last executing test programs:

15.732210152s ago: executing program 4 (id=1803):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x1, 0x105d6, &(0x7f0000010640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1)
creat(0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

10.100603569s ago: executing program 1 (id=1826):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xdd, 0x5, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1907e}]}}]}, 0x44}}, 0x20000082)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

9.902820773s ago: executing program 4 (id=1828):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597b", 0x1a}, {&(0x7f0000000540)}, {0x0}, {&(0x7f0000000d00)}], 0x4, 0x4d9e, 0x8)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x1)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.524364073s ago: executing program 2 (id=1830):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x6, 0xc, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000740), 0x1006, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20)

9.430480585s ago: executing program 4 (id=1831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x80000001, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

9.430176336s ago: executing program 3 (id=1832):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

9.179254969s ago: executing program 3 (id=1834):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = epoll_create1(0x0)
fcntl$dupfd(r2, 0x406, r3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x4000200a})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)

9.07469866s ago: executing program 1 (id=1835):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20)

8.857589599s ago: executing program 2 (id=1836):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xf, 0xd, 0x6, 0x3, 0x8, 0x80, 0x2, 0x8e, [{0x3c0, 0x0, 0x8605, 0xc}, {0x9, 0xfe6a, 0x9, 0x7}, {0x2, 0x5, 0x5, 0x8}, {0x1, 0x6, 0x5, 0x3}, {0x5, 0x7fffffff, 0x10, 0x8}, {0x2, 0x4, 0x2, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x5}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

8.014824613s ago: executing program 0 (id=1837):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, &(0x7f0000000040)={[{@lazytime}, {@errors_remount}, {@delalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5)

8.014603924s ago: executing program 1 (id=1838):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597b", 0x1a}, {0x0}, {0x0}], 0x3, 0x4d9e, 0x8)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

7.873739617s ago: executing program 0 (id=1839):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000500)=[@register_looper, @acquire, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})

7.856714504s ago: executing program 1 (id=1840):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382)
syz_usb_disconnect(r0)
syz_usb_connect$uac3(0x5, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902780003019430ed080b01000121305f0904000000010130000a2401100a00090000000904010000000830000904010101010230000a2402020400000004030905010900020205f00a2525060000000205000904020000010230000904020101010230000905820908000100400a2525530c0000000100"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

7.650689766s ago: executing program 0 (id=1841):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000007000500ff020000"], 0x0)

7.583203424s ago: executing program 0 (id=1842):
unshare(0x62040200)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000b80)=ANY=[@ANYBLOB="66676c746572000000000000000000000000000000000000000000000000000004"], &(0x7f0000000bc0)=0x2c)

6.994787555s ago: executing program 3 (id=1843):
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f00000001c0))

6.850449288s ago: executing program 3 (id=1844):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fmask={'fmask', 0x3d, 0x68e7}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7fffffffffffffff}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@obj_role}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x340, 0x11, 0x148, 0x340, 0x0, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x9}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00', {0x80000001}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)
setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
mknod$loop(&(0x7f0000000240)='./file0\x00', 0x400, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

2.314113428s ago: executing program 0 (id=1845):
socket$inet_udp(0x2, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000080)=ANY=[@ANYBLOB='fscontext=unconfined_u,fscontext', @ANYRES16])
write(r4, &(0x7f00000008c0)="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", 0xa42)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r7 = getegid()
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x6, 0xfffffffffffffffd, 0xe, 0xac, 0x3, 0x4, {0x0, 0xff00000000000000, 0x5, 0x40000000005, 0x85, 0x7fffffff, 0x8000, 0x7fffffff, 0xfffffffe, 0x4000, 0x0, 0xee00, r7, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0)
sendmsg$nl_route(r3, 0x0, 0x20040040)

2.231755803s ago: executing program 3 (id=1846):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r0, 0x7, 0x4)

2.150208738s ago: executing program 4 (id=1847):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010029bd7000fbdbdf2501"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000)

2.022700254s ago: executing program 2 (id=1848):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
write(r3, &(0x7f00000000c0), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x40002, 0xa69c0)
io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20040045, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)

652.648001ms ago: executing program 0 (id=1849):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030800"], 0xfdef)

540.48859ms ago: executing program 4 (id=1850):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597b", 0x1a}, {0x0}, {0x0}], 0x3, 0x4d9e, 0x8)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

342.918233ms ago: executing program 2 (id=1851):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000380))

342.642933ms ago: executing program 1 (id=1852):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000007000500ff020000"], 0x0)

256.639318ms ago: executing program 2 (id=1853):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "feb78fbaf888a34a69e00d96072000001ea89de2b7fb0000e60080b8785d9602010001000000000012000000000000000036c447eb00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1000000, 0x17, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c809cda49a11ff76e906b13a0c26ef2f2b08d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]})

225.679042ms ago: executing program 4 (id=1854):
r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000180)={[{@nodioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@norecovery}, {@quota}, {@resuid}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x50c, &(0x7f00000008c0)="$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")

158.834319ms ago: executing program 3 (id=1855):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x3, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5.635291ms ago: executing program 1 (id=1856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0)
ioctl$FICLONE(r1, 0x40049409, r1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000), 0x6)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', <r4=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x28}}, 0x4000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406e100000000000000000000000a00050001"], 0x1c}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x7c, 0x2, 0xca8f463, 0x0, 0x4})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000040)=0x4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'batadv_slave_0\x00', @link_local})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
dup2(r9, r10)
r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockopt$llc_int(r11, 0x10c, 0x1, &(0x7f0000000000), 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000ef0f003b1527bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="8aa473d148aeb2a86392a225f2"], 0x40}}, 0x26004080)

0s ago: executing program 2 (id=1857):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x80000001, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff0, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x1}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xa6, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0xfff, 0x101, 0x5, 0xfffffc01, 0x800}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x2}, {0x8, 0x7, 0x8, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x9, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x2, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0x7}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x4, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x1ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x80000001, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x6, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x7, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0x6, 0x80000000, 0x2, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0xe, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x9, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x4, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x7, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

kernel console output (not intermixed with test programs):

