last executing test programs: 8m15.654067828s ago: executing program 4 (id=318): timer_create(0x2, &(0x7f0000000380)={0x0, 0x1000004}, 0x0) 8m15.359620122s ago: executing program 4 (id=320): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 8m14.315047911s ago: executing program 4 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 8m13.203554312s ago: executing program 4 (id=326): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 8m12.673975327s ago: executing program 4 (id=331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) close(0x3) 8m10.003533911s ago: executing program 4 (id=339): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x5085040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x61, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x80432) keyctl$read(0xb, r1, &(0x7f0000000500)=""/178, 0xb2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0/file0\x00', 0x2a080, &(0x7f00000001c0)=ANY=[], 0x0, 0x249, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r4, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 8m9.60864435s ago: executing program 32 (id=339): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x5085040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x61, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x80432) keyctl$read(0xb, r1, &(0x7f0000000500)=""/178, 0xb2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0/file0\x00', 0x2a080, &(0x7f00000001c0)=ANY=[], 0x0, 0x249, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r4, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 7m40.206847516s ago: executing program 2 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m39.884671851s ago: executing program 2 (id=458): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x88) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201020079db8540da0b77010b7d000000010902120004000000000904", @ANYRES32=r1, @ANYRES16=r1], 0x0) 7m37.378416328s ago: executing program 2 (id=474): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) 7m37.045781933s ago: executing program 2 (id=477): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r0, &(0x7f0000000240), 0x0, 0x6400, 0x0, 0x3) 7m36.643646131s ago: executing program 2 (id=479): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)="807efaa0498933df4b28869b891345f0c9bd6505cf7b052797361992955317b38cb689384974e000216774622dc68d00e0163d5df634d9a0979a9f9b1c3d8ad5725bd02293a69d81441ddfaceb91148f84", 0x51}], 0x1, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x27, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x3800000000000, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0x5000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m36.087259078s ago: executing program 2 (id=487): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x3, 0x7, {{0xc, 0x4, 0x0, 0x25, 0x30, 0x64, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x1, [{@remote, 0x8}, {@remote, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 7m35.708608465s ago: executing program 33 (id=487): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x3, 0x7, {{0xc, 0x4, 0x0, 0x25, 0x30, 0x64, 0x0, 0x4, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x1, [{@remote, 0x8}, {@remote, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 7m18.767517362s ago: executing program 6 (id=489): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r0, &(0x7f0000000240), 0x0, 0x6400, 0x0, 0x3) 7m17.723606171s ago: executing program 6 (id=572): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x400040, 0x0) 7m17.09149429s ago: executing program 6 (id=576): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "e24c8a6d2d7d"}, 0x11) sendfile(r0, r0, 0x0, 0x4) 7m16.813977724s ago: executing program 34 (id=576): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "e24c8a6d2d7d"}, 0x11) sendfile(r0, r0, 0x0, 0x4) 1m38.411069023s ago: executing program 3 (id=2285): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m38.098504787s ago: executing program 3 (id=2288): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0x8, 0x2, "20fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x4, "0a61fc90"}, 0x0, 0x0, 0x0, 0x0}) 1m35.622875872s ago: executing program 3 (id=2298): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r1, &(0x7f0000000480), 0x0}, 0x20) 1m35.368371855s ago: executing program 3 (id=2299): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) timerfd_create(0x1, 0x80800) 1m33.10700736s ago: executing program 3 (id=2304): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4c3, &(0x7f0000000e80)="$eJzs3MtvG8UfAPDvOonT/tr8Ysq7D2ooj4hH0qQFekDiIZB6QUKCQzmGNK1K0wY1QaJVBAGhckT9CwpHJP4CTnBBgIQE4gpHJIRUoVz6OKBFa3tTx7FTJ3Xitvl8JDczu+ud7+zurHdmagewaZWzf5KI7RHxe0QMVrNLNyhX/1xZmJu4ujA3kUSavvlPUtnu8sLcRL5p/r5ttcxQIaLwaRK7mpQ7c/bcyfGpqckztfzI7Kn3RmbOnnvmxKnx45PHJ0+PHTp08MDo88+NPduReg5kse78cHr3g4ffvvD6xJEL7/z4dRbv9tr6ywtzxaXvKOWJnRGRNu7vpTbKLEd56bGs89jqwr/lDdSlk94uBsKq9EREdrr6Ku1/MHri+skbjNc+iSh0NT5g/aRpmvYvW5rdFbZmifkUuIMl0e0IgO7IP/Gzfnz+2uBHkK669HK1A5TV+0rtVV3TW+n5lEvVvtHAOpVfjr0Rce3ikflrF6NhPAUAYD18mz3/PN3s+a8Q99Vt9//a3FApIu6KiB0RcXdE3BMR90ZUtr0/Ih5ot+Ck+dTI8uefX7eusWptyZ7/XqjNbS19/lsc9y711HIDlfr3JcdOTE3urx2Toejrz/KjK5Tx3au/fd5qXTkisme//JWVnz8L1uL4u7dhgO7o+Oz4zdS53qW9ETt7m9U/WZwJSGLLmvc/UIw48eRXu1utv3H9V9CBeab0y4gnqud/Phrqn0tWnp8c2RJTk/tH8qtiuZ9+Of9Gq/Jvqv4dcOnjiP81vf4X619K6udrZ1ZdRO/5Pz5r2adZ6/VfTN6qpPNJ2w/GZ2fPjEYUk/nly8ci4mq1r5vn8+2z+g/ta97+d0T8+0VtP7siIruI90TEQxGVXlsW+8MR8UhE7FvhAPzwyqPvZn9/vmH9H+/K+T+6qvNfn+iLxiXNEj0nv/+mVfntnf+DldRQbcn1+1/a02q/1cLz+1brAG/q4AEAAMBtolD5P/BJElEdN9let66Y9aOnZ2afOjb9/umj1XWl6CvkI12DdeOho7Wx4Tw/1pA/UBk3TtM03VrJD09MT63XnDrQnm3V9l8YXrwXFArDw9V1fzWMrr3YlQiBdbWqebRW32gDbkvttX8NH+5Ei+1/+TcBcxo/3KGq7b9nsNtxABvP77XA5tWs/X8UcaULoQAbzOc/bF7aP2xeq23/pXWKA9h4Pv9hU1r6lfhitPF1/rYSOw53Zj+dSKT9t0QYdYlIrh/5nm7H07+2t0fhFjmY9YmkyarC4pI9f+Y/DFFoe8/FjgQWK23THxHt7jC7cjbmYHb7zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAZ/wUAAP//69PiJg==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e462775f9527ad4d3ff445ff0000008010cdbbf76e69950600", [0x1ce, 0x20000001]}) r1 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x4, @desc4}) 1m28.920932364s ago: executing program 3 (id=2324): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdf8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x20000400) 1m28.683301225s ago: executing program 35 (id=2324): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdf8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x20000400) 1m25.519418772s ago: executing program 5 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x2000, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "4c63f9582ec6ebfce48d36c78ce77710b133bde1df85bc73978f2f4aec40c194", "70d6c2587618d1b42c91fa6831c033fb78364fdaa0fbccea6baaaa840246a49f416602f4dcc3a04dd5c7a07fdf09c64f", "ede3564d1d17ce5a164ac20243eded6d185a2e98f592b0dc8ac466ef", {"01b180f476eb3f5add8e6a77aec169a4", "3fc1108de770c584d8b98340ef06e4b8"}}}}}}}, 0x0) 1m24.683578701s ago: executing program 5 (id=2343): syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x5, 0x551, 0x45309df7, 0x80, "9ec843a12d2449210700", 0x10007, 0x8}) 1m20.853569319s ago: executing program 5 (id=2350): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(r2, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r5 = gettid() tkill(r5, 0x13) 1m20.023587398s ago: executing program 5 (id=2354): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x146142, 0x90) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x1f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r5, 0xe0ffff, 0x19, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r6, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 1m17.943617014s ago: executing program 5 (id=2357): syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xf) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r0], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 1m17.027011177s ago: executing program 5 (id=2361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fremovexattr(r0, &(0x7f0000000400)=@known='system.posix_acl_default\x00') 1m16.695645722s ago: executing program 36 (id=2361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fremovexattr(r0, &(0x7f0000000400)=@known='system.posix_acl_default\x00') 12.263111936s ago: executing program 8 (id=2596): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000180), 0xc1, 0x7ee, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x2, 0x40009965, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300ffff00000000450a00280068000005069078ac1e03e2feffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5102141a907815f1"], 0x36) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) writev(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) sendto$inet(r6, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) 11.295288371s ago: executing program 8 (id=2603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80801) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x3, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 8.225342125s ago: executing program 9 (id=2614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0x4, &(0x7f0000000040)={0xdb, 0x40}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x7f, 0x4, 0xfffffe01}, {0x5, 0x21, 0x7, 0xfffffff8}]}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073113d000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.705395849s ago: executing program 8 (id=2619): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x2010400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000002c0), {0xf}, &(0x7f0000000300)=""/197, 0xc5, &(0x7f0000000400)=""/227, &(0x7f0000000500)=[r0, r0, r0, r0], 0x4, {r1}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, 0xffffffffffffffff}) ppoll(&(0x7f0000000500)=[{r7, 0x200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(0xffffffffffffffff, 0x5) shutdown(0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r8, &(0x7f0000000280)='1', 0x1) 7.386254124s ago: executing program 8 (id=2620): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x100, 0x9, 0x7}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 6.879386688s ago: executing program 8 (id=2623): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@rights={{0x10}}], 0x10, 0x6051}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000680001000200000060ffff7f00000100000000002400020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) 5.841605766s ago: executing program 9 (id=2627): syz_open_dev$usbfs(0x0, 0x76, 0x509301) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) ptrace$peeksig(0x1a, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f0000000200)={[{@user_xattr}]}, 0x1, 0x4c7, &(0x7f0000000b80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) 3.891573778s ago: executing program 8 (id=2632): syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xf) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 3.891160508s ago: executing program 9 (id=2633): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x2) read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002580)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) writev(0xffffffffffffffff, 0x0, 0x0) 3.676362388s ago: executing program 7 (id=2636): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 3.570947002s ago: executing program 9 (id=2638): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180), 0x1000) 3.566742303s ago: executing program 7 (id=2639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x200c0) 3.463379958s ago: executing program 7 (id=2641): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioperm(0x2, 0x8000, 0x7ff) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x78, 0xc2f42) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000326bd7000ffdbdf252c0000000c007a20040000001e000000"], 0x20}}, 0x40000) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)={0x6, 0x24, 0x6, 0x1, 0x1d3, 0xa6c000}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.580658969s ago: executing program 9 (id=2642): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x8e000) r3 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) write$yama_ptrace_scope(r4, &(0x7f0000000000)='1\x00', 0xffffffaf) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 2.475477024s ago: executing program 1 (id=2644): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.777181677s ago: executing program 7 (id=2647): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400004}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0xe, 0x0, 0x0, 0xf, 0x1, [], '\f'}]}}, 0x0, 0x2a, 0x0, 0x0, 0x8}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prctl$PR_GET_CHILD_SUBREAPER(0x25) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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") 1.679585941s ago: executing program 0 (id=2648): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r1 = syz_open_pts(r0, 0x141401) fcntl$setstatus(r1, 0x4, 0x2000) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 1.678451881s ago: executing program 1 (id=2649): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6b4, &(0x7f0000000a00)="$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") chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) 1.595274355s ago: executing program 0 (id=2650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/161}) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x5}, 0x7) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x80800) splice(r3, 0x0, r6, 0x0, 0x20000000000002, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x28000, 0x1cd) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x200, 0x4, 0x0, 0x8, 0x6}) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) gettid() getpid() 1.557561247s ago: executing program 0 (id=2651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x40, 0x4e, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200c0) 1.557367877s ago: executing program 1 (id=2652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="a585f70b8411c8df4a23482e75acaea8457c4a4e03460214cccfbbcc4e6ddc18", 0x20}], 0x1}}], 0x1, 0x80d0) recvmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/97, 0x61}], 0x2, &(0x7f0000001180)=""/24, 0x18}, 0x3}], 0x1, 0x62, 0x0) 1.520986829s ago: executing program 7 (id=2653): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x810410, &(0x7f0000000100)=ANY=[], 0x2, 0x217, &(0x7f0000002c00)="$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") 1.463643771s ago: executing program 0 (id=2654): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80801) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x3, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 1.443342693s ago: executing program 1 (id=2655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 1.07126294s ago: executing program 0 (id=2656): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x22180, 0x0) readv(r4, 0x0, 0x0) unshare(0x42000000) 211.23052ms ago: executing program 1 (id=2657): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="280000001d00"], 0x28}}], 0x1, 0x4000000) 38.251988ms ago: executing program 0 (id=2658): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000030c0)=""/4039, 0xfc7}, {&(0x7f0000000140)=""/91, 0x5b}], 0x2}, 0x22) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 18.687989ms ago: executing program 1 (id=2659): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x80000000}}}}}}, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x10000, &(0x7f0000003240)=ANY=[], 0x0, 