209] loop0: detected capacity change from 0 to 512 [ 647.488932][T12209] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2202: inode has both inline data and extents flags [ 647.516671][T12209] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2202: couldn't read orphan inode 15 (err -117) [ 647.542417][T12209] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 647.659175][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 647.950807][ T128] usb 6-1: USB disconnect, device number 60 [ 648.053227][ T27] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 648.083475][ T27] em28xx 4-1:0.89: board has no eeprom [ 648.113995][T12200] Bluetooth: hci0: command 0x0419 tx timeout [ 648.306694][ T7309] team0 (unregistering): Port device team_slave_1 removed [ 648.378468][ T27] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 648.404283][ T27] em28xx 4-1:0.89: analog set to bulk mode. [ 648.413582][ T22] em28xx 4-1:0.89: Registering V4L2 extension [ 648.423951][ T27] usb 4-1: USB disconnect, device number 86 [ 648.431140][ T27] em28xx 4-1:0.89: Disconnecting em28xx [ 648.475802][ T7309] team0 (unregistering): Port device team_slave_0 removed [ 648.594236][ T7309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.604067][ T22] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 648.614174][ T22] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 648.621551][ T22] em28xx 4-1:0.89: No AC97 audio processor [ 648.629828][ T22] usb 4-1: Decoder not found [ 648.634561][ T22] em28xx 4-1:0.89: failed to create media graph [ 648.641721][ T22] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 648.652217][ T22] em28xx 4-1:0.89: Registering snapshot button... [ 648.677546][ T22] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input43 [ 648.691718][ T22] em28xx 4-1:0.89: Remote control support is not available for this card. [ 648.706072][ T27] em28xx 4-1:0.89: Closing input extension [ 648.712842][ T27] em28xx 4-1:0.89: Deregistering snapshot button [ 648.739966][ T27] em28xx 4-1:0.89: Freeing device [ 648.814378][ T7309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.019768][T12229] loop0: detected capacity change from 0 to 32768 [ 649.038138][T12229] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 649.480532][ T8093] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 649.505084][T12239] loop3: detected capacity change from 0 to 1024 [ 649.534891][T12239] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 649.579827][T12239] EXT4-fs (loop3): group descriptors corrupted! [ 649.855038][T12243] loop3: detected capacity change from 0 to 512 [ 649.906234][T12243] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2212: inode has both inline data and extents flags [ 649.916744][T12200] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 649.930107][T12243] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2212: couldn't read orphan inode 15 (err -117) [ 649.954080][T12243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 650.094713][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 650.208520][T12249] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2213'. [ 650.356146][ T7309] bond0 (unregistering): Released all slaves [ 650.503628][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2204'. [ 650.598458][ T27] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 650.808478][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 650.818784][ T27] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 650.848045][ T27] usb 4-1: config 0 has no interface number 0 [ 650.864775][ T27] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 650.893627][T12266] device syzkaller0 entered promiscuous mode [ 650.903731][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 650.920517][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.938469][ T27] usb 4-1: Product: syz [ 650.953105][ T27] usb 4-1: Manufacturer: syz [ 650.963213][ T27] usb 4-1: SerialNumber: syz [ 650.976957][ T27] usb 4-1: config 0 descriptor?? [ 650.991168][T12251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.236819][T12251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.534836][T12279] loop0: detected capacity change from 0 to 32768 [ 651.543747][T12279] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 651.593804][ T8093] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 651.665938][ T27] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 651.719681][ T27] asix: probe of 4-1:0.188 failed with error -61 [ 651.999332][T12285] loop6: detected capacity change from 0 to 512 [ 652.064489][T12285] EXT4-fs (loop6): 1 truncate cleaned up [ 652.109261][T12285] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 652.301824][T12291] loop0: detected capacity change from 0 to 512 [ 652.391631][T12291] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.2222: inode has both inline data and extents flags [ 652.408982][T12294] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2223'. [ 652.448762][T12291] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2222: couldn't read orphan inode 15 (err -117) [ 652.504039][T12291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 653.319483][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 653.412067][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 653.451639][T12069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 653.480463][ T5460] usb 4-1: USB disconnect, device number 87 [ 653.496800][T12069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 653.559107][T12069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 653.599509][T12307] device syzkaller0 entered promiscuous mode [ 653.617703][T12069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.976679][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.049765][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.070187][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.097234][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.146517][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.161559][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.261045][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 654.289188][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.296546][ T7309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.329791][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.440146][T12322] loop0: detected capacity change from 0 to 32768 [ 654.454259][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.462846][T12322] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 654.517498][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.622038][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.629392][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.671651][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.699042][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.309225][ T7392] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 655.388483][ T4271] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 655.398252][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.442468][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.473761][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.493842][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.520023][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.537318][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.566281][T12069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.581896][ T4271] usb 4-1: device descriptor read/64, error -71 [ 655.617893][T12069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.667380][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.686397][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.729191][ T6019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.759327][T12358] Cannot find del_set index 4 as target [ 655.868624][ T4271] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 655.991309][T12352] device syzkaller0 entered promiscuous mode [ 656.053667][ T4271] usb 4-1: device descriptor read/64, error -71 [ 656.178869][ T4271] usb usb4-port1: attempt power cycle [ 656.414486][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'. [ 656.484074][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2243'. [ 657.430630][ T4271] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 657.499189][ T4271] usb 4-1: device descriptor read/8, error -71 [ 657.593189][ T7309] Bluetooth: hci6: Frame reassembly failed (-84) [ 657.614211][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.642334][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.678843][T12386] device syzkaller0 entered promiscuous mode [ 657.748657][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.768580][ T4271] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 657.810654][ T4271] usb 4-1: device descriptor read/8, error -71 [ 657.900931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.920354][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.929103][ T4271] usb usb4-port1: unable to enumerate USB device [ 657.983558][T12069] device veth0_vlan entered promiscuous mode [ 657.999468][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 658.014947][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 658.034218][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 658.047937][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 658.084464][T12069] device veth1_vlan entered promiscuous mode [ 658.185417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 658.194480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 658.215246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 658.245911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 658.281828][T12069] device veth0_macvtap entered promiscuous mode [ 658.321997][T12069] device veth1_macvtap entered promiscuous mode [ 658.344115][T12403] loop3: detected capacity change from 0 to 512 [ 658.395907][T12403] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2250: inode has both inline data and extents flags [ 658.404728][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.429494][T12403] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2250: couldn't read orphan inode 15 (err -117) [ 658.452010][T12403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 658.479233][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.539489][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.564951][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.678419][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.760257][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.807656][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.837647][T12418] loop6: detected capacity change from 0 to 256 [ 658.838972][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.846237][T12418] FAT-fs (loop6): bogus number of FAT sectors [ 658.860455][T12418] FAT-fs (loop6): Can't find a valid FAT filesystem [ 658.927583][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 658.948627][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.981680][ T7392] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 659.006472][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 659.034094][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 659.101309][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 659.132421][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 659.172624][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.216483][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.248456][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.296732][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2255'. [ 659.318391][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.333458][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.358047][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.369544][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.380955][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.392626][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.411610][T12412] device syzkaller0 entered promiscuous mode [ 659.597197][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 659.616665][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 659.628876][ T4283] Bluetooth: hci6: command 0x1003 tx timeout [ 659.637933][T12200] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 659.652803][T12069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.703689][T12069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.780469][T12069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.789371][T12069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.975523][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.995167][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.037346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 660.045441][ T4312] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 660.075404][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.096907][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.111173][ T7309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 660.218637][ T4312] usb 6-1: device descriptor read/64, error -71 [ 660.225070][ T4360] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 660.243701][ T5460] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 660.291345][ T5460] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 660.425981][ T4360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.457163][ T4360] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 