58.985438][ T4314] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  158.999170][ T4314] usb 4-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping
[  159.018327][ T4314] usb 4-1: config 0 interface 0 has no altsetting 0
[  159.036762][ T4314] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  159.051284][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  159.059886][ T4314] usb 4-1: Product: syz
[  159.088541][ T4314] usb 4-1: Manufacturer: syz
[  159.104122][ T4314] usb 4-1: SerialNumber: syz
[  159.124186][ T4314] usb 4-1: config 0 descriptor??
[  159.142938][ T4314] hub 4-1:0.0: bad descriptor, ignoring hub
[  159.148942][ T4314] hub: probe of 4-1:0.0 failed with error -5
[  159.194452][ T4314] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  159.236422][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.254071][    C0] vkms_vblank_simulate: vblank timer overrun
[  159.272393][ T4318] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  159.442577][ T4318] usb 3-1: device descriptor read/64, error -71
[  159.478613][ T4314] usb 4-1: USB disconnect, device number 19
[  159.509744][   T33] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  159.567899][ T4318] usb usb3-port1: attempt power cycle
[  159.713907][   T33] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  159.728154][   T33] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  159.741675][   T33] usb 1-1: config 0 interface 0 has no altsetting 0
[  159.781316][   T33] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  159.796900][   T33] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  159.805570][   T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  159.813622][   T33] usb 1-1: Product: syz
[  159.818409][   T33] usb 1-1: Manufacturer: syz
[  159.823645][   T33] usb 1-1: SerialNumber: syz
[  159.837390][   T33] usb 1-1: config 0 descriptor??
[  159.850293][   T33] hub 1-1:0.0: bad descriptor, ignoring hub
[  159.857262][   T33] hub: probe of 1-1:0.0 failed with error -5
[  159.901421][   T33] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[  159.951535][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.972373][   T22] usb 5-1: device descriptor read/64, error -71
[  159.994876][ T4318] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  160.038202][ T4318] usb 3-1: device descriptor read/8, error -71
[  160.173151][ T5508] usb 1-1: USB disconnect, device number 8
[  160.227313][ T5605] kvm: pic: non byte write
[  160.270840][   T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  160.322366][ T4318] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  160.364265][ T4318] usb 3-1: device descriptor read/8, error -71
[  160.452303][   T22] usb 5-1: device descriptor read/64, error -71
[  160.492793][ T4318] usb usb3-port1: unable to enumerate USB device
[  160.532326][ T5508] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  160.605152][   T22] usb usb5-port1: attempt power cycle
[  160.724895][ T5508] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  161.042519][   T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  161.099914][   T22] usb 5-1: device descriptor read/8, error -71
[  161.372639][   T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  161.424366][   T22] usb 5-1: device descriptor read/8, error -71
[  161.554638][   T22] usb usb5-port1: unable to enumerate USB device
[  161.563830][ T5508] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  161.577210][ T5508] usb 1-1: config 0 interface 0 has no altsetting 0
[  161.588512][ T5508] usb 1-1: string descriptor 0 read error: -22
[  161.594964][ T5508] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  161.604136][ T5508] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  161.614471][ T5508] usb 1-1: config 0 descriptor??
[  161.621807][ T5508] hub 1-1:0.0: bad descriptor, ignoring hub
[  161.627916][ T5508] hub: probe of 1-1:0.0 failed with error -5
[  161.649516][ T5508] snd-usb-audio: probe of 1-1:0.0 failed with error -22
[  161.698247][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.920957][ T5620] random: crng reseeded on system resumption
[  161.945856][ T4318] usb 1-1: USB disconnect, device number 9
[  162.264156][ T5628] fuse: Bad value for 'fd'
[  162.548379][ T5630] fuse: Bad value for 'fd'
[  163.039305][ T4318] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  163.242243][ T4318] usb 4-1: Using ep0 maxpacket: 8
[  163.251352][ T4318] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  163.301354][ T4318] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  163.332569][ T5508] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  163.407389][ T4318] usb 4-1: config 179 has no interface number 0
[  163.453194][ T4318] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  163.502537][ T5508] usb 3-1: device descriptor read/64, error -71
[  163.534032][ T4318] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  163.606345][ T4318] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  163.691732][ T4318] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  163.771055][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.792511][ T5508] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  163.911245][ T5637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  163.962415][ T5508] usb 3-1: device descriptor read/64, error -71
[  164.096664][ T5508] usb usb3-port1: attempt power cycle
[  164.272809][ T4315] usb 4-1: USB disconnect, device number 20
[  164.301422][ T5662] fuse: Unknown parameter 'grou00000000000000000000'
[  164.516294][ T5508] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  164.532810][   T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  164.554142][ T5508] usb 3-1: device descriptor read/8, error -71
[  164.736230][   T22] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  164.745109][   T22] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping
[  164.757251][   T22] usb 5-1: config 0 interface 0 has no altsetting 0
[  164.767247][   T22] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  164.777206][   T22] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  164.786047][   T22] usb 5-1: Product: syz
[  164.790391][   T22] usb 5-1: Manufacturer: syz
[  164.802272][   T22] usb 5-1: SerialNumber: syz
[  164.831893][   T22] usb 5-1: config 0 descriptor??
[  164.832788][ T5508] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  164.857200][   T22] hub 5-1:0.0: bad descriptor, ignoring hub
[  164.868963][ T5679] loop1: detected capacity change from 0 to 4
[  164.876817][   T22] hub: probe of 5-1:0.0 failed with error -5
[  164.902721][ T5508] usb 3-1: device descriptor read/8, error -71
[  164.949209][ T5679] Dev loop1: unable to read RDB block 4
[  164.955834][ T5679]  loop1: unable to read partition table
[  164.979385][   T22] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  164.992076][ T5679] loop1: partition table beyond EOD, truncated
[  165.012350][ T5679] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  165.025791][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.034517][ T5508] usb usb3-port1: unable to enumerate USB device
[  165.072992][   T22] usb 5-1: USB disconnect, device number 13
[  165.652561][   T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  165.889123][   T22] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  165.926977][   T22] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping
[  166.022029][   T22] usb 5-1: config 0 interface 0 has no altsetting 0
[  166.174943][   T22] usb 5-1: string descriptor 0 read error: -22
[  166.266229][   T22] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  166.395212][   T22] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  166.618490][   T22] usb 5-1: config 0 descriptor??
[  166.765066][   T22] hub 5-1:0.0: bad descriptor, ignoring hub
[  166.880126][   T22] hub: probe of 5-1:0.0 failed with error -5
[  167.531595][   T22] snd-usb-audio: probe of 5-1:0.0 failed with error -22
[  167.655043][ T5692] overlayfs: missing 'lowerdir'
[  167.728267][   T22] usb 5-1: USB disconnect, device number 14
[  167.847522][ T5695] fuse: Unknown parameter 'grou00000000000000000000'
[  167.867571][ T5696] device syzkaller0 entered promiscuous mode
[  168.023198][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.214789][ T5714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  168.471548][ T5719] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  168.832271][ T4315] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  168.982559][ T4315] usb 3-1: device descriptor read/64, error -71
[  169.062366][ T4314] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  169.252275][ T4315] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  169.275278][ T4314] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  169.320485][ T4314] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping
[  169.324956][ T5733] overlayfs: missing 'lowerdir'
[  169.337154][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0
[  169.360267][ T4314] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  169.379809][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  169.398478][ T4314] usb 2-1: Product: syz
[  169.408590][ T4314] usb 2-1: Manufacturer: syz
[  169.417143][ T4315] usb 3-1: device descriptor read/64, error -71
[  169.418918][ T4314] usb 2-1: SerialNumber: syz
[  169.450008][ T4314] usb 2-1: config 0 descriptor??
[  169.486453][ T4314] hub 2-1:0.0: bad descriptor, ignoring hub
[  169.502286][ T4314] hub: probe of 2-1:0.0 failed with error -5
[  169.555964][ T4314] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  169.563164][ T4315] usb usb3-port1: attempt power cycle
[  169.591402][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.653418][ T5742] fuse: Unknown parameter 'group_i00000000000000000000'
[  169.823747][   T22] usb 2-1: USB disconnect, device number 12
[  169.991147][ T4315] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  170.034121][ T4315] usb 3-1: device descriptor read/8, error -71
[  170.129627][ T4310] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  170.229098][   T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  170.302536][ T4315] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  170.332234][ T4310] usb 5-1: Using ep0 maxpacket: 32
[  170.339475][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  170.352604][ T4315] usb 3-1: device descriptor read/8, error -71
[  170.381877][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  170.399413][ T4310] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping
[  170.424251][   T22] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  170.436937][   T22] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping
[  170.445336][ T4310] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  170.461925][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  170.468133][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.482303][ T4315] usb usb3-port1: unable to enumerate USB device
[  170.492946][   T22] usb 2-1: string descriptor 0 read error: -22
[  170.502398][   T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  170.506247][ T4310] usb 5-1: Product: syz
[  170.521761][   T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  170.530718][ T4310] usb 5-1: Manufacturer: syz
[  170.546763][ T4310] usb 5-1: SerialNumber: syz
[  170.552079][   T22] usb 2-1: config 0 descriptor??
[  170.565034][ T4310] usb 5-1: config 0 descriptor??
[  170.610289][   T22] hub 2-1:0.0: bad descriptor, ignoring hub
[  170.628650][   T22] hub: probe of 2-1:0.0 failed with error -5
[  170.691105][   T22] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  170.713795][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.824226][ T4310] usb 5-1: USB disconnect, device number 15
[  170.902519][   T33] usb 2-1: USB disconnect, device number 13
[  171.480201][ T5770] overlayfs: missing 'lowerdir'
[  171.693093][ T5774] fuse: Unknown parameter 'group_i00000000000000000000'
[  171.855667][ T5779] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  171.988696][ T5782] fuse: Unknown parameter 'group_i00000000000000000000'
[  172.428466][ T5802] overlayfs: missing 'lowerdir'
[  172.442475][   T22] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  172.602710][   T33] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  172.632265][   T22] usb 2-1: Using ep0 maxpacket: 8
[  172.639972][   T22] usb 2-1: unable to get BOS descriptor or descriptor too short
[  172.649674][   T22] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  172.658315][   T22] usb 2-1: config 0 has no interface number 0
[  172.664818][   T22] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  172.680100][   T22] usb 2-1: config 0 interface 88 has no altsetting 0
[  172.694862][   T22] usb 2-1: string descriptor 0 read error: -22
[  172.701352][   T22] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  172.711473][   T22] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  172.729011][   T22] usb 2-1: config 0 descriptor??
[  172.752447][   T22] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input11
[  172.792415][   T33] usb 4-1: Using ep0 maxpacket: 8
[  172.800200][   T33] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  172.820879][   T33] usb 4-1: config 179 has no interface number 0
[  172.840270][   T33] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  172.857218][   T33] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  172.869342][   T33] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  172.892657][   T33] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  172.906717][   T33] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  172.920224][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.955380][ T4310] usb 2-1: USB disconnect, device number 14
[  172.962270][    C0] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19
[  172.975329][ T5799] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  173.115827][ T5809] fuse: Unknown parameter 'group_i00000000000000000000'
[  173.207218][ T5252] usb 4-1: USB disconnect, device number 21
[  174.767902][ T5834] fuse: Unknown parameter '0x0000000000000003'
[  175.818856][ T5846] fuse: Unknown parameter 'group_id00000000000000000000'
[  176.601560][ T5867] fuse: Unknown parameter '0x0000000000000003'
[  176.712361][   T33] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  176.922306][   T33] usb 5-1: Using ep0 maxpacket: 16
[  176.935294][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.088352][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.206065][   T33] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  177.319383][   T33] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  177.471617][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.787365][   T33] usb 5-1: config 0 descriptor??
[  178.410091][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  178.484427][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  178.591374][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  178.694944][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  178.781314][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  178.916570][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.064824][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.180433][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.317227][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.470756][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.595958][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.639841][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.662809][ T5890] fuse: Bad value for 'fd'
[  179.712266][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.719508][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.782528][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.789834][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.803529][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.811008][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.852537][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.859849][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.873995][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.881223][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.894512][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.901736][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.916086][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.924671][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.931870][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.945480][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.958222][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.970031][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.980844][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.992591][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  179.999850][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  180.002403][ T4318] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  180.016011][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  180.037561][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  180.057619][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  180.068691][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  180.096644][   T33] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[  180.150165][   T33] logitech 0003:046D:CA03.0002: hidraw0: USB HID v0.0a Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0
[  180.202256][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  180.209326][   T33] logitech 0003:046D:CA03.0002: no inputs found
[  180.217930][ T4318] usb 3-1: config index 0 descriptor too short (expected 164, got 36)
[  180.239830][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.276355][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.304640][   T33] usb 5-1: USB disconnect, device number 16