0x33c, &(0x7f0000000680)="$eJzs3M9rK1UUwPGTyY8mKW2yEEVBetGNboY2uhaDtCAGLG0jtoIwbScaMiYlEyoRse3Krbh3JbgoXXZXUP+Bbtzpxo27bgQXdqFvHvOrmfxq07yU9LXfD5Tc3HNPMjP3JpwZOrn4+LsvahVbrxgt0dJKYiIilyJ50SQUCx41r52SqENJBK0PiqXS8ppSK8WNtwpKqfmFn7/8OhMEz2bkPP/pxd+Fv85fPH/54snG51VbVW1Vb7SUobYbf7aMbctUu1W7piu1apmGbapq3TabfrzhxytWY2+vrYz67lx2r2natjLqbVUz26rVUK1mWxmfGdW60nVdzWUFNykfr60ZxTGTdya8MbgjzWbRiItIpi9SPp7KBgEAgKnqrf81t6S/Vf3/5uw/v7+6vrkl81797w7u1P8nr/3amv3odD6o/89Sg+r/t//wX6ur/k+LyDj1/w9yi/q/vyJ6XJ6p/sf9sJDq64p1PXPr/2zw+fUcfXKy6DWo/wEAAAAAAAAAAAAAAAAAAAAAeB5cOk7OcZxc+Bj+dW4hCJ7jQRo2/zMiknZn32H+H7L1zS1JezfuuXNsfbtf3i/7j270f8cnpixKTv7z1kPYJ44T3nmkXHn5xToI8g/2y3EvUqxIVSwxZUlyku/Nd5yV90vLS8oX5F/dppSN5hckJy8Mzi905wfvn5I3Xo/k65KT33akIZbseuu6k//NklLvfVjqyc944wAAAAAAeAh0dWXg+buuD4v7vzJSrHiXiYZcH/DPrxcHnp8ncq8kpr33AAAAAAA8Dnb7q5phWWbzmkZGbh4zfiMx2uBUT0/yusHxyB6Ouj0p70KGyLAx8QFHTJPoGDdaM34c8ah2NcJ/pOgKpYPO8Q5vuP8Tm6/DaI8mI2Qlejd+we1Qt3z3o2BHrnrCy0apIcdZVvtfR+taCd1HNTmx9fzS9z/9O7kPyDun4Qq4efBRpCc58pq3LDPdu+q8RnL4N4Y2gW8dAAAAANPQKfrDnnej4dhUNgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfmTn7Sr6cx7X0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7ounAQAA//8QRPLT") keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) nanosleep(0x0, 0x0) close(r0) 1.19884ms ago: executing program 9 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x22) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount$nfs4(&(0x7f0000000300)=':2\a>pt', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pivot_root(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1c, 0x0, &(0x7f0000000200)="e64692fcc44eb88391e66a22fe8388d51ddc5b7e44a1303c32e5a052"}) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 7 (id=2661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/161}) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x5}, 0x7) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x80800) splice(r3, 0x0, r6, 0x0, 0x20000000000002, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x28000, 0x1cd) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x200, 0x4, 0x0, 0x8, 0x6}) chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x8024) gettid() getpid() kernel console output (not intermixed with test programs): 89] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 435.377292][ T23] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.405263][ T23] usb 4-1: config 1 interface 1 has no altsetting 0 [ 435.648063][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 435.776041][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.928387][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 435.944193][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 436.013919][ T23] usb 4-1: Product: syz [ 436.128576][ T23] usb 4-1: Manufacturer: syz [ 436.144335][ T21] usb 2-1: USB disconnect, device number 33 [ 436.164135][ T23] usb 4-1: SerialNumber: syz [ 436.557898][ T23] usb 4-1: selecting invalid altsetting 0 [ 436.567767][ T23] usb 4-1: 0:2 : does not exist [ 436.572752][ T23] usb 4-1: unit 0 not found! [ 436.670773][ T23] usb 4-1: USB disconnect, device number 40 [ 437.332443][T11317] loop0: detected capacity change from 0 to 512 [ 437.407787][T11317] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 437.407787][T11317] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 437.407787][T11317] [ 437.493320][T11319] loop3: detected capacity change from 0 to 2048 [ 437.971616][T11317] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.2016: inode has both inline data and extents flags [ 438.047364][T11319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.149389][T11317] EXT4-fs (loop0): Remounting filesystem read-only [ 438.394794][T11317] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.2016: couldn't read orphan inode 15 (err -117) [ 439.133614][T11317] EXT4-fs (loop0): Remounting filesystem read-only [ 439.197751][T11317] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nouser_xattr,errors=remount-ro,grpid,. Quota mode: none. [ 439.237144][T11330] loop1: detected capacity change from 0 to 128 [ 439.293023][T11333] binder: BINDER_SET_CONTEXT_MGR already set [ 439.347932][T11333] binder: 11332:11333 ioctl 4018620d 200000000000 returned -16 [ 439.362390][T11330] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 439.374068][T11330] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 439.656447][T11317] EXT4-fs error (device loop0): ext4_add_entry:2488: inode #2: comm syz.0.2016: Directory hole found for htree leaf block 0 [ 439.684543][T11339] loop3: detected capacity change from 0 to 512 [ 439.701335][T11317] EXT4-fs (loop0): Remounting filesystem read-only [ 439.962385][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.980681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.065955][T11339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 440.074173][T11339] System zones: 1-12 [ 440.080177][T11339] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.2021: corrupted inode contents [ 440.101756][T11339] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 440.111002][T11339] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.2021: corrupted inode contents [ 440.150358][T11339] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.2021: mark_inode_dirty error [ 440.179996][T11339] EXT4-fs (loop3): 1 orphan inode deleted [ 440.185813][T11339] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 440.667744][ T21] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 440.678014][ T4228] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 440.708302][ T1108] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 440.730078][T11351] loop0: detected capacity change from 0 to 128 [ 441.298830][T11354] binder: 11352:11354 ioctl 4018620d 0 returned -22 [ 442.192754][T11351] EXT4-fs (loop0): Test dummy encryption mode enabled [ 442.232812][T11351] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 442.248099][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 442.254279][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 442.288069][T11351] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 442.478578][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 442.557993][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.569378][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.595061][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.615674][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.626011][ T4228] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.642100][ T21] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 442.653120][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.666972][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.677947][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.689819][ T4228] usb 6-1: config 0 descriptor?? [ 442.697982][ T21] usb 2-1: config 0 descriptor?? [ 442.703638][ T1108] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 442.713807][ T1108] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.724013][ T1108] usb 4-1: config 1 interface 1 has no altsetting 0 [ 442.732494][ T4228] hub 6-1:0.0: USB hub found [ 442.760713][ T21] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 442.897911][ T1108] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 442.907411][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.948245][ T1108] usb 4-1: Product: syz [ 442.952836][ T1108] usb 4-1: Manufacturer: syz [ 442.957552][ T1108] usb 4-1: SerialNumber: syz [ 443.022400][T11366] loop7: detected capacity change from 0 to 512 [ 443.167999][ T4228] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 443.227017][T11366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 443.235952][T11366] System zones: 1-12 [ 443.251711][T11366] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.2027: corrupted inode contents [ 443.266685][T11366] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 443.276789][T11366] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.2027: corrupted inode contents [ 443.297009][T11366] EXT4-fs error (device loop7): ext4_evict_inode:332: inode #15: comm syz.7.2027: mark_inode_dirty error [ 443.310588][T11366] EXT4-fs (loop7): 1 orphan inode deleted [ 443.316851][T11366] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 443.358244][ T4228] usbhid 6-1:0.0: can't add hid device: -71 [ 443.365061][ T4228] usbhid: probe of 6-1:0.0 failed with error -71 [ 443.426863][ T4228] usb 6-1: USB disconnect, device number 26 [ 443.518819][ T1108] usb 4-1: selecting invalid altsetting 0 [ 443.524850][ T1108] usb 4-1: 0:2 : does not exist [ 443.532474][ T1108] usb 4-1: unit 0 not found! [ 443.559410][ T1108] usb 4-1: USB disconnect, device number 41 [ 443.805606][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.486926][ T1108] usb 2-1: USB disconnect, device number 34 [ 444.816023][T11385] loop1: detected capacity change from 0 to 512 [ 445.244836][T11384] loop5: detected capacity change from 0 to 512 [ 445.256244][T11389] loop0: detected capacity change from 0 to 128 [ 445.275161][T11390] loop3: detected capacity change from 0 to 128 [ 445.398807][T11384] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 445.398807][T11384] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 445.398807][T11384] [ 445.504264][T11395] loop7: detected capacity change from 0 to 128 [ 445.767447][T11385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 445.776261][T11385] System zones: 1-12 [ 445.818002][T11385] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2034: corrupted inode contents [ 445.836463][T11385] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 445.847275][T11385] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2034: corrupted inode contents [ 445.861192][T11385] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.2034: mark_inode_dirty error [ 445.879980][T11385] EXT4-fs (loop1): 1 orphan inode deleted [ 445.885927][T11385] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 446.299601][T11395] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 446.311534][T11395] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.336562][T11384] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.2032: inode has both inline data and extents flags [ 446.416968][T11384] EXT4-fs (loop5): Remounting filesystem read-only [ 446.426878][T11384] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.2032: couldn't read orphan inode 15 (err -117) [ 446.472398][T11384] EXT4-fs (loop5): Remounting filesystem read-only [ 446.557285][T11384] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nouser_xattr,errors=remount-ro,grpid,. Quota mode: none. [ 446.952844][T11384] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.2032: Directory hole found for htree leaf block 0 [ 446.966277][T11384] EXT4-fs (loop5): Remounting filesystem read-only [ 447.026231][T11413] loop7: detected capacity change from 0 to 512 [ 448.672991][T11413] EXT4-fs (loop7): 1 orphan inode deleted [ 448.687768][T11413] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=continue,sysvgroups,noquota,,errors=continue. Quota mode: writeback. [ 448.770316][T11413] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.870606][T11413] EXT4-fs (loop7): shut down requested (2) [ 448.979084][ T1108] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 449.027904][ T1111] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 449.230427][T11430] loop7: detected capacity change from 0 to 512 [ 449.248224][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 449.283145][T11430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 449.291913][T11430] System zones: 1-12 [ 449.307912][T11430] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.2048: corrupted inode contents [ 449.309414][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 449.328062][T11430] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 449.338937][T11430] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.2048: corrupted inode contents [ 449.352454][T11430] EXT4-fs error (device loop7): ext4_evict_inode:332: inode #15: comm syz.7.2048: mark_inode_dirty error [ 449.366514][T11430] EXT4-fs (loop7): 1 orphan inode deleted [ 449.372475][T11430] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 449.448322][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.460525][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.471028][ T1108] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 449.480286][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.498554][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.525157][ T1108] usb 6-1: config 0 descriptor?? [ 449.539283][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.596961][ T1108] hub 6-1:0.0: USB hub found [ 449.666977][ T1111] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 449.739558][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.790472][ T1111] usb 4-1: config 0 descriptor?? [ 449.801215][ T1108] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 449.850047][ T1111] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 450.122445][ T1108] usbhid 6-1:0.0: can't add hid device: -71 [ 450.132404][ T1108] usbhid: probe of 6-1:0.0 failed with error -71 [ 450.183395][ T1108] usb 6-1: USB disconnect, device number 27 [ 450.276274][T11444] loop1: detected capacity change from 0 to 2048 [ 450.661093][T11444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.606219][ T1108] usb 4-1: USB disconnect, device number 42 [ 451.686316][T11460] loop7: detected capacity change from 0 to 128 [ 452.254225][T11463] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2059'. [ 452.277681][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 452.299673][T11460] EXT4-fs (loop7): Test dummy encryption mode enabled [ 452.396200][T11460] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 452.437520][T11465] loop3: detected capacity change from 0 to 1024 [ 452.489654][T11460] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 452.771020][T11465] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 452.897694][ T1111] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 452.946657][T11475] loop7: detected capacity change from 0 to 128 [ 453.308101][ T1111] usb 6-1: Using ep0 maxpacket: 16 [ 453.498235][ T1111] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.643501][ T1111] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 453.813635][ T1111] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 453.839078][ T1111] usb 6-1: config 1 interface 1 has no altsetting 0 [ 454.018110][ T1111] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 454.052907][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.077709][ T1108] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 454.092047][ T1111] usb 6-1: Product: syz [ 454.096284][ T1111] usb 6-1: Manufacturer: syz [ 454.148424][ T1111] usb 6-1: SerialNumber: syz [ 454.198927][T11492] loop0: detected capacity change from 0 to 2048 [ 454.256537][T11492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.497732][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 454.568000][ T1111] usb 6-1: selecting invalid altsetting 0 [ 454.574958][ T1111] usb 6-1: 0:2 : does not exist [ 454.584321][ T1111] usb 6-1: unit 0 not found! [ 454.597808][ T4228] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 454.617833][ T1108] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 454.630404][ T1111] usb 6-1: USB disconnect, device number 28 [ 454.635340][ T1108] usb 2-1: config 0 has no interface number 0 [ 454.643636][ T1108] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.665651][ T1108] usb 2-1: config 0 interface 85 has no altsetting 0 [ 