660.498758][ T4312] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 660.517533][ T4360] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.547253][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.568487][ T4360] usb 7-1: Product: syz [ 660.572745][ T4360] usb 7-1: Manufacturer: syz [ 660.597710][ T4360] usb 7-1: SerialNumber: syz [ 660.688678][ T4312] usb 6-1: device descriptor read/64, error -71 [ 660.830552][ T4312] usb usb6-port1: attempt power cycle [ 660.866030][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.911262][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.953226][ T4360] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 660.971118][ T4360] usb 7-1: USB disconnect, device number 66 [ 661.248794][ T4312] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 661.289819][ T4312] usb 6-1: device descriptor read/8, error -71 [ 661.451308][T12494] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2269'. [ 661.586591][ T4360] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 661.594583][ T4312] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 661.639209][ T4312] usb 6-1: device descriptor read/8, error -71 [ 661.758825][ T4312] usb usb6-port1: unable to enumerate USB device [ 661.789949][ T4360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.841143][ T4360] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 661.877437][ T4360] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.896261][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.913728][ T4360] usb 7-1: Product: syz [ 661.923858][ T4360] usb 7-1: Manufacturer: syz [ 661.936028][ T4360] usb 7-1: SerialNumber: syz [ 662.560798][T12515] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 663.081815][T12524] device syzkaller0 entered promiscuous mode [ 663.258528][ T4312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 663.528586][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 663.548774][ T4312] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 663.608604][ T4312] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 663.649943][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.664681][ T4360] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 663.687870][T12531] device syzkaller0 entered promiscuous mode [ 663.714682][ T4360] usb 7-1: USB disconnect, device number 67 [ 663.723959][ T4312] usb 3-1: Product: syz [ 663.763288][ T4312] usb 3-1: Manufacturer: syz [ 663.781542][T12535] loop5: detected capacity change from 0 to 512 [ 663.787360][ T4312] usb 3-1: SerialNumber: syz [ 663.808867][ T4312] usb 3-1: config 0 descriptor?? [ 663.894445][T12535] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2282: inode has both inline data and extents flags [ 663.998772][T12535] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2282: couldn't read orphan inode 15 (err -117) [ 664.020213][T12535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 664.273493][ T5197] EXT4-fs (loop5): unmounting filesystem. [ 666.020730][T12568] loop0: detected capacity change from 0 to 1024 [ 666.088288][T12568] hfsplus: unable to parse mount options [ 666.140464][ T4421] usb 3-1: USB disconnect, device number 2 [ 666.178435][ T7392] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.720114][T12605] loop2: detected capacity change from 0 to 2048 [ 666.751995][ T8703] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 666.773270][T12605] loop2: p1 < > p3 [ 666.798619][T12605] loop2: p3 size 134217728 extends beyond EOD, truncated [ 666.938574][ T8703] usb 1-1: Using ep0 maxpacket: 32 [ 666.946650][ T8703] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 666.991338][ T8703] usb 1-1: config 0 has no interface number 0 [ 667.017885][ T8703] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 667.048559][ T4360] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 667.065359][ T8703] usb 1-1: config 0 interface 89 has no altsetting 0 [ 667.135989][ T8703] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 667.141124][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2306'. [ 667.168689][ T8703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.176770][ T8703] usb 1-1: Product: syz [ 667.179212][ T7392] udevd[7392]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 667.185878][ T8093] udevd[8093]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 667.228595][ T8703] usb 1-1: Manufacturer: syz [ 667.233292][ T8703] usb 1-1: SerialNumber: syz [ 667.250465][ T4360] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 667.270051][ T4360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.271109][ T8703] usb 1-1: config 0 descriptor?? [ 667.321181][ T4360] usb 7-1: config 0 descriptor?? [ 667.340595][ T8703] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 667.362702][ T4360] pwc: Samsung MPC-C10 USB webcam detected. [ 667.369638][ T8703] em28xx 1-1:0.89: Video interface 89 found: [ 667.532068][T12624] loop2: detected capacity change from 0 to 1024 [ 667.540393][T12624] hfsplus: unable to parse mount options [ 667.552964][ T4360] pwc: send_video_command error -71 [ 667.558288][ T4360] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 667.599604][ T4360] Philips webcam: probe of 7-1:0.0 failed with error -71 [ 667.633513][ T4360] usb 7-1: USB disconnect, device number 68 [ 667.643061][ T7392] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 667.973673][ T8703] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 668.148780][ T4360] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 668.505867][ T4360] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 668.516026][ T4360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.525948][ T4360] usb 7-1: config 0 descriptor?? [ 668.545291][ T4360] pwc: Samsung MPC-C10 USB webcam detected. [ 668.929376][T12646] loop2: detected capacity change from 0 to 32768 [ 668.952422][T12649] loop3: detected capacity change from 0 to 256 [ 668.977171][T12649] FAT-fs (loop3): bogus number of FAT sectors [ 668.977419][T12646] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 668.983423][T12649] FAT-fs (loop3): Can't find a valid FAT filesystem [ 669.219935][ T4360] pwc: recv_control_msg error -32 req 02 val 2b00 [ 669.229523][ T8703] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 669.239611][ T8703] em28xx 1-1:0.89: board has no eeprom [ 669.268550][ T4360] pwc: recv_control_msg error -32 req 02 val 2700 [ 669.399244][ T4360] pwc: recv_control_msg error -32 req 04 val 1700 [ 669.418423][ T4360] pwc: recv_control_msg error -32 req 02 val 2c00 [ 669.425702][ T4360] pwc: recv_control_msg error -32 req 04 val 1000 [ 669.436736][ T4360] pwc: recv_control_msg error -32 req 04 val 1300 [ 669.473664][ T4360] pwc: recv_control_msg error -32 req 04 val 1400 [ 669.499173][ T4360] pwc: recv_control_msg error -32 req 02 val 2000 [ 669.518433][ T8703] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 669.534923][ T8703] em28xx 1-1:0.89: analog set to bulk mode. [ 669.542319][ T4360] pwc: recv_control_msg error -32 req 02 val 2100 [ 669.568998][ T4360] pwc: recv_control_msg error -32 req 02 val 2200 [ 669.582160][ T8703] usb 1-1: USB disconnect, device number 79 [ 669.598524][ T4360] pwc: recv_control_msg error -71 req 06 val 0600 [ 669.614339][ T8703] em28xx 1-1:0.89: Disconnecting em28xx [ 669.625591][ T4360] pwc: recv_control_msg error -71 req 04 val 1500 [ 669.625672][ T4271] em28xx 1-1:0.89: Registering V4L2 extension [ 669.648442][ T4360] pwc: recv_control_msg error -71 req 02 val 2500 [ 669.663452][ T7392] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 669.706075][ T4360] pwc: recv_control_msg error -71 req 02 val 2400 [ 669.994195][T12657] loop5: detected capacity change from 0 to 32768 [ 670.002229][T12657] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 670.013622][ T4360] pwc: recv_control_msg error -71 req 02 val 2600 [ 670.021297][ T4360] pwc: recv_control_msg error -71 req 02 val 2900 [ 670.061442][ T4271] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 670.091011][ T4271] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 670.149041][ T4271] em28xx 1-1:0.89: No AC97 audio processor [ 670.203051][ T4360] pwc: recv_control_msg error -71 req 02 val 2800 [ 670.216744][ T4360] pwc: recv_control_msg error -71 req 04 val 1100 [ 670.238647][ T4271] usb 1-1: Decoder not found [ 670.247836][ T4360] pwc: recv_control_msg error -71 req 04 val 1200 [ 670.258526][ T4360] videodev: could not get a free minor [ 670.267123][ T4271] em28xx 1-1:0.89: failed to create media graph [ 670.268358][ T4360] pwc: Failed to register as video device (-23). [ 670.346281][ T4271] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 670.525501][ T4271] em28xx 1-1:0.89: Registering snapshot button... [ 670.548510][ T4271] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input44 [ 670.604246][ T4271] em28xx 1-1:0.89: Remote control support is not available for this card. [ 670.647703][ T8703] em28xx 1-1:0.89: Closing input extension [ 670.654176][ T8703] em28xx 1-1:0.89: Deregistering snapshot button [ 670.736057][ T8703] em28xx 1-1:0.89: Freeing device [ 670.850917][ T4371] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 670.879051][ T4360] Philips webcam: probe of 7-1:0.0 failed with error -23 [ 670.901761][ T4360] usb 7-1: USB disconnect, device number 69 [ 671.138825][T12676] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2321'. [ 671.176185][T12676] loop6: detected capacity change from 0 to 512 [ 671.325377][T12676] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 671.785337][T12676] EXT4-fs (loop6): 1 truncate cleaned up [ 671.798488][T12676] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 673.906061][T12697] loop3: detected capacity change from 0 to 2048 [ 673.941808][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 674.123841][T12697] Alternate GPT is invalid, using primary GPT. [ 674.145903][T12697] loop3: p1 p2 p3 [ 674.198626][T12697] loop3: partition table partially beyond EOD, truncated [ 674.247460][ T26] audit: type=1326 audit(1777022629.437:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.5.2332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7108b9cdd9 code=0x0 [ 674.339017][ T4360] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 674.590511][ T4360] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 674.620113][ T4360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.817738][ T4360] usb 1-1: config 0 descriptor?? [ 674.829605][ T4360] pwc: Samsung MPC-C10 USB webcam detected. [ 674.934426][T12725] loop2: detected capacity change from 0 to 256 [ 674.942774][T12725] FAT-fs (loop2): bogus number of FAT sectors [ 674.949542][T12725] FAT-fs (loop2): Can't find a valid FAT filesystem [ 674.990163][ T7392] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.030672][ T4360] pwc: send_video_command error -71 [ 675.035964][ T4360] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 675.068450][ T4360] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 675.095777][ T4360] usb 1-1: USB disconnect, device number 80 [ 675.598866][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'. [ 675.638669][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'. [ 675.642072][T12739] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2341'. [ 675.660298][ T4360] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 675.668721][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'. [ 675.677762][T12739] loop5: detected capacity change from 0 to 512 [ 675.706457][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'. [ 675.741123][T12739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 675.775717][T12739] EXT4-fs (loop5): 1 truncate cleaned up [ 675.802210][T12739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 675.881095][ T4360] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 675.925236][ T4360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.029142][ T4360] usb 1-1: config 0 descriptor?? [ 676.129417][ T4360] pwc: Samsung MPC-C10 USB webcam detected. [ 676.452954][ T4360] pwc: recv_control_msg error -32 req 02 val 2b00 [ 676.468231][ T4360] pwc: recv_control_msg error -32 req 02 val 2700 [ 676.486875][ T4360] pwc: recv_control_msg error -32 req 04 val 1700 [ 676.498631][ T4360] pwc: recv_control_msg error -32 req 02 val 2c00 [ 676.512814][ T4360] pwc: recv_control_msg error -32 req 04 val 1000 [ 676.524821][ T4360] pwc: recv_control_msg error -32 req 04 val 1300 [ 676.537904][ T4360] pwc: recv_control_msg error -32 req 04 val 1400 [ 676.549440][ T4360] pwc: recv_control_msg error -32 req 02 val 2000 [ 676.558848][ T4360] pwc: recv_control_msg error -32 req 02 val 2100 [ 676.569948][ T4360] pwc: recv_control_msg error -32 req 02 val 2200 [ 676.578867][ T4360] pwc: recv_control_msg error -71 req 06 val 0600 [ 676.586544][ T4360] pwc: recv_control_msg error -71 req 04 val 1500 [ 676.598399][ T4360] pwc: recv_control_msg error -71 req 02 val 2500 [ 676.607167][ T4360] pwc: recv_control_msg error -71 req 02 val 2400 [ 676.614716][ T4360] pwc: recv_control_msg error -71 req 02 val 2600 [ 676.623439][ T4360] pwc: recv_control_msg error -71 req 02 val 2900 [ 676.633066][ T4360] pwc: recv_control_msg error -71 req 02 val 2800 [ 676.659652][ T4360] pwc: recv_control_msg error -71 req 04 val 1100 [ 676.679464][ T4360] pwc: recv_control_msg error -71 req 04 val 1200 [ 676.703225][ T4360] pwc: Registered as video103. [ 676.728592][ T4360] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 676.782213][ T4360] usb 