[  180.320593][ T4318] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  180.356644][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.384112][ T4318] usb 3-1: config 0 descriptor??
[  180.638599][ T5903] fido_id[5903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  180.812335][ T4318] logitech 0003:046D:C29C.0003: unknown main item tag 0x0
[  180.819687][ T4318] logitech 0003:046D:C29C.0003: unknown main item tag 0x0
[  180.863035][ T4318] logitech 0003:046D:C29C.0003: unknown main item tag 0x0
[  180.870359][ T4318] logitech 0003:046D:C29C.0003: unknown main item tag 0x0
[  180.890513][ T5916] fuse: Unknown parameter 'fd0x0000000000000003'
[  180.899578][ T4318] logitech 0003:046D:C29C.0003: unknown main item tag 0x0
[  180.921607][ T4318] logitech 0003:046D:C29C.0003: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[  181.002924][ T4318] logitech 0003:046D:C29C.0003: no inputs found
[  181.060887][ T4318] usb 3-1: USB disconnect, device number 19
[  181.149606][ T5920] loop1: detected capacity change from 0 to 4
[  181.173867][ T5920] Dev loop1: unable to read RDB block 4
[  181.179544][ T5920]  loop1: unable to read partition table
[  181.242607][ T5920] loop1: partition table beyond EOD, truncated
[  181.271505][ T5920] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  181.308063][ T5921] fido_id[5921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  182.787421][ T5951] fuse: Unknown parameter 'fd0x0000000000000003'
[  183.059615][ T5955] kvm [5954]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[  183.095353][ T5960] loop1: detected capacity change from 0 to 4
[  183.115294][ T5960] Dev loop1: unable to read RDB block 4
[  183.120943][ T5960]  loop1: unable to read partition table
[  183.139954][ T5960] loop1: partition table beyond EOD, truncated
[  183.168995][ T5960] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5)
[  183.753373][ T5974] fuse: Unknown parameter 'user_i00000000000000000000'
[  183.887045][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'.
[  183.907959][ T5982] fuse: Unknown parameter 'fd0x0000000000000003'
[  183.922848][ T5980] fuse: Bad value for 'fd'
[  183.963281][  T129] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  184.046477][ T5984] syz.0.572[5984] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  184.046650][ T5984] syz.0.572[5984] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  184.164269][  T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.228198][  T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.259068][  T129] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  184.289729][  T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.328458][  T129] usb 2-1: config 0 descriptor??
[  184.446612][ T5997] fuse: Bad value for 'user_id'
[  184.672677][ T6007] fuse: Unknown parameter 'user_id00000000000000000000'
[  184.749831][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'.
[  184.776564][  T129] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  185.001037][ T5252] usb 2-1: USB disconnect, device number 15
[  185.157841][ T6011] fido_id[6011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  185.482571][  T129] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  185.583411][ T6029] fuse: Bad value for 'user_id'
[  185.674200][  T129] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  185.691808][  T129] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  185.713313][  T129] usb 3-1: config 0 interface 0 has no altsetting 0
[  185.720628][ T6033] fuse: Unknown parameter 'user_id00000000000000000000'
[  185.733591][  T129] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  185.747330][  T129] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  185.754485][ T6035] fuse: Bad value for 'user_id'
[  185.758167][  T129] usb 3-1: Product: syz
[  185.770907][  T129] usb 3-1: Manufacturer: syz
[  185.776260][  T129] usb 3-1: SerialNumber: syz
[  185.798956][  T129] usb 3-1: config 0 descriptor??
[  185.824615][  T129] hub 3-1:0.0: bad descriptor, ignoring hub
[  185.830695][  T129] hub: probe of 3-1:0.0 failed with error -5
[  185.848540][  T129] usb 3-1: selecting invalid altsetting 0
[  186.312322][ T5252] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  187.213013][ T5252] usb 4-1: no configurations
[  187.217799][ T5252] usb 4-1: can't read configurations, error -22
[  187.354414][   T14] usb 3-1: USB disconnect, device number 20
[  187.382322][ T5252] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  187.407610][ T6060] fuse: Bad value for 'fd'
[  187.577409][ T6066] fuse: Unknown parameter 'user_id00000000000000000000'
[  187.585465][ T5252] usb 4-1: no configurations
[  187.590118][ T5252] usb 4-1: can't read configurations, error -22
[  187.607310][ T5252] usb usb4-port1: attempt power cycle
[  188.021746][ T6083] fuse: Bad value for 'fd'
[  188.032229][ T5252] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  188.093539][ T5252] usb 4-1: no configurations
[  188.098233][ T5252] usb 4-1: can't read configurations, error -22
[  188.230557][ T6088] overlayfs: missing 'workdir'
[  188.262341][ T5252] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  188.314383][ T5252] usb 4-1: no configurations
[  188.319191][ T5252] usb 4-1: can't read configurations, error -22
[  188.343987][ T5252] usb usb4-port1: unable to enumerate USB device
[  188.455826][ T6094] device syzkaller0 entered promiscuous mode
[  188.921064][ T6106] binder: 6105:6106 ioctl c0306201 0 returned -14
[  189.062260][ T4310] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  189.089174][ T6108] fuse: Bad value for 'fd'
[  189.252046][ T4310] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  189.279834][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.292343][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.309263][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.335808][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.348004][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.373641][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.399440][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.418657][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.439966][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.460007][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.508266][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.533325][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.563759][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.583414][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.609304][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.630842][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.650347][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.670615][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.687356][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.702110][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.713937][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.721989][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.736024][ T4310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  189.746403][ T4310] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.766854][ T4310] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  189.785398][ T4310] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  189.795239][ T4310] usb 5-1: Product: syz
[  189.799616][ T4310] usb 5-1: Manufacturer: syz
[  189.804944][ T4310] usb 5-1: SerialNumber: syz
[  189.830313][ T4310] usb 5-1: config 0 descriptor??
[  189.851288][ T4310] yurex 5-1:0.0: Could not find endpoints
[  190.010985][ T6122] overlayfs: missing 'workdir'
[  190.069917][   T33] usb 5-1: USB disconnect, device number 17
[  190.705802][ T6140] fuse: Bad value for 'fd'
[  190.848152][ T6142] binder: 6141:6142 ioctl c0306201 0 returned -14
[  191.212345][ T4310] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  191.413064][ T4310] usb 5-1: no configurations
[  191.417936][ T4310] usb 5-1: can't read configurations, error -22
[  191.582386][ T4310] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  191.703007][ T6148] fuse: Bad value for 'fd'
[  191.782694][ T4310] usb 5-1: no configurations
[  191.787974][ T4310] usb 5-1: can't read configurations, error -22
[  191.795676][ T4310] usb usb5-port1: attempt power cycle
[  192.202461][ T4310] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  192.273479][ T4310] usb 5-1: no configurations
[  192.278154][ T4310] usb 5-1: can't read configurations, error -22
[  192.390226][ T6155] netlink: 'syz.2.638': attribute type 2 has an invalid length.
[  192.432554][ T4310] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  192.483528][ T4310] usb 5-1: no configurations
[  192.488301][ T4310] usb 5-1: can't read configurations, error -22
[  192.508691][ T4310] usb usb5-port1: unable to enumerate USB device
[  192.682340][ T5252] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  192.904108][ T5252] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  192.932340][ T5252] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  192.967966][ T5252] usb 2-1: config 0 interface 0 has no altsetting 0
[  193.001338][ T5252] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.022786][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  193.046981][ T5252] usb 2-1: Product: syz
[  193.064270][ T5252] usb 2-1: Manufacturer: syz
[  193.079105][ T5252] usb 2-1: SerialNumber: syz
[  193.101080][ T5252] usb 2-1: config 0 descriptor??
[  193.116599][ T5252] hub 2-1:0.0: bad descriptor, ignoring hub
[  193.128572][ T5252] hub: probe of 2-1:0.0 failed with error -5
[  193.146898][ T5252] usb 2-1: selecting invalid altsetting 0
[  193.436737][ T6172] binder: 6171:6172 ioctl c0306201 0 returned -14
[  193.443683][ T5252] usb 2-1: USB disconnect, device number 16
[  193.792289][ T5252] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  193.852255][   T33] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  193.975135][ T5252] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  194.002361][ T5252] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  194.017987][ T5252] usb 2-1: config 0 interface 0 has no altsetting 0
[  194.034104][ T5252] usb 2-1: string descriptor 0 read error: -22
[  194.040501][ T5252] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  194.057554][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  194.070872][   T33] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  194.086452][   T33] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  194.099988][ T5252] usb 2-1: config 0 descriptor??
[  194.109233][   T33] usb 3-1: config 0 interface 0 has no altsetting 0
[  194.120993][ T5252] hub 2-1:0.0: bad descriptor, ignoring hub
[  194.130634][ T5252] hub: probe of 2-1:0.0 failed with error -5
[  194.142319][   T33] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  194.151437][   T33] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  194.164184][ T5252] usb 2-1: selecting invalid altsetting 0
[  194.174828][   T33] usb 3-1: Product: syz
[  194.179060][   T33] usb 3-1: Manufacturer: syz
[  194.185096][   T33] usb 3-1: SerialNumber: syz
[  194.211826][   T33] usb 3-1: config 0 descriptor??
[  194.228926][   T33] hub 3-1:0.0: bad descriptor, ignoring hub
[  194.242407][   T33] hub: probe of 3-1:0.0 failed with error -5
[  194.251125][   T33] usb 3-1: selecting invalid altsetting 0
[  194.306593][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.313175][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.623277][ T4314] usb 3-1: USB disconnect, device number 21
[  196.173737][ T6201] netlink: 'syz.1.654': attribute type 2 has an invalid length.
[  198.649658][ T5252] usb 2-1: USB disconnect, device number 17
[  200.602242][ T4310] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  200.746711][ T6252] netlink: 'syz.1.670': attribute type 2 has an invalid length.
[  200.807408][ T4310] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  200.819538][ T4310] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  200.831398][ T4310] usb 3-1: config 0 interface 0 has no altsetting 0
[  200.859895][ T4310] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  200.879767][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  200.889726][ T4310] usb 3-1: Product: syz
[  200.894806][ T4310] usb 3-1: Manufacturer: syz
[  200.899526][ T4310] usb 3-1: SerialNumber: syz
[  200.930344][ T4310] usb 3-1: config 0 descriptor??
[  200.941765][ T4310] hub 3-1:0.0: bad descriptor, ignoring hub
[  200.960612][ T4310] hub: probe of 3-1:0.0 failed with error -5
[  200.981222][ T4310] usb 3-1: selecting invalid altsetting 0
[  201.052394][   T22] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  201.074186][ T5508] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  201.232538][ T5508] usb 1-1: device descriptor read/64, error -71
[  201.242253][   T22] usb 5-1: Using ep0 maxpacket: 8
[  201.249780][   T22] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  201.258522][   T22] usb 5-1: config 179 has no interface number 0
[  201.265795][   T22] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  201.273387][  T129] usb 3-1: USB disconnect, device number 22
[  201.278320][   T22] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  201.295279][   T22] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  201.307455][   T22] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  201.325399][   T22] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  201.394779][   T22] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  201.412954][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.431734][ T6254] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  201.512677][ T5508] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  201.648813][  T129] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  201.697553][ T5508] usb 1-1: device descriptor read/64, error -71
[  201.833460][ T5508] usb usb1-port1: attempt power cycle
[  201.864758][  T129] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  201.876949][ T5252] usb 5-1: USB disconnect, device number 22
[  201.882526][  T129] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  201.883459][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  201.901418][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  201.902302][  T129] usb 3-1: config 0 interface 0 has no altsetting 0
[  201.910807][    C1] vkms_vblank_simulate: vblank timer overrun
[  201.957351][  T129] usb 3-1: string descriptor 0 read error: -22
[  201.973646][  T129] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  202.006523][  T129] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  202.031067][  T129] usb 3-1: config 0 descriptor??
[  202.048794][  T129] hub 3-1:0.0: bad descriptor, ignoring hub
[  202.056990][  T129] hub: probe of 3-1:0.0 failed with error -5
[  202.074371][  T129] usb 3-1: selecting invalid altsetting 0
[  202.246609][ T5508] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  202.308227][ T5508] usb 1-1: device descriptor read/8, error -71
[  202.331651][ T6282] netlink: 'syz.1.682': attribute type 2 has an invalid length.
[  202.402464][ T4310] usb 3-1: USB disconnect, device number 23
[  202.592224][ T5508] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  202.627360][ T5508] usb 1-1: device descriptor read/8, error -71
[  202.752491][ T5508] usb usb1-port1: unable to enumerate USB device
[  202.990461][   T33] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  203.212869][   T33] usb 4-1: no configurations
[  203.217568][   T33] usb 4-1: can't read configurations, error -22
[  203.235634][ T6309] netlink: 'syz.1.693': attribute type 2 has an invalid length.
[  203.372283][   T33] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  203.564593][   T33] usb 4-1: no configurations
[  203.573407][   T33] usb 4-1: can't read configurations, error -22
[  203.580123][   T33] usb usb4-port1: attempt power cycle
[  203.614407][  T129] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  203.744986][ T6321] fuse: Bad value for 'rootmode'
[  203.816221][  T129] usb 2-1: Using ep0 maxpacket: 8
[  203.831765][  T129] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  203.847344][  T129] usb 2-1: config 179 has no interface number 0
[  203.863522][  T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  203.874878][  T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  203.898835][  T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  203.911925][  T129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  203.924087][  T129] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  203.938257][  T129] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  203.947978][  T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.969153][ T6314] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  203.992308][   T33] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  204.033488][   T33] usb 4-1: no configurations
[  204.038189][   T33] usb 4-1: can't read configurations, error -22
[  204.162301][ T5252] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  204.192411][   T33] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  204.232343][   T33] usb 4-1: no configurations
[  204.237057][   T33] usb 4-1: can't read configurations, error -22
[  204.258963][   T33] usb usb4-port1: unable to enumerate USB device
[  204.354694][ T5252] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  204.370447][ T5252] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  204.398375][ T5252] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.405205][  T129] usb 2-1: USB disconnect, device number 18
[  204.411225][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  204.411703][ T5252] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  204.419577][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  204.471660][ T6335] netlink: 'syz.2.705': attribute type 2 has an invalid length.