454.787846][ T4228] usb 4-1: device descriptor read/64, error -71 [ 454.857851][ T1108] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 454.871200][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.879387][ T1108] usb 2-1: Product: syz [ 454.883899][ T1108] usb 2-1: Manufacturer: syz [ 454.889231][ T1108] usb 2-1: SerialNumber: syz [ 454.897875][ T1108] usb 2-1: config 0 descriptor?? [ 454.919891][ T4864] udevd[4864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.966253][T11501] loop7: detected capacity change from 0 to 128 [ 454.994878][T11501] EXT4-fs (loop7): Test dummy encryption mode enabled [ 455.162083][T11501] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 455.168124][ T4228] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 455.194488][T11501] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 455.447679][ T4228] usb 4-1: device descriptor read/64, error -71 [ 456.821352][ T4228] usb usb4-port1: attempt power cycle [ 456.877834][ T1108] appletouch 2-1:0.85: Failed to request geyser raw mode [ 456.885400][ T1108] appletouch: probe of 2-1:0.85 failed with error -5 [ 456.956603][ T1108] usb 2-1: USB disconnect, device number 35 [ 457.238032][ T4228] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 457.256506][T11525] loop3: detected capacity change from 0 to 512 [ 457.390968][T11525] EXT4-fs (loop3): Ignoring removed bh option [ 457.400927][T11525] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 457.447351][T11525] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000007,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 457.473781][T11525] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.487654][ T4228] usb 4-1: device not accepting address 45, error -71 [ 457.507648][ T1108] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 457.773908][T11533] loop3: detected capacity change from 0 to 2048 [ 457.887618][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.905388][T11533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.113701][ T4229] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 458.303658][ T1108] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 458.333120][ T1108] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 458.409306][ T1108] usb 2-1: Product: syz [ 458.427745][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 458.460352][ T1108] usb 2-1: Manufacturer: syz [ 458.509024][ T1108] usb 2-1: SerialNumber: syz [ 458.587941][ T4229] usb 6-1: unable to get BOS descriptor or descriptor too short [ 458.888087][ T1108] usb 2-1: config 0 descriptor?? [ 458.950817][ T1108] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 458.967875][ T4229] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 458.997115][ T4229] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 459.021971][ T1108] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 459.043373][ T4229] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 459.058948][ T1108] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 459.129946][ T1108] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 459.137883][ T4229] usb 6-1: config 128 has no interface number 0 [ 459.167684][ T4229] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 459.180275][ T1108] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 459.203854][ T4229] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.215410][ T1108] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 459.242470][ T1108] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 459.251476][ T4229] usb 6-1: config 128 interface 127 has no altsetting 0 [ 459.314166][ T1108] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 459.431962][ T1108] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 459.448451][ T4229] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 459.474625][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.767750][ T1108] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 459.785735][ T4229] usb 6-1: Product: syz [ 459.806087][ T4229] usb 6-1: Manufacturer: syz [ 459.820600][ T1108] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 459.839162][ T4229] usb 6-1: SerialNumber: syz [ 459.924269][ T1108] usb 2-1: USB disconnect, device number 36 [ 460.000255][ T1108] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 460.284460][ T1108] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 460.848645][T11568] loop0: detected capacity change from 0 to 2048 [ 460.925884][T11570] loop5: detected capacity change from 0 to 128 [ 461.339367][T11559] overlayfs: missing 'lowerdir' [ 461.503340][ T1108] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 461.515668][ T1108] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 461.525727][ T1108] keyspan 2-1:0.0: device disconnected [ 461.558772][T11568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.602811][T11570] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 461.614643][T11570] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 461.691996][ T4229] usb 6-1: USB disconnect, device number 29 [ 462.115108][ T4864] udevd[4864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.952060][ T1111] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 465.397939][ T6673] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 465.808703][ T6673] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 465.818143][ T6673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.828657][ T6673] usb 4-1: config 0 descriptor?? [ 465.869829][ T6673] cp210x 4-1:0.0: cp210x converter detected [ 466.067117][T11616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2111'. [ 466.086915][T11614] loop5: detected capacity change from 0 to 2048 [ 466.134860][T11614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.317955][ T6673] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: 0 [ 466.537765][ T6673] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 466.545621][ T6673] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 466.554350][ T6673] usb 4-1: cp210x converter now attached to ttyUSB0 [ 466.572116][ T6673] usb 4-1: USB disconnect, device number 47 [ 466.586519][ T6673] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.595523][ T6673] cp210x 4-1:0.0: device disconnected [ 467.096572][T11629] loop3: detected capacity change from 0 to 16 [ 467.138695][T11629] erofs: Unknown parameter './file1' [ 467.397685][ T4229] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 467.475663][T11637] loop3: detected capacity change from 0 to 8192 [ 467.534435][T11637] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.637845][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 467.686926][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2122'. [ 467.747831][ T6673] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 467.758444][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.784454][ T4229] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 467.800407][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.818924][ T4229] usb 2-1: config 0 descriptor?? [ 467.873980][ T4229] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 467.933744][T11648] loop5: detected capacity change from 0 to 512 [ 468.083259][T11648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 468.092330][T11648] System zones: 1-12 [ 468.153003][T11648] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.2124: corrupted inode contents [ 468.166409][T11648] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 468.176528][T11648] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.2124: corrupted inode contents [ 468.190436][T11648] EXT4-fs error (device loop5): ext4_evict_inode:332: inode #15: comm syz.5.2124: mark_inode_dirty error [ 468.199841][ T6673] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.216185][T11648] EXT4-fs (loop5): 1 orphan inode deleted [ 468.222158][T11648] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 468.428061][ T6673] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 468.443221][ T6673] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 468.452880][ T6673] usb 8-1: Product: syz [ 468.458182][ T6673] usb 8-1: Manufacturer: syz [ 468.462958][ T6673] usb 8-1: SerialNumber: syz [ 468.473845][ T6673] usb 8-1: config 0 descriptor?? [ 469.127379][T11658] loop5: detected capacity change from 0 to 4096 [ 469.186703][T11658] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 469.229182][T11658] EXT4-fs (loop5): Test dummy encryption mode enabled [ 469.362909][T11658] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000000040,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 469.532585][T11669] loop3: detected capacity change from 0 to 512 [ 469.595330][T11669] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 469.595330][T11669] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 469.595330][T11669] [ 469.698538][T11669] EXT4-fs (loop3): Mount option "dax=inode" incompatible with ext2 [ 469.819152][T11670] loop_set_status: loop5 () has still dirty pages (nrpages=373) [ 470.009169][ T6673] keyspan 8-1:0.0: Keyspan 4 port adapter converter detected [ 470.020772][ T6673] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 470.031525][T11669] loop3: detected capacity change from 0 to 2048 [ 470.038778][ T6673] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 88 [ 470.112308][ T6673] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 470.132666][T11674] loop0: detected capacity change from 0 to 512 [ 470.170022][T11669] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 470.204424][ T6673] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 470.442957][ T6673] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 470.497414][T11674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 470.506885][T11674] System zones: 1-12 [ 470.544288][T11674] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.2131: corrupted inode contents [ 470.578243][T11674] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 470.596880][T11674] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.2131: corrupted inode contents [ 470.614916][T11674] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.2131: mark_inode_dirty error [ 470.641559][T11674] EXT4-fs (loop0): 1 orphan inode deleted [ 470.647756][T11674] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 470.788901][ T6673] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 470.841621][ T6673] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 470.875795][ T23] usb 2-1: USB disconnect, device number 38 [ 470.904370][ T6673] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 470.932475][ T6673] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 471.443173][T11685] loop3: detected capacity change from 0 to 512 [ 472.977271][ T6673] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 472.996572][ T6673] usb 8-1: USB disconnect, device number 27 [ 473.009665][ T6673] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 473.029078][ T6673] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 473.042039][T11685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 473.050763][T11685] System zones: 1-12 [ 473.187970][ T4190] Bluetooth: Frame is too long (len 12, expected len 4) [ 473.256326][T11706] loop5: detected capacity change from 0 to 512 [ 473.263342][T11685] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.2135: corrupted inode contents [ 473.276503][ T6673] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 473.277142][T11685] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 473.296041][T11685] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.2135: corrupted inode contents [ 473.308968][T11685] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.2135: mark_inode_dirty error [ 473.333239][T11685] EXT4-fs (loop3): 1 orphan inode deleted [ 473.339339][T11685] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 473.563155][T11706] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 473.563155][T11706] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 473.563155][T11706] [ 473.858897][T11706] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.2141: inode has both inline data and extents flags [ 474.049459][ T6673] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 474.059610][ T6673] keyspan 8-1:0.0: device disconnected [ 474.079798][T11706] EXT4-fs (loop5): Remounting filesystem read-only [ 474.086815][T11706] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.2141: couldn't read orphan inode 15 (err -117) [ 474.126875][T11706] EXT4-fs (loop5): Remounting filesystem read-only [ 474.140486][T11706] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nouser_xattr,errors=remount-ro,grpid,. Quota mode: none. [ 474.483700][T11716] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.2141: Directory hole found for htree leaf block 0 [ 474.501044][T11716] EXT4-fs (loop5): Remounting filesystem read-only [ 474.707181][ T6673] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 474.888756][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.896208][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.227986][ T6673] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.244551][ T6673] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 476.317880][ T6674] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 476.428121][ T6673] usb 8-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 476.437265][ T6673] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.466345][ T6673] usb 8-1: Product: syz [ 476.487314][ T6673] usb 8-1: Manufacturer: syz [ 476.498381][ T6673] usb 8-1: SerialNumber: syz [ 476.556241][ T6673] usb-storage 8-1:1.0: USB Mass Storage device detected [ 476.587819][ T6674] usb 6-1: Using ep0 maxpacket: 32 [ 476.616507][ T6673] scsi host1: usb-storage 8-1:1.0 [ 476.694697][ T1108] usb 8-1: USB disconnect, device number 28 [ 476.727938][ T6674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.747814][ T6674] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 476.767440][ T6674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.786333][ T6674] usb 6-1: config 0 descriptor?? [ 476.850247][ T6674] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 478.485702][T11674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.507976][ T3518] usb 6-1: USB disconnect, device number 30 [ 478.575630][T11674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.597845][ T1108] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 478.957807][ T1108] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.129612][ T1108] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 479.139078][ T1108] usb 8-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 479.147283][ T1108] usb 8-1: Product: syz [ 479.152212][ T1108] usb 8-1: Manufacturer: syz [ 479.157024][ T1108] usb 8-1: SerialNumber: syz [ 479.178723][ T1108] usb 8-1: config 0 descriptor?? [ 479.219200][ T1108] keyspan 8-1:0.0: Keyspan 4 port adapter converter detected [ 479.230033][ T1108] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 479.238204][ T1108] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 88 [ 479.247338][ T1108] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 479.265148][ T1108] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 479.280161][ T1108] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 479.302936][ T1108] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 479.320932][ T1108] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 479.339536][ T1108] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 479.354655][ T1108] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 479.378408][ T1108] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 479.435161][T11674] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.444382][T11674] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.453482][T11674] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.462958][T11674] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.500418][ T6674] usb 8-1: USB disconnect, device number 29 [ 479.622060][ T6673] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 479.702143][ T6674] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 479.739622][ T6674] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 479.774764][ T6674] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 479.816969][ T6674] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 479.833653][ T6674] keyspan 8-1:0.0: device disconnected [ 480.047991][ T6673] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.333998][T11750] loop0: detected capacity change from 0 to 512 [ 480.466796][ T6673] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 480.480313][ T6673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.488601][ T6673] usb 2-1: Product: syz [ 480.493768][ T6673] usb 2-1: Manufacturer: syz [ 480.498550][ T6673] usb 2-1: SerialNumber: syz [ 480.821826][T11750] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 481.077711][T11750] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.235844][ T6673] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 481.258975][ T6673] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 481.270841][ T6673] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 481.280809][ T6673] usb 2-1: USB disconnect, device number 39 [ 481.467721][ T3518] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 482.067771][ T3518] usb 6-1: not running at top speed; connect to a high speed hub [ 482.159401][T11778] netlink: 'syz.7.2160': attribute type 11 has an invalid length. [ 482.478020][ T3518] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.054776][T11784] loop7: detected capacity change from 0 to 128 [ 483.228275][ T3518] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 483.405565][T11790] loop1: detected capacity change from 0 to 512 [ 484.035734][T11784] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 484.036463][T11790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 484.047873][T11784] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 484.055887][T11790] System zones: 1-12 [ 484.074716][T11790] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2164: corrupted inode contents [ 484.090708][T11790] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 484.099452][ T3518] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 484.109336][ T3518] usb 6-1: Product: syz [ 484.113832][ T3518] usb 6-1: Manufacturer: syz [ 484.120266][T11790] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2164: corrupted inode contents [ 484.133167][T11790] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.2164: mark_inode_dirty error [ 484.145193][T11790] EXT4-fs (loop1): 1 orphan inode deleted [ 484.151018][T11790] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 484.248126][ T3518] usb 6-1: can't set config #1, error -71 [ 484.293358][ T3518] usb 6-1: USB disconnect, device number 31 [ 486.257798][ T6852] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 486.341780][T11816] loop5: detected capacity change from 0 to 1024 [ 486.407806][ T4231] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 486.494026][T11820] netlink: 'syz.7.2174': attribute type 11 has an invalid length. [ 486.575019][T11816] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 486.627967][ T6852] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 486.664748][ T6852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.844892][T11816] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 486.873913][ T6852] usb 2-1: config 0 has no interface number 0 [ 486.993805][ T6852] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 487.119490][ T6852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.314734][ T6852] usb 2-1: config 0 descriptor?? [ 487.378952][ T6852] hub 2-1:0.4: bad descriptor, ignoring hub [ 487.391960][ T6852] hub: probe of 2-1:0.4 failed with error -5 [ 487.399304][ T6852] sierra 2-1:0.4: Sierra USB modem converter detected [ 487.597983][ T6673] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 487.609689][ T6852] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 487.637826][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.648588][ T6852] usb 2-1: USB disconnect, device number 40 [ 487.660967][ T6852] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 487.849025][ T4231] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 487.897287][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.989836][ T4231] usb 4-1: Product: syz [ 488.019897][ T4231] usb 4-1: Manufacturer: syz [ 488.045718][ T4231] usb 4-1: SerialNumber: syz [ 488.191419][ T4231] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 488.279911][ T4231] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 488.388354][ T4231] usbserial_generic 4-1:1.0: device has no bulk endpoints [ 488.455916][ T6852] sierra 2-1:0.4: device disconnected [ 488.556951][T11831] loop1: detected capacity change from 0 to 1024 [ 488.592723][ T4231] usb 4-1: USB disconnect, device number 48 [ 488.598522][T11824] loop7: detected capacity change from 0 to 1024 [ 488.629812][T11831] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64 [ 488.682624][T11838] zram: Cannot change disksize for initialized device [ 488.716869][T11824] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6) [ 488.730053][T11824] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 488.751520][T11824] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.2175: Failed to acquire dquot type 0 [ 488.787962][T11824] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 488.822747][T11842] loop0: detected capacity change from 0 to 128 [ 488.834454][T11824] EXT4-fs (loop7): 1 truncate cleaned up [ 488.843499][T11824] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.870194][T11843] loop1: detected capacity change from 0 to 128 [ 488.882666][T11842] EXT4-fs (loop0): Test dummy encryption mode enabled [ 488.909444][T11842] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 488.936007][T11843] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 488.938040][ T6673] usb 8-1: unable to get BOS descriptor or descriptor too short [ 488.948030][T11843] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 488.968371][T11842] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 489.177815][ T6673] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 489.199349][ T6673] usb 8-1: can't read configurations, error -71 [ 489.352295][ T26] audit: type=1326 audit(1789620872.850:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.5.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0d818159 code=0x7fc00000 [ 489.428609][T11851] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 489.489648][T11853] loop3: detected capacity change from 0 to 128 [ 490.632744][T11873] loop5: detected capacity change from 0 to 1024 [ 490.932504][T11873] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64 [ 491.394824][T11880] loop3: detected capacity change from 0 to 512 [ 491.555112][T11880] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.2191: inode has both inline data and extents flags [ 491.687921][ T4254] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 491.768524][T11880] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.2191: couldn't read orphan inode 15 (err -117) [ 491.859049][T11893] loop5: detected capacity change from 0 to 128 [ 491.883185][T11895] capability: warning: `syz.7.2198' uses 32-bit capabilities (legacy support in use) [ 491.925192][T11893] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 491.937861][T11893] ext4 filesystem being mounted at /369/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.995123][T11880] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,,errors=continue. Quota mode: writeback. [ 492.046534][ T26] audit: type=1326 audit(1789620875.540:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 492.098015][ T4254] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.109485][ T26] audit: type=1326 audit(1789620875.540:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 493.601341][ T26] audit: type=1326 audit(1789620875.540:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 493.646917][ T26] audit: type=1326 audit(1789620875.580:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 493.722417][ T4254] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 493.737646][ T4254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.777664][ T4254] usb 2-1: Product: syz [ 493.781942][ T4254] usb 2-1: Manufacturer: syz [ 493.786563][ T4254] usb 2-1: SerialNumber: syz [ 493.822970][ T26] audit: type=1326 audit(1789620875.580:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 493.861390][T11906] loop3: detected capacity change from 0 to 128 [ 493.869206][ T4254] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 493.905986][ T4254] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 493.928166][ T26] audit: type=1326 audit(1789620875.580:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 493.964526][ T4254] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 494.021770][T11909] loop7: detected capacity change from 0 to 512 [ 494.053425][ T26] audit: type=1326 audit(1789620875.580:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 494.124080][ T6852] usb 2-1: USB disconnect, device number 41 [ 494.184753][ T26] audit: type=1326 audit(1789620875.580:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 494.239309][ T26] audit: type=1326 audit(1789620875.580:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 494.274056][ T26] audit: type=1326 audit(1789620875.580:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 494.305124][ T26] audit: type=1326 audit(1789620875.670:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 494.955552][ T26] audit: type=1326 audit(1789620875.670:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 495.195058][T11921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2206'. [ 497.089380][T11909] loop7: detected capacity change from 0 to 512 [ 497.163775][ T26] audit: type=1326 audit(1789620875.670:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 497.208404][T11909] EXT4-fs (loop7): Ignoring removed orlov option [ 497.215241][T11909] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 497.288406][ T26] audit: type=1326 audit(1789620875.670:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11879 comm="syz.3.2191" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ba8e2b159 code=0x7ffc0000 [ 497.313321][T11909] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #16: comm syz.7.2204: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 497.331085][T11909] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.2204: couldn't read orphan inode 16 (err -117) [ 497.343591][T11909] EXT4-fs (loop7): 1 orphan inode deleted [ 497.349403][T11909] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 497.782440][T11938] loop1: detected capacity change from 0 to 16 [ 498.473172][T11938] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 498.522616][T11941] loop3: detected capacity change from 0 to 512 [ 498.708373][T11941] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 498.708373][T11941] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 498.708373][T11941] [ 498.839928][T11954] loop5: detected capacity change from 0 to 8 [ 498.862378][T11941] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.2211: inode has both inline data and extents flags [ 498.912876][T11954] SQUASHFS error: lzo decompression failed, data probably corrupt [ 498.937853][T11954] SQUASHFS error: Failed to read block 0x91: -5 [ 498.975624][T11954] SQUASHFS error: Unable to read metadata cache entry [8f] [ 498.990691][T11941] EXT4-fs (loop3): Remounting filesystem read-only [ 499.023624][T11954] SQUASHFS error: Unable to read inode 0x107 [ 499.030597][T11941] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.2211: couldn't read orphan inode 15 (err -117) [ 499.053024][T11941] EXT4-fs (loop3): Remounting filesystem read-only [ 499.064964][T11941] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nouser_xattr,errors=remount-ro,grpid,. Quota mode: none. [ 499.241506][T11954] loop5: detected capacity change from 0 to 256 [ 500.184625][T11954] ODEBUG: Out of memory. ODEBUG disabled [ 500.455503][ T6674] Bluetooth: hci1: command 0x0405 tx timeout [ 501.122419][T11965] loop1: detected capacity change from 0 to 512 [ 501.338698][T11965] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 501.391380][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397957][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.487810][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2220'. [ 501.565571][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2219'. [ 502.292783][T11969] loop7: detected capacity change from 0 to 4096 [ 502.498132][T11982] loop1: detected capacity change from 0 to 128 [ 503.876620][T11969] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 504.522036][T11982] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 504.538284][T11982] ext4 filesystem being mounted at /438/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.765001][T11993] loop0: detected capacity change from 0 to 16 [ 506.128650][T11993] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 507.095963][T12006] loop7: detected capacity change from 0 to 2048 [ 507.156800][T12009] loop1: detected capacity change from 0 to 512 [ 507.246806][T12009] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 507.246806][T12009] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 507.246806][T12009] [ 507.278316][T12006] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 507.328424][T12006] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.417841][ T6852] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 507.441230][T12009] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.2228: inode has both inline data and extents flags [ 507.483953][T12009] EXT4-fs (loop1): Remounting filesystem read-only [ 507.497641][ T4229] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 507.498043][T12009] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2228: couldn't read orphan inode 15 (err -117) [ 507.642547][T12009] EXT4-fs (loop1): Remounting filesystem read-only [ 507.657766][ T6852] usb 4-1: Using ep0 maxpacket: 32 [ 507.663978][T12009] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nouser_xattr,errors=remount-ro,grpid,. Quota mode: none. [ 507.917981][ T6852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.268752][ T4229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.442179][ T6852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.462254][ T4229] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.527628][ T6852] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 508.588663][ T6852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.631587][ T6852] usb 4-1: config 0 descriptor?? [ 510.370838][ T4229] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 510.406114][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.445721][ T4229] usb 6-1: Product: syz [ 510.466080][ T4229] usb 6-1: Manufacturer: syz [ 511.675967][ T4229] usb 6-1: SerialNumber: syz [ 511.887785][ T4229] usb 6-1: can't set config #1, error -71 [ 511.922682][ T4229] usb 6-1: USB disconnect, device number 32 [ 511.971798][ T6852] usbhid 4-1:0.0: can't add hid device: -71 [ 511.987672][ T6852] usbhid: probe of 4-1:0.0 failed with error -71 [ 512.006323][T12047] loop5: detected capacity change from 0 to 128 [ 512.062659][ T6852] usb 4-1: USB disconnect, device number 49 [ 512.178544][T12047] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 512.190579][T12047] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 512.909287][T12051] loop7: detected capacity change from 0 to 16 [ 513.079850][T12051] erofs: (device loop7): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 513.871287][T12065] loop1: detected capacity change from 0 to 512 [ 513.912038][T12065] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 513.912038][T12065] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 513.912038][T12065] [ 513.964576][T12065] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.2246: inode has both inline data and extents flags [ 513.987641][T12065] EXT4-fs (loop1): Remounting filesystem read-only [ 513.997831][T12065] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2246: couldn't read orphan inode 15 (err -117) [ 514.044761][T12065] EXT4-fs (loop1): Remounting filesystem read-only [ 514.063187][T12065] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nouser_xattr,errors=remount-ro,grpid,. Quota mode: none. [ 514.103088][ T6852] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 514.917945][T12072] netlink: 'syz.7.2244': attribute type 11 has an invalid length. [ 515.338090][ T6852] usb 6-1: not running at top speed; connect to a high speed hub [ 515.428011][ T6852] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.554090][T12075] netlink: 'syz.0.2249': attribute type 3 has an invalid length. [ 515.597900][ T6852] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 515.625855][ T6852] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 515.701466][ T6852] usb 6-1: Product: syz [ 515.705708][ T6852] usb 6-1: Manufacturer: syz [ 515.800288][ T6852] usb 6-1: Found UVC 1.00 device syz (225a:e1d4) [ 515.841536][T12087] loop0: detected capacity change from 0 to 512 [ 517.202098][ T4231] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 517.327669][ T6852] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 517.357829][ T6852] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 517.374459][ T6852] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 517.404266][ T6852] usb 6-1: USB disconnect, device number 33 [ 517.413850][ T4229] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 517.477702][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 517.637907][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.669274][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.699967][ T4231] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 517.727727][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.767090][ T4231] usb 4-1: config 0 descriptor?? [ 517.787945][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.808810][ T4229] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 518.001158][ T4229] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 518.016333][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.027993][ T4229] usb 2-1: Product: syz [ 518.032354][ T4229] usb 2-1: Manufacturer: syz [ 518.037330][ T4229] usb 2-1: SerialNumber: syz [ 518.079482][ T4229] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 518.135758][ T4229] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 518.157045][ T4229] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 518.319329][ T1108] usb 2-1: USB disconnect, device number 42 [ 518.358026][ T4231] usbhid 4-1:0.0: can't add hid device: -71 [ 518.364292][ T4231] usbhid: probe of 4-1:0.0 failed with error -71 [ 518.392074][ T4231] usb 4-1: USB disconnect, device number 50 [ 518.398567][ T6674] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 518.671765][T12112] netlink: 'syz.0.2262': attribute type 11 has an invalid length. [ 519.457292][T12119] loop1: detected capacity change from 0 to 2048 [ 519.493228][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2267'. [ 519.553439][T12119] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 519.602930][T12119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.673390][ T6674] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.703961][ T6674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.769140][ T6674] usb 6-1: config 0 descriptor?? [ 519.819121][ T6674] cp210x 6-1:0.0: cp210x converter detected [ 519.831144][T12128] loop0: detected capacity change from 0 to 4096 [ 519.902129][T12133] loop1: detected capacity change from 0 to 128 [ 519.911157][T12128] EXT4-fs (loop0): Ignoring removed orlov option [ 519.927683][ T4229] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 520.035436][T12128] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,acl,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 520.136256][ T1108] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 520.418879][ T4229] usb 8-1: not running at top speed; connect to a high speed hub [ 520.497919][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.509948][ T4229] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.524861][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.536364][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.539417][ T6674] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 520.564612][ T1108] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.589168][ T6674] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 520.595237][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.621845][ T1108] usb 4-1: config 0 descriptor?? [ 520.648541][ T4229] usb 8-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 520.658928][ T6674] usb 6-1: cp210x converter now attached to ttyUSB0 [ 520.666174][ T4229] usb 8-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 520.893589][T12145] netlink: 'syz.0.2276': attribute type 11 has an invalid length. [ 520.964629][ T4229] usb 8-1: Product: syz [ 521.017410][ T4229] usb 8-1: Manufacturer: syz [ 521.329610][ T4229] usb 8-1: Found UVC 1.00 device syz (225a:e1d4) [ 521.517667][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 521.528280][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 521.538950][ T6674] usb 6-1: USB disconnect, device number 34 [ 521.568423][ T6674] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 521.577838][ T6674] cp210x 6-1:0.0: device disconnected [ 521.608739][ T1108] usb 4-1: USB disconnect, device number 51 [ 521.617850][ T4229] usb 8-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 521.647924][ T4229] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 521.657461][ T4229] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 521.720672][ T4229] usb 8-1: USB disconnect, device number 32 [ 522.117984][ T6674] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 522.490673][T12171] loop7: detected capacity change from 0 to 8 [ 522.523752][ T6674] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.578859][ T6674] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 522.624365][ T6674] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.638714][T12174] loop3: detected capacity change from 0 to 256 [ 522.677874][T12174] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 522.701535][T12174] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 522.750854][T12174] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 522.818059][ T6674] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 522.835380][ T6674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.862456][ T6674] usb 6-1: Product: syz [ 522.871496][ T6674] usb 6-1: Manufacturer: syz [ 522.881814][ T6674] usb 6-1: SerialNumber: syz [ 522.958815][ T6674] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 522.971639][ T6674] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 523.025082][ T6674] usbserial_generic 6-1:1.0: device has no bulk endpoints [ 523.113102][T12186] loop7: detected capacity change from 0 to 512 [ 523.184424][T12186] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 523.184424][T12186] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 523.184424][T12186] [ 523.230326][ T6674] usb 6-1: USB disconnect, device number 35 [ 523.279034][T12186] EXT4-fs (loop7): Mount option "dax=inode" incompatible with ext2 [ 523.431524][T12186] loop7: detected capacity change from 0 to 2048 [ 523.440316][T12186] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 523.687584][ T4229] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 524.168266][ T4229] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.334588][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.399636][ T4229] usb 4-1: config 0 descriptor?? [ 524.410324][T12205] loop7: detected capacity change from 0 to 128 [ 524.471397][ T4229] cp210x 4-1:0.0: cp210x converter detected [ 524.737628][ T6852] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 524.891737][T12225] loop0: detected capacity change from 0 to 1024 [ 524.947752][T12225] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 524.978768][T12225] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.057842][ T6852] usb 2-1: not running at top speed; connect to a high speed hub [ 525.128159][ T4229] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 525.174353][ T4229] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 525.181939][ T6852] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.263931][T12225] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 525.317801][T12225] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.369350][ T4229] usb 4-1: cp210x converter now attached to ttyUSB0 [ 525.488846][ T6852] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 525.496341][T12225] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2295: bg 0: block 112: padding at end of block bitmap is not set [ 525.516063][T12225] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 525.535919][ T6852] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 525.540720][T12225] EXT4-fs (loop0): This should not happen!! Data will be lost [ 525.540720][T12225] [ 525.559756][ T4229] usb 4-1: USB disconnect, device number 52 [ 525.617659][T12225] EXT4-fs (loop0): Total free blocks count 0 [ 525.655113][ T6852] usb 2-1: Product: syz [ 525.667704][ T4229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 525.677701][T12225] EXT4-fs (loop0): Free/Dirty block details [ 525.685815][ T6852] usb 2-1: Manufacturer: syz [ 525.702594][T12225] EXT4-fs (loop0): free_blocks=0 [ 525.707056][T12237] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.2295: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.732498][ T4229] cp210x 4-1:0.0: device disconnected [ 525.747857][T12225] EXT4-fs (loop0): dirty_blocks=16 [ 525.775742][ T6852] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 525.786739][T12225] EXT4-fs (loop0): Block reservation details [ 525.796958][ T6852] usb 2-1: No streaming interface found for terminal 2. [ 525.825793][T12239] loop5: detected capacity change from 0 to 2048 [ 525.847713][T12225] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 525.947952][T12239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.976747][ T4229] usb 2-1: USB disconnect, device number 43 [ 526.010630][T12244] loop3: detected capacity change from 0 to 128 [ 526.085466][T12244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 526.138158][T12244] System zones: 1-3, 19-19, 35-36 [ 526.193400][T12244] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 526.254035][T12244] ext4 filesystem being mounted at /489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 526.293310][T12251] loop0: detected capacity change from 0 to 512 [ 526.357806][T12251] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 526.357806][T12251] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 526.357806][T12251] [ 526.399406][T12251] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext2 [ 526.460780][T12244] FAULT_INJECTION: forcing a failure. [ 526.460780][T12244] name failslab, interval 1, probability 0, space 0, times 0 [ 526.576652][T12244] CPU: 0 PID: 12244 Comm: syz.3.2299 Not tainted syzkaller #0 [ 526.584195][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.594295][T12244] Call Trace: [ 526.597617][T12244] [ 526.600668][T12244] dump_stack_lvl+0x188/0x250 [ 526.605392][T12244] ? show_regs_print_info+0x20/0x20 [ 526.610678][T12244] ? load_image+0x410/0x410 [ 526.615249][T12244] ? __might_sleep+0xf0/0xf0 [ 526.619881][T12244] ? __lock_acquire+0x7b50/0x7b50 [ 526.624949][T12244] ? event_triggers_call+0x32e/0x360 [ 526.630494][T12244] should_fail+0x383/0x4b0 [ 526.634965][T12244] should_failslab+0x5/0x20 [ 526.639517][T12244] slab_pre_alloc_hook+0x51/0xc0 [ 526.644495][T12244] kmem_cache_alloc_trace+0x47/0x290 [ 526.649823][T12244] ? __se_sys_timerfd_create+0xe1/0x250 [ 526.655504][T12244] __se_sys_timerfd_create+0xe1/0x250 [ 526.660925][T12244] do_syscall_64+0x4c/0xa0 [ 526.665392][T12244] ? clear_bhb_loop+0x30/0x80 [ 526.670119][T12244] ? clear_bhb_loop+0x30/0x80 [ 526.674991][T12244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.680944][T12244] RIP: 0033:0x7f9ba8e2b159 [ 526.685405][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.705204][T12244] RSP: 002b:00007f9ba7083028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 526.713670][T12244] RAX: ffffffffffffffda RBX: 00007f9ba90b2fa0 RCX: 00007f9ba8e2b159 [ 526.721691][T12244] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000001 [ 526.729706][T12244] RBP: 00007f9ba8ec206b R08: 0000000000000000 R09: 0000000000000000 [ 526.737721][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.745736][T12244] R13: 00007f9ba90b3038 R14: 00007f9ba90b2fa0 R15: 00007ffff9420a88 [ 526.753773][T12244] [ 528.135246][T12251] loop0: detected capacity change from 0 to 2048 [ 528.167692][ T4231] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 528.226632][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 528.246560][T12251] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 528.325882][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 528.438485][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 528.529246][ T4231] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.561169][ T4231] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 528.578468][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 528.624453][ T4231] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.656067][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 528.704030][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 528.762104][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 528.784671][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 528.807031][ T4186] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 528.818491][ T4231] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 528.833093][ T4186] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 528.864231][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.906713][ T4231] usb 6-1: Product: syz [ 528.913858][ T4231] usb 6-1: Manufacturer: syz [ 528.931376][ T4231] usb 6-1: SerialNumber: syz [ 528.986304][ T4231] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 529.033734][ T4231] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 529.108107][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2308'. [ 