1-1: USB disconnect, device number 81 [ 677.582606][T12752] device syzkaller0 entered promiscuous mode [ 677.824704][ T5197] EXT4-fs (loop5): unmounting filesystem. [ 677.888509][ T4312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 678.080903][ T4312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.108600][ T4360] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 678.129125][ T4312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.148816][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.159678][ T4312] usb 3-1: Product: syz [ 678.163895][ T4312] usb 3-1: Manufacturer: syz [ 678.179894][ T4312] usb 3-1: SerialNumber: syz [ 678.220664][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 678.587484][T12775] loop5: detected capacity change from 0 to 32768 [ 678.599278][ T4360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.609620][ T4360] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 678.622806][T12775] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 678.636245][ T4312] usb 3-1: bad CDC descriptors [ 678.843334][ T4312] usb 3-1: USB disconnect, device number 3 [ 678.849980][ T4360] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.859210][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.869897][ T4360] usb 7-1: Product: syz [ 678.874246][ T4360] usb 7-1: Manufacturer: syz [ 679.221174][ T8093] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 679.435845][T12792] device syzkaller0 entered promiscuous mode [ 679.492987][ T4360] usb 7-1: SerialNumber: syz [ 679.568856][T12789] device syzkaller0 entered promiscuous mode [ 679.710571][T12763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.736637][T12763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.759258][ T4360] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 679.791110][ T4360] usb 7-1: USB disconnect, device number 70 [ 679.798383][ T4312] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 679.998419][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 680.007010][ T4312] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 680.035597][ T4312] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 680.070362][ T4312] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.093347][ T4312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.143417][ T4312] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 680.173031][ T4312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 680.185212][ T4312] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.203331][ T4312] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 680.216813][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.239508][ T4312] usbtmc: probe of 3-1:16.0 failed with error -22 [ 680.312031][T12811] sg_write: data in/out 404445/298 bytes for SCSI command 0x0-- guessing data in; [ 680.312031][T12811] program syz.3.2368 not setting count and/or reply_len properly [ 680.358563][ T4360] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 680.643510][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 680.654899][ T4360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.673916][T12820] loop0: detected capacity change from 0 to 256 [ 680.682996][T12820] FAT-fs (loop0): bogus number of FAT sectors [ 680.689288][T12820] FAT-fs (loop0): Can't find a valid FAT filesystem [ 680.704842][ T4360] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 680.737223][ T4360] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.748802][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.760194][ T7392] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 680.789353][ T4360] usb 7-1: Product: syz [ 680.800897][ T4360] usb 7-1: Manufacturer: syz [ 680.810102][ T4360] usb 7-1: SerialNumber: syz [ 681.047371][ T4360] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 681.078242][ T4360] usb 7-1: USB disconnect, device number 71 [ 681.104461][T12825] device syzkaller0 entered promiscuous mode [ 681.143384][T12827] device syzkaller0 entered promiscuous mode [ 681.660492][T12840] qrtr: Invalid version 0 [ 681.925821][ T128] usb 3-1: USB disconnect, device number 4 [ 682.415685][T12862] device syzkaller0 entered promiscuous mode [ 682.516703][T12864] loop3: detected capacity change from 0 to 256 [ 682.524548][T12864] FAT-fs (loop3): bogus number of FAT sectors [ 682.531463][T12864] FAT-fs (loop3): Can't find a valid FAT filesystem [ 682.590019][ T7392] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.783515][T12870] device syzkaller0 entered promiscuous mode [ 683.287480][T12878] qrtr: Invalid version 0 [ 684.058612][T12893] device syzkaller0 entered promiscuous mode [ 684.108440][ T4312] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 684.325375][ T4312] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 684.358587][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.399448][ T4312] usb 1-1: config 0 descriptor?? [ 684.440934][ T4312] pwc: Samsung MPC-C10 USB webcam detected. [ 684.585616][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2404'. [ 684.612012][ T4312] pwc: send_video_command error -71 [ 684.617304][ T4312] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 684.635748][T12899] netlink: 'syz.5.2404': attribute type 5 has an invalid length. [ 684.643973][ T4312] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 684.647021][ T4312] usb 1-1: USB disconnect, device number 82 [ 684.741102][T12901] device syzkaller0 entered promiscuous mode [ 684.957115][T12907] qrtr: Invalid version 0 [ 685.228484][ T4312] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 685.347922][T12916] team0: No ports can be present during mode change [ 685.422993][T12920] device syzkaller0 entered promiscuous mode [ 685.471828][ T4312] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 685.481586][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.504140][ T4312] usb 1-1: config 0 descriptor?? [ 685.536508][ T4312] pwc: Samsung MPC-C10 USB webcam detected. [ 685.678594][ T4360] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 685.848656][ T4360] usb 3-1: device descriptor read/64, error -71 [ 685.871815][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.878217][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.919029][ T4312] pwc: recv_control_msg error -32 req 02 val 2b00 [ 685.938932][ T4312] pwc: recv_control_msg error -32 req 02 val 2700 [ 685.959255][ T4312] pwc: recv_control_msg error -32 req 04 val 1700 [ 685.966592][ T4312] pwc: recv_control_msg error -32 req 02 val 2c00 [ 685.987623][ T4312] pwc: recv_control_msg error -32 req 04 val 1000 [ 685.995201][ T4312] pwc: recv_control_msg error -32 req 04 val 1300 [ 686.017016][T12930] qrtr: Invalid version 0 [ 686.033410][ T4312] pwc: recv_control_msg error -32 req 04 val 1400 [ 686.050071][ T4312] pwc: recv_control_msg error -32 req 02 val 2000 [ 686.066420][ T4312] pwc: recv_control_msg error -32 req 02 val 2100 [ 686.084274][ T4312] pwc: recv_control_msg error -32 req 02 val 2200 [ 686.097336][ T4312] pwc: recv_control_msg error -71 req 06 val 0600 [ 686.123814][ T4360] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 686.142600][ T4312] pwc: recv_control_msg error -71 req 04 val 1500 [ 686.158840][T12932] device syzkaller0 entered promiscuous mode [ 686.170330][ T4312] pwc: recv_control_msg error -71 req 02 val 2500 [ 686.187517][ T4312] pwc: recv_control_msg error -71 req 02 val 2400 [ 686.212272][ T4312] pwc: recv_control_msg error -71 req 02 val 2600 [ 686.223832][ T4312] pwc: recv_control_msg error -71 req 02 val 2900 [ 686.231232][ T4312] pwc: recv_control_msg error -71 req 02 val 2800 [ 686.239133][ T4312] pwc: recv_control_msg error -71 req 04 val 1100 [ 686.246394][ T4312] pwc: recv_control_msg error -71 req 04 val 1200 [ 686.267472][ T4312] pwc: Registered as video103. [ 686.287076][ T4312] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 686.296816][ T4360] usb 3-1: device descriptor read/64, error -71 [ 686.331508][ T4312] usb 1-1: USB disconnect, device number 83 [ 686.418918][ T4360] usb usb3-port1: attempt power cycle [ 686.828609][ T4360] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 686.890162][ T4360] usb 3-1: device descriptor read/8, error -71 [ 686.921542][T12948] device syzkaller0 entered promiscuous mode [ 687.048423][ T4312] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 687.178964][ T4360] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 687.237416][ T4360] usb 3-1: device descriptor read/8, error -71 [ 687.259271][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 687.275862][ T4312] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 687.361839][ T4312] usb 1-1: config 0 has no interface number 0 [ 687.369155][ T4360] usb usb3-port1: unable to enumerate USB device [ 687.400585][ T4312] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.428447][ T4312] usb 1-1: config 0 interface 89 has no altsetting 0 [ 687.446097][ T4312] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 687.456648][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.464832][ T4312] usb 1-1: Product: syz [ 687.469381][ T4312] usb 1-1: Manufacturer: syz [ 687.474101][ T4312] usb 1-1: SerialNumber: syz [ 687.496302][ T4312] usb 1-1: config 0 descriptor?? [ 687.527602][ T4312] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 687.537561][ T4312] em28xx 1-1:0.89: Video interface 89 found: [ 687.878570][ T128] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 688.101533][ T128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.111880][ T128] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 688.127470][ T128] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.136646][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.144860][ T128] usb 6-1: Product: syz [ 688.149816][ T4312] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 688.156044][ T128] usb 6-1: Manufacturer: syz [ 688.174872][ T128] usb 6-1: SerialNumber: syz [ 688.402931][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.418884][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.437860][ T128] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 688.487279][ T128] usb 6-1: USB disconnect, device number 65 [ 688.536060][T12962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'. [ 688.798139][T12966] loop2: detected capacity change from 0 to 2048 [ 688.883739][T12966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 688.989636][T12966] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2435: bg 0: block 234: padding at end of block bitmap is not set [ 689.038593][ T128] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 689.097484][T12966] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 238 with error 28 [ 689.118503][T12966] EXT4-fs (loop2): This should not happen!! Data will be lost [ 689.118503][T12966] [ 689.133274][T12966] EXT4-fs (loop2): Total free blocks count 0 [ 689.141085][T12966] EXT4-fs (loop2): Free/Dirty block details [ 689.154961][T12966] EXT4-fs (loop2): free_blocks=0 [ 689.160659][T12966] EXT4-fs (loop2): dirty_blocks=240 [ 689.166129][T12966] EXT4-fs (loop2): Block reservation details [ 689.166684][T12980] loop6: detected capacity change from 0 to 512 [ 689.172991][T12966] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 689.192496][ T4312] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 689.207915][ T4312] em28xx 1-1:0.89: board has no eeprom [ 689.240304][ T128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.272701][T12980] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 689.279231][ T128] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 689.286600][T12980] FAT-fs (loop6): Filesystem has been set read-only [ 689.317294][T12980] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 689.390211][ T128] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.408200][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.442272][T12982] device syzkaller0 entered promiscuous mode [ 689.448385][ T128] usb 6-1: Product: syz [ 689.448410][ T128] usb 6-1: Manufacturer: syz [ 689.448428][ T128] usb 6-1: SerialNumber: syz [ 689.473715][T12069] EXT4-fs (loop2): unmounting filesystem. [ 689.508602][ T4312] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 689.515899][ T4312] em28xx 1-1:0.89: analog set to bulk mode. [ 689.594696][ T4312] usb 1-1: USB disconnect, device number 84 [ 689.625729][ T4312] em28xx 1-1:0.89: Disconnecting em28xx [ 689.639240][ T4421] em28xx 1-1:0.89: Registering V4L2 extension [ 689.829461][ T4421] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 689.841769][ T4421] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 689.879754][ T4421] em28xx 1-1:0.89: No AC97 audio processor [ 689.899632][ T4421] usb 1-1: Decoder not found [ 689.904314][ T4421] em28xx 1-1:0.89: failed to create media graph [ 689.928565][ T4421] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 689.939836][ T4421] em28xx 1-1:0.89: Registering snapshot button... [ 689.958237][ T4421] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input47 [ 689.971585][ T4421] em28xx 1-1:0.89: Remote control support is not available for this card. [ 689.989767][ T4312] em28xx 1-1:0.89: Closing input extension [ 689.995978][ T4312] em28xx 1-1:0.89: Deregistering snapshot button [ 690.109915][ T4312] em28xx 1-1:0.89: Freeing device [ 690.226866][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2447'. [ 690.386016][T13003] device syzkaller0 entered promiscuous mode [ 690.841001][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2452'. [ 