[  204.489664][ T5252] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  204.500043][ T5252] usb 1-1: Product: syz
[  204.511891][ T5252] usb 1-1: Manufacturer: syz
[  204.516846][ T5252] usb 1-1: SerialNumber: syz
[  204.529909][ T5252] usb 1-1: config 0 descriptor??
[  204.541398][ T5252] hub 1-1:0.0: bad descriptor, ignoring hub
[  204.556769][ T5252] hub: probe of 1-1:0.0 failed with error -5
[  204.565965][ T5252] usb 1-1: selecting invalid altsetting 0
[  204.862049][ T6345] device syzkaller0 entered promiscuous mode
[  205.424211][  T129] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  205.571334][ T6354] Zero length message leads to an empty skb
[  206.847184][ T6360] fuse: Bad value for 'rootmode'
[  207.519999][ T6369] netlink: 'syz.4.717': attribute type 2 has an invalid length.
[  207.566438][ T6371] fuse: Unknown parameter 'grou00000000000000000000'
[  207.952408][   T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  208.132261][   T22] usb 3-1: Using ep0 maxpacket: 8
[  208.143888][   T22] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  208.163540][   T22] usb 3-1: config 179 has no interface number 0
[  208.169883][   T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  208.181721][   T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  208.196917][  T126] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  208.205456][   T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  208.217832][   T22] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  208.229816][   T22] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  208.244188][   T22] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  208.267551][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.292565][ T6375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  208.393078][  T126] usb 5-1: no configurations
[  208.397827][  T126] usb 5-1: can't read configurations, error -22
[  208.511765][ T6391] fuse: Bad value for 'group_id'
[  208.562480][  T126] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  208.642032][ T6393] netlink: 'syz.3.729': attribute type 2 has an invalid length.
[  208.657302][ T6395] fuse: Unknown parameter 'grou00000000000000000000'
[  208.727767][   T22] usb 3-1: USB disconnect, device number 24
[  208.734075][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  208.742393][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  208.753430][  T126] usb 5-1: no configurations
[  208.758230][  T126] usb 5-1: can't read configurations, error -22
[  208.771932][  T126] usb usb5-port1: attempt power cycle
[  209.050059][ T5252] usb 1-1: USB disconnect, device number 14
[  209.182497][  T126] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  209.223274][  T126] usb 5-1: no configurations
[  209.227908][  T126] usb 5-1: can't read configurations, error -22
[  209.342451][ T4314] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  209.396757][  T126] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  209.437212][  T126] usb 5-1: no configurations
[  209.442017][  T126] usb 5-1: can't read configurations, error -22
[  209.449580][  T126] usb usb5-port1: unable to enumerate USB device
[  209.532369][ T5252] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  209.555238][ T6419] fuse: Bad value for 'group_id'
[  209.645946][ T6421] netlink: 'syz.2.741': attribute type 2 has an invalid length.
[  209.730386][ T5252] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  209.744483][ T5252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.771382][ T5252] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  209.814180][ T5252] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  209.829773][ T5252] usb 1-1: Manufacturer: syz
[  209.847474][ T5252] usb 1-1: config 0 descriptor??
[  209.861882][ T5252] igorplugusb 1-1:0.0: incorrect number of endpoints
[  209.910492][ T6423] fuse: Unknown parameter 'grou00000000000000000000'
[  210.068150][ T5252] usb 1-1: USB disconnect, device number 15
[  210.332481][ T6429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  210.642617][ T5252] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  210.811561][ T6442] overlayfs: missing 'lowerdir'
[  210.832023][ T6444] netlink: 'syz.3.752': attribute type 2 has an invalid length.
[  210.844436][ T5252] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  210.857209][ T5252] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  210.871011][ T5252] usb 3-1: config 0 interface 0 has no altsetting 0
[  210.890504][ T5252] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  210.921078][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  210.939358][ T5252] usb 3-1: Product: syz
[  210.956360][ T5252] usb 3-1: Manufacturer: syz
[  210.972020][ T5252] usb 3-1: SerialNumber: syz
[  211.012360][ T5252] usb 3-1: config 0 descriptor??
[  211.061006][ T5252] hub 3-1:0.0: bad descriptor, ignoring hub
[  211.072803][ T5252] hub: probe of 3-1:0.0 failed with error -5
[  211.093884][ T5252] usb 3-1: selecting invalid altsetting 0
[  211.103090][ T6446] fuse: Unknown parameter 'group_i00000000000000000000'
[  211.454642][ T6456] device syzkaller0 entered promiscuous mode
[  211.638172][ T6460] binder: 6459:6460 ioctl 4018620d 0 returned -22
[  211.962271][ T5508] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  212.065386][ T6469] netlink: 'syz.4.763': attribute type 2 has an invalid length.
[  212.151688][ T5508] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  212.160960][ T5508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.179435][ T5508] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  212.194229][ T5508] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  212.204430][ T5508] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  212.213102][ T5508] usb 1-1: Manufacturer: syz
[  212.225560][ T6473] fuse: Unknown parameter 'group_id00000000000000000000'
[  212.236677][ T5508] usb 1-1: config 0 descriptor??
[  212.246517][ T5508] igorplugusb 1-1:0.0: incorrect number of endpoints
[  212.508881][ T5508] usb 1-1: USB disconnect, device number 16
[  212.622801][ T4314] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  213.588210][ T6487] binder: 6486:6487 ioctl 4018620d 0 returned -22
[  213.604798][ T4314] usb 2-1: unable to read config index 0 descriptor/start: -61
[  213.616883][ T4314] usb 2-1: can't read configurations, error -61
[  213.624818][ T4314] usb usb2-port1: attempt power cycle
[  213.893681][ T6499] netlink: 'syz.3.775': attribute type 2 has an invalid length.
[  213.989939][ T6503] fuse: Unknown parameter 'group_id00000000000000000000'
[  214.032331][ T4314] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  214.076167][ T4314] usb 2-1: unable to read config index 0 descriptor/start: -61
[  214.084190][ T6506] fuse: Unknown parameter 'user_id00000000000000000000'
[  214.091518][ T4314] usb 2-1: can't read configurations, error -61
[  214.142335][ T5252] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  214.252483][ T4314] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  214.328923][ T4314] usb 2-1: unable to read config index 0 descriptor/start: -61
[  214.351373][ T4314] usb 2-1: can't read configurations, error -61
[  214.400501][ T4314] usb usb2-port1: unable to enumerate USB device
[  215.515483][  T129] usb 3-1: USB disconnect, device number 25
[  217.204807][ T6519] binder: 6517:6519 ioctl 4018620d 0 returned -22
[  217.383663][ T6527] netlink: 'syz.3.787': attribute type 2 has an invalid length.
[  217.442254][ T5508] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  217.615440][ T6532] fuse: Unknown parameter 'group_id00000000000000000000'
[  217.642260][ T5508] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  217.663209][ T5508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.674320][ T6534] fuse: Unknown parameter 'user_id00000000000000000000'
[  217.701723][ T5508] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  217.730106][ T5508] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  217.741643][ T5508] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  217.751793][ T6536] netlink: 104 bytes leftover after parsing attributes in process `syz.4.790'.
[  217.768547][ T5508] usb 1-1: Manufacturer: syz
[  217.813996][ T5508] usb 1-1: config 0 descriptor??
[  217.835208][ T5508] igorplugusb 1-1:0.0: incorrect number of endpoints
[  218.105974][ T5508] usb 1-1: USB disconnect, device number 17
[  218.362451][   T14] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  218.578595][   T14] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  218.697389][   T14] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  218.872923][   T14] usb 4-1: config 0 interface 0 has no altsetting 0
[  219.011267][   T14] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  219.125030][   T14] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  219.224886][   T14] usb 4-1: Product: syz
[  219.277634][   T14] usb 4-1: Manufacturer: syz
[  219.339552][   T14] usb 4-1: SerialNumber: syz
[  219.457225][   T14] usb 4-1: config 0 descriptor??
[  219.562049][   T14] hub 4-1:0.0: bad descriptor, ignoring hub
[  219.633820][   T14] hub: probe of 4-1:0.0 failed with error -5
[  219.824421][   T14] usb 4-1: selecting invalid altsetting 0
[  220.379380][   T14] usb 4-1: USB disconnect, device number 30
[  220.433141][ T6554] binder: 6553:6554 ioctl c0306201 0 returned -14
[  220.503834][ T6556] netlink: 'syz.4.799': attribute type 2 has an invalid length.
[  220.734942][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.933989][ T6578] fuse: Bad value for 'user_id'
[  221.118145][ T6580] fuse: Unknown parameter 'user_id00000000000000000000'
[  222.960078][ T6596] binder: 6595:6596 ioctl c0306201 0 returned -14
[  223.046830][ T6600] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  223.085141][ T6600] Cannot find add_set index 65532 as target
[  223.125638][ T6602] netlink: 'syz.4.812': attribute type 2 has an invalid length.
[  223.285605][   T22] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  223.501043][   T22] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  223.509377][   T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  223.519760][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  223.530041][   T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  223.539591][   T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  223.548078][   T22] usb 2-1: Product: syz
[  223.552602][   T22] usb 2-1: Manufacturer: syz
[  223.557245][   T22] usb 2-1: SerialNumber: syz
[  223.577101][   T22] usb 2-1: config 0 descriptor??
[  223.602352][   T22] hub 2-1:0.0: bad descriptor, ignoring hub
[  223.608330][   T22] hub: probe of 2-1:0.0 failed with error -5
[  223.619413][   T22] usb 2-1: selecting invalid altsetting 0
[  224.242289][ T6598] usb 2-1: reset high-speed USB device number 24 using dummy_hcd
[  224.489103][ T6598] usb 2-1: device firmware changed
[  224.507454][   T22] usb 2-1: USB disconnect, device number 24
[  224.672523][   T22] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  224.879221][   T22] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  224.887531][   T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  224.901599][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  224.916522][   T22] usb 2-1: string descriptor 0 read error: -22
[  224.926067][   T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  224.938040][   T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  224.949129][   T22] usb 2-1: config 0 descriptor??
[  224.957090][   T22] hub 2-1:0.0: bad descriptor, ignoring hub
[  224.963118][   T22] hub: probe of 2-1:0.0 failed with error -5
[  224.971865][   T22] usb 2-1: selecting invalid altsetting 0
[  225.283803][   T22] usb 2-1: USB disconnect, device number 25
[  225.522330][ T6617] fuse: Bad value for 'user_id'
[  225.527625][ T6618] fuse: Bad value for 'fd'
[  226.098813][ T6642] binder: 6641:6642 ioctl c0306201 0 returned -14
[  226.254681][ T6647] netlink: 'syz.0.826': attribute type 2 has an invalid length.
[  226.390863][ T6653] fuse: Bad value for 'user_id'
[  226.591523][ T6661] fuse: Bad value for 'fd'
[  226.879098][ T6670] xt_hashlimit: size too large, truncated to 1048576
[  228.638928][ T6697] netlink: 'syz.1.840': attribute type 2 has an invalid length.
[  229.369123][ T6701] fuse: Bad value for 'fd'
[  230.280031][ T6713] fuse: Bad value for 'fd'
[  230.304471][ T6709] device syzkaller1 entered promiscuous mode
[  231.657773][ T6735] netlink: 'syz.4.855': attribute type 2 has an invalid length.
[  232.033630][ T6748] fuse: Unknown parameter '0x0000000000000003'
[  233.512475][ T4318] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  233.644665][ T6780] netlink: 'syz.0.869': attribute type 2 has an invalid length.
[  233.714492][ T4318] usb 3-1: unable to read config index 0 descriptor/start: -61
[  233.742318][ T4318] usb 3-1: can't read configurations, error -61
[  233.785113][ T6785] fuse: Unknown parameter '0x0000000000000003'
[  233.927743][ T4318] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  234.147856][ T4318] usb 3-1: unable to read config index 0 descriptor/start: -61
[  234.167473][ T4318] usb 3-1: can't read configurations, error -61
[  234.185245][ T4318] usb usb3-port1: attempt power cycle
[  234.342515][  T129] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  234.381754][ T6799] device syzkaller0 entered promiscuous mode
[  234.535836][  T129] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  234.552639][  T129] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  234.573817][  T129] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  234.590519][  T129] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  234.599126][  T129] usb 4-1: Manufacturer: syz
[  234.604257][ T4318] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  234.622964][  T129] usb 4-1: config 0 descriptor??
[  234.637905][  T129] igorplugusb 4-1:0.0: incorrect number of endpoints
[  234.677814][ T4318] usb 3-1: unable to read config index 0 descriptor/start: -61
[  234.692759][ T4318] usb 3-1: can't read configurations, error -61
[  234.842369][ T4318] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  234.855851][  T129] usb 4-1: USB disconnect, device number 31
[  235.644857][ T4318] usb 3-1: unable to read config index 0 descriptor/start: -61
[  235.662752][ T4318] usb 3-1: can't read configurations, error -61
[  235.669285][ T4318] usb usb3-port1: unable to enumerate USB device
[  236.852059][ T6816] netlink: 'syz.3.882': attribute type 2 has an invalid length.
[  238.040767][ T6823] fuse: Bad value for 'fd'
[  238.602242][ T4318] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  238.722267][  T129] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  239.022246][ T4277] Bluetooth: hci4: command 0x0405 tx timeout
[  239.391809][ T6853] fuse: Unknown parameter '0x0000000000000003'
[  239.464745][ T4318] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  239.475342][ T4318] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  239.489242][  T129] usb 2-1: unable to read config index 0 descriptor/start: -61
[  239.498760][ T4318] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  239.508340][  T129] usb 2-1: can't read configurations, error -61
[  239.515452][ T4318] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  239.532523][ T4318] usb 5-1: Manufacturer: syz
[  239.552414][ T4318] usb 5-1: config 0 descriptor??
[  239.571065][ T4318] igorplugusb 5-1:0.0: incorrect number of endpoints
[  239.677010][  T129] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  239.730421][ T6864] netlink: 'syz.3.898': attribute type 2 has an invalid length.
[  239.751106][ T6860] device syzkaller0 entered promiscuous mode
[  239.772382][ T4314] usb 5-1: USB disconnect, device number 28
[  239.876279][  T129] usb 2-1: unable to read config index 0 descriptor/start: -61
[  239.894634][  T129] usb 2-1: can't read configurations, error -61
[  239.896113][ T6867] binder: 6866:6867 ioctl c0306201 0 returned -14
[  239.910405][  T129] usb usb2-port1: attempt power cycle
[  240.332365][  T129] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  240.408952][  T129] usb 2-1: unable to read config index 0 descriptor/start: -61
[  240.421332][  T129] usb 2-1: can't read configurations, error -61
[  240.540715][ T6885] fuse: Unknown parameter '0x0000000000000003'
[  240.588560][  T129] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  240.668700][  T129] usb 2-1: unable to read config index 0 descriptor/start: -61
[  240.685308][  T129] usb 2-1: can't read configurations, error -61
[  240.711141][  T129] usb usb2-port1: unable to enumerate USB device
[  241.917919][ T6905] netlink: 'syz.4.910': attribute type 2 has an invalid length.
[  243.051377][ T6910] binder: 6909:6910 ioctl c0306201 0 returned -14
[  243.288740][ T6921] fuse: Unknown parameter '0x0000000000000003'
[  243.421719][   T22] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  243.628199][   T22] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  243.708515][   T22] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  243.888739][   T22] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  244.030502][   T22] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  244.138482][   T22] usb 2-1: Manufacturer: syz
[  244.294696][   T22] usb 2-1: config 0 descriptor??
[  244.344324][   T22] igorplugusb 2-1:0.0: incorrect number of endpoints
[  244.548424][   T22] usb 2-1: USB disconnect, device number 30
[  244.617409][ T6945] device syzkaller0 entered promiscuous mode
[  244.625632][ T6950] netlink: 'syz.0.924': attribute type 2 has an invalid length.
[  245.680739][ T6961] binder: 6960:6961 ioctl c0306201 0 returned -14
[  245.779259][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.929'.