529.117231][ T4231] usbserial_generic 6-1:1.0: device has no bulk endpoints [ 529.211287][ T21] usb 6-1: USB disconnect, device number 36 [ 531.490810][T12323] loop5: detected capacity change from 0 to 128 [ 532.651314][ T4229] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 532.758628][T12353] loop1: detected capacity change from 0 to 1024 [ 533.118000][ T4229] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.277056][ T4229] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 533.447552][ T4229] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.697985][ T4229] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 533.760860][ T4229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.807487][ T4229] usb 8-1: Product: syz [ 533.816213][ T4229] usb 8-1: Manufacturer: syz [ 533.863256][ T4229] usb 8-1: SerialNumber: syz [ 533.959698][ T4229] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 534.030208][ T4229] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 534.145581][ T4229] usbserial_generic 8-1:1.0: device has no bulk endpoints [ 534.242256][ T4229] usb 8-1: USB disconnect, device number 33 [ 534.904180][T12378] netlink: 'syz.1.2333': attribute type 32 has an invalid length. [ 534.971304][T12363] chnl_net:caif_netlink_parms(): no params data found [ 535.362266][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.450393][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.519119][T12363] device bridge_slave_0 entered promiscuous mode [ 535.571730][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.662594][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.724774][T12363] device bridge_slave_1 entered promiscuous mode [ 535.779868][T12397] loop7: detected capacity change from 0 to 164 [ 535.788089][ T4229] Bluetooth: hci2: command 0x0409 tx timeout [ 535.824482][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.836819][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.861059][T12399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 535.904579][T12363] team0: Port device team_slave_0 added [ 535.923578][T12363] team0: Port device team_slave_1 added [ 535.953808][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.017336][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.085923][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.098658][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.105752][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.131746][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.837377][T12363] device hsr_slave_0 entered promiscuous mode [ 536.892222][T12363] device hsr_slave_1 entered promiscuous mode [ 536.900090][T12363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.916376][T12363] Cannot create hsr debugfs directory [ 537.087704][ T4229] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 537.584551][ T4229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.603411][ T4229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.655212][ T4229] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.817758][T12363] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 537.854116][T12363] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 537.870619][ T4229] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 537.889226][T12363] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 537.901077][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.919932][T12363] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 537.932346][ T4229] usb 6-1: Product: syz [ 537.936537][ T4229] usb 6-1: Manufacturer: syz [ 537.964944][ T4229] usb 6-1: SerialNumber: syz [ 538.714816][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 539.341680][ T4229] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 539.933260][T12425] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 539.940065][ T4229] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 539.940480][T12425] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 539.961565][ T4229] usbserial_generic 6-1:1.0: device has no bulk endpoints [ 540.008919][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.034180][ T4229] usb 6-1: USB disconnect, device number 37 [ 540.054708][T12425] vhci_hcd vhci_hcd.0: Device attached [ 540.065347][T12428] loop1: detected capacity change from 0 to 1024 [ 540.133975][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.171646][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.180135][T12428] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,i_version,inode_readahead_blks=0x0000000000020000,stripe=0x0000000000000005,auto_da_alloc,nobarrier,,errors=continue. Quota mode: none. [ 540.206603][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.234859][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.244325][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.253554][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.260638][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.289387][T12428] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.298589][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.344897][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.357874][ T6674] usb 36-1: SetAddress Request (2) to port 0 [ 540.364654][ T6674] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 540.391783][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.401114][T12435] loop0: detected capacity change from 0 to 8 [ 540.413927][T12425] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2347: bg 0: block 112: padding at end of block bitmap is not set [ 540.448364][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.455506][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.497880][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.506455][T12425] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 540.524498][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.553831][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.574906][T12435] SQUASHFS error: lzo decompression failed, data probably corrupt [ 540.717723][T12425] EXT4-fs (loop1): This should not happen!! Data will be lost [ 540.717723][T12425] [ 540.733544][T12425] EXT4-fs (loop1): Total free blocks count 0 [ 540.740375][T12425] EXT4-fs (loop1): Free/Dirty block details [ 540.746328][T12425] EXT4-fs (loop1): free_blocks=0 [ 540.748212][T12435] SQUASHFS error: Failed to read block 0x91: -5 [ 540.753404][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 540.758286][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.778375][T12425] EXT4-fs (loop1): dirty_blocks=64 [ 540.783569][T12425] EXT4-fs (loop1): Block reservation details [ 540.813692][T12435] SQUASHFS error: Unable to read metadata cache entry [8f] [ 540.841803][T12425] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 540.848152][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 540.856421][T12435] SQUASHFS error: Unable to read inode 0x107 [ 540.868096][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 540.881060][T12428] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.2347: Freeing blocks not in datazone - block = 0, count = 16 [ 540.909321][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 540.937413][T12426] vhci_hcd: connection reset by peer [ 540.960522][ T4288] vhci_hcd: stop threads [ 540.964936][ T4288] vhci_hcd: release socket [ 540.970049][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 540.998177][ T4288] vhci_hcd: disconnect device [ 541.038353][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.051438][T12363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.114458][T12363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.138085][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.169739][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.347841][T12448] loop5: detected capacity change from 0 to 512 [ 541.351962][T12447] loop0: detected capacity change from 0 to 164 [ 541.560033][T12448] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.2354: iget: bad i_size value: 38620345925642 [ 541.574399][T12448] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.2354: couldn't read orphan inode 15 (err -117) [ 541.592332][T12448] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 542.863885][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 543.018402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 543.025942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.157167][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.377792][ T3518] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 543.788529][ T3518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.840647][ T3518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.892005][ T3518] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.945422][ T3518] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.980462][ T3518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.997583][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 543.997600][ T26] audit: type=1326 audit(1789620924.408:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.076460][ T3518] usb 2-1: config 0 descriptor?? [ 544.116587][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.138569][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.167969][ T26] audit: type=1326 audit(1789620924.418:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.246037][ T26] audit: type=1326 audit(1789620924.418:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.302458][ T4266] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.335455][ T26] audit: type=1326 audit(1789620924.418:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.360214][ T26] audit: type=1326 audit(1789620924.418:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.385410][ T26] audit: type=1326 audit(1789620924.418:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.410258][ T26] audit: type=1326 audit(1789620924.418:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.435797][ T26] audit: type=1326 audit(1789620924.418:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.489067][ T26] audit: type=1326 audit(1789620924.418:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.517069][ T26] audit: type=1326 audit(1789620924.418:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12470 comm="syz.7.2351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7f6fa159 code=0x7ffc0000 [ 544.534532][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.558468][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.584546][ T4266] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.601520][T12363] device veth0_vlan entered promiscuous mode [ 544.611547][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.620674][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.637021][T12363] device veth1_vlan entered promiscuous mode [ 544.676575][ T4266] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.712066][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.727349][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.749367][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.763168][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.797375][T12363] device veth0_macvtap entered promiscuous mode [ 544.821311][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 544.835477][T12363] device veth1_macvtap entered promiscuous mode [ 544.857082][ T4266] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.885468][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.896212][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.907811][ T3518] usbhid 2-1:0.0: can't add hid device: -71 [ 544.913093][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.913929][ T3518] usbhid: probe of 2-1:0.0 failed with error -71 [ 544.932265][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.947998][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.965838][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.977841][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.989387][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.002482][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.010644][ T3518] usb 2-1: USB disconnect, device number 44 [ 545.017303][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.051843][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.080379][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.096604][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.106890][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.118060][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.127985][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.138477][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.148925][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.159410][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.170807][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.188507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.198550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.210906][T12363] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.220773][T12363] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.230440][T12363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.239548][T12363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.473076][ T6674] usb 36-1: device descriptor read/8, error -110 [ 545.503109][T12486] loop1: detected capacity change from 0 to 164 [ 545.554026][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.564851][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.583625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.709856][T12481] chnl_net:caif_netlink_parms(): no params data found [ 545.755405][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.811929][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.857906][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 546.472662][T12494] loop7: detected capacity change from 0 to 2048 [ 546.539228][ T6674] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 546.546997][ T6674] usb usb36-port1: attempt power cycle [ 546.599676][T12494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.888999][ T6674] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 547.695553][ T3518] Bluetooth: hci4: command 0x0409 tx timeout [ 547.928407][ T1111] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 547.936285][ T6674] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 547.961070][ T6674] usb usb36-port1: unable to enumerate USB device [ 547.965767][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.976458][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.986311][T12481] device bridge_slave_0 entered promiscuous mode [ 547.995671][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.004887][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.398776][T12481] device bridge_slave_1 entered promiscuous mode [ 548.597727][ T1111] usb 2-1: not running at top speed; connect to a high speed hub [ 548.697740][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.759484][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.808843][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.838040][ T1111] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 548.857732][ T1111] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 548.866189][ T1111] usb 2-1: Product: syz [ 548.890795][ T1111] usb 2-1: Manufacturer: syz [ 548.944447][T12481] team0: Port device team_slave_0 added [ 548.954008][T12481] team0: Port device team_slave_1 added [ 548.971550][ T1111] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 