691.102878][ T128] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 691.181857][ T128] usb 6-1: USB disconnect, device number 66 [ 691.896105][T13040] device syzkaller0 entered promiscuous mode [ 692.166383][T13055] loop6: detected capacity change from 0 to 512 [ 692.175133][T13055] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 692.248009][T13055] EXT4-fs (loop6): 1 truncate cleaned up [ 692.315926][T13055] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 692.428509][ T4421] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 692.598562][ T4360] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 692.638570][ T4421] usb 1-1: Using ep0 maxpacket: 32 [ 692.674244][ T4421] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 692.700412][ T4421] usb 1-1: config 0 has no interface number 0 [ 692.719491][ T4421] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 692.744416][ T4421] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 692.754619][ T4421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.818915][ T4421] usb 1-1: Product: syz [ 692.823252][ T4421] usb 1-1: Manufacturer: syz [ 692.832044][ T4421] usb 1-1: SerialNumber: syz [ 692.853360][ T4421] usb 1-1: config 0 descriptor?? [ 692.866551][T13053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 692.898576][ T4360] usb 6-1: Using ep0 maxpacket: 8 [ 692.931042][ T4360] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 692.947957][ T4360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.957319][ T4360] usb 6-1: Product: syz [ 692.964474][ T4360] usb 6-1: Manufacturer: syz [ 692.970391][ T4360] usb 6-1: SerialNumber: syz [ 693.007221][ T4360] usb 6-1: config 0 descriptor?? [ 693.208657][T13053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 693.228064][ T4360] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 693.244798][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 693.441353][ T4360] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 693.565432][T13067] device syzkaller1 entered promiscuous mode [ 693.828655][T13072] loop6: detected capacity change from 0 to 256 [ 695.035263][T13072] FAT-fs (loop6): bogus number of FAT sectors [ 695.041495][T13072] FAT-fs (loop6): Can't find a valid FAT filesystem [ 695.432123][ T22] usb 6-1: USB disconnect, device number 67 [ 695.908648][T13086] device syzkaller0 entered promiscuous mode [ 696.248572][ T22] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 696.460788][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.479277][ T22] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.491054][ T4421] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 696.515081][ T4421] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 696.537455][ T22] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 696.553656][ T4421] asix: probe of 1-1:0.188 failed with error -71 [ 696.564997][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.597667][ T4421] usb 1-1: USB disconnect, device number 85 [ 696.610411][ T22] usb 7-1: Product: syz [ 696.622533][ T22] usb 7-1: Manufacturer: syz [ 696.640384][ T22] usb 7-1: SerialNumber: syz [ 696.670359][ T22] usb 7-1: config 0 descriptor?? [ 696.799991][T13104] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2487'. [ 696.866769][T13104] loop3: detected capacity change from 0 to 512 [ 696.887027][T13104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 696.928332][T13104] EXT4-fs (loop3): 1 truncate cleaned up [ 696.940040][T13104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 697.829705][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 698.208530][ T5275] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 698.213297][T13131] device syzkaller0 entered promiscuous mode [ 698.418615][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 698.426131][ T5275] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 698.451235][ T5275] usb 3-1: config 0 has no interface number 0 [ 698.465454][ T5275] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 698.499449][ T5275] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 698.522501][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.539979][ T5275] usb 3-1: Product: syz [ 698.550302][ T5275] usb 3-1: Manufacturer: syz [ 698.590233][ T5275] usb 3-1: SerialNumber: syz [ 698.617858][ T5275] usb 3-1: config 0 descriptor?? [ 698.644674][T13121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.883463][T13121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.991868][ T22] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 699.191231][ T128] usb 7-1: USB disconnect, device number 72 [ 699.191385][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.263326][ T22] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 699.315030][ T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.325839][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.336267][ T22] usb 6-1: Product: syz [ 699.340986][ T22] usb 6-1: Manufacturer: syz [ 699.345937][ T22] usb 6-1: SerialNumber: syz [ 699.571437][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.600968][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.655015][ T22] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 699.692792][ T22] usb 6-1: USB disconnect, device number 68 [ 699.703373][ T5275] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 699.720034][ T5275] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 699.733534][ T5275] asix: probe of 3-1:0.188 failed with error -32 [ 699.798665][ T128] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 699.982349][ T128] usb 7-1: Using ep0 maxpacket: 32 [ 699.992840][ T128] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.064671][ T128] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.088099][ T128] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 700.097561][ T128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.105974][ T128] usb 7-1: Product: syz [ 700.110335][ T128] usb 7-1: Manufacturer: syz [ 700.115150][ T128] usb 7-1: SerialNumber: syz [ 700.132614][ T128] usb 7-1: config 0 descriptor?? [ 700.239648][ T22] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 700.360558][T13161] device syzkaller0 entered promiscuous mode [ 700.396693][T13149] netlink: 'syz.6.2502': attribute type 1 has an invalid length. [ 700.428891][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 700.436116][T13149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.443548][ T22] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 700.452711][ T22] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 700.469215][ T22] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 700.483576][ T22] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.493740][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.526123][ T22] cdc_ether: probe of 6-1:16.0 failed with error -22 [ 700.530782][T13164] bond1: (slave ip6erspan0): making interface the new active one [ 700.569495][T13164] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 700.641938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 700.657143][ T22] usb 7-1: USB disconnect, device number 73 [ 700.928737][ T5275] usb 3-1: USB disconnect, device number 9 [ 701.007636][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 701.072371][T13168] device erspan0 entered promiscuous mode [ 701.134225][T13168] device gretap0 entered promiscuous mode [ 701.155182][T13168] device hsr1 entered promiscuous mode [ 702.124160][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 702.143709][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'. [ 702.328480][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 702.340966][ T5275] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 702.372021][ T5275] usb 3-1: config 0 has no interface number 0 [ 702.385145][ T5275] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 702.401562][ T5275] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 702.411859][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.420222][ T5275] usb 3-1: Product: syz [ 702.424720][ T5275] usb 3-1: Manufacturer: syz [ 702.430489][ T5275] usb 3-1: SerialNumber: syz [ 702.440661][ T5275] usb 3-1: config 0 descriptor?? [ 702.449056][T13193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 702.505795][ T128] usb 6-1: USB disconnect, device number 69 [ 702.675813][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2531'. [ 702.686316][T13193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 702.798698][ T4271] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 703.001360][ T4271] usb 1-1: Using ep0 maxpacket: 32 [ 703.009133][ T4271] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 703.017334][ T4271] usb 1-1: config 0 has no interface number 0 [ 703.024383][ T4271] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 703.058561][ T4271] usb 1-1: config 0 interface 89 has no altsetting 0 [ 703.072179][ T4271] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 703.108388][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.116599][ T4271] usb 1-1: Product: syz [ 703.128658][ T4271] usb 1-1: Manufacturer: syz [ 703.133478][ T4271] usb 1-1: SerialNumber: syz [ 703.160504][ T4271] usb 1-1: config 0 descriptor?? [ 703.175404][T13229] loop6: detected capacity change from 0 to 2048 [ 703.210127][ T4271] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 703.226924][ T4271] em28xx 1-1:0.89: Video interface 89 found: [ 703.318003][T13229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 703.335491][T13229] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.542285][ T5275] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 703.555036][T13242] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2541'. [ 703.576913][T13239] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2536: bg 0: block 345: padding at end of block bitmap is not set [ 703.592668][ T5275] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 703.614205][ T5275] asix: probe of 3-1:0.188 failed with error -32 [ 703.664593][T13239] EXT4-fs (loop6): Remounting filesystem read-only [ 703.775620][ T4271] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 703.800261][ T26] audit: type=1326 audit(1777022658.997:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 703.853964][ T26] audit: type=1326 audit(1777022659.017:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 703.938364][ T26] audit: type=1326 audit(1777022659.017:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 703.987025][ T26] audit: type=1326 audit(1777022659.017:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 704.048393][ T26] audit: type=1326 audit(1777022659.017:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 704.096879][ T26] audit: type=1326 audit(1777022659.017:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 704.139861][ T26] audit: type=1326 audit(1777022659.017:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 704.163365][ T26] audit: type=1326 audit(1777022659.017:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 704.210419][ T26] audit: type=1326 audit(1777022659.017:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13250 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbed8d9cdd9 code=0x7ffc0000 [ 704.298966][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 704.461679][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2548'. [ 704.663188][T13275] loop5: detected capacity change from 0 to 512 [ 704.714966][T13275] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 704.783482][T13275] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 704.801693][T13275] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.2551: bad orphan inode 4 [ 704.859009][T13275] EXT4-fs (loop5): 1 orphan inode deleted [ 704.865242][T13275] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 704.890798][ T4271] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 704.939606][ T4271] em28xx 1-1:0.89: board has no eeprom [ 705.197746][T13286] loop3: detected capacity change from 0 to 256 [ 705.298362][T13286] FAT-fs (loop3): bogus number of FAT sectors [ 705.304582][T13286] FAT-fs (loop3): Can't find a valid FAT filesystem [ 705.348741][ T4421] usb 3-1: USB disconnect, device number 10 [ 705.398389][ T4271] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 705.434411][ T4271] em28xx 1-1:0.89: analog set to bulk mode. [ 705.511844][ T4271] usb 1-1: USB disconnect, device number 86 [ 705.518782][ T4271] em28xx 1-1:0.89: Disconnecting em28xx [ 705.528083][ T5275] em28xx 1-1:0.89: Registering V4L2 extension [ 705.699418][ T5275] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 705.708696][ T5275] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 705.778007][ T5275] em28xx 1-1:0.89: No AC97 audio processor [ 705.816037][ T5275] usb 1-1: Decoder not found [ 705.833074][ T5275] em28xx 1-1:0.89: failed to create media graph [ 705.877158][ T5275] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 705.909821][ T5275] em28xx 1-1:0.89: Registering snapshot button... [ 705.917869][ T5275] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input48 [ 705.989175][ T5275] em28xx 1-1:0.89: Remote control support is not available for this card. [ 706.018799][ T4271] em28xx 1-1:0.89: Closing input extension [ 706.025653][ T4271] em28xx 1-1:0.89: Deregistering snapshot button [ 706.094166][ T4271] em28xx 1-1:0.89: Freeing device [ 706.638634][ T5275] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 706.703676][ T5197] EXT4-fs (loop5): unmounting filesystem. [ 