[  245.879095][ T6965] fuse: Bad value for 'fd'
[  247.221555][ T6991] fuse: Unknown parameter 'group_id00000000000000000000'
[  247.368918][ T6995] fuse: Unknown parameter '0x0000000000000005'
[  247.462227][   T22] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  247.658987][   T22] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  247.676662][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.690646][   T22] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  247.706082][   T22] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  247.715661][   T22] usb 2-1: Manufacturer: syz
[  247.748429][   T22] usb 2-1: config 0 descriptor??
[  247.809787][ T7004] fuse: Invalid rootmode
[  247.980573][   T22] rc_core: IR keymap rc-hauppauge not found
[  247.994942][   T22] Registered IR keymap rc-empty
[  248.001400][   T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  248.015625][   T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12
[  248.039451][   T22] usb 2-1: USB disconnect, device number 31
[  248.257252][ T7011] fuse: Unknown parameter 'fd0x0000000000000003'
[  250.249120][ T7035] fuse: Unknown parameter 'group_id00000000000000000000'
[  250.287020][ T7033] fuse: Unknown parameter '0x0000000000000005'
[  250.348814][ T7044] fuse: Invalid rootmode
[  251.845673][ T7083] fuse: Invalid rootmode
[  254.951927][ T7088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.153946][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  255.235897][ T7133] fuse: Unknown parameter 'use00000000000000000000'
[  255.275076][ T7132] device syzkaller0 entered promiscuous mode
[  255.557321][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.989'.
[  255.745421][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.752194][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  255.955977][ T7162] fuse: Bad value for 'rootmode'
[  256.388478][ T7175] device syzkaller0 entered promiscuous mode
[  256.585876][ T7179] fuse: Unknown parameter 'fd0x0000000000000005'
[  257.027248][ T7200] fuse: Unknown parameter 'use00000000000000000000'
[  257.654824][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'.
[  258.911460][ T7163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.921925][ T7282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'.
[  260.162365][ T5252] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  260.354030][ T5252] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  260.378413][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.419536][ T5252] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  260.449791][ T5252] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  260.479347][ T5252] usb 5-1: Manufacturer: syz
[  260.494149][ T5252] usb 5-1: config 0 descriptor??
[  260.662269][ T5252] rc_core: IR keymap rc-hauppauge not found
[  260.680476][ T5252] Registered IR keymap rc-empty
[  260.687963][ T5252] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  260.709777][ T5252] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13
[  260.759247][ T5252] usb 5-1: USB disconnect, device number 29
[  263.284579][ T7312] device syzkaller1 entered promiscuous mode
[  263.295755][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'.
[  263.955514][ T4312] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  264.134918][ T7359] fuse: Unknown parameter 'user_i00000000000000000000'
[  264.153776][ T4312] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  264.182456][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.199682][ T4312] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  264.219455][ T4312] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  264.236495][ T4312] usb 1-1: Manufacturer: syz
[  264.272343][ T4312] usb 1-1: config 0 descriptor??
[  264.522646][ T7369] fuse: Unknown parameter 'user_i00000000000000000000'
[  264.672167][ T4312] rc_core: IR keymap rc-hauppauge not found
[  264.678142][ T4312] Registered IR keymap rc-empty
[  264.713595][ T4312] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  264.744853][ T4312] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14
[  264.779736][ T4312] usb 1-1: USB disconnect, device number 18
[  265.021192][ T7384] fuse: Unknown parameter 'user_i00000000000000000000'
[  265.191506][ T7392] fuse: Unknown parameter 'user_id00000000000000000000'
[  265.976955][ T4318] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  266.147091][ T7425] fuse: Unknown parameter 'user_id00000000000000000000'
[  266.174147][ T4318] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  266.187983][ T4318] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  266.212260][ T4318] usb 5-1: config 0 interface 0 has no altsetting 0
[  266.225548][ T7427] fuse: Unknown parameter 'user_id00000000000000000000'
[  266.244589][ T4318] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  266.262792][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  266.281470][ T4318] usb 5-1: Product: syz
[  266.291762][ T4318] usb 5-1: Manufacturer: syz
[  266.301732][ T4318] usb 5-1: SerialNumber: syz
[  266.322721][ T4318] usb 5-1: config 0 descriptor??
[  266.344320][ T4318] hub 5-1:0.0: bad descriptor, ignoring hub
[  266.376672][ T4318] hub: probe of 5-1:0.0 failed with error -5
[  266.422919][ T4318] usb 5-1: selecting invalid altsetting 0
[  266.996785][ T7413] usb 5-1: reset high-speed USB device number 30 using dummy_hcd
[  267.180277][ T7459] fuse: Unknown parameter 'user_id00000000000000000000'
[  267.209337][ T7413] usb 5-1: device firmware changed
[  267.225035][ T7113] usb 5-1: USB disconnect, device number 30
[  267.414520][ T7113] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  267.448855][ T7462] fuse: Unknown parameter 'user_id00000000000000000000'
[  267.604511][ T7113] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  267.614165][ T7113] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  267.637654][ T7113] usb 5-1: config 0 interface 0 has no altsetting 0
[  267.664279][ T7113] usb 5-1: string descriptor 0 read error: -22
[  267.678458][ T7113] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  267.698092][ T7113] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  267.733365][ T7113] usb 5-1: config 0 descriptor??
[  267.752439][ T7113] hub 5-1:0.0: bad descriptor, ignoring hub
[  267.758560][ T7113] hub: probe of 5-1:0.0 failed with error -5
[  267.769647][ T7113] usb 5-1: selecting invalid altsetting 0
[  268.063724][ T7113] usb 5-1: USB disconnect, device number 31
[  268.655322][ T7475] binder: 7474:7475 ioctl c0306201 0 returned -14
[  268.728446][ T7477] fuse: Bad value for 'fd'
[  269.316883][ T7488] fuse: Bad value for 'fd'
[  269.361677][ T7490] fuse: Unknown parameter 'user_id00000000000000000000'
[  269.523328][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  269.551348][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  269.566852][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  269.616598][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.638857][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.670197][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.693435][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.697465][ T7440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  269.718635][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.757334][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.791422][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  269.824416][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.859837][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.903566][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.926641][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.963963][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  269.994350][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.028050][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.039362][ T7492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.054530][ T7492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.272927][ T7508] device syzkaller0 entered promiscuous mode
[  270.727813][   T14] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  270.836134][ T7526] fuse: Bad value for 'fd'
[  270.914028][   T14] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  270.935931][   T14] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  270.966485][   T14] usb 5-1: config 0 interface 0 has no altsetting 0
[  270.987364][   T14] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  271.035792][   T14] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  271.049542][   T14] usb 5-1: Product: syz
[  271.059674][   T14] usb 5-1: Manufacturer: syz
[  271.069856][   T14] usb 5-1: SerialNumber: syz
[  271.092839][   T14] usb 5-1: config 0 descriptor??
[  271.138213][   T14] hub 5-1:0.0: bad descriptor, ignoring hub
[  271.152716][   T14] hub: probe of 5-1:0.0 failed with error -5
[  271.172017][   T14] usb 5-1: selecting invalid altsetting 0
[  271.921862][ T7549] device syzkaller0 entered promiscuous mode
[  272.222223][ T7513] usb 5-1: reset high-speed USB device number 32 using dummy_hcd
[  272.424641][ T7513] usb 5-1: device firmware changed
[  272.430599][ T4318] usb 5-1: USB disconnect, device number 32
[  272.622637][ T4318] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  272.641930][ T7563] fuse: Bad value for 'fd'
[  272.840989][ T4318] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  273.007172][ T4318] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  273.017519][ T4318] usb 5-1: config 0 interface 0 has no altsetting 0
[  273.027986][ T4318] usb 5-1: string descriptor 0 read error: -22
[  273.159838][ T4318] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  273.185626][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  273.260286][ T4318] usb 5-1: config 0 descriptor??
[  273.292018][ T4318] hub 5-1:0.0: bad descriptor, ignoring hub
[  273.315801][ T4318] hub: probe of 5-1:0.0 failed with error -5
[  273.325803][ T4318] usb 5-1: selecting invalid altsetting 0
[  273.648887][ T7589] device syzkaller0 entered promiscuous mode
[  273.653175][   T14] usb 5-1: USB disconnect, device number 33
[  273.924804][ T7600] fuse: Bad value for 'fd'
[  274.120971][ T7602] netlink: 'syz.1.1160': attribute type 2 has an invalid length.
[  274.687753][   T14] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  274.897708][   T14] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  274.924357][   T14] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  274.962172][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  274.998444][   T14] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  275.022185][   T14] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  275.030430][   T14] usb 2-1: Product: syz
[  275.062180][   T14] usb 2-1: Manufacturer: syz
[  275.067688][   T14] usb 2-1: SerialNumber: syz
[  275.112508][   T14] usb 2-1: config 0 descriptor??
[  275.125849][   T14] hub 2-1:0.0: bad descriptor, ignoring hub
[  275.131924][   T14] hub: probe of 2-1:0.0 failed with error -5
[  275.174896][   T14] usb 2-1: selecting invalid altsetting 0
[  275.391796][ T7633] xt_hashlimit: size too large, truncated to 1048576
[  275.492753][ T7636] device syzkaller0 entered promiscuous mode
[  275.768629][ T7614] usb 2-1: reset high-speed USB device number 32 using dummy_hcd
[  275.990065][ T7614] usb 2-1: device firmware changed
[  276.002881][   T14] usb 2-1: USB disconnect, device number 32
[  276.234547][   T14] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  276.446961][   T14] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  276.465634][   T14] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  276.508073][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  276.564193][   T14] usb 2-1: string descriptor 0 read error: -22
[  276.574984][   T14] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  276.602257][   T14] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  276.639775][   T14] usb 2-1: config 0 descriptor??
[  276.660026][   T14] hub 2-1:0.0: bad descriptor, ignoring hub
[  276.678087][   T14] hub: probe of 2-1:0.0 failed with error -5
[  276.687018][   T14] usb 2-1: selecting invalid altsetting 0
[  276.985691][ T4341] usb 2-1: USB disconnect, device number 33
[  278.257203][ T7669] fuse: Unknown parameter '0x0000000000000003'
[  279.182458][ T7113] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  279.368234][ T7696] device syzkaller0 entered promiscuous mode
[  279.375299][ T7113] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  279.391730][ T7113] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  279.402551][ T7113] usb 2-1: config 0 interface 0 has no altsetting 0
[  279.413743][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'.
[  279.424247][ T7113] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  279.433865][ T7113] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  279.450493][ T7113] usb 2-1: Product: syz
[  279.456690][ T7113] usb 2-1: Manufacturer: syz
[  279.461779][ T7113] usb 2-1: SerialNumber: syz
[  279.477933][ T7113] usb 2-1: config 0 descriptor??
[  279.522447][ T7113] hub 2-1:0.0: bad descriptor, ignoring hub
[  279.552967][ T7113] hub: probe of 2-1:0.0 failed with error -5
[  279.572071][ T7113] usb 2-1: selecting invalid altsetting 0
[  279.580147][ T7699] fuse: Unknown parameter '0x0000000000000003'
[  280.142286][ T7685] usb 2-1: reset high-speed USB device number 34 using dummy_hcd
[  280.334093][ T7685] usb 2-1: device firmware changed
[  280.341005][ T7113] usb 2-1: USB disconnect, device number 34
[  280.562192][ T7113] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  280.769865][ T7113] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  280.792030][ T7113] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  280.817790][ T7113] usb 2-1: config 0 interface 0 has no altsetting 0
[  280.830366][ T7113] usb 2-1: string descriptor 0 read error: -22
[  280.842001][ T7113] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  280.860306][ T7113] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  280.882980][ T7113] usb 2-1: config 0 descriptor??
[  280.890553][ T7113] hub 2-1:0.0: bad descriptor, ignoring hub
[  280.916750][ T7113] hub: probe of 2-1:0.0 failed with error -5
[  280.928950][ T7113] usb 2-1: selecting invalid altsetting 0
[  281.219078][ T7113] usb 2-1: USB disconnect, device number 35
[  282.985808][ T7752] fuse: Unknown parameter '0x0000000000000003'
[  283.990664][ T7784] netlink: 'syz.0.1216': attribute type 2 has an invalid length.
[  284.008959][ T7783] device syzkaller0 entered promiscuous mode
[  286.406174][ T7803] fuse: Unknown parameter '0x0000000000000003'
[  286.973340][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'.
[  287.316083][ T7832] netlink: 'syz.0.1232': attribute type 2 has an invalid length.
[  287.482221][  T129] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  287.598106][ T7841] fuse: Unknown parameter '0x0000000000000003'
[  287.612454][ T7837] netlink: 'syz.4.1234': attribute type 13 has an invalid length.
[  287.631185][ T7837] device veth0_macvtap left promiscuous mode
[  287.650369][ T7837] macvtap0: refused to change device tx_queue_len
[  287.704380][  T129] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  287.722173][  T129] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  287.752596][  T129] usb 3-1: config 0 interface 0 has no altsetting 0
[  287.768969][ T7842] device syzkaller0 entered promiscuous mode
[  287.784020][  T129] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  287.798773][  T129] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  287.813505][  T129] usb 3-1: Product: syz
[  287.817819][  T129] usb 3-1: Manufacturer: syz
[  287.833218][  T129] usb 3-1: SerialNumber: syz
[  287.854093][  T129] usb 3-1: config 0 descriptor??
[  287.870695][  T129] hub 3-1:0.0: bad descriptor, ignoring hub
[  287.887948][  T129] hub: probe of 3-1:0.0 failed with error -5
[  287.900815][  T129] usb 3-1: selecting invalid altsetting 0
[  288.141303][ T7854] netlink: 'syz.1.1239': attribute type 1 has an invalid length.
[  288.495400][ T7829] usb 3-1: reset high-speed USB device number 30 using dummy_hcd
[  288.694342][ T7829] usb 3-1: device firmware changed
[  288.704455][  T129] usb 3-1: USB disconnect, device number 30
[  288.892266][  T129] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  289.058855][ T7866] netlink: 'syz.4.1243': attribute type 2 has an invalid length.
[  289.144521][  T129] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  289.162144][  T129] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  289.184534][  T129] usb 3-1: config 0 interface 0 has no altsetting 0
[  289.244564][  T129] usb 3-1: string descriptor 0 read error: -22
[  289.250843][  T129] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  289.260043][  T129] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  289.281252][  T129] usb 3-1: config 0 descriptor??
[  289.297442][  T129] hub 3-1:0.0: bad descriptor, ignoring hub
[  289.304881][  T129] hub: probe of 3-1:0.0 failed with error -5
[  289.315355][  T129] usb 3-1: selecting invalid altsetting 0
[  289.622606][ T4341] usb 3-1: USB disconnect, device number 31
[  291.654437][ T7890] device syzkaller0 entered promiscuous mode
[  291.855941][ T7893] device syzkaller0 entered promiscuous mode
[  291.892685][ T7893] tc action pedit offset must be on 32 bit boundaries
[  292.407738][ T7916] netlink: 'syz.2.1258': attribute type 2 has an invalid length.
[  293.746462][ T7969] netlink: 'syz.4.1272': attribute type 2 has an invalid length.
[  294.073532][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'.
[  294.265668][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  294.380914][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  295.214534][ T7993] device syzkaller0 entered promiscuous mode