549.119140][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.161905][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.227729][ T1111] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 549.247950][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.267763][ T1111] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 549.296614][ T1111] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 549.324709][ T1111] usb 2-1: USB disconnect, device number 45 [ 549.407677][ T3518] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 549.423968][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.450852][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.491872][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.575094][ T4266] device hsr_slave_0 left promiscuous mode [ 549.588650][ T4266] device hsr_slave_1 left promiscuous mode [ 549.615216][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.629510][ T4266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.650893][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.667714][ T21] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 549.676641][ T4266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.696673][ T4266] device bridge_slave_1 left promiscuous mode [ 549.713360][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.734615][ T4266] device bridge_slave_0 left promiscuous mode [ 549.754130][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.787796][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 549.804689][ T4266] device veth1_macvtap left promiscuous mode [ 549.817896][ T3518] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.831660][ T4266] device veth0_macvtap left promiscuous mode [ 549.841783][ T3518] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.849559][ T4266] device veth1_vlan left promiscuous mode [ 549.872739][ T3518] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 549.878713][ T4266] device veth0_vlan left promiscuous mode [ 549.909085][ T3518] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.957854][ T21] usb 8-1: Using ep0 maxpacket: 16 [ 550.087791][ T21] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 550.147987][ T3518] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 550.157091][ T3518] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.193969][ T3518] usb 9-1: Product: syz [ 550.198694][ T3518] usb 9-1: Manufacturer: syz [ 550.203341][ T3518] usb 9-1: SerialNumber: syz [ 550.288419][ T21] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 550.299046][ T3518] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 550.315434][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.327162][ T3518] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 550.345055][ T21] usb 8-1: Product: syz [ 550.354302][ T21] usb 8-1: Manufacturer: syz [ 550.361473][ T3518] usbserial_generic 9-1:1.0: generic converter detected [ 550.373378][ T21] usb 8-1: SerialNumber: syz [ 550.400820][ T3518] usb 9-1: generic converter now attached to ttyUSB0 [ 550.412115][ T21] r8152-cfgselector 8-1: config 0 descriptor?? [ 550.509180][ T1111] usb 9-1: USB disconnect, device number 2 [ 550.538537][ T1111] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 550.556810][ T1111] usbserial_generic 9-1:1.0: device disconnected [ 550.857699][ T3518] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 550.877797][ T21] r8152-cfgselector 8-1: Unknown version 0x0000 [ 550.884272][ T21] r8152-cfgselector 8-1: bad CDC descriptors [ 550.927745][ T21] r8152-cfgselector 8-1: Unknown version 0x0000 [ 550.939019][ T21] r8152-cfgselector 8-1: USB disconnect, device number 34 [ 551.067432][ T4266] team0 (unregistering): Port device team_slave_1 removed [ 551.129834][ T4266] team0 (unregistering): Port device team_slave_0 removed [ 551.175849][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.245117][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.254607][ T3518] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.286324][ T3518] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.317576][ T3518] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.869448][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 551.917940][ T3518] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 551.927722][ T3518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.942104][ T3518] usb 2-1: Product: syz [ 551.946588][ T3518] usb 2-1: Manufacturer: syz [ 551.951718][ T3518] usb 2-1: SerialNumber: syz [ 552.034842][ T4266] bond0 (unregistering): Released all slaves [ 552.156588][ T3518] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 552.548369][ T3518] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 552.814029][ T3518] usbserial_generic 2-1:1.0: device has no bulk endpoints [ 552.863712][ T3518] usb 2-1: USB disconnect, device number 46 [ 553.133652][T12481] device hsr_slave_0 entered promiscuous mode [ 553.161445][T12566] loop1: detected capacity change from 0 to 164 [ 553.208501][T12481] device hsr_slave_1 entered promiscuous mode [ 553.223597][T12481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.278105][T12481] Cannot create hsr debugfs directory [ 553.953106][ T6852] Bluetooth: hci4: command 0x0419 tx timeout [ 554.205448][T12576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2387'. [ 555.379926][T12481] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 555.448521][T12481] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 555.493575][T12481] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 555.503127][T12594] loop7: detected capacity change from 0 to 256 [ 555.547245][T12481] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 555.758100][T12594] exfat: Bad value for 'uid' [ 556.036055][T12481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.148057][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.166856][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.229146][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.296530][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.321051][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.359080][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.366207][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.399687][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.407915][ T3518] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 556.499101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.519882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.545297][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.552482][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.606807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.639406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.684723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.726326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.766566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 556.794588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 556.825976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.861483][ T3518] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.908082][ T3518] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.924883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.978464][T12481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.989556][ T3518] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 557.050946][ T3518] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.070728][T12481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.530593][T12622] netlink: 'syz.8.2398': attribute type 11 has an invalid length. [ 557.653535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.672672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.731614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.740328][ T3518] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 557.766944][ T3518] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.897538][ T3518] usb 8-1: Product: syz [ 557.901781][ T3518] usb 8-1: Manufacturer: syz [ 557.984619][ T3518] usb 8-1: SerialNumber: syz [ 558.079979][ T3518] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 558.127933][ T3518] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 558.176064][ T3518] usbserial_generic 8-1:1.0: generic converter detected [ 558.231716][ T3518] usb 8-1: generic converter now attached to ttyUSB0 [ 558.294363][ T3518] usb 8-1: USB disconnect, device number 35 [ 558.318057][ T3518] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 558.346176][ T3518] usbserial_generic 8-1:1.0: device disconnected [ 558.360133][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.379900][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.439269][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.163020][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 559.182414][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.223303][ T3518] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 559.240742][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 559.257069][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 559.288275][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 559.318229][ T21] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 559.335988][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 559.346709][T12675] netlink: 'syz.1.2411': attribute type 29 has an invalid length. [ 559.389693][T12481] device veth0_vlan entered promiscuous mode [ 559.404667][T12481] device veth1_vlan entered promiscuous mode [ 559.448157][T12675] netlink: 'syz.1.2411': attribute type 29 has an invalid length. [ 559.520266][T12678] netlink: 'syz.1.2411': attribute type 29 has an invalid length. [ 559.569843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.580691][ T3518] usb 9-1: not running at top speed; connect to a high speed hub [ 559.604762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 559.614629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.640699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.658972][T12682] netlink: 'syz.1.2411': attribute type 29 has an invalid length. [ 559.675070][T12481] device veth0_macvtap entered promiscuous mode [ 559.696856][T12481] device veth1_macvtap entered promiscuous mode [ 559.724124][ T3518] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 559.747840][ T21] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 559.774777][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.785573][ T21] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 559.805823][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.814440][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.844735][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.865706][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.883944][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.902933][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.916266][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.937165][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.975089][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.988767][ T3518] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 560.003446][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.030934][ T3518] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.039749][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.057703][ T3518] usb 9-1: Product: syz [ 560.067040][ T3518] usb 9-1: Manufacturer: syz [ 560.081045][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.083465][ T3518] usb 9-1: SerialNumber: syz [ 560.103770][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.134400][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.162446][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.180094][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.199329][ T3518] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 560.207196][ T3518] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 560.225091][ T3518] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 560.227929][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.243996][ T3518] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 560.253388][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.271234][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.286050][ T3518] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 560.298304][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 560.317423][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 560.326410][ T3518] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 560.342165][ T21] usbhid 8-1:1.0: can't add hid device: -71 [ 560.348894][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.350829][ T21] usbhid: probe of 8-1:1.0 failed with error -71 [ 560.378100][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.387129][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.411117][ T21] usb 8-1: USB disconnect, device number 36 [ 560.440194][T12481] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.465753][T12481] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.491496][ T3518] usb 9-1: USB disconnect, device number 3 [ 560.492341][T12481] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.533953][T12481] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.558822][ T3518] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 560.580529][ T3518] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 560.594507][ T3518] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 560.616095][ T3518] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 560.628556][ T3518] keyspan 9-1:1.0: device disconnected [ 560.797752][ T5638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.836436][ T5638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.867303][ T5638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 561.106041][ T5638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.134837][ T5638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.473803][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 562.143785][T12725] loop7: detected capacity change from 0 to 256 [ 562.191204][T12729] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 562.841469][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.847863][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.682451][T12762] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 564.836979][T12764] loop9: detected capacity change from 0 to 164 [ 568.494385][T12810] loop8: detected capacity change from 0 to 1024 [ 568.764515][T12816] netlink: 'syz.0.2432': attribute type 11 has an invalid length. [ 569.465158][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2447'. [ 569.582346][ T154] hfsplus: b-tree write err: -5, ino 25 [ 569.588543][ T154] hfsplus: b-tree write err: -5, ino 4 [ 569.594600][ T154] hfsplus: b-tree write err: -5, ino 2 [ 569.828406][T12829] loop8: detected capacity change from 0 to 128 [ 569.993657][T12829] EXT4-fs (loop8): Test dummy encryption mode enabled [ 570.072894][T12829] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 570.221963][T12829] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 572.194095][ T23] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 572.380174][T12889] loop0: detected capacity change from 0 to 128 [ 573.508121][T12889] EXT4-fs (loop0): Test dummy encryption mode enabled [ 573.587798][ T23] usb 9-1: not running at top speed; connect to a high speed hub [ 573.622071][T12889] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 573.684465][ T23] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 574.127665][ T23] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 574.159404][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.200771][T12889] ext4 filesystem being mounted at /497/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 574.250160][ T23] usb 9-1: Product: syz [ 574.830219][ T23] usb 9-1: Manufacturer: syz [ 574.834896][ T23] usb 9-1: SerialNumber: syz [ 575.109919][ T23] usb 9-1: can't set config #1, error -71 [ 575.163748][ T23] usb 9-1: USB disconnect, device number 4 [ 575.452119][T12917] loop0: detected capacity change from 0 to 4096 [ 575.557753][T12917] EXT4-fs (loop0): Ignoring removed nobh option [ 575.581037][T12917] EXT4-fs (loop0): Test dummy encryption mode enabled [ 575.622397][T12917] EXT4-fs (loop0): Ignoring removed bh option [ 575.738197][T12917] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 576.707335][T12939] loop8: detected capacity change from 0 to 512 [ 577.662065][T12939] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5 [ 577.662065][T12939] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 577.662065][T12939] [ 577.710912][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 577.710929][ T26] audit: type=1326 audit(1789620958.208:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.0.2478" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5acdb5159 code=0x7fc00000 [ 577.757805][T12939] EXT4-fs (loop8): Mount option "dax=inode" incompatible with ext2 [ 577.868533][T12950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2484'. [ 577.910754][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2484'. [ 578.002706][T12939] loop8: detected capacity change from 0 to 2048 [ 578.103376][T12955] loop0: detected capacity change from 0 to 164 [ 578.150930][T12939] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 579.129735][T12963] loop8: detected capacity change from 0 to 2048 [ 579.232089][T12963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.036793][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2490'. [ 580.288315][T12990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.448900][T12994] loop8: detected capacity change from 0 to 2048 [ 580.558103][T12994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.762667][T13002] loop7: detected capacity change from 0 to 512 [ 580.890825][T13002] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 580.890825][T13002] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 580.890825][T13002] [ 581.017465][T13002] EXT4-fs (loop7): Mount option "dax=inode" incompatible with ext2 [ 582.292972][T13002] loop7: detected capacity change from 0 to 2048 [ 582.349068][T13002] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 584.614470][T13065] loop8: detected capacity change from 0 to 512 [ 584.855111][T13065] EXT4-fs (loop8): Test dummy encryption mode enabled [ 585.005270][T13065] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.2512: inode has both inline data and extents flags [ 585.027932][T13065] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.2512: couldn't read orphan inode 15 (err -117) [ 585.189260][T13065] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 585.664765][T13083] loop7: detected capacity change from 0 to 128 [ 585.682287][ T26] audit: type=1800 audit(1789620966.178:584): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2512" name="file1" dev="loop8" ino=19 res=0 errno=0 [ 585.896966][T13083] UDF-fs: bad mount option "00000000000000000000003" or missing value [ 588.617681][T13118] loop7: detected capacity change from 0 to 164 [ 589.848233][T13131] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 601.176497][T13278] fuse: blksize only supported for fuseblk [ 602.146592][T13286] loop8: detected capacity change from 0 to 128 [ 603.302998][T13314] FAULT_INJECTION: forcing a failure. [ 603.302998][T13314] name failslab, interval 1, probability 0, space 0, times 0 [ 603.407930][T13314] CPU: 0 PID: 13314 Comm: syz.8.2567 Not tainted syzkaller #0 [ 603.415473][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.425561][T13314] Call Trace: [ 603.428872][T13314] [ 603.431824][T13314] dump_stack_lvl+0x188/0x250 [ 603.436541][T13314] ? show_regs_print_info+0x20/0x20 [ 603.441770][T13314] ? load_image+0x410/0x410 [ 603.446302][T13314] ? __might_sleep+0xf0/0xf0 [ 603.450936][T13314] ? __lock_acquire+0x7b50/0x7b50 [ 603.455997][T13314] should_fail+0x383/0x4b0 [ 603.460450][T13314] should_failslab+0x5/0x20 [ 603.464985][T13314] slab_pre_alloc_hook+0x51/0xc0 [ 603.469952][T13314] __kmalloc+0x6b/0x340 [ 603.474133][T13314] ? sk_prot_alloc+0xe7/0x210 [ 603.478845][T13314] sk_prot_alloc+0xe7/0x210 [ 603.483372][T13314] ? sk_alloc+0x1d/0x310 [ 603.487640][T13314] sk_alloc+0x2f/0x310 [ 603.491746][T13314] __netlink_create+0x6c/0x290 [ 603.496659][T13314] ? __lock_acquire+0x7b50/0x7b50 [ 603.501725][T13314] netlink_create+0x3a7/0x510 [ 603.506428][T13314] ? nfnetlink_rcv+0x2450/0x2450 [ 603.511466][T13314] __sock_create+0x473/0x910 [ 603.516108][T13314] __sys_socket+0xe2/0x170 [ 603.520567][T13314] __x64_sys_socket+0x76/0x80 [ 603.525280][T13314] do_syscall_64+0x4c/0xa0 [ 603.529723][T13314] ? clear_bhb_loop+0x30/0x80 [ 603.534426][T13314] ? clear_bhb_loop+0x30/0x80 [ 603.539131][T13314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 603.545055][T13314] RIP: 0033:0x7f5457a54159 [ 603.549503][T13314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.569221][T13314] RSP: 002b:00007f5455cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 603.577669][T13314] RAX: ffffffffffffffda RBX: 00007f5457cdbfa0 RCX: 00007f5457a54159 [ 603.585669][T13314] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 603.593667][T13314] RBP: 00007f5457aeb06b R08: 0000000000000000 R09: 0000000000000000 [ 603.601665][T13314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.609666][T13314] R13: 00007f5457cdc038 R14: 00007f5457cdbfa0 R15: 00007ffc61312458 [ 603.617686][T13314] [ 604.129995][T13327] netlink: 'syz.9.2573': attribute type 9 has an invalid length. [ 604.629356][T13327] netlink: 'syz.9.2573': attribute type 7 has an invalid length. [ 604.856611][T13327] netlink: 'syz.9.2573': attribute type 8 has an invalid length. [ 605.710268][T13341] loop8: detected capacity change from 0 to 16 [ 605.838371][T13341] erofs: (device loop8): mounted with root inode @ nid 36. [ 606.102802][T13339] attempt to access beyond end of device [ 606.102802][T13339] loop8: rw=524288, want=34359738368, limit=16 [ 606.119691][T13339] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 606.137945][T13339] erofs: (device loop8): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 606.146950][T13339] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 606.233471][T13339] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 606.277286][T13339] attempt to access beyond end of device [ 606.277286][T13339] loop8: rw=524288, want=56, limit=16 [ 606.314863][T13339] attempt to access beyond end of device [ 606.314863][T13339] loop8: rw=0, want=34359738368, limit=16 [ 606.360266][ T26] audit: type=1800 audit(1789620986.858:585): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2574" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 606.534605][T13357] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 606.537713][ T3518] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 607.200858][T13372] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2582'. [ 607.716447][T13396] loop8: detected capacity change from 0 to 128 [ 608.603859][T13396] EXT4-fs (loop8): Test dummy encryption mode enabled [ 608.725304][T13396] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 608.742220][T13396] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 609.267552][T13415] loop8: detected capacity change from 0 to 2048 [ 609.317389][T13415] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 609.984580][T13415] EXT4-fs error (device loop8): ext4_lookup:1860: inode #16: comm syz.8.2596: iget: bad i_size value: 8796093031208 [ 614.100599][T13501] loop8: detected capacity change from 0 to 128 [ 614.237602][T13501] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 614.283927][T13501] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 615.766533][T13532] loop8: detected capacity change from 0 to 512 [ 619.676369][T13595] mmap: syz.7.2647 (13595): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 620.082746][T13615] netlink: 'syz.1.2655': attribute type 11 has an invalid length. [ 621.305187][T13631] netlink: 'syz.0.2658': attribute type 29 has an invalid length. [ 621.322394][ T146] [ 621.324900][ T146] ====================================================== [ 621.331940][ T146] WARNING: possible circular locking dependency detected [ 621.339055][ T146] syzkaller #0 Not tainted [ 621.343571][ T146] ------------------------------------------------------ [ 621.350607][ T146] kworker/u5:0/146 is trying to acquire lock: [ 621.356685][ T146] ffffffff8d5b37c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 621.366034][ T146] [ 621.366034][ T146] but task is already holding lock: [ 621.373417][ T146] ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 621.383356][ T146] [ 621.383356][ T146] which lock already depends on the new lock. [ 621.383356][ T146] [ 621.393784][ T146] [ 621.393784][ T146] the existing dependency chain (in reverse order) is: [ 621.402817][ T146] [ 621.402817][ T146] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 621.410579][ T146] __mutex_lock_common+0x1e5/0x2400 [ 621.416330][ T146] mutex_lock_nested+0x17/0x20 [ 621.421654][ T146] hci_remote_features_evt+0x5d9/0xa10 [ 621.427663][ T146] hci_event_packet+0x600/0x1310 [ 621.433144][ T146] hci_rx_work+0x255/0xa10 [ 621.438183][ T146] process_one_work+0x867/0xff0 [ 621.443640][ T146] worker_thread+0xad7/0x12a0 [ 621.448867][ T146] kthread+0x42e/0x520 [ 621.453476][ T146] ret_from_fork+0x1f/0x30 [ 621.458435][ T146] [ 621.458435][ T146] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 621.465758][ T146] __mutex_lock_common+0x1e5/0x2400 [ 621.471501][ T146] mutex_lock_nested+0x17/0x20 [ 621.476804][ T146] l2cap_chan_connect+0xfb/0xe20 [ 621.482388][ T146] l2cap_sock_connect+0x5a3/0x770 [ 621.487963][ T146] kernel_connect+0x11c/0x180 [ 621.493205][ T146] rfcomm_dlc_open+0x600/0x10c0 [ 621.498608][ T146] rfcomm_sock_connect+0x2e9/0x600 [ 621.504272][ T146] __sys_connect+0x3cb/0x450 [ 621.509420][ T146] __x64_sys_connect+0x76/0x80 [ 621.514736][ T146] do_syscall_64+0x4c/0xa0 [ 621.519706][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.526157][ T146] [ 621.526157][ T146] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 621.533577][ T146] __lock_acquire+0x2c66/0x7b50 [ 621.538993][ T146] lock_acquire+0x19e/0x400 [ 621.544060][ T146] __mutex_lock_common+0x1e5/0x2400 [ 621.549809][ T146] mutex_lock_nested+0x17/0x20 [ 621.555122][ T146] rfcomm_security_cfm+0x95/0x780 [ 621.560700][ T146] hci_auth_complete_evt+0x388/0xbb0 [ 621.566570][ T146] hci_event_packet+0x701/0x1310 [ 621.572059][ T146] hci_rx_work+0x255/0xa10 [ 621.577033][ T146] process_one_work+0x867/0xff0 [ 621.582438][ T146] worker_thread+0xad7/0x12a0 [ 621.587665][ T146] kthread+0x42e/0x520 [ 621.592286][ T146] ret_from_fork+0x1f/0x30 [ 621.597287][ T146] [ 621.597287][ T146] other info that might help us debug this: [ 621.597287][ T146] [ 621.607532][ T146] Chain exists of: [ 621.607532][ T146] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 621.607532][ T146] [ 621.620076][ T146] Possible unsafe locking scenario: [ 621.620076][ T146] [ 621.627547][ T146] CPU0 CPU1 [ 621.632936][ T146] ---- ---- [ 621.638326][ T146] lock(hci_cb_list_lock); [ 621.642864][ T146] lock(&hdev->lock); [ 621.649491][ T146] lock(hci_cb_list_lock); [ 621.656547][ T146] lock(rfcomm_mutex); [ 621.660736][ T146] [ 621.660736][ T146] *** DEADLOCK *** [ 621.660736][ T146] [ 621.668899][ T146] 4 locks held by kworker/u5:0/146: [ 621.674117][ T146] #0: ffff888072613938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 621.684440][ T146] #1: ffffc9000173fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 621.695796][ T146] #2: ffff888023cb4478 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0xbc/0xbb0 [ 621.705589][ T146] #3: ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 621.715899][ T146] [ 621.715899][ T146] stack backtrace: [ 621.721825][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 621.729305][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 621.739398][ T146] Workqueue: hci3 hci_rx_work [ 621.744120][ T146] Call Trace: [ 621.747427][ T146] [ 621.750389][ T146] dump_stack_lvl+0x188/0x250 [ 621.755103][ T146] ? load_image+0x410/0x410 [ 621.759633][ T146] ? show_regs_print_info+0x20/0x20 [ 621.764869][ T146] ? print_circular_bug+0x12b/0x1a0 [ 621.770099][ T146] check_noncircular+0x296/0x330 [ 621.775077][ T146] ? add_chain_block+0x9b0/0x9b0 [ 621.780040][ T146] ? lockdep_lock+0xf1/0x1f0 [ 621.784665][ T146] ? mark_lock+0x94/0x320 [ 621.789023][ T146] ? _find_first_zero_bit+0xd1/0xf0 [ 621.794287][ T146] __lock_acquire+0x2c66/0x7b50 [ 621.799188][ T146] ? __lock_acquire+0x13dc/0x7b50 [ 621.804251][ T146] ? verify_lock_unused+0x140/0x140 [ 621.809490][ T146] lock_acquire+0x19e/0x400 [ 621.814013][ T146] ? rfcomm_security_cfm+0x95/0x780 [ 621.819228][ T146] ? __might_sleep+0xf0/0xf0 [ 621.823838][ T146] ? read_lock_is_recursive+0x10/0x10 [ 621.829237][ T146] __mutex_lock_common+0x1e5/0x2400 [ 621.834446][ T146] ? rfcomm_security_cfm+0x95/0x780 [ 621.839660][ T146] ? rcu_lock_release+0x20/0x20 [ 621.844528][ T146] ? rfcomm_security_cfm+0x95/0x780 [ 621.849759][ T146] ? mutex_lock_io_nested+0x60/0x60 [ 621.854971][ T146] ? l2cap_security_cfm+0x12b4/0x1340 [ 621.860366][ T146] ? l2cap_disconn_cfm+0xc0/0xc0 [ 621.865321][ T146] mutex_lock_nested+0x17/0x20 [ 621.870122][ T146] rfcomm_security_cfm+0x95/0x780 [ 621.875165][ T146] ? rfcomm_send_msc+0x340/0x340 [ 621.880122][ T146] ? rfcomm_send_msc+0x340/0x340 [ 621.885075][ T146] hci_auth_complete_evt+0x388/0xbb0 [ 621.890411][ T146] ? hci_disconn_complete_evt+0xae0/0xae0 [ 621.896144][ T146] ? lock_chain_count+0x20/0x20 [ 621.901018][ T146] ? __rwlock_init+0x140/0x140 [ 621.905913][ T146] hci_event_packet+0x701/0x1310 [ 621.910894][ T146] ? _raw_spin_unlock+0x40/0x40 [ 621.915773][ T146] ? rcu_lock_release+0x20/0x20 [ 621.920643][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 621.925864][ T146] hci_rx_work+0x255/0xa10 [ 621.930300][ T146] process_one_work+0x867/0xff0 [ 621.935173][ T146] ? worker_detach_from_pool+0x240/0x240 [ 621.940817][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 621.946113][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 621.951144][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 621.956718][ T146] ? wq_worker_running+0x97/0x170 [ 621.961759][ T146] worker_thread+0xad7/0x12a0 [ 621.966460][ T146] kthread+0x42e/0x520 [ 621.970543][ T146] ? rcu_lock_release+0x20/0x20 [ 621.975410][ T146] ? kthread_blkcg+0xd0/0xd0 [ 621.980011][ T146] ret_from_fork+0x1f/0x30 [ 621.984453][ T146] [ 622.002753][T13631] netlink: 'syz.0.2658': attribute type 29 has an invalid length. [ 622.027263][T13634] netlink: 'syz.0.2658': attribute type 29 has an invalid length. [ 622.037006][T13638] netlink: 'syz.0.2658': attribute type 29 has an invalid length. [ 623.547545][ T1111] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 623.555889][ T1111] Bluetooth: hci0: Injecting HCI hardware error event [ 623.562833][ T146] Bluetooth: hci0: hardware error 0x00 [ 624.269560][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.275905][ T1421] ieee802154 phy1 wpan1: encryption failed: -22