706.848558][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 706.865481][ T5275] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 706.876376][ T22] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 706.919719][ T5275] usb 3-1: config 0 has no interface number 0 [ 706.929830][ T5275] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 707.116209][T13323] loop6: detected capacity change from 0 to 256 [ 707.142823][T13323] FAT-fs (loop6): bogus number of FAT sectors [ 707.149702][T13323] FAT-fs (loop6): Can't find a valid FAT filesystem [ 707.186477][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.192754][ T5275] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 707.205911][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 707.216194][T13304] loop3: detected capacity change from 0 to 1024 [ 707.222177][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.231026][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.261016][T13304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 707.272537][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.308592][ T5275] usb 3-1: Product: syz [ 707.310599][ T22] usb 1-1: Product: syz [ 707.313089][ T5275] usb 3-1: Manufacturer: syz [ 707.333992][ T22] usb 1-1: Manufacturer: syz [ 707.349730][ T22] usb 1-1: SerialNumber: syz [ 707.384652][ T5275] usb 3-1: SerialNumber: syz [ 707.409316][ T5275] usb 3-1: config 0 descriptor?? [ 707.415108][T13311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 707.617455][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 707.646477][T13311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 707.690556][ T22] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 707.720267][ T22] usb 1-1: USB disconnect, device number 87 [ 708.313757][ T22] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 708.648646][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 708.655703][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 708.674214][ T22] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 708.685008][ T5275] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 708.685043][ T5275] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 708.685160][ T5275] asix: probe of 3-1:0.188 failed with error -32 [ 708.695847][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.723793][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.750790][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 708.772039][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.782879][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 708.793632][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.935962][T13349] loop6: detected capacity change from 0 to 1024 [ 708.969362][T13349] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.2579: lblock 2 mapped to illegal pblock 2 (length 1) [ 708.991257][T13349] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 708.999358][T13352] device syzkaller0 entered promiscuous mode [ 709.002354][T13349] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.2579: lblock 0 mapped to illegal pblock 48 (length 1) [ 709.024056][ T22] usb 1-1: usb_control_msg returned -32 [ 709.048648][ T22] usbtmc 1-1:16.0: can't read capabilities [ 709.082982][T13349] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 709.088503][ T22] usb 1-1: USB disconnect, device number 88 [ 709.092747][T13349] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2579: Failed to acquire dquot type 0 [ 709.112801][T13349] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 709.125592][T13349] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.2579: mark_inode_dirty error [ 709.174348][T13349] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 709.184752][T13349] EXT4-fs (loop6): 1 orphan inode deleted [ 709.198532][ T4597] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 709.218404][T13349] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 709.238604][ T4597] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 709.263249][ T4597] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 709.382944][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 709.401272][ T4407] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 709.427354][ T4407] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 709.453936][ T4407] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 0 [ 709.513528][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2582'. [ 709.596832][ T6123] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 709.866246][ T6123] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 709.880135][T13363] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2584'. [ 710.026879][ T6123] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 710.275219][T13363] loop3: detected capacity change from 0 to 512 [ 710.342473][ T4271] usb 3-1: USB disconnect, device number 11 [ 710.400377][T13363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 710.536304][T13363] EXT4-fs (loop3): 1 truncate cleaned up [ 710.568781][T13363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 710.661128][T13378] capability: warning: `syz.6.2583' uses deprecated v2 capabilities in a way that may be insecure [ 710.686519][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 710.716454][T13377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.042292][T13377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.136302][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2593'. [ 711.216141][T13386] device syzkaller0 entered promiscuous mode [ 711.383309][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 711.648382][ T4421] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 711.993606][ T4421] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.074079][T13417] loop2: detected capacity change from 0 to 256 [ 712.099320][T13417] FAT-fs (loop2): bogus number of FAT sectors [ 712.105554][T13417] FAT-fs (loop2): Can't find a valid FAT filesystem [ 712.153700][ T4421] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 712.383179][ T4421] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.505178][ T4421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.621263][ T4421] usb 7-1: Product: syz [ 712.625811][ T4421] usb 7-1: Manufacturer: syz [ 712.669097][ T7392] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 712.676146][ T4421] usb 7-1: SerialNumber: syz [ 712.913842][ T4421] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 712.978628][ T4421] usb 7-1: USB disconnect, device number 74 [ 713.222459][T13428] loop2: detected capacity change from 0 to 2048 [ 713.229228][T13433] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2608'. [ 713.304076][T13428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 713.337948][T13433] loop3: detected capacity change from 0 to 512 [ 713.401266][T13433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 713.447811][T13433] EXT4-fs (loop3): 1 truncate cleaned up [ 713.458143][T13433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 713.483826][T12069] EXT4-fs (loop2): unmounting filesystem. [ 713.528380][ T4421] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 713.718484][ T4421] usb 7-1: Using ep0 maxpacket: 8 [ 713.725687][ T4421] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 713.760293][ T4421] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 713.856070][ T4421] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.888390][ T4421] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 713.905877][ T4421] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 713.918682][ T4421] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.994207][ T4421] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 714.045477][ T4421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.292472][ T4421] usb 7-1: usb_control_msg returned -32 [ 714.328499][ T4421] usbtmc 7-1:16.0: can't read capabilities [ 714.358403][ T4421] usb 7-1: USB disconnect, device number 75 [ 714.594990][T13452] netlink: 484 bytes leftover after parsing attributes in process `syz.0.2611'. [ 714.680900][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 715.192064][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2619'. [ 715.398606][ T4271] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 715.416133][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2621'. [ 715.585158][T13481] loop6: detected capacity change from 0 to 256 [ 715.615527][T13481] FAT-fs (loop6): bogus number of FAT sectors [ 715.621868][T13481] FAT-fs (loop6): Can't find a valid FAT filesystem [ 715.797048][ T4421] kernel write not supported for file /sg0 (pid: 4421 comm: kworker/1:14) [ 715.858613][ T4271] usb 1-1: Using ep0 maxpacket: 32 [ 715.866465][ T4271] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 715.909065][ T4271] usb 1-1: config 0 has no interface number 0 [ 715.915245][ T4271] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.969483][ T4271] usb 1-1: config 0 interface 89 has no altsetting 0 [ 715.987533][ T4271] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 716.028359][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.053724][ T4271] usb 1-1: Product: syz [ 716.071193][ T4271] usb 1-1: Manufacturer: syz [ 716.087206][ T4271] usb 1-1: SerialNumber: syz [ 716.118220][ T4271] usb 1-1: config 0 descriptor?? [ 716.189162][ T4271] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 716.213135][ T4271] em28xx 1-1:0.89: Video interface 89 found: [ 716.758750][ T4312] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 716.799955][ T4271] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 716.824697][T13509] device syzkaller0 entered promiscuous mode [ 716.859572][T13511] device syzkaller0 entered promiscuous mode [ 716.960187][ T4312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.977178][ T4312] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 717.046317][ T4312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.074660][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.094906][ T4312] usb 4-1: Product: syz [ 717.115166][ T4312] usb 4-1: Manufacturer: syz [ 717.128417][ T4312] usb 4-1: SerialNumber: syz [ 717.177078][T13513] device syzkaller0 entered promiscuous mode [ 717.228077][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2635'. [ 717.424510][ T4312] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 717.522838][ T4312] usb 4-1: USB disconnect, device number 92 [ 718.159272][T13527] netlink: 'syz.6.2639': attribute type 39 has an invalid length. [ 718.212717][ T4312] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 718.245888][ T4271] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 718.268714][ T4271] em28xx 1-1:0.89: board has no eeprom [ 718.338404][ T4271] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 718.347802][ T4271] em28xx 1-1:0.89: analog set to bulk mode. [ 718.355210][ T5275] em28xx 1-1:0.89: Registering V4L2 extension [ 718.383868][ T4271] usb 1-1: USB disconnect, device number 89 [ 718.408408][ T4312] usb 4-1: Using ep0 maxpacket: 8 [ 718.411182][ T4271] em28xx 1-1:0.89: Disconnecting em28xx [ 718.416124][ T4312] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 718.448409][ T4312] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 718.479485][ T4312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 718.530382][ T4312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 718.570977][ T4312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 718.599999][ T5275] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 718.612672][ T5275] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 718.632235][ T4312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.656778][ T5275] em28xx 1-1:0.89: No AC97 audio processor [ 718.676499][ T4312] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 718.679688][ T5275] usb 1-1: Decoder not found [ 718.696401][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.725316][ T5275] em28xx 1-1:0.89: failed to create media graph [ 718.748205][ T5275] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 718.787927][ T5275] em28xx 1-1:0.89: Registering snapshot button... [ 718.829471][ T5275] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input49 [ 718.868864][ T5275] em28xx 1-1:0.89: Remote control support is not available for this card. [ 718.938132][ T4312] usb 4-1: usb_control_msg returned -32 [ 718.942192][ T4271] em28xx 1-1:0.89: Closing input extension [ 718.944214][ T4312] usbtmc 4-1:16.0: can't read capabilities [ 718.958376][ T4271] em28xx 1-1:0.89: Deregistering snapshot button [ 719.010819][T13546] device syzkaller0 entered promiscuous mode [ 719.035983][T13548] loop2: detected capacity change from 0 to 512 [ 719.048258][ T4312] usb 4-1: USB disconnect, device number 93 [ 719.056440][ T4271] em28xx 1-1:0.89: Freeing device [ 719.140930][T13548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 719.220272][T13548] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.480506][T12069] EXT4-fs (loop2): unmounting filesystem. [ 719.578977][T13559] device syzkaller0 entered promiscuous mode [ 719.765997][T13568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2648'. [ 719.938439][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 720.758679][ T4271] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 720.958601][ T4271] usb 3-1: Using ep0 maxpacket: 32 [ 720.965931][ T4271] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 720.979498][ T4271] usb 3-1: config 0 has no interface number 0 [ 720.985666][ T4271] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.012146][ T4271] usb 3-1: config 0 interface 89 has no altsetting 0 [ 721.036394][ T4271] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 721.085066][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.148660][ T4271] usb 3-1: Product: syz [ 721.152941][ T4271] usb 3-1: Manufacturer: syz [ 721.166781][ T4271] usb 3-1: SerialNumber: syz [ 721.192577][T13602] loop6: detected capacity change from 0 to 160 [ 721.200239][ T4271] usb 3-1: config 0 descriptor?? [ 721.225935][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2666'. [ 721.238866][ T4271] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 721.271340][ T4271] em28xx 3-1:0.89: Video interface 89 found: [ 721.817124][ T4271] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 721.906692][T13619] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 722.667294][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2679'. [ 723.994038][ T4271] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 724.002526][ T4271] em28xx 3-1:0.89: board has no eeprom [ 724.078496][ T4271] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 724.095818][ T4271] em28xx 3-1:0.89: analog set to bulk mode. [ 724.123083][ T4954] em28xx 3-1:0.89: Registering V4L2 extension [ 724.143366][ T4271] usb 3-1: USB disconnect, device number 12 [ 724.186129][ T4271] em28xx 3-1:0.89: Disconnecting em28xx [ 724.365684][ T4954] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 724.378497][ T4954] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 724.385601][ T4954] em28xx 3-1:0.89: No AC97 audio processor [ 724.408640][ T4954] usb 3-1: Decoder not found [ 724.413889][ T4954] em28xx 3-1:0.89: failed to create media graph [ 724.436263][ T4954] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 724.449628][ T4954] em28xx 3-1:0.89: Registering snapshot button... [ 724.464652][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2691'. [ 724.474977][ T4954] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input50 [ 724.508708][ T4954] em28xx 3-1:0.89: Remote control support is not available for this card. [ 724.517349][ T4271] em28xx 3-1:0.89: Closing input extension [ 724.523644][ T4271] em28xx 3-1:0.89: Deregistering snapshot button [ 724.641000][ T4271] em28xx 3-1:0.89: Freeing device [ 724.642675][T13672] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2692'. [ 724.765525][T13679] loop5: detected capacity change from 0 to 512 [ 724.796201][T13675] device syzkaller0 entered promiscuous mode [ 724.803791][T13679] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 724.877660][T13678] device syzkaller0 entered promiscuous mode [ 724.889930][T13679] EXT4-fs (loop5): 1 truncate cleaned up [ 724.895682][T13679] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 725.842978][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2696'. [ 726.755580][ T5197] EXT4-fs (loop5): unmounting filesystem. [ 726.878678][ T4954] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 727.080693][ T4954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.105656][ T4954] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 727.142524][T13710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2706'. [ 727.153553][T13712] loop6: detected capacity change from 0 to 512 [ 727.163051][ T4954] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.185565][ T4954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.204232][T13712] FAT-fs (loop6): Directory bread(block 199916) failed [ 727.224988][ T4954] usb 1-1: Product: syz [ 727.229793][T13712] FAT-fs (loop6): Directory bread(block 199917) failed [ 727.238855][ T4954] usb 1-1: Manufacturer: syz [ 727.248775][T13712] FAT-fs (loop6): Directory bread(block 199918) failed [ 727.258492][ T4954] usb 1-1: SerialNumber: syz [ 727.288031][T13712] FAT-fs (loop6): Directory bread(block 199919) failed [ 727.354467][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2708'. [ 727.439106][T13712] FAT-fs (loop6): Directory bread(block 199920) failed [ 727.466019][T13712] FAT-fs (loop6): Directory bread(block 199921) failed [ 727.601584][T13712] FAT-fs (loop6): Directory bread(block 199922) failed [ 727.742048][T13712] FAT-fs (loop6): Directory bread(block 199923) failed [ 728.191252][T13712] FAT-fs (loop6): Directory bread(block 199916) failed [ 728.306838][T13712] FAT-fs (loop6): Directory bread(block 199917) failed [ 728.412649][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.442370][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.465738][ T4954] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 728.527803][ T4954] usb 1-1: USB disconnect, device number 90 [ 728.896125][T13747] 9pnet_fd: Insufficient options for proto=fd [ 728.903447][T13745] device syzkaller0 entered promiscuous mode [ 729.048425][ T4954] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 729.248808][ T4954] usb 1-1: Using ep0 maxpacket: 8 [ 729.260511][ T4954] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 729.269967][ T4954] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 729.280676][ T4954] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 729.290915][ T4954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.301461][ T4954] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 729.315124][ T4954] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 729.324481][ T4954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.339538][ T4954] usbtmc 1-1:16.0: bulk endpoints not found [ 729.494200][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 730.382125][ T5275] usb 1-1: USB disconnect, device number 91 [ 730.876155][T13779] 9pnet_fd: Insufficient options for proto=fd [ 731.401188][T13788] device syzkaller0 entered promiscuous mode [ 731.795884][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 732.090655][T13751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.931525][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2734'. [ 733.081058][T13804] loop2: detected capacity change from 0 to 512 [ 733.140868][T13804] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 733.186586][T13804] EXT4-fs (loop2): 1 truncate cleaned up [ 733.202418][T13804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 733.330022][T13812] 9pnet_fd: Insufficient options for proto=fd [ 734.129987][T12069] EXT4-fs (loop2): unmounting filesystem. [ 734.290639][T13821] loop3: detected capacity change from 0 to 512 [ 734.358871][T13821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 734.380641][T13821] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.595330][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 735.312617][T13848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2752'. [ 735.357257][T13848] loop0: detected capacity change from 0 to 512 [ 735.386334][T13848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 735.435108][T13848] EXT4-fs (loop0): 1 truncate cleaned up [ 735.443341][T13848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 735.512223][T13853] device syzkaller0 entered promiscuous mode [ 736.632764][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 737.375830][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 737.452111][T13870] loop2: detected capacity change from 0 to 1024 [ 737.478848][T13870] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 737.533432][T13870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 737.573860][T13870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.2758: missing EA_INODE flag [ 737.595709][T13870] EXT4-fs (loop2): Remounting filesystem read-only [ 737.613809][T13870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2758: error while reading EA inode 11 err=-117 [ 737.670228][T13870] EXT4-fs (loop2): Remounting filesystem read-only [ 737.691342][T13870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.2758: missing EA_INODE flag [ 737.715915][T13830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.765555][T13870] EXT4-fs (loop2): Remounting filesystem read-only [ 737.792621][T13870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2758: error while reading EA inode 11 err=-117 [ 737.877419][T13870] EXT4-fs (loop2): Remounting filesystem read-only [ 737.992860][T12069] EXT4-fs (loop2): unmounting filesystem. [ 738.182036][T13886] loop2: detected capacity change from 0 to 512 [ 738.218497][ T5275] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 738.278711][T13888] loop0: detected capacity change from 0 to 2048 [ 738.298588][T13886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 738.329677][T13886] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.346531][T13888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 738.430433][ T5275] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.481388][ T5275] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 738.495116][T13895] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.2764: Attempting to read directory block (0) that is past i_size (3) [ 738.508457][ T4954] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 738.558626][ T5275] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.587734][ T5275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.626625][ T5275] usb 6-1: Product: syz [ 738.641128][ T5275] usb 6-1: Manufacturer: syz [ 738.643172][T13895] EXT4-fs (loop2): Remounting filesystem read-only [ 738.645784][ T5275] usb 6-1: SerialNumber: syz [ 738.688887][ T4954] usb 4-1: device descriptor read/64, error -71 [ 738.750624][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 738.893022][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.929002][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.945245][T13897] device syzkaller0 entered promiscuous mode [ 738.946657][T12069] EXT4-fs (loop2): unmounting filesystem. [ 738.958416][ T4954] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 738.971063][ T5275] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 739.001835][ T5275] usb 6-1: USB disconnect, device number 70 [ 739.140158][ T4954] usb 4-1: device descriptor read/64, error -71 [ 739.258833][ T4954] usb usb4-port1: attempt power cycle [ 739.513034][T13915] 9pnet_fd: Insufficient options for proto=fd [ 739.568499][ T5275] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 739.668555][ T4954] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 739.710411][ T4954] usb 4-1: device descriptor read/8, error -71 [ 739.768513][ T5275] usb 6-1: Using ep0 maxpacket: 8 [ 739.791051][ T5275] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 739.816199][ T5275] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 739.836972][ T5275] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 739.852363][ T5275] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 739.862830][ T5275] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 739.876955][ T5275] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 739.886533][ T5275] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.910681][ T5275] usbtmc 6-1:16.0: bulk endpoints not found [ 740.002666][ T4954] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 740.048544][ T4954] usb 4-1: device descriptor read/8, error -71 [ 740.102800][T13933] device syzkaller0 entered promiscuous mode [ 740.168671][ T4954] usb usb4-port1: unable to enumerate USB device [ 740.336435][T13937] loop2: detected capacity change from 0 to 256 [ 740.381945][T13937] FAT-fs (loop2): Directory bread(block 64) failed [ 740.389108][T13937] FAT-fs (loop2): Directory bread(block 65) failed [ 740.395783][T13937] FAT-fs (loop2): Directory bread(block 66) failed [ 740.402766][T13937] FAT-fs (loop2): Directory bread(block 67) failed [ 740.409666][T13937] FAT-fs (loop2): Directory bread(block 68) failed [ 740.416402][T13937] FAT-fs (loop2): Directory bread(block 69) failed [ 740.424371][T13937] FAT-fs (loop2): Directory bread(block 70) failed [ 740.434258][T13937] FAT-fs (loop2): Directory bread(block 71) failed [ 740.453601][T13937] FAT-fs (loop2): Directory bread(block 72) failed [ 740.465345][T13937] FAT-fs (loop2): Directory bread(block 73) failed [ 741.121106][T13956] Cannot find add_set index 1 as target [ 741.188421][ T5275] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 741.323420][T13958] device syzkaller0 entered promiscuous mode [ 741.388788][ T5275] usb 7-1: Using ep0 maxpacket: 32 [ 741.396139][ T5275] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 741.414958][ T5275] usb 7-1: config 0 has no interface number 0 [ 741.425854][ T5275] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 741.453084][ T5275] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 741.478679][ T5275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.486757][ T5275] usb 7-1: Product: syz [ 741.503893][ T5275] usb 7-1: Manufacturer: syz [ 741.508684][ T5275] usb 7-1: SerialNumber: syz [ 741.685805][ T5275] usb 7-1: config 0 descriptor?? [ 741.739046][T13949] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 742.091268][ T4271] usb 6-1: USB disconnect, device number 71 [ 742.091778][T13949] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 742.392166][T13909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.923740][ T5275] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 742.954953][ T5275] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 743.024031][ T5275] asix: probe of 7-1:0.188 failed with error -61 [ 743.108208][T13987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 743.136534][T13987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.171856][T13990] tap0: tun_chr_ioctl cmd 21731 [ 743.208791][T13991] device syzkaller0 entered promiscuous mode [ 743.274206][T13995] Cannot find del_set index 4 as target [ 743.703086][T14008] device syzkaller0 entered promiscuous mode [ 744.234126][ T4312] usb 7-1: USB disconnect, device number 76 [ 744.452732][T14028] device syzkaller0 entered promiscuous mode [ 744.627276][T14034] loop0: detected capacity change from 0 to 2048 [ 744.749888][T14034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 744.772422][T14034] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.937839][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 745.089612][T14047] netlink: 'syz.2.2828': attribute type 39 has an invalid length. [ 745.205376][T14053] loop6: detected capacity change from 0 to 512 [ 745.235411][T14053] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 745.378983][ T4421] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 745.568420][ T4421] usb 6-1: Using ep0 maxpacket: 32 [ 745.578124][ T4421] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 745.596758][ T4421] usb 6-1: config 0 has no interface number 0 [ 745.606502][ T4421] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 745.627277][ T4421] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 745.640165][ T4421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.655963][ T4421] usb 6-1: Product: syz [ 745.663654][ T4421] usb 6-1: Manufacturer: syz [ 745.671748][ T4421] usb 6-1: SerialNumber: syz [ 745.687627][ T4421] usb 6-1: config 0 descriptor?? [ 745.701938][T14049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 745.927285][T14049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 745.997894][T14068] loop2: detected capacity change from 0 to 2048 [ 746.079508][T14068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 746.107405][T14068] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.242042][T12069] EXT4-fs (loop2): unmounting filesystem. [ 746.628640][T14003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.754287][ T4421] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 746.777800][ T4421] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 746.848492][ T4421] asix: probe of 6-1:0.188 failed with error -61 [ 746.874595][T14090] 9pnet_fd: Insufficient options for proto=fd [ 747.301789][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.309414][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.165666][ T27] usb 6-1: USB disconnect, device number 72 [ 748.226980][T14128] loop2: detected capacity change from 0 to 1024 [ 748.310188][T14128] hfsplus: unable to parse mount options [ 748.552014][T14139] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2865'. [ 748.571756][ T7392] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 748.664539][T14142] loop6: detected capacity change from 0 to 512 [ 748.668433][ T4312] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 748.768638][T14142] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 748.848748][T14142] EXT4-fs (loop6): 1 truncate cleaned up [ 748.854505][T14142] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 748.882547][ T4312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.948168][ T4312] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 749.032034][ T4312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.075244][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.102867][ T4312] usb 4-1: Product: syz [ 749.118791][ T4312] usb 4-1: Manufacturer: syz [ 749.128590][ T4312] usb 4-1: SerialNumber: syz [ 749.159679][T14159] netlink: 'syz.0.2871': attribute type 39 has an invalid length. [ 749.390708][T14134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.421023][T14134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.429352][ T4271] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 749.475620][ T4312] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 749.510997][ T4312] usb 4-1: USB disconnect, device number 98 [ 749.668568][ T4271] usb 6-1: Using ep0 maxpacket: 32 [ 749.688705][ T4271] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 749.696976][ T4271] usb 6-1: config 0 has no interface number 0 [ 749.758044][ T4271] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 749.785063][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 749.800107][ T4271] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 749.818689][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.826953][ T4271] usb 6-1: Product: syz [ 749.840703][T14170] loop2: detected capacity change from 0 to 512 [ 749.857610][ T4271] usb 6-1: Manufacturer: syz [ 749.876013][ T4271] usb 6-1: SerialNumber: syz [ 749.884632][T14170] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 749.924030][ T4271] usb 6-1: config 0 descriptor?? [ 749.949852][T14160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 749.967786][T14170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 750.048664][ T4312] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 750.065264][T14170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 750.085008][T14170] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 750.188941][T14160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 750.213911][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2883'. [ 750.223696][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2883'. [ 750.234817][ T26] audit: type=1800 audit(1777022705.427:34): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2878" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 750.256676][ T4312] usb 4-1: Using ep0 maxpacket: 8 [ 750.272511][ T4312] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 750.291298][ T4312] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 750.311763][T14183] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 750.339715][T14183] device bridge1 entered promiscuous mode [ 750.341514][ T4312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.378450][ T4312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.406559][ T4312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.428809][ T4312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 750.458514][ T4312] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 750.491933][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.529314][T12069] EXT4-fs (loop2): unmounting filesystem. [ 750.548132][ T4312] usbtmc 4-1:16.0: bulk endpoints not found [ 751.323764][ T4271] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 751.344605][ T4271] asix: probe of 6-1:0.188 failed with error -32 [ 751.591845][T14202] loop6: detected capacity change from 0 to 32768 [ 751.611880][T14202] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 751.622282][T14202] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 751.631462][T14202] BTRFS info (device loop6): enabling disk space caching [ 751.638586][T14202] BTRFS info (device loop6): force clearing of disk cache [ 751.645838][T14202] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 751.655349][T14202] BTRFS info (device loop6): use zstd compression, level 3 [ 751.662673][T14202] BTRFS info (device loop6): disk space caching is enabled [ 751.700667][T14202] BTRFS info (device loop6): enabling ssd optimizations [ 751.712344][T14202] BTRFS info (device loop6): rebuilding free space tree [ 751.727921][T14202] BTRFS info (device loop6): disabling free space tree [ 751.735086][T14202] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 751.744987][T14202] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 752.485059][ T6123] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 752.556968][ T128] usb 6-1: USB disconnect, device number 73 [ 752.675648][ T7392] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop6 scanned by udevd (7392) [ 752.943264][T14234] loop5: detected capacity change from 0 to 2048 [ 753.054142][ T4952] usb 4-1: USB disconnect, device number 99 [ 753.079556][T14234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 753.120599][T14234] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.382718][ T5197] EXT4-fs (loop5): unmounting filesystem. [ 753.464435][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'. [ 755.088503][ T5461] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 755.308717][ T5461] usb 6-1: Using ep0 maxpacket: 32 [ 755.320290][ T5461] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 755.369223][ T5461] usb 6-1: config 0 has no interface number 0 [ 755.388424][ T5461] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 755.391353][T14279] loop6: detected capacity change from 0 to 512 [ 755.430469][ T5461] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 755.472939][ T5461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.505007][ T5461] usb 6-1: Product: syz [ 755.510247][ T5461] usb 6-1: Manufacturer: syz [ 755.512889][T14279] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.2913: inode #1: comm syz.6.2913: iget: illegal inode # [ 755.518071][ T5461] usb 6-1: SerialNumber: syz [ 755.570896][ T5461] usb 6-1: config 0 descriptor?? [ 755.577030][T14262] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 755.596096][T14279] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2913: error while reading EA inode 1 err=-117 [ 755.671861][T14279] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.2913: inode #1: comm syz.6.2913: iget: illegal inode # [ 755.724275][T14279] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2913: error while reading EA inode 1 err=-117 [ 755.734369][T14287] loop2: detected capacity change from 0 to 2048 [ 755.753227][T14279] EXT4-fs (loop6): 1 orphan inode deleted [ 755.778055][T14279] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 755.803288][T14262] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 755.812943][T14287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 755.847066][T14287] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.025518][T12069] EXT4-fs (loop2): unmounting filesystem. [ 756.113798][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 756.142885][ T6123] EXT4-fs (loop6): unmounting filesystem. [ 756.498610][ T4952] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 756.698601][ T4952] usb 1-1: Using ep0 maxpacket: 16 [ 756.720862][ T4952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.760655][ T4952] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 756.781451][ T4952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 756.798755][ T4952] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 756.816659][ T4952] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 756.826029][ T4952] usb 1-1: Manufacturer: syz [ 756.839561][ T5461] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 756.858122][ T4952] usb 1-1: config 0 descriptor?? [ 756.863583][ T5461] asix: probe of 6-1:0.188 failed with error -32 [ 757.434644][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.445792][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.465770][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.478876][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.498036][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.506627][ T4951] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 757.525138][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.576494][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2935'. [ 757.585919][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2935'. [ 757.595221][T14331] netlink: 'syz.6.2935': attribute type 6 has an invalid length. [ 757.610382][T14331] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.619907][T14331] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.629516][T14331] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.638703][T14331] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.650412][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2935'. [ 757.659662][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2935'. [ 757.668836][T14331] netlink: 'syz.6.2935': attribute type 6 has an invalid length. [ 757.708391][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 757.738734][ T4951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.749995][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.767477][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.775566][ T4951] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 757.801598][ T4951] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 757.851071][ T4951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.860509][ T4951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.869699][ T4951] usb 4-1: Product: syz [ 757.874165][ T4951] usb 4-1: Manufacturer: syz [ 757.878986][ T4951] usb 4-1: SerialNumber: syz [ 757.898763][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 757.914123][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 757.950048][ T5461] usb 6-1: USB disconnect, device number 74 [ 757.955156][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.982275][ T22] usb 3-1: Product: syz [ 757.987079][ T22] usb 3-1: Manufacturer: syz [ 757.996390][ T22] usb 3-1: SerialNumber: syz [ 758.006552][ T22] usb 3-1: config 0 descriptor?? [ 758.053030][T14337] loop5: detected capacity change from 0 to 512 [ 758.107765][ T4951] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 758.125053][ T4951] usb 4-1: USB disconnect, device number 100 [ 758.232992][ T22] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 758.459618][T14343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.466846][T14343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.512398][T14343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.518993][T14343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.542142][T14343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.550569][T14343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.560979][T14343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.567457][T14343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.588390][T14343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 758.594950][T14343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 758.718516][ T4951] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 758.908485][ T4951] usb 4-1: Using ep0 maxpacket: 8 [ 758.917040][ T4951] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 758.934928][ T4951] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 758.956805][ T4951] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.980437][ T4951] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 759.000557][ T4951] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 759.024143][ T4951] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.076755][ T4951] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 759.101459][ T4951] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.136310][ T4951] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 759.156613][ T4951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.272355][ T4312] usb 1-1: USB disconnect, device number 92 [ 759.553187][ T22] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 759.619832][ T22] usb 3-1: USB disconnect, device number 13 [ 759.658461][ T4421] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 759.868509][ T4421] usb 6-1: Using ep0 maxpacket: 32 [ 759.887981][ T4421] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 759.909233][T14361] program syz.0.2947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.009005][ T4421] usb 6-1: config 0 has no interface number 0 [ 760.033907][ T4421] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 760.209547][ T4421] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 760.218643][ T4951] usb 4-1: usb_control_msg returned -71 [ 760.218682][ T4951] usbtmc 4-1:16.0: can't read capabilities [ 760.243951][ T4951] usb 4-1: USB disconnect, device number 101 [ 760.295915][ T4421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.346274][ T4421] usb 6-1: Product: syz [ 760.353831][ T4421] usb 6-1: Manufacturer: syz [ 760.386483][ T4421] usb 6-1: SerialNumber: syz [ 760.407115][ T4421] usb 6-1: config 0 descriptor?? [ 760.417574][T14357] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 760.762575][T14357] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 760.910977][T14375] loop6: detected capacity change from 0 to 1024 [ 760.930747][T14375] hfsplus: unable to parse mount options [ 761.778679][ T5461] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 761.902574][ T4421] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 761.918825][ T4421] asix: probe of 6-1:0.188 failed with error -32 [ 761.968847][ T5461] usb 1-1: device descriptor read/64, error -71 [ 762.378698][ T5461] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 762.530826][ T5461] usb 1-1: device descriptor read/64, error -71 [ 762.673157][ T5461] usb usb1-port1: attempt power cycle [ 763.004145][ T4312] usb 6-1: USB disconnect, device number 75 [ 763.088542][ T5461] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 763.128968][ T5461] usb 1-1: device descriptor read/8, error -71 [ 763.398495][ T5461] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 763.579008][ T5461] usb 1-1: device descriptor read/8, error -71 [ 763.759064][ T5461] usb usb1-port1: unable to enumerate USB device [ 764.148969][T14426] netlink: 'syz.3.2972': attribute type 39 has an invalid length. [ 764.235504][T14418] loop2: detected capacity change from 0 to 1024 [ 764.289061][T14418] hfsplus: unable to parse mount options [ 764.616436][T14434] binder: 14433:14434 unknown command 0 [ 764.668205][T14434] binder: 14433:14434 ioctl c0306201 200000000100 returned -22 [ 764.738440][T12200] Bluetooth: hci0: command 0x0406 tx timeout [ 765.767797][T14447] ./file0: Can't open blockdev [ 766.135680][T14458] loop2: detected capacity change from 0 to 1024 [ 766.168056][T14458] hfsplus: unable to parse mount options [ 766.388418][ T5461] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 766.568606][ T5461] usb 4-1: device descriptor read/64, error -71 [ 766.698498][ T4952] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 766.845652][ T5461] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 766.918987][ T4952] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.943548][ T4952] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 766.972741][ T4952] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.987509][T14486] loop6: detected capacity change from 0 to 4096 [ 766.994102][ T4952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.005054][ T4952] usb 3-1: Product: syz [ 767.009648][ T4952] usb 3-1: Manufacturer: syz [ 767.014394][ T4952] usb 3-1: SerialNumber: syz [ 767.019589][ T5461] usb 4-1: device descriptor read/64, error -71 [ 767.052855][T14486] EXT4-fs: Ignoring removed oldalloc option [ 767.113018][T14486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 767.139382][ T5461] usb usb4-port1: attempt power cycle [ 767.166251][T14473] page:ffffea00013dad00 refcount:4 mapcount:1 mapping:ffff888029427508 index:0x0 pfn:0x4f6b4 [ 767.177764][T14473] memcg:ffff888027420000 [ 767.182043][T14473] aops:shmem_aops ino:56d [ 767.186510][T14473] flags: 0xfff60000080017(locked|referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 767.197589][T14473] raw: 00fff60000080017 ffffea0001a3dd48 ffffea00013dad48 ffff888029427508 [ 767.206317][T14473] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888027420000 [ 767.214936][T14473] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 767.222335][T14473] page_owner tracks the page as allocated [ 767.229163][T14473] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 14476, tgid 14473 (syz.5.2994), ts 766424831922, free_ts 766423550548 [ 767.247194][T14473] post_alloc_hook+0x173/0x1a0 [ 767.252080][T14473] get_page_from_freelist+0x1a1e/0x1ab0 [ 767.257672][T14473] __alloc_pages+0x1ec/0x4f0 [ 767.262393][T14473] __folio_alloc+0xe/0x30 [ 767.266767][T14473] vma_alloc_folio+0x4a3/0x900 [ 767.271615][T14473] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 767.277424][T14473] shmem_get_folio_gfp+0x1361/0x3400 [ 767.282750][T14473] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 767.288636][T14473] udmabuf_create+0x99b/0xfc0 [ 767.293398][T14473] udmabuf_ioctl+0x1f3/0x300 [ 767.298038][T14473] __se_sys_ioctl+0xfa/0x170 [ 767.302816][T14473] do_syscall_64+0x4c/0xa0 [ 767.307329][T14473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.313311][T14473] page last free stack trace: [ 767.318011][T14473] free_unref_page_prepare+0x8b4/0x9a0 [ 767.323602][T14473] free_unref_page_list+0xbb/0x8e0 [ 767.328761][T14473] release_pages+0x1fa6/0x2220 [ 767.333613][T14473] __pagevec_release+0x6d/0xe0 [ 767.338428][T14473] shmem_undo_range+0x7c2/0x20c0 [ 767.343416][T14473] shmem_evict_inode+0x25b/0xa80 [ 767.348410][T14473] evict+0x4c9/0x8d0 [ 767.352382][T14473] __dentry_kill+0x431/0x650 [ 767.355074][T14486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 767.356999][T14473] dentry_kill+0xb8/0x290 [ 767.357458][T14473] dput+0xfa/0x1d0 [ 767.357488][T14473] do_renameat2+0x8f5/0xce0 [ 767.357511][T14473] __x64_sys_rename+0x82/0x90 [ 767.357532][T14473] do_syscall_64+0x4c/0xa0 [ 767.357559][T14473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.357678][T14473] ------------[ cut here ]------------ [ 767.399450][T14473] kernel BUG at mm/filemap.c:153! [ 767.404599][T14473] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 767.410791][T14473] CPU: 0 PID: 14473 Comm: syz.5.2994 Not tainted syzkaller #0 [ 767.418400][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.428498][T14473] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 767.434862][T14473] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 20 f7 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 80 fc 94 8a e8 fb 0c 12 00 [ 767.454494][T14473] RSP: 0018:ffffc9000cd87618 EFLAGS: 00010046 [ 767.460698][T14473] RAX: 021232f74eae7800 RBX: ffffea00013dad00 RCX: 021232f74eae7800 [ 767.468722][T14473] RDX: 0000000000000002 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf13a0 [ 767.476739][T14473] RBP: ffffc9000cd87778 R08: ffffffff8e1ff42f R09: 1ffffffff1c3fe85 [ 767.484753][T14473] R10: dffffc0000000000 R11: fffffbfff1c3fe86 R12: dffffc0000000000 [ 767.492856][T14473] R13: dffffc0000000000 R14: ffff888029427508 R15: 1ffff920019b0ed4 [ 767.500867][T14473] FS: 0000555581886500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 767.510626][T14473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.517255][T14473] CR2: 00007f1244d79000 CR3: 000000007cbdf000 CR4: 00000000003506f0 [ 767.525273][T14473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.531135][T14486] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 767.533356][T14473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 767.550273][T14473] Call Trace: [ 767.553600][T14473] [ 767.556576][T14473] __filemap_remove_folio+0xbc/0x8a0 [ 767.561925][T14473] ? __rwlock_init+0x140/0x140 [ 767.566805][T14473] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 767.573891][T14473] ? _raw_spin_lock_irq+0xb7/0xf0 [ 767.578964][T14473] ? _raw_spin_lock_irqsave+0x100/0x100 [ 767.584723][T14473] ? __folio_cancel_dirty+0xc0/0x580 [ 767.590048][T14473] filemap_remove_folio+0xed/0x2c0 [ 767.595205][T14473] truncate_inode_folio+0x59/0x70 [ 767.600275][T14473] shmem_undo_range+0x533/0x20c0 [ 767.605276][T14473] ? shmem_truncate_range+0xb0/0xb0 [ 767.610528][T14473] ? do_raw_spin_lock+0x128/0x2f0 [ 767.615682][T14473] ? __rwlock_init+0x140/0x140 [ 767.620656][T14473] shmem_evict_inode+0x25b/0xa80 [ 767.625741][T14473] ? inode_wait_for_writeback+0x1df/0x220 [ 767.631567][T14473] ? shmem_free_in_core_inode+0xb0/0xb0 [ 767.637182][T14473] ? do_raw_spin_lock+0x128/0x2f0 [ 767.642248][T14473] ? bit_waitqueue+0x30/0x30 [ 767.646907][T14473] ? do_raw_spin_unlock+0x11d/0x230 [ 767.652128][T14473] ? shmem_free_in_core_inode+0xb0/0xb0 [ 767.657677][T14473] evict+0x4c9/0x8d0 [ 767.661580][T14473] ? proc_nr_inodes+0x2f0/0x2f0 [ 767.666437][T14473] ? do_raw_spin_unlock+0x11d/0x230 [ 767.671725][T14473] ? _raw_spin_unlock+0x24/0x40 [ 767.676662][T14473] ? iput+0x768/0x980 [ 767.680662][T14473] __dentry_kill+0x431/0x650 [ 767.685258][T14473] dentry_kill+0xb8/0x290 [ 767.689600][T14473] ? dput+0x37/0x1d0 [ 767.693520][T14473] dput+0xfa/0x1d0 [ 767.697244][T14473] __fput+0x5e0/0x920 [ 767.701268][T14473] task_work_run+0x1d0/0x260 [ 767.705906][T14473] ? task_work_cancel+0x220/0x220 [ 767.710931][T14473] ? exit_to_user_mode_loop+0x3b/0x110 [ 767.716434][T14473] exit_to_user_mode_loop+0xe6/0x110 [ 767.721730][T14473] exit_to_user_mode_prepare+0xee/0x180 [ 767.727280][T14473] syscall_exit_to_user_mode+0x16/0x40 [ 767.732737][T14473] do_syscall_64+0x58/0xa0 [ 767.737172][T14473] ? clear_bhb_loop+0x60/0xb0 [ 767.741877][T14473] ? clear_bhb_loop+0x60/0xb0 [ 767.746585][T14473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.752622][T14473] RIP: 0033:0x7f7108b9cdd9 [ 767.757037][T14473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.776746][T14473] RSP: 002b:00007ffcff7d8778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 767.785416][T14473] RAX: 0000000000000000 RBX: 00007f7108e17da0 RCX: 00007f7108b9cdd9 [ 767.793573][T14473] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 767.801598][T14473] RBP: 00007f7108e17da0 R08: 00007f7108e16038 R09: 0000000000000000 [ 767.809754][T14473] R10: 00000000003ffcd8 R11: 0000000000000246 R12: 00000000000bb4cd [ 767.817746][T14473] R13: 00007f7108e15fac R14: 00000000000bb2e2 R15: 00007ffcff7d8880 [ 767.825734][T14473] [ 767.828776][T14473] Modules linked in: [ 767.832703][T14473] ---[ end trace 0000000000000000 ]--- [ 767.838163][T14473] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 767.844441][T14473] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 20 f7 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 80 fc 94 8a e8 fb 0c 12 00 [ 767.864077][T14473] RSP: 0018:ffffc9000cd87618 EFLAGS: 00010046 [ 767.870161][T14473] RAX: 021232f74eae7800 RBX: ffffea00013dad00 RCX: 021232f74eae7800 [ 767.878287][T14473] RDX: 0000000000000002 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf13a0 [ 767.886289][T14473] RBP: ffffc9000cd87778 R08: ffffffff8e1ff42f R09: 1ffffffff1c3fe85 [ 767.894358][T14473] R10: dffffc0000000000 R11: fffffbfff1c3fe86 R12: dffffc0000000000 [ 767.902424][T14473] R13: dffffc0000000000 R14: ffff888029427508 R15: 1ffff920019b0ed4 [ 767.910487][T14473] FS: 0000555581886500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 767.919591][T14473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.926261][T14473] CR2: 00007f1244d79000 CR3: 000000007cbdf000 CR4: 00000000003506f0 [ 767.934248][T14473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.942579][T14473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 767.950575][T14473] Kernel panic - not syncing: Fatal exception [ 767.957111][T14473] Kernel Offset: disabled [ 767.961456][T14473] Rebooting in 86400 seconds..