[  295.402912][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1281'.
[  295.461580][ T8015] nbd: must specify at least one socket
[  295.959128][ T8029] netlink: 'syz.0.1286': attribute type 2 has an invalid length.
[  296.110416][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'.
[  296.206290][ T8038] device syzkaller0 entered promiscuous mode
[  297.231792][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1299'.
[  297.278543][ T8078] nbd: must specify at least one socket
[  297.579231][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1302'.
[  297.671415][ T8087] device syzkaller0 entered promiscuous mode
[  298.106771][ T8106] device syz_tun entered promiscuous mode
[  298.151670][ T8106] device macvtap1 entered promiscuous mode
[  298.983357][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1315'.
[  299.017084][ T8133] nbd: must specify at least one socket
[  299.061122][ T8135] netlink: 'syz.2.1314': attribute type 1 has an invalid length.
[  299.129426][ T8135] netlink: 'syz.2.1314': attribute type 4 has an invalid length.
[  299.678974][ T8156] device syzkaller0 entered promiscuous mode
[  300.439151][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  300.584479][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  300.664197][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  300.693281][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  300.845957][ T8189] device syzkaller0 entered promiscuous mode
[  301.039145][ T8194] device syzkaller0 entered promiscuous mode
[  301.454578][ T8198] block nbd0: not configured, cannot reconfigure
[  301.726865][ T8214] device syzkaller0 entered promiscuous mode
[  301.790779][ T8220] netlink: 636 bytes leftover after parsing attributes in process `syz.1.1339'.
[  301.932808][ T8222] device syzkaller0 entered promiscuous mode
[  301.961279][ T8225] device syzkaller0 entered promiscuous mode
[  302.279939][ T8239] device syzkaller1 entered promiscuous mode
[  303.440871][ T8271] device syzkaller0 entered promiscuous mode
[  304.232520][ T4341] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  304.424012][ T4341] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  304.437347][ T4341] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  304.450020][ T4341] usb 3-1: config 0 interface 0 has no altsetting 0
[  304.467331][ T4341] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  304.483844][ T4341] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  304.494243][ T4341] usb 3-1: Product: syz
[  304.498579][ T4341] usb 3-1: Manufacturer: syz
[  304.503883][ T4341] usb 3-1: SerialNumber: syz
[  304.518814][ T4341] usb 3-1: config 0 descriptor??
[  304.545128][ T4341] hub 3-1:0.0: bad descriptor, ignoring hub
[  304.559150][ T4341] hub: probe of 3-1:0.0 failed with error -5
[  304.578435][ T4341] usb 3-1: selecting invalid altsetting 0
[  305.162381][ T8297] usb 3-1: reset high-speed USB device number 32 using dummy_hcd
[  305.359251][ T8297] usb 3-1: device firmware changed
[  305.366173][  T129] usb 3-1: USB disconnect, device number 32
[  305.495746][ T8337] device syzkaller0 entered promiscuous mode
[  305.572201][  T129] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  305.763989][  T129] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  305.778949][  T129] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  305.789621][  T129] usb 3-1: config 0 interface 0 has no altsetting 0
[  305.804981][  T129] usb 3-1: string descriptor 0 read error: -22
[  305.818534][  T129] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  305.829562][  T129] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  305.840603][  T129] usb 3-1: config 0 descriptor??
[  305.847477][ T8351] netlink: 'syz.0.1384': attribute type 2 has an invalid length.
[  305.857151][  T129] hub 3-1:0.0: bad descriptor, ignoring hub
[  305.864014][  T129] hub: probe of 3-1:0.0 failed with error -5
[  305.873364][  T129] usb 3-1: selecting invalid altsetting 0
[  306.182451][  T129] usb 3-1: USB disconnect, device number 33
[  307.299360][ T8382] netlink: 'syz.0.1395': attribute type 2 has an invalid length.
[  307.453006][ T8386] device syzkaller0 entered promiscuous mode
[  307.912358][ T4318] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  307.949125][ T8378] Bluetooth: hci0: Opcode 0x080f failed: -4
[  308.104007][ T4318] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  308.132212][ T4318] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  308.171832][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0
[  308.193747][ T4318] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  308.224169][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  308.251830][ T4318] usb 1-1: Product: syz
[  308.259560][ T4318] usb 1-1: Manufacturer: syz
[  308.276230][ T4318] usb 1-1: SerialNumber: syz
[  308.312213][ T4318] usb 1-1: config 0 descriptor??
[  308.321715][ T4318] hub 1-1:0.0: bad descriptor, ignoring hub
[  308.350369][ T4318] hub: probe of 1-1:0.0 failed with error -5
[  308.378495][ T4318] usb 1-1: selecting invalid altsetting 0
[  308.676870][ T8422] netlink: 'syz.4.1407': attribute type 2 has an invalid length.
[  308.741955][ T8424] netlink: 'syz.3.1405': attribute type 1 has an invalid length.
[  308.790122][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1405'.
[  308.965471][ T8388] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  309.181433][ T8388] usb 1-1: device firmware changed
[  309.192383][ T4271] Bluetooth: hci0: command 0x080f tx timeout
[  309.198100][ T4318] usb 1-1: USB disconnect, device number 19
[  309.305191][ T8443] device syzkaller0 entered promiscuous mode
[  309.412464][ T4318] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  309.534511][ T8453] device syzkaller0 entered promiscuous mode
[  309.599098][ T4318] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  309.608004][ T4318] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  309.620264][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0
[  309.633426][ T4318] usb 1-1: string descriptor 0 read error: -22
[  309.645345][ T4318] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  309.665888][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  309.720393][ T4318] usb 1-1: config 0 descriptor??
[  309.764034][ T4318] hub 1-1:0.0: bad descriptor, ignoring hub
[  309.797750][ T4318] hub: probe of 1-1:0.0 failed with error -5
[  309.826148][ T4318] usb 1-1: selecting invalid altsetting 0
[  310.082753][ T4318] usb 1-1: USB disconnect, device number 20
[  310.232446][ T8471] netlink: 'syz.3.1419': attribute type 2 has an invalid length.
[  312.686821][ T8494] device syzkaller0 entered promiscuous mode
[  312.927488][ T8500] device syzkaller0 entered promiscuous mode
[  313.148460][ T8516] netlink: 'syz.4.1432': attribute type 2 has an invalid length.
[  315.568592][ T8563] device syzkaller0 entered promiscuous mode
[  315.748925][ T8565] device syzkaller0 entered promiscuous mode
[  315.773383][ T8567] netlink: 'syz.0.1445': attribute type 2 has an invalid length.
[  317.081016][ T8607] netlink: 'syz.2.1458': attribute type 2 has an invalid length.
[  317.171202][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'.
[  317.188351][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.195076][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.514493][ T8620] device syzkaller0 entered promiscuous mode
[  317.701904][ T8628] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1464'.
[  318.469967][ T8652] netlink: 'syz.4.1473': attribute type 2 has an invalid length.
[  318.478996][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'.
[  319.004192][ T8671] device syzkaller0 entered promiscuous mode
[  319.666156][ T8666] Bluetooth: hci0: Opcode 0x080f failed: -4
[  319.770862][ T8679] ./file0: Can't open blockdev
[  320.022998][ T8703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1489'.
[  320.583559][ T8729] loop1: detected capacity change from 0 to 1024
[  320.625643][ T8729] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  320.709542][ T8734] loop4: detected capacity change from 0 to 16
[  320.779550][ T8734] erofs: (device loop4): mounted with root inode @ nid 36.
[  320.818836][ T8734] syz.4.1501: attempt to access beyond end of device
[  320.818836][ T8734] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  320.933041][ T8734] syz.4.1501: attempt to access beyond end of device
[  320.933041][ T8734] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16
[  320.960540][ T8734] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  320.976377][   T26] audit: type=1800 audit(1773277025.988:3): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1501" name="file2" dev="loop4" ino=89 res=0 errno=0
[  320.996546][ T4277] Bluetooth: hci0: command 0x080f tx timeout
[  321.571439][ T8729] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  321.630473][ T8729] EXT4-fs (loop1): orphan cleanup on readonly fs
[  321.680166][ T8729] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1498: Inode bitmap for bg 0 marked uninitialized
[  321.816777][ T8729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  322.697656][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1505'.
[  322.967095][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  323.303548][ T8770] fuse: Unknown parameter 'user_i00000000000000000000'
[  323.527152][ T8780] loop3: detected capacity change from 0 to 512
[  323.678035][ T8780] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1514: bad orphan inode 13
[  323.765516][ T8780] ext4_test_bit(bit=12, block=4) = 1
[  323.770880][ T8780] is_bad_inode(inode)=0
[  323.792255][ T8780] NEXT_ORPHAN(inode)=0
[  323.810068][ T8780] max_ino=32
[  323.842906][ T8780] i_nlink=1
[  323.864264][ T8780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  324.005099][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  325.440294][ T8761] loop0: detected capacity change from 0 to 40427
[  325.497418][ T8761] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  325.546728][ T8761] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  325.592798][ T8761] F2FS-fs (loop0): inline encryption not supported
[  325.621101][ T8761] F2FS-fs (loop0): invalid crc value
[  325.657330][ T8761] F2FS-fs (loop0): Found nat_bits in checkpoint
[  325.708412][ T8819] loop2: detected capacity change from 0 to 512
[  325.717305][ T8816] device syzkaller0 entered promiscuous mode
[  325.785595][ T8819] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  325.828133][ T8761] F2FS-fs (loop0): Start checkpoint disabled!
[  325.833901][ T8819] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  325.859441][ T8819] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1527: invalid indirect mapped block 83886080 (level 1)
[  325.881112][ T8819] EXT4-fs (loop2): Remounting filesystem read-only
[  325.890146][ T8761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  325.901402][ T8819] EXT4-fs (loop2): 1 orphan inode deleted
[  325.919290][ T8819] EXT4-fs (loop2): 1 truncate cleaned up
[  325.927668][ T8819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  326.049933][ T8819] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #2: block 13: comm syz.2.1527: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  326.081609][ T8761] syz.0.1509: attempt to access beyond end of device
[  326.081609][ T8761] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  326.152193][ T8819] EXT4-fs (loop2): Remounting filesystem read-only
[  326.158967][ T8819] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #2: comm syz.2.1527: directory missing '..'
[  326.296409][   T46] kworker/u4:3: attempt to access beyond end of device
[  326.296409][   T46] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  326.313779][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  326.702247][ T4271] Bluetooth: hci5: command 0x1003 tx timeout
[  326.709873][ T4277] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  329.194152][ T8851] netlink: 624 bytes leftover after parsing attributes in process `syz.0.1535'.
[  332.276117][ T8873] loop3: detected capacity change from 0 to 2048
[  332.430466][ T8873] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  332.585557][ T8888] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1540: bg 0: block 234: padding at end of block bitmap is not set
[  332.722507][ T8888] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 112 with error 28
[  332.792401][ T8888] EXT4-fs (loop3): This should not happen!! Data will be lost
[  332.792401][ T8888] 
[  332.828418][ T8888] EXT4-fs (loop3): Total free blocks count 0
[  332.861989][ T8888] EXT4-fs (loop3): Free/Dirty block details
[  332.906676][ T8888] EXT4-fs (loop3): free_blocks=0
[  332.950395][ T8888] EXT4-fs (loop3): dirty_blocks=128
[  332.991097][ T8888] EXT4-fs (loop3): Block reservation details
[  333.015315][ T8888] EXT4-fs (loop3): i_reserved_data_blocks=8
[  333.050816][ T8894] netlink: 'syz.1.1546': attribute type 3 has an invalid length.
[  333.295162][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  333.905282][ T8922] loop0: detected capacity change from 0 to 1024
[  333.940618][ T8922] EXT4-fs: Ignoring removed bh option
[  333.956539][ T8922] EXT4-fs: Ignoring removed oldalloc option
[  333.976282][ T8922] EXT4-fs: Ignoring removed nobh option
[  334.007792][ T8922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  334.051744][ T8922] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  334.193034][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  334.295449][ T8931] loop1: detected capacity change from 0 to 16
[  334.319901][ T8931] erofs: (device loop1): mounted with root inode @ nid 36.
[  334.339173][ T8931] syz.1.1559: attempt to access beyond end of device
[  334.339173][ T8931] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  334.383598][ T8931] syz.1.1559: attempt to access beyond end of device
[  334.383598][ T8931] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16
[  334.398934][ T8931] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  334.423036][ T8931] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  334.435294][ T8931] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  334.486822][   T26] audit: type=1800 audit(1773277039.418:4): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1559" name="file2" dev="loop1" ino=89 res=0 errno=0
[  335.228244][ T8936] loop1: detected capacity change from 0 to 128
[  335.261480][ T8936] =======================================================
[  335.261480][ T8936] WARNING: The mand mount option has been deprecated and
[  335.261480][ T8936]          and is ignored by this kernel. Remove the mand
[  335.261480][ T8936]          option from the mount to silence this warning.
[  335.261480][ T8936] =======================================================
[  336.396887][ T8940] loop0: detected capacity change from 0 to 512
[  336.431549][ T8940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  336.504302][ T8940] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1562: invalid indirect mapped block 83886080 (level 1)
[  336.540613][ T8940] EXT4-fs (loop0): Remounting filesystem read-only
[  336.554945][ T8940] EXT4-fs (loop0): 1 orphan inode deleted
[  336.560747][ T8940] EXT4-fs (loop0): 1 truncate cleaned up
[  336.592162][ T8940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  336.704224][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  336.966983][ T8942] loop1: detected capacity change from 0 to 40427
[  337.000660][ T8942] F2FS-fs (loop1): Invalid uid value -1
[  339.164076][ T8965] netlink: 624 bytes leftover after parsing attributes in process `syz.2.1566'.
[  339.353222][ T8974] loop2: detected capacity change from 0 to 1024
[  339.363341][ T8971] device syzkaller0 entered promiscuous mode
[  339.378600][ T8974] EXT4-fs: Ignoring removed i_version option
[  339.499912][ T8974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  339.599546][ T8983] loop1: detected capacity change from 0 to 512
[  339.608950][   T26] audit: type=1800 audit(1773277044.618:5): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1571" name="bus" dev="loop2" ino=18 res=0 errno=0
[  339.699565][ T8974] syz.2.1571 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  339.710837][ T8983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  339.736150][ T8987] loop4: detected capacity change from 0 to 1024
[  339.758450][ T8987] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  339.768494][ T8983] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1574: invalid indirect mapped block 83886080 (level 1)
[  339.822202][   T22] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  339.848240][ T8983] EXT4-fs (loop1): Remounting filesystem read-only
[  339.865338][ T8987] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  339.879029][ T8983] EXT4-fs (loop1): 1 orphan inode deleted
[  339.888728][ T8987] EXT4-fs (loop4): orphan cleanup on readonly fs
[  339.899287][ T8987] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.1575: Inode bitmap for bg 0 marked uninitialized
[  339.913928][ T8983] EXT4-fs (loop1): 1 truncate cleaned up
[  339.920177][ T8983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  339.966892][ T8987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  340.006404][ T8974] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.1571: Allocating blocks 385-513 which overlap fs metadata
[  340.024112][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  340.033121][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  340.035725][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.070685][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.114710][   T22] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  340.126006][ T8972] EXT4-fs (loop2): pa ffff888073b70380: logic 16, phys. 129, len 24
[  340.135295][ T8972] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 8
[  340.165596][   T22] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  340.188315][   T22] usb 4-1: Manufacturer: syz
[  340.220114][   T22] usb 4-1: config 0 descriptor??
[  340.265838][ T8991] loop1: detected capacity change from 0 to 1024
[  340.299457][ T8991] EXT4-fs: Ignoring removed bh option
[  340.308043][ T8991] EXT4-fs: Ignoring removed oldalloc option
[  340.314449][ T8991] EXT4-fs: Ignoring removed nobh option
[  340.346198][ T8991] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  340.411463][ T4397] Trying to write to read-only block-device loop2
[  340.411555][ T4270] Trying to write to read-only block-device loop2
[  340.411630][ T4270] Trying to write to read-only block-device loop2
[  340.411667][ T4270] Trying to write to read-only block-device loop2
[  340.439783][ T4270] Trying to write to read-only block-device loop2
[  340.446499][ T4270] Trying to write to read-only block-device loop2
[  340.454510][ T4270] Trying to write to read-only block-device loop2
[  340.470331][ T4397] Trying to write to read-only block-device loop2
[  340.470797][ T4270] Trying to write to read-only block-device loop2
[  340.488327][ T4397] Trying to write to read-only block-device loop2
[  340.496817][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  340.505612][ T8991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  340.892938][ T9006] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1581'.
[  341.030805][ T8991] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3850: comm syz.1.1576: Allocating blocks 497-513 which overlap fs metadata
[  341.082851][ T8991] EXT4-fs (loop1): pa ffff88805283a7e0: logic 256, phys. 385, len 8
[  341.100398][ T8991] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1
[  341.328171][   T22] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71
[  341.347600][   T22] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71
[  341.370883][   T22] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71
[  341.415056][   T22] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  341.449676][   T22] uclogic: probe of 0003:256C:006D.0005 failed with error -71
[  341.508073][   T22] usb 4-1: USB disconnect, device number 32
[  341.679912][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  342.091287][ T9027] loop1: detected capacity change from 0 to 512
[  342.135667][ T9027] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  342.171268][ T9027] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1586: invalid indirect mapped block 83886080 (level 1)
[  342.265639][ T9027] EXT4-fs (loop1): Remounting filesystem read-only
[  342.291165][ T9027] EXT4-fs (loop1): 1 orphan inode deleted
[  342.304393][ T9027] EXT4-fs (loop1): 1 truncate cleaned up
[  342.310143][ T9027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  342.527835][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  342.679952][ T9039] loop1: detected capacity change from 0 to 1024
[  342.710316][ T9039] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  342.740057][ T9039] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  342.754324][ T9039] EXT4-fs (loop1): orphan cleanup on readonly fs
[  342.807883][ T9039] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.1587: Inode bitmap for bg 0 marked uninitialized
[  342.833613][ T9039] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  342.884676][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  345.233408][ T9013] device syzkaller0 entered promiscuous mode
[  346.151998][ T9077] loop3: detected capacity change from 0 to 1024
[  346.263071][ T9077] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  346.307295][ T9077] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  346.318023][ T9077] EXT4-fs (loop3): orphan cleanup on readonly fs
[  346.325934][ T9077] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1598: Inode bitmap for bg 0 marked uninitialized
[  346.357385][ T9077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  346.492701][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  346.601609][ T9080] loop3: detected capacity change from 0 to 512
[  346.837901][ T9080] EXT4-fs (loop3): Test dummy encryption mode enabled
[  346.848210][ T9080] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 259)!
[  346.861673][ T9080] EXT4-fs (loop3): group descriptors corrupted!
[  347.223392][ T9089] netlink: 636 bytes leftover after parsing attributes in process `syz.2.1601'.
[  349.711672][ T9093] loop0: detected capacity change from 0 to 1024
[  349.725271][ T9093] EXT4-fs: Ignoring removed i_version option
[  349.767615][ T9097] device syzkaller0 entered promiscuous mode
[  349.783488][ T9093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  349.824130][   T26] audit: type=1800 audit(1773277054.838:6): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1602" name="bus" dev="loop0" ino=18 res=0 errno=0
[  350.048269][ T9093] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3850: comm syz.0.1602: Allocating blocks 385-513 which overlap fs metadata
[  350.154041][ T9092] EXT4-fs (loop0): pa ffff88805283a9a0: logic 16, phys. 129, len 24
[  350.162413][ T9092] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 8
[  350.198930][ T9110] loop1: detected capacity change from 0 to 256
[  350.274638][ T9110] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  350.425819][ T4395] bio_check_ro: 2 callbacks suppressed
[  350.425836][ T4395] Trying to write to read-only block-device loop0
[  350.426663][ T4267] Trying to write to read-only block-device loop0
[  350.438417][ T4395] Trying to write to read-only block-device loop0
[  350.459126][ T4267] Trying to write to read-only block-device loop0
[  350.467283][ T4267] Trying to write to read-only block-device loop0
[  350.486003][ T4395] Trying to write to read-only block-device loop0
[  350.493474][ T4267] Trying to write to read-only block-device loop0
[  350.500506][ T4267] Trying to write to read-only block-device loop0
[  350.524732][ T4395] Trying to write to read-only block-device loop0
[  350.531335][ T4395] Trying to write to read-only block-device loop0
[  350.552637][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  351.591124][ T9128] loop3: detected capacity change from 0 to 512
[  351.631548][ T9128] EXT4-fs: Ignoring removed nobh option
[  351.668897][ T9128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  351.748646][ T9128] EXT4-fs (loop3): 1 truncate cleaned up
[  351.757858][ T9128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  351.921372][ T9132] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1613'.
[  351.990882][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  354.029208][ T9140] device syzkaller0 entered promiscuous mode
[  354.038448][ T9142] netlink: 'syz.4.1618': attribute type 2 has an invalid length.
[  354.212346][  T129] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  354.413941][  T129] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  354.430648][  T129] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  354.462278][  T129] usb 4-1: config 0 interface 0 has no altsetting 0
[  354.475001][  T129] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  354.502127][  T129] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  354.537659][  T129] usb 4-1: Product: syz
[  354.552971][  T129] usb 4-1: Manufacturer: syz
[  354.571974][  T129] usb 4-1: SerialNumber: syz
[  354.590841][  T129] usb 4-1: config 0 descriptor??
[  354.609655][  T129] hub 4-1:0.0: bad descriptor, ignoring hub
[  354.634060][  T129] hub: probe of 4-1:0.0 failed with error -5
[  354.657914][  T129] usb 4-1: selecting invalid altsetting 0
[  355.044300][ T9167] loop0: detected capacity change from 0 to 1024
[  355.051542][ T9167] EXT4-fs: Ignoring removed bh option
[  355.089332][ T9167] EXT4-fs: Ignoring removed oldalloc option
[  355.111950][ T9167] EXT4-fs: Ignoring removed nobh option
[  355.149682][ T9167] /dev/loop0: Can't open blockdev
[  355.252445][ T9138] usb 4-1: reset high-speed USB device number 33 using dummy_hcd
[  355.449914][ T9138] usb 4-1: device firmware changed
[  355.457194][  T126] usb 4-1: USB disconnect, device number 33
[  355.583077][ T9183] netlink: 'syz.4.1631': attribute type 2 has an invalid length.
[  355.680906][  T126] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  355.911277][  T126] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  355.921262][  T126] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  355.931834][  T126] usb 4-1: config 0 interface 0 has no altsetting 0
[  355.949416][  T126] usb 4-1: string descriptor 0 read error: -22
[  355.962513][  T126] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  355.972146][  T126] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  355.993166][  T126] usb 4-1: config 0 descriptor??
[  356.004490][  T126] hub 4-1:0.0: bad descriptor, ignoring hub
[  356.010741][  T126] hub: probe of 4-1:0.0 failed with error -5
[  356.020939][  T126] usb 4-1: selecting invalid altsetting 0
[  356.332989][  T126] usb 4-1: USB disconnect, device number 34
[  358.376163][ T9209] loop4: detected capacity change from 0 to 256
[  358.490390][ T9209] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  358.583576][ T9209] syz.4.1633: attempt to access beyond end of device
[  358.583576][ T9209] loop4: rw=0, sector=98487, nr_sectors = 1 limit=256
[  359.017116][ T9221] loop3: detected capacity change from 0 to 512
[  359.667907][ T9220] loop0: detected capacity change from 0 to 16
[  359.724907][ T9220] erofs: (device loop0): mounted with root inode @ nid 36.
[  359.758424][ T9220] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  359.770037][ T9220] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  360.602085][    C0] sched: RT throttling activated
[  360.637412][ T9226] loop4: detected capacity change from 0 to 512
[  360.887851][ T9229] loop1: detected capacity change from 0 to 256
[  361.602271][ T9229] exfat: Deprecated parameter 'utf8'
[  361.602352][ T9229] exfat: Deprecated parameter 'utf8'
[  361.621398][ T9229] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  361.995984][ T9226] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1639: couldn't read orphan inode 26 (err -116)
[  362.072694][ T9226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  362.139911][ T9226] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.191595][ T9238] netlink: 'syz.0.1643': attribute type 2 has an invalid length.
[  362.239151][ T9226] EXT4-fs (loop4): unmounting filesystem.
[  362.789792][ T9257] loop1: detected capacity change from 0 to 1024
[  362.811337][ T9257] EXT4-fs: Ignoring removed bh option
[  362.860845][ T9257] EXT4-fs: Ignoring removed oldalloc option
[  362.903014][ T9257] EXT4-fs: Ignoring removed nobh option
[  362.942578][ T9261] tmpfs: Unknown parameter 'fscontext'
[  363.602238][ T9257] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  363.771321][ T9257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  363.852192][ T9268] loop0: detected capacity change from 0 to 512
[  364.047182][ T9278] netlink: 'syz.4.1658': attribute type 2 has an invalid length.
[  364.089424][ T9281] loop2: detected capacity change from 0 to 256
[  364.113084][ T9281] exfat: Deprecated parameter 'utf8'
[  364.118499][ T9281] exfat: Deprecated parameter 'utf8'
[  364.177455][ T9281] exfat: Deprecated parameter 'utf8'
[  364.190368][ T9283] loop3: detected capacity change from 0 to 256
[  364.212012][ T9281] /dev/loop2: Can't open blockdev
[  364.285504][ T9283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d)
[  364.427627][   T26] audit: type=1800 audit(1773277069.438:7): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1655" name="file1" dev="loop3" ino=1048597 res=0 errno=0
[  364.457087][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  365.252266][ T9312] netlink: 'syz.3.1670': attribute type 2 has an invalid length.
[  365.455141][ T9314] loop2: detected capacity change from 0 to 256
[  365.511451][ T9303] loop0: detected capacity change from 0 to 256
[  365.557061][ T9303] exfat: Bad value for 'gid'
[  367.311292][ T9345] netlink: 'syz.0.1681': attribute type 2 has an invalid length.
[  367.463806][ T9351] loop2: detected capacity change from 0 to 512
[  367.481978][ T9351] /dev/loop2: Can't open blockdev
[  367.541571][ T5343] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  368.043723][   T22] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  368.798299][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  368.900540][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.967623][ T9368] loop3: detected capacity change from 0 to 512
[  368.982538][ T9368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  369.058671][   T22] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  369.087056][ T9368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  369.098046][ T9368] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.130865][   T22] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  369.155594][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.166177][   T22] usb 5-1: Product: syz
[  369.173614][   T22] usb 5-1: Manufacturer: syz
[  369.178349][   T22] usb 5-1: SerialNumber: syz
[  369.218519][   T22] cdc_mbim 5-1:1.0: skipping garbage
[  369.660226][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  369.835235][ T9392] loop0: detected capacity change from 0 to 512
[  370.043504][ T9392] /dev/loop0: Can't open blockdev
[  370.406429][   T22] cdc_mbim 5-1:1.0: bind() failure
[  370.509230][   T22] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  370.642256][   T22] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  370.965391][   T22] usbtest: probe of 5-1:1.1 failed with error -71
[  370.985363][   T22] usb 5-1: USB disconnect, device number 34
[  371.109303][ T9412] loop0: detected capacity change from 0 to 128
[  371.146913][ T9412] /dev/loop0: Can't open blockdev
[  372.446346][ T9433] tmpfs: Unknown parameter 'fscontext'
[  373.655886][ T9452] tmpfs: Unknown parameter 'context
'
[  373.802557][ T9455] loop2: detected capacity change from 0 to 512
[  373.809922][ T9455] EXT4-fs: quotafile must be on filesystem root
[  373.832185][ T4341] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  374.032540][ T4341] usb 5-1: Using ep0 maxpacket: 32
[  374.055258][ T4341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  374.363691][ T4341] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  374.621604][ T4341] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  374.638044][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.857319][ T4341] usb 5-1: config 0 descriptor??
[  375.749889][ T9465] loop1: detected capacity change from 0 to 512
[  377.275004][ T9478] loop3: detected capacity change from 0 to 1024
[  377.305215][ T9478] EXT4-fs: Ignoring removed i_version option
[  377.343545][ T9478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  377.367809][   T26] audit: type=1800 audit(1773277082.378:8): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1721" name="bus" dev="loop3" ino=18 res=0 errno=0
[  377.526833][ T9475] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3850: comm syz.3.1721: Allocating blocks 385-513 which overlap fs metadata
[  377.549563][ T9474] EXT4-fs (loop3): pa ffff88805283a380: logic 16, phys. 129, len 24
[  377.557839][ T9474] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 8
[  377.846175][ T9493] tmpfs: Unknown parameter 'fscontext'
[  377.936607][ T4268] bio_check_ro: 2 callbacks suppressed
[  377.936730][ T4268] Trying to write to read-only block-device loop3
[  377.967437][ T4268] Trying to write to read-only block-device loop3
[  378.136878][ T4268] Trying to write to read-only block-device loop3
[  378.273707][ T4268] Trying to write to read-only block-device loop3
[  378.446787][ T4268] Trying to write to read-only block-device loop3
[  378.466438][ T4268] Trying to write to read-only block-device loop3
[  378.488050][ T4268] Trying to write to read-only block-device loop3
[  378.505467][ T4268] Trying to write to read-only block-device loop3
[  378.518515][   T22] usb 5-1: USB disconnect, device number 35
[  378.604536][ T4268] Trying to write to read-only block-device loop3
[  378.611111][ T4268] Trying to write to read-only block-device loop3
[  378.626100][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  378.632479][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  378.649348][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  378.784791][ T9499] loop0: detected capacity change from 0 to 4096
[  378.828437][ T9499] /dev/loop0: Can't open blockdev
[  379.079438][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'.
[  380.182177][  T129] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  382.699662][ T9554] tmpfs: Unknown parameter 'fscontext'
[  383.565146][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'.
[  383.792246][   T14] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  384.012197][   T14] usb 1-1: Using ep0 maxpacket: 32
[  385.040343][ T9578] loop4: detected capacity change from 0 to 512
[  385.047820][ T9578] EXT4-fs: Ignoring removed mblk_io_submit option
[  386.706668][ T4277] Bluetooth: hci1: command 0x0c1a tx timeout
[  386.714961][ T9565] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  386.752338][ T9565] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  386.758462][ T9578] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[  386.807214][ T9565] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  386.873859][ T9565] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  386.977633][ T9565] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  387.437543][   T14] usb 1-1: unable to read config index 0 descriptor/start: -71
[  387.445449][   T14] usb 1-1: can't read configurations, error -71
[  388.111825][ T9619] tmpfs: Unknown parameter 'fscontext'
[  388.792381][ T4271] Bluetooth: hci0: command 0x0c1a tx timeout
[  388.862910][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout
[  388.942349][ T4271] Bluetooth: hci3: command 0x0c1a tx timeout
[  389.022240][ T4271] Bluetooth: hci4: command 0x0c1a tx timeout
[  389.242159][   T14] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  389.434118][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  389.460281][   T14] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  389.476276][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'.
[  389.524196][   T14] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40
[  389.555500][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.603553][   T14] usb 1-1: Product: syz
[  389.618238][   T14] usb 1-1: Manufacturer: syz
[  389.632541][   T14] usb 1-1: SerialNumber: syz
[  389.931774][   T14] snd-usb-audio: probe of 1-1:1.1 failed with error -22
[  389.981772][   T14] usb 1-1: USB disconnect, device number 22
[  390.009041][ T5343] udevd[5343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  390.205781][ T9663] loop1: detected capacity change from 0 to 1024
[  390.227432][ T9663] EXT4-fs: Ignoring removed bh option
[  390.280083][ T9663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  390.362005][ T9663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  390.422697][   T26] audit: type=1800 audit(1773277095.428:9): pid=9663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1773" name="file1" dev="loop1" ino=15 res=0 errno=0
[  390.528091][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  390.844005][ T9688] loop1: detected capacity change from 0 to 16
[  390.860167][ T9688] erofs: (device loop1): mounted with root inode @ nid 36.
[  390.877953][ T9688] syz.1.1779: attempt to access beyond end of device
[  390.877953][ T9688] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  390.928274][ T9688] syz.1.1779: attempt to access beyond end of device
[  390.928274][ T9688] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16
[  390.944325][ T9688] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  390.957027][   T26] audit: type=1800 audit(1773277095.968:10): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1779" name="file2" dev="loop1" ino=89 res=0 errno=0
[  390.987032][ T9688] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  390.998903][ T9688] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  391.896137][ T9705] netlink: 'syz.1.1785': attribute type 2 has an invalid length.
[  392.312236][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'.
[  393.339744][ T9728] loop4: detected capacity change from 0 to 512
[  393.347472][ T9728] EXT4-fs: Ignoring removed mblk_io_submit option
[  393.358893][ T9728] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  393.373719][ T9728] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1793: attempt to clear invalid blocks 2 len 1
[  393.400412][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1791'.
[  393.483133][ T9728] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  393.595459][ T9728] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1793: invalid indirect mapped block 1819239214 (level 0)
[  393.670729][ T9728] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1793: invalid indirect mapped block 1819239214 (level 1)
[  393.737359][ T9728] EXT4-fs (loop4): 1 truncate cleaned up
[  393.767590][ T9728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  394.106763][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  394.352759][ T9763] netlink: 'syz.4.1799': attribute type 2 has an invalid length.
[  395.931531][ T9785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1806'.
[  396.228114][ T9792] loop3: detected capacity change from 0 to 1024
[  396.271332][ T9792] EXT4-fs: Ignoring removed bh option
[  396.315443][ T9792] EXT4-fs: Ignoring removed oldalloc option
[  396.362467][ T9792] EXT4-fs: Ignoring removed nobh option
[  396.382782][ T9792] /dev/loop3: Can't open blockdev
[  396.735193][ T9810] netlink: 'syz.1.1813': attribute type 2 has an invalid length.
[  398.720742][ T9832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1819'.
[  399.149571][ T9800] loop2: detected capacity change from 0 to 40427
[  401.128620][ T9886] device syzkaller0 entered promiscuous mode
[  402.814695][ T4311] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  403.022015][ T4311] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  403.030290][ T4311] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  403.052583][ T4311] usb 2-1: config 0 interface 0 has no altsetting 0
[  403.062959][ T4311] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  403.073350][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  403.081578][ T4311] usb 2-1: Product: syz
[  403.086491][ T4311] usb 2-1: Manufacturer: syz
[  403.091140][ T4311] usb 2-1: SerialNumber: syz
[  403.107569][ T4311] usb 2-1: config 0 descriptor??
[  403.138066][ T4311] hub 2-1:0.0: bad descriptor, ignoring hub
[  403.146700][ T4311] hub: probe of 2-1:0.0 failed with error -5
[  403.159274][ T4311] usb 2-1: selecting invalid altsetting 0
[  403.449981][ T9926] loop3: detected capacity change from 0 to 256
[  403.460723][ T9926] exfat: Bad value for 'umask'
[  403.836419][ T9928] loop3: detected capacity change from 0 to 128
[  403.848828][ T9928] /dev/loop3: Can't open blockdev
[  404.422474][ T9915] usb 2-1: reset high-speed USB device number 36 using dummy_hcd
[  408.746257][ T9940] tmpfs: Unknown parameter 'fscontext'
[  409.744266][ T9915] usb 2-1: failed to restore interface 0 altsetting 251 (error=-110)
[  409.758958][  T126] usb 2-1: USB disconnect, device number 36
[  410.250642][ T9962] loop4: detected capacity change from 0 to 512
[  410.298030][ T9962] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  410.381613][ T9962] 
[  410.384116][ T9962] ======================================================
[  410.391182][ T9962] WARNING: possible circular locking dependency detected
[  410.398271][ T9962] syzkaller #0 Not tainted
[  410.402725][ T9962] ------------------------------------------------------
[  410.409778][ T9962] syz.4.1854/9962 is trying to acquire lock:
[  410.415796][ T9962] ffff888071333eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x323/0x1b70
[  410.425963][ T9962] 
[  410.425963][ T9962] but task is already holding lock:
[  410.433548][ T9962] ffff888078076208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110
[  410.443026][ T9962] 
[  410.443026][ T9962] which lock already depends on the new lock.
[  410.443026][ T9962] 
[  410.453485][ T9962] 
[  410.453485][ T9962] the existing dependency chain (in reverse order) is:
[  410.462595][ T9962] 
[  410.462595][ T9962] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  410.470960][ T9962]        down_read+0x42/0x2d0
[  410.475768][ T9962]        v2_read_dquot+0x4a/0x110
[  410.480862][ T9962]        dquot_acquire+0x152/0x520
[  410.486032][ T9962]        ext4_acquire_dquot+0x2d9/0x4a0
[  410.491630][ T9962]        dqget+0x778/0xeb0
[  410.496107][ T9962]        __dquot_initialize+0x3c3/0xcd0
[  410.501715][ T9962]        ext4_mkdir+0x1a5/0xce0
[  410.506646][ T9962]        vfs_mkdir+0x387/0x570
[  410.511538][ T9962]        do_mkdirat+0x1d8/0x440
[  410.516446][ T9962]        __x64_sys_mkdirat+0x85/0x90
[  410.521777][ T9962]        do_syscall_64+0x4c/0xa0
[  410.526813][ T9962]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.533537][ T9962] 
[  410.533537][ T9962] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[  410.541252][ T9962]        __mutex_lock+0x12d/0xaf0
[  410.546355][ T9962]        dquot_commit+0x5a/0x410
[  410.551449][ T9962]        ext4_write_dquot+0x1f0/0x360
[  410.556883][ T9962]        mark_all_dquot_dirty+0xf9/0x400
[  410.562574][ T9962]        __dquot_free_space+0x7ec/0xbc0
[  410.568198][ T9962]        ext4_free_blocks+0x1bf3/0x26a0
[  410.573817][ T9962]        ext4_ext_remove_space+0x225f/0x44c0
[  410.579866][ T9962]        ext4_ext_truncate+0x211/0x370
[  410.585375][ T9962]        ext4_truncate+0xa23/0x1240
[  410.590764][ T9962]        ext4_evict_inode+0xb41/0x1110
[  410.596296][ T9962]        evict+0x4c9/0x8d0
[  410.601323][ T9962]        do_unlinkat+0x388/0x580
[  410.606311][ T9962]        __x64_sys_unlink+0x45/0x50
[  410.611566][ T9962]        do_syscall_64+0x4c/0xa0
[  410.616659][ T9962]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.623221][ T9962] 
[  410.623221][ T9962] -> #0 (&ei->i_data_sem/2){++++}-{3:3}:
[  410.631099][ T9962]        __lock_acquire+0x2d07/0x7d10
[  410.636554][ T9962]        lock_acquire+0x1bb/0x4a0
[  410.641649][ T9962]        down_read+0x42/0x2d0
[  410.646393][ T9962]        ext4_map_blocks+0x323/0x1b70
[  410.651826][ T9962]        ext4_getblk+0x1cc/0x6f0
[  410.656821][ T9962]        ext4_bread+0x26/0x170
[  410.661986][ T9962]        ext4_quota_read+0x180/0x380
[  410.667337][ T9962]        find_tree_dqentry+0x1cd/0xf30
[  410.672861][ T9962]        find_tree_dqentry+0x6b0/0xf30
[  410.678397][ T9962]        qtree_read_dquot+0x57b/0x820
[  410.683910][ T9962]        v2_read_dquot+0xc0/0x110
[  410.688991][ T9962]        dquot_acquire+0x152/0x520
[  410.694188][ T9962]        ext4_acquire_dquot+0x2d9/0x4a0
[  410.699796][ T9962]        dqget+0x778/0xeb0
[  410.704277][ T9962]        __dquot_initialize+0x333/0xcd0
[  410.710051][ T9962]        ext4_process_orphan+0x54/0x300
[  410.715742][ T9962]        ext4_orphan_cleanup+0xbeb/0x1420
[  410.721491][ T9962]        ext4_fill_super+0x7829/0x7dc0
[  410.726983][ T9962]        get_tree_bdev+0x3f1/0x610
[  410.732168][ T9962]        vfs_get_tree+0x88/0x270
[  410.737190][ T9962]        do_new_mount+0x24a/0xa40
[  410.742265][ T9962]        __se_sys_mount+0x2e3/0x3d0
[  410.743880][ T9969] netlink: 'syz.1.1856': attribute type 2 has an invalid length.
[  410.747588][ T9962]        do_syscall_64+0x4c/0xa0
[  410.760515][ T9962]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.767080][ T9962] 
[  410.767080][ T9962] other info that might help us debug this:
[  410.767080][ T9962] 
[  410.777626][ T9962] Chain exists of:
[  410.777626][ T9962]   &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem
[  410.777626][ T9962] 
[  410.791440][ T9962]  Possible unsafe locking scenario:
[  410.791440][ T9962] 
[  410.799009][ T9962]        CPU0                    CPU1
[  410.804494][ T9962]        ----                    ----
[  410.809951][ T9962]   lock(&s->s_dquot.dqio_sem);
[  410.814814][ T9962]                                lock(&dquot->dq_lock);
[  410.822421][ T9962]                                lock(&s->s_dquot.dqio_sem);
[  410.829860][ T9962]   lock(&ei->i_data_sem/2);
[  410.834516][ T9962] 
[  410.834516][ T9962]  *** DEADLOCK ***
[  410.834516][ T9962] 
[  410.842704][ T9962] 3 locks held by syz.4.1854/9962:
[  410.848134][ T9962]  #0: ffff8880780760e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930
[  410.858496][ T9962]  #1: ffff888071140428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520
[  410.867986][ T9962]  #2: ffff888078076208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110
[  410.878083][ T9962] 
[  410.878083][ T9962] stack backtrace:
[  410.884122][ T9962] CPU: 0 PID: 9962 Comm: syz.4.1854 Not tainted syzkaller #0
[  410.891722][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  410.901855][ T9962] Call Trace:
[  410.902771][ T9972] device syzkaller0 entered promiscuous mode
[  410.905378][ T9962]  <TASK>
[  410.905391][ T9962]  dump_stack_lvl+0x188/0x24e
[  410.919192][ T9962]  ? load_image+0x400/0x400
[  410.924184][ T9962]  ? show_regs_print_info+0x12/0x12
[  410.929624][ T9962]  ? print_circular_bug+0x12b/0x1a0
[  410.934976][ T9962]  check_noncircular+0x296/0x330
[  410.940091][ T9962]  ? add_chain_block+0x940/0x940
[  410.945182][ T9962]  ? lockdep_lock+0xf1/0x1f0
[  410.949835][ T9962]  ? mark_lock+0x94/0x320
[  410.954191][ T9962]  ? _find_first_zero_bit+0xcf/0x100
[  410.959691][ T9962]  __lock_acquire+0x2d07/0x7d10
[  410.964572][ T9962]  ? verify_lock_unused+0x140/0x140
[  410.969787][ T9962]  ? mark_lock+0x94/0x320
[  410.974137][ T9962]  ? verify_lock_unused+0x140/0x140
[  410.979370][ T9962]  ? is_bpf_text_address+0x22/0x2a0
[  410.984596][ T9962]  ? __lock_acquire+0x7d10/0x7d10
[  410.989660][ T9962]  lock_acquire+0x1bb/0x4a0
[  410.994214][ T9962]  ? ext4_map_blocks+0x323/0x1b70
[  410.999264][ T9962]  ? __might_sleep+0xd0/0xd0
[  411.003888][ T9962]  ? read_lock_is_recursive+0x10/0x10
[  411.009353][ T9962]  ? rcu_is_watching+0x11/0xa0
[  411.014159][ T9962]  down_read+0x42/0x2d0
[  411.018366][ T9962]  ? ext4_map_blocks+0x323/0x1b70
[  411.023427][ T9962]  ext4_map_blocks+0x323/0x1b70
[  411.028314][ T9962]  ? __stack_depot_save+0x421/0x460
[  411.033592][ T9962]  ? __kasan_kmalloc+0x8e/0xa0
[  411.038383][ T9962]  ? __kmalloc+0xb0/0x240
[  411.042822][ T9962]  ? find_tree_dqentry+0x56/0xf30
[  411.047867][ T9962]  ? ext4_issue_zeroout+0x250/0x250
[  411.053084][ T9962]  ? dquot_acquire+0x152/0x520
[  411.057864][ T9962]  ? ext4_fill_super+0x7829/0x7dc0
[  411.063115][ T9962]  ? get_tree_bdev+0x3f1/0x610
[  411.067891][ T9962]  ? vfs_get_tree+0x88/0x270
[  411.072492][ T9962]  ? do_new_mount+0x24a/0xa40
[  411.077193][ T9962]  ? __se_sys_mount+0x2e3/0x3d0
[  411.082080][ T9962]  ? do_syscall_64+0x4c/0xa0
[  411.086711][ T9962]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  411.092989][ T9962]  ext4_getblk+0x1cc/0x6f0
[  411.097556][ T9962]  ? ext4_get_block_unwritten+0x100/0x100
[  411.103491][ T9962]  ext4_bread+0x26/0x170
[  411.107858][ T9962]  ext4_quota_read+0x180/0x380
[  411.112830][ T9962]  find_tree_dqentry+0x1cd/0xf30
[  411.117958][ T9962]  ? ext4_show_options+0x50/0x50
[  411.122929][ T9962]  ? ext4_quota_read+0x305/0x380
[  411.127929][ T9962]  find_tree_dqentry+0x6b0/0xf30
[  411.132923][ T9962]  qtree_read_dquot+0x57b/0x820
[  411.137801][ T9962]  ? read_lock_is_recursive+0x10/0x10
[  411.143200][ T9962]  ? remove_tree+0x2150/0x2150
[  411.147991][ T9962]  ? down_read+0x1a8/0x2d0
[  411.152429][ T9962]  v2_read_dquot+0xc0/0x110
[  411.156967][ T9962]  dquot_acquire+0x152/0x520
[  411.161584][ T9962]  ? __ext4_journal_start_sb+0x1dd/0x3d0
[  411.167250][ T9962]  ext4_acquire_dquot+0x2d9/0x4a0
[  411.172336][ T9962]  dqget+0x778/0xeb0
[  411.176615][ T9962]  __dquot_initialize+0x333/0xcd0
[  411.181710][ T9962]  ? dquot_initialize+0x20/0x20
[  411.186611][ T9962]  ? ext4_get_projid+0x140/0x140
[  411.191577][ T9962]  ext4_process_orphan+0x54/0x300
[  411.196634][ T9962]  ext4_orphan_cleanup+0xbeb/0x1420
[  411.201859][ T9962]  ? ext4_orphan_del+0xbf0/0xbf0
[  411.206835][ T9962]  ? errseq_check_and_advance+0x62/0x120
[  411.212558][ T9962]  ext4_fill_super+0x7829/0x7dc0
[  411.217522][ T9962]  ? bdev_name+0x2c1/0x3f0
[  411.222165][ T9962]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  411.228524][ T9962]  ? set_blocksize+0x1d0/0x470
[  411.233318][ T9962]  ? sb_set_blocksize+0xa5/0xe0
[  411.238195][ T9962]  get_tree_bdev+0x3f1/0x610
[  411.242825][ T9962]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  411.249104][ T9962]  vfs_get_tree+0x88/0x270
[  411.253565][ T9962]  do_new_mount+0x24a/0xa40
[  411.258107][ T9962]  __se_sys_mount+0x2e3/0x3d0
[  411.262810][ T9962]  ? __x64_sys_mount+0xc0/0xc0
[  411.267704][ T9962]  ? lockdep_hardirqs_on+0x94/0x140
[  411.272917][ T9962]  ? __x64_sys_mount+0x1c/0xc0
[  411.277695][ T9962]  do_syscall_64+0x4c/0xa0
[  411.282173][ T9962]  ? clear_bhb_loop+0x60/0xb0
[  411.286896][ T9962]  ? clear_bhb_loop+0x60/0xb0
[  411.291698][ T9962]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  411.297621][ T9962] RIP: 0033:0x7fde7399da0a
[  411.302094][ T9962] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.321822][ T9962] RSP: 002b:00007fde7490ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  411.330465][ T9962] RAX: ffffffffffffffda RBX: 00007fde7490eee0 RCX: 00007fde7399da0a
[  411.338543][ T9962] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 00007fde7490eea0
[  411.346533][ T9962] RBP: 0000200000000040 R08: 00007fde7490eee0 R09: 000000000021c91c
[  411.354574][ T9962] R10: 000000000021c91c R11: 0000000000000246 R12: 0000200000000340
[  411.362560][ T9962] R13: 00007fde7490eea0 R14: 000000000000050c R15: 0000200000000180
[  411.370551][ T9962]  </TASK>
[  411.376218][ T9962] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  411.409154][ T9962] Quota error (device loop4): write_blk: dquota write failed
[  411.417307][ T9962] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  411.428465][ T9962] Quota error (device loop4): write_blk: dquota write failed
[  411.438362][ T9962] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  411.450495][ T9962] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1854: Failed to acquire dquot type 1
[  411.462702][ T9962] EXT4-fs (loop4): 1 truncate cleaned up
[  411.468546][ T9962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  411.493693][ T9962] EXT4-fs (loop4): unmounting filesystem.
[  411.542119][   T14] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  411.743669][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.755139][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.764990][   T14] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  411.774508][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.784266][   T14] usb 4-1: config 0 descriptor??
[  412.198715][   T14] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  412.207202][   T14] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  412.399607][   T14] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[  412.601444][   T14] cp2112 0003:10C4:EA90.0006: error requesting SMBus config
[  412.612178][   T14] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32
[  412.621788][   T14] usb 4-1: USB disconnect, device number 35
[  412.674902][ T9975] fido_id[9975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory