last executing test programs: 14m36.504613615s ago: executing program 0 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x33) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) epoll_create1(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1, 0x60, 0x2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r9 = openat(r8, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r9, &(0x7f00000001c0)='00:03\n', 0x6) r10 = openat(r8, &(0x7f0000000480)='bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='00:03\n', 0x6) 14m35.338903216s ago: executing program 0 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x1, 0x400000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000940)=0x81, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x2d}, 0xb00}], 0x1, 0x1100000000000000) 14m34.139231436s ago: executing program 0 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 14m34.056336496s ago: executing program 0 (id=568): syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040da0b528111300102030109023800010900a0fa0904000003ffff4000070589020002000705020200020007"], 0x0) 14m32.646667137s ago: executing program 0 (id=572): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x100000e, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x1ad941, 0x176) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) 14m29.919434028s ago: executing program 0 (id=579): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000003540), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000003580)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x3, 0x3a, '/dev/nullb0\x00', 0x3a, '/dev/nullb0\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x40) 14m14.257120098s ago: executing program 32 (id=579): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000003540), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000003580)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x3, 0x3a, '/dev/nullb0\x00', 0x3a, '/dev/nullb0\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x40) 12m26.436211306s ago: executing program 4 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) 12m26.383755169s ago: executing program 4 (id=972): bpf$MAP_CREATE(0x2000000000000020, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000540)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002", 0x17}], 0x1}, 0x0) 12m26.309311777s ago: executing program 4 (id=973): r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) 12m26.160263553s ago: executing program 4 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 12m26.037364543s ago: executing program 4 (id=976): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080048188708cf76049d888153aab06100003c00000000000190780a010102ac1414aa070c0f03000000000000000008009078ac1414effc045c5a234790bf52fbb700450000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x1, 'wg1\x00', {}, 0xfa}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000080)={0x79, 0x17, 0x2, {0x2f, './sys/module/kvm/parameters/nx_huge_pages/file0'}}, 0x38) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6) 12m25.044011273s ago: executing program 4 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) modify_ldt$write(0x1, &(0x7f0000000040)={0x1fff, 0x0, 0x400}, 0x10) 12m24.739710617s ago: executing program 33 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) modify_ldt$write(0x1, &(0x7f0000000040)={0x1fff, 0x0, 0x400}, 0x10) 28.102261552s ago: executing program 6 (id=3781): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 27.274691835s ago: executing program 6 (id=3785): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) userfaultfd(0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sigaltstack(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$FUSE(r9, &(0x7f0000000ec0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20020000) write$P9_RREAD(r9, &(0x7f0000002480)=ANY=[], 0x9000) 23.011138345s ago: executing program 6 (id=3791): lsetxattr(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080)=@known='trusted.syz\x00', 0x0, 0xffaa, 0x3) 22.246590973s ago: executing program 6 (id=3796): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000240)={[{@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@rodir}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@numtail}, {@fat=@check_normal}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bf, &(0x7f0000000500)="$eJzs3T2LI2UcAPD/bCbZrC8khZUIDmhhtdzeJ7hFVjhMpUyhjYqXA9mEgw0GTsV4lb1g5Sew8TtYWtj4DSwsBTsPEUeSmbzPru4Rcrr8fs3+Z57n/7zNs7sQmCfvvzQ8v/dgdP/RZz9Hu53EwZ24E4+T6MZBzH0RAMBN8rgo4reiFNG6sm46Ky861dXBfkYIAOza+v//Nc/XVP9juxoA8H/z9jvvvnna6529lWXtiOGX4zyJiGEyzsvy0/vxUQyiH7eiE39GFAtl/Nzd3lmkWTb/MGB8FHnE8L0fq+vTXyNm+SfRie52/ht3e2cnWSleHU7G+bTn6c9mPJNEnBZJ2dDt6MQLEUUzqkaW+bdr8iNvxWuvfFON/69+HEcnfvowHsQg7s2aWOZ/fpJlrxdf//5pOYM8IpmM88NZvaWisbeHAgAAAAAAAAAAAAAAAAAAAADAjXecLXRXz8+ZH/N3fFxfPjsfqFFzPlB1ws9k5XydW1mWzY/xGefNKPPTeDGN9KlOHgAAAAAAAAAAAAAAAAAAAP4jRg8/Of9gMOhfrAXfFx9/G1FbtAyqN/qjupOuFKVxsFp0dTs1wfl3/9j7EwbRqEY9SLa6mE/oXzeYXl758DoDO6prp1rCmjVMB1EO/qvrL8LL15rgNCieYJ3nu2u6Sa6o3IjRw3b9JlnZmUdVYxej2QM6umzTrgdFzdI1Ls1q7WiPtZ7d7aadzri5WMz1Ou3pk1y509zxb8qGZBH90Nr1XyEAAAAAAAAAAAAAAAAAACDW3v+PX7YKHz2VIQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3i2//38RRHfzzmYwqZL7dekbweHFqKbb7p6nCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA33dwAAAP//yBhbdA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) 21.919120094s ago: executing program 6 (id=3799): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) 20.536287994s ago: executing program 6 (id=3804): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001440), 0x100, 0x0) finit_module(r0, 0x0, 0x1) 9.14170404s ago: executing program 3 (id=3828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 8.799243354s ago: executing program 2 (id=3830): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0xe5, 0x5, {{0x2d, 0x4, 0x2, 0x4, 0xb4, 0x66, 0x0, 0xe0, 0x29, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xb2, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x60a}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010101, 0x7}, {@rand_addr=0x64010102, 0x22e}, {@remote, 0x9}, {@loopback, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xf5, [@local, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010102, @remote, @remote, @multicast2, @loopback]}, @ssrr={0x89, 0x7, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xbc, [@rand_addr=0x64010102, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xa4, 0x3, 0x1, [{@rand_addr=0x64010101, 0x2}, {@multicast1, 0x3}, {@multicast1, 0x2}]}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 8.57439906s ago: executing program 1 (id=3831): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) 7.264146462s ago: executing program 1 (id=3833): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) splice(r0, 0x0, r0, 0x0, 0x9, 0xf) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x37}, 0x28) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0x400]}}, 0x5c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r1}, 0x20) close(0x4) 7.158234828s ago: executing program 2 (id=3834): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000008c0)="1c0000001a005f0208000000000000001f0000000000000200080000", 0x1c) 7.037140728s ago: executing program 5 (id=3835): syz_open_dev$evdev(0x0, 0x1, 0x400800) r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f0001011410450904000001f702000909050202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x20, 0x17, 0x75, "c07a73dcc964a4ddd5108a24871de746575d8a9e29a892078df920686e25803b2dbf4939631ee38aa695391a218273eccfd9ece62ac03baa0b05602cb7dd439f726e1a92e086d4a2b51303222b53db44546ac68bc2ee79e711a3f1069a8d60871d5b2eb8b46e41a7faa262a18d1225a5adb7a67f29"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109023b0001010a70040904000303020600fe05240600000524006b"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x27}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x5ec, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) 6.132149201s ago: executing program 2 (id=3836): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x80000, 0x8, 0x32}, 0x18) fchdir(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) tkill(0x0, 0x13) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@abort}]}, 0xff, 0x73a, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x101000, 0x41) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b}, 0x94) setxattr$incfs_size(&(0x7f0000000140)='./tracefs\x00', &(0x7f0000000180), &(0x7f0000000200)=0x8, 0x8, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 6.047329272s ago: executing program 3 (id=3837): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) userfaultfd(0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sigaltstack(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x40767a, 0x0, 0x7ffffffb, 0x257, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a4f, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$FUSE(r9, &(0x7f0000000ec0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20020000) 4.604548137s ago: executing program 1 (id=3838): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 4.051030013s ago: executing program 3 (id=3839): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0000e8", 0x44, 0x2f, 0x1, @remote, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xfffffffd, {{0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xfffdfff8, 0xfffe}}}}}}}}}, 0x0) 3.692249402s ago: executing program 5 (id=3840): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.847998219s ago: executing program 5 (id=3841): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) sched_setscheduler(0x0, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000034f000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.772524108s ago: executing program 2 (id=3842): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) 2.56404796s ago: executing program 3 (id=3843): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.110874901s ago: executing program 3 (id=3844): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000240)={[{@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@rodir}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@numtail}, {@fat=@check_normal}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bf, &(0x7f0000000500)="$eJzs3T2LI2UcAPD/bCbZrC8khZUIDmhhtdzeJ7hFVjhMpUyhjYqXA9mEgw0GTsV4lb1g5Sew8TtYWtj4DSwsBTsPEUeSmbzPru4Rcrr8fs3+Z57n/7zNs7sQmCfvvzQ8v/dgdP/RZz9Hu53EwZ24E4+T6MZBzH0RAMBN8rgo4reiFNG6sm46Ky861dXBfkYIAOza+v//Nc/XVP9juxoA8H/z9jvvvnna6529lWXtiOGX4zyJiGEyzsvy0/vxUQyiH7eiE39GFAtl/Nzd3lmkWTb/MGB8FHnE8L0fq+vTXyNm+SfRie52/ht3e2cnWSleHU7G+bTn6c9mPJNEnBZJ2dDt6MQLEUUzqkaW+bdr8iNvxWuvfFON/69+HEcnfvowHsQg7s2aWOZ/fpJlrxdf//5pOYM8IpmM88NZvaWisbeHAgAAAAAAAAAAAAAAAAAAAADAjXecLXRXz8+ZH/N3fFxfPjsfqFFzPlB1ws9k5XydW1mWzY/xGefNKPPTeDGN9KlOHgAAAAAAAAAAAAAAAAAAAP4jRg8/Of9gMOhfrAXfFx9/G1FbtAyqN/qjupOuFKVxsFp0dTs1wfl3/9j7EwbRqEY9SLa6mE/oXzeYXl758DoDO6prp1rCmjVMB1EO/qvrL8LL15rgNCieYJ3nu2u6Sa6o3IjRw3b9JlnZmUdVYxej2QM6umzTrgdFzdI1Ls1q7WiPtZ7d7aadzri5WMz1Ou3pk1y509zxb8qGZBH90Nr1XyEAAAAAAAAAAAAAAAAAACDW3v+PX7YKHz2VIQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3i2//38RRHfzzmYwqZL7dekbweHFqKbb7p6nCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA33dwAAAP//yBhbdA==") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.823947571s ago: executing program 5 (id=3845): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) close(0x3) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x3e4}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x0, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf497, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x234, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x1000, 0x1, 0x318}}], 0x1, 0x0, 0x0) 1.704225461s ago: executing program 3 (id=3846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.597538967s ago: executing program 2 (id=3847): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) splice(r0, 0x0, r0, 0x0, 0x9, 0xf) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x37}, 0x28) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0x400]}}, 0x5c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r1}, 0x20) close(0x4) 1.538399902s ago: executing program 1 (id=3848): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) 583.379117ms ago: executing program 2 (id=3849): syz_open_dev$evdev(0x0, 0x1, 0x400800) r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f0001011410450904000001f702000909050202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x20, 0x17, 0x75, "c07a73dcc964a4ddd5108a24871de746575d8a9e29a892078df920686e25803b2dbf4939631ee38aa695391a218273eccfd9ece62ac03baa0b05602cb7dd439f726e1a92e086d4a2b51303222b53db44546ac68bc2ee79e711a3f1069a8d60871d5b2eb8b46e41a7faa262a18d1225a5adb7a67f29"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109023b0001010a70040904000303020600fe05240600000524006b"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x27}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x5ec, &(0x7f0000000400)=ANY=[@ANYBLOB="e505004e3949686df6b63bc5912693103a8359e8366e801780ab5df73c2c2829eeabe4c7775a2b1cf0bfd1d406d59aa51077cc69e2d89d07a57e0d59e997609afd0909789b114454aef7b89548fd0755bf6c33df1395ed0b79488c4a85613dcd2f81dd4730e03f5565efd9b22b609b3d507fd71bc007a3d55bc223ffbf55c5ac4643eef44c0ef758a70196e74de66a3c938ed2840d9030b9b6e134dd934b6d0deb3cf145581e7c3df7e9399b9915dbc496796e6b74341d2d645e3dee2ac96467763705306bce142043e927bf2653c9c6d9684cc5853975aa5c988b4855b35f2fbd095ccf950e67a9cee1d9f173f0744726cdd4f9858d49bff61dbdee7dfd31963a89394c554c9020bef3c4698ba016bc9f6757f9fbc9156a5cea20ce2b1b5d746b19a793d5136182c3effd70110eaf07547d0c768df0559e26bc5869235ddb7933bb01f6760e212f8dd30a46ce7b8522f27edbf9175c9356fab3a83eb7ab3f274c75eb481d61c1dfaf2bff790b3f8341062e658cac5c39f58b11107e981ecc70fe9830b948f3eb9b130ca8905edda545b21ddd7a50469d41dba3b3676fb5891116a38c011b1be25d9da3871242c596a0721510b7e09ce0c6e136ed9dd574a82df56a40c31f147431c7d3cc4f6eec6900f5bcd1a6917a68f0e7c3da4d3ec5c2ce50e95b032d5daab31b03dc8ea0cf59715d9b190b933a370b31c0af3b03a0065e276f866022d9916188e0185e8a943297119007a1a9036d8ae32850a35aa6fb5eeee1fec89230f0200b155adf233af7608cb5d23862c2f081eb11c928b0256f06a6e58c58b9b820801b22f8b4a70b54eb9a46223a40de7c17e6c8989c6d618bc0a54c6711679873140158abe46bdfd42ed2303d62a3487db19e80ff054ea5e494b8d29748654963df74996bf916f8b9ca7a0711ccca8d479a92cca1f18e663364b2e5fcf10f3e51178968ed39c8ac83b992f3ebbce25a71484c7656b372dd03e7204a31d0be83713b880536adf39a21ef71e45e8dd2176c1c335dbb1a36d929fd8ec741de36c2331ed21ca06d98acd2ae0a412fb421a99aa19c549e76a37c93efeacb078d40b1679c696eafda0467087c952da0f22e37fad44bafa03fb1535b0b005d568cdb1fadc9226f71a556bad6b9674ab193d7f9d9bf02e506ced097811e2e60af57c5ab81e69fa9004726e2bbaa8fdf32e1a549d8df73e08c8454bec8f352f23f1e045549d8020797c4b8cbd5f7d94cdf3c24c81a3703fec8bcf31be628ab3d71ca2808304424de3f160c51c527e3c4492439bae8899bcc028e57f272ec857bfe88daebbcd56e9d126f6c138926e38dde144da2944cca32a7a5e408d3cf2f7d3c081ea33a20734cf061f2f61f0a1585d7de2cf779fd4c9884ceccc00a1f88a29da680bdb28028dbee1af8db1edb1a6c419225d4040fc286830f2322bde85297434acf040637452466e13b3a1d0605fb82e729207848d2560c844ead94fde6d6f1c006a368c1a817ff0f2b1a5450c7d204e706430f948cfdbcaf6a198827a2c34ddef181acf4c2de73a69d2908dfba476b4291fdb7b3a74ee403e82c40e319164055bb36ab61c08c3e16188656d9845994e92172e02d0152aaf16ab329c3d8d715726d15e9264c5edeebf6ea7b72de7d75d38c19891c56ee07f03c7c576b0d6f1d02dd593a03ac9380aa9aabdd0d33a7b63e675703a39d06397fd0f7d32e724a9e46acc0b695a476161284b936a6006ddfdf509c54d8a173523f06d78bd7ddaccd3c288fd7ed96b7919ac7858b84279a6e6733c858454cc9cc7c802b40d1c0175e51d077eb8d77b0bf4cbba7dc4fdc3d5325a5404c53ae9bd7d9be3f213d5036cb416b9b5b004e0804001f709c"]) 284.22358ms ago: executing program 1 (id=3850): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 216.062817ms ago: executing program 5 (id=3851): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x9) sendto$inet6(r0, 0x0, 0x38, 0x4040804, 0x0, 0x0) 136.510387ms ago: executing program 1 (id=3852): openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpquota}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x0, 0x478, &(0x7f00000014c0)="$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") 0s ago: executing program 5 (id=3853): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x5}}, 0x10) kernel console output (not intermixed with test programs): eed USB device number 81 using dummy_hcd [ 843.889549][T15007] FAULT_INJECTION: forcing a failure. [ 843.889549][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 843.901503][T10561] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 843.931554][T15007] CPU: 1 PID: 15007 Comm: syz.5.3161 Not tainted syzkaller #0 [ 843.939098][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 843.949205][T15007] Call Trace: [ 843.952525][T15007] [ 843.955591][T15007] dump_stack_lvl+0x188/0x24e [ 843.960319][T15007] ? show_regs_print_info+0x12/0x12 [ 843.965561][T15007] ? load_image+0x410/0x410 [ 843.970109][T15007] ? __might_sleep+0xd0/0xd0 [ 843.974748][T15007] ? __lock_acquire+0x7c40/0x7c40 [ 843.979826][T15007] should_fail_ex+0x390/0x4c0 [ 843.984562][T15007] should_failslab+0x5/0x20 [ 843.989103][T15007] slab_pre_alloc_hook+0x59/0x300 [ 843.994177][T15007] ? __se_sys_memfd_create+0xee/0x340 [ 843.999594][T15007] __kmem_cache_alloc_node+0x4f/0x270 [ 844.005019][T15007] ? __se_sys_memfd_create+0xee/0x340 [ 844.010442][T15007] __kmalloc+0xa3/0x240 [ 844.014656][T15007] __se_sys_memfd_create+0xee/0x340 [ 844.019898][T15007] do_syscall_64+0x4c/0xa0 [ 844.024349][T15007] ? clear_bhb_loop+0x60/0xb0 [ 844.029074][T15007] ? clear_bhb_loop+0x60/0xb0 [ 844.033807][T15007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.039755][T15007] RIP: 0033:0x7fae94b9e159 [ 844.044209][T15007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.063861][T15007] RSP: 002b:00007fae959db028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 844.072327][T15007] RAX: ffffffffffffffda RBX: 00007fae94e25fa0 RCX: 00007fae94b9e159 [ 844.080356][T15007] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 844.088372][T15007] RBP: 00007fae94c3506b R08: 0000000000000000 R09: 0000000000000000 [ 844.096376][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.104385][T15007] R13: 00007fae94e26038 R14: 00007fae94e25fa0 R15: 00007ffe338ccb78 [ 844.112407][T15007] [ 844.211349][T10561] usb 2-1: Using ep0 maxpacket: 16 [ 844.246209][T10561] usb 2-1: device descriptor read/all, error -71 [ 844.327125][T15016] tipc: Enabling of bearer rejected, failed to enable media [ 844.728499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 844.771769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 844.840202][T14841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.989902][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 845.042809][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 845.169659][T14841] device veth0_vlan entered promiscuous mode [ 845.179906][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 845.180742][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 845.182583][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 845.183204][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 845.220029][T14841] device veth1_vlan entered promiscuous mode [ 845.269655][T15043] device batadv_slave_1 entered promiscuous mode [ 845.272576][T15042] device batadv_slave_1 left promiscuous mode [ 845.304861][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 845.305532][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 845.306048][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 845.306578][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 845.343401][T14841] device veth0_macvtap entered promiscuous mode [ 845.364126][T14841] device veth1_macvtap entered promiscuous mode [ 845.431370][ T1182] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 845.463591][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.463616][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.463628][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.463642][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.463653][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.463666][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.463678][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.463691][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.465128][T14841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.474539][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 845.475230][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 845.475755][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 845.476280][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 845.478871][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.478894][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.478907][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.478922][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.478934][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.478948][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.478960][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.478974][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.480266][T14841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.485860][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 845.514116][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 845.517565][T14841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.517613][T14841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.517641][T14841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.517667][T14841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.641319][ T1182] usb 6-1: Using ep0 maxpacket: 16 [ 845.645001][T15046] device syzkaller0 entered promiscuous mode [ 845.650090][ T1182] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 845.650118][ T1182] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 845.672848][ T1182] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.672885][ T1182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.672907][ T1182] usb 6-1: Product: syz [ 845.672923][ T1182] usb 6-1: Manufacturer: syz [ 845.672948][ T1182] usb 6-1: SerialNumber: syz [ 845.678779][T15046] tipc: Enabled bearer , priority 0 [ 845.699401][T15045] tipc: Resetting bearer [ 845.773081][T15045] tipc: Disabling bearer [ 845.856901][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.856924][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.857248][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 845.947016][ T4926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.947042][ T4926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.947301][ T4926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 846.592663][T10561] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 846.771848][T10561] usb 2-1: Using ep0 maxpacket: 8 [ 846.776249][T10561] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.777673][T10561] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.777725][T10561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 846.777749][T10561] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 846.780018][T10561] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 846.780047][T10561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.780069][T10561] usb 2-1: Product: syz [ 846.780085][T10561] usb 2-1: Manufacturer: syz [ 846.780101][T10561] usb 2-1: SerialNumber: syz [ 847.139372][T10561] usb 2-1: can't set first interface for hiFace device. [ 847.148492][T10561] snd-usb-hiface: probe of 2-1:1.0 failed with error -5 [ 847.168495][ T1182] usb 6-1: 0:2 : does not exist [ 847.179015][T10561] usb 2-1: USB disconnect, device number 109 [ 847.202416][ T1182] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 847.215310][T15069] tipc: Enabling of bearer rejected, failed to enable media [ 847.261155][ T1182] usb 6-1: USB disconnect, device number 118 [ 847.261332][ T5387] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 847.471486][ T5387] usb 7-1: Using ep0 maxpacket: 16 [ 847.486859][ T5387] usb 7-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 847.521352][ T5387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.523259][T14618] udevd[14618]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.529393][ T5387] usb 7-1: Product: syz [ 847.529412][ T5387] usb 7-1: Manufacturer: syz [ 847.529427][ T5387] usb 7-1: SerialNumber: syz [ 847.691322][T10561] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 847.763724][ T5387] plfxlc 7-1:251.0: Firmware Version: 0 [ 847.773968][ T5387] plfxlc 7-1:251.0: Unit type is station [ 847.891503][T10561] usb 2-1: Using ep0 maxpacket: 8 [ 847.900310][T10561] usb 2-1: unable to get BOS descriptor or descriptor too short [ 847.909926][T15086] ip_tables: iptables: counters copy to user failed while replacing table [ 847.932044][T10561] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.951485][T10561] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 847.970126][T10561] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 847.995050][T10561] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 848.020639][T10561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.029192][T10561] usb 2-1: Product: syz [ 848.033905][T10561] usb 2-1: Manufacturer: syz [ 848.038545][T10561] usb 2-1: SerialNumber: syz [ 848.051360][ T5387] plfxlc 7-1:251.0: vendor command failed (-71) [ 848.064219][ T5387] plfxlc 7-1:251.0: FPGA download failed (-22) [ 848.124529][T15094] FAULT_INJECTION: forcing a failure. [ 848.124529][T15094] name failslab, interval 1, probability 0, space 0, times 0 [ 848.167022][T15094] CPU: 0 PID: 15094 Comm: syz.3.3180 Not tainted syzkaller #0 [ 848.170688][ T5387] plfxlc 7-1:251.0: pureLifi:Device error [ 848.174588][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 848.174641][T15094] Call Trace: [ 848.174650][T15094] [ 848.174661][T15094] dump_stack_lvl+0x188/0x24e [ 848.174694][T15094] ? show_regs_print_info+0x12/0x12 [ 848.174716][T15094] ? load_image+0x410/0x410 [ 848.211234][T15094] ? __might_sleep+0xd0/0xd0 [ 848.211351][ T5387] plfxlc: probe of 7-1:251.0 failed with error -22 [ 848.215859][T15094] ? __lock_acquire+0x7c40/0x7c40 [ 848.215910][T15094] should_fail_ex+0x390/0x4c0 [ 848.215954][T15094] should_failslab+0x5/0x20 [ 848.236755][T15094] slab_pre_alloc_hook+0x59/0x300 [ 848.241837][T15094] ? io_sqe_files_register+0x223/0x8a0 [ 848.247427][T15094] __kmem_cache_alloc_node+0x4f/0x270 [ 848.252870][T15094] ? io_sqe_files_register+0x223/0x8a0 [ 848.258402][T15094] kmalloc_trace+0x26/0xe0 [ 848.262900][T15094] io_sqe_files_register+0x223/0x8a0 [ 848.268252][T15094] ? __se_sys_io_uring_register+0x2c9/0xeb0 [ 848.271156][ T5387] usb 7-1: USB disconnect, device number 82 [ 848.274265][T15094] ? __fget_files+0x3fc/0x460 [ 848.274304][T15094] ? io_register_rsrc_update+0x1c0/0x1c0 [ 848.274341][T15094] ? io_run_task_work+0x267/0x310 [ 848.274372][T15094] __se_sys_io_uring_register+0x5c1/0xeb0 [ 848.292183][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.295669][T15094] ? __x64_sys_io_uring_register+0xa0/0xa0 [ 848.295718][T15094] ? lockdep_hardirqs_on+0x94/0x140 [ 848.295750][T15094] do_syscall_64+0x4c/0xa0 [ 848.325332][T15094] ? clear_bhb_loop+0x60/0xb0 [ 848.330075][T15094] ? clear_bhb_loop+0x60/0xb0 [ 848.334810][T15094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.340766][T15094] RIP: 0033:0x7f428ab9e159 [ 848.345233][T15094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.363403][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.364901][T15094] RSP: 002b:00007f428ba0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 848.381105][T15094] RAX: ffffffffffffffda RBX: 00007f428ae25fa0 RCX: 00007f428ab9e159 [ 848.389124][T15094] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 848.397162][T15094] RBP: 00007f428ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 848.405188][T15094] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 848.413216][T15094] R13: 00007f428ae26038 R14: 00007f428ae25fa0 R15: 00007ffe67a5e438 [ 848.421248][T15094] [ 848.448759][T15099] loop3: detected capacity change from 0 to 256 [ 848.498254][T15099] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 848.529865][T15099] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 848.575785][T15099] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 848.598956][T15099] exFAT-fs (loop3): failed to load alloc-bitmap [ 848.637200][T15099] exFAT-fs (loop3): failed to recognize exfat type [ 848.671359][ T5387] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 848.820817][T15103] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3181'. [ 848.836731][T15103] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3181'. [ 848.861445][ T5387] usb 7-1: Using ep0 maxpacket: 16 [ 848.872170][ T5387] usb 7-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 848.895477][ T5387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.923541][ T5387] usb 7-1: Product: syz [ 848.933441][ T5387] usb 7-1: Manufacturer: syz [ 848.944866][ T5387] usb 7-1: SerialNumber: syz [ 849.021744][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.043925][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.067198][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.080469][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.091124][T10561] usb 2-1: USB disconnect, device number 110 [ 849.195420][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.211882][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.229493][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.246199][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.257209][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.268276][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.488198][ T5387] plfxlc 7-1:251.0: Firmware Version: 0 [ 849.499762][ T5387] plfxlc 7-1:251.0: Unit type is station [ 849.743501][T15064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.752717][ T5387] plfxlc 7-1:251.0: Direct firmware load for plfxlc/lifi-xl.bin failed with error -2 [ 849.775585][T15064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.784077][ T5387] plfxlc 7-1:251.0: Falling back to sysfs fallback for: plfxlc/lifi-xl.bin [ 850.264084][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3192'. [ 851.467348][T15165] fuse: Bad value for 'fd' [ 851.951345][T10561] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 852.151343][T10561] usb 4-1: Using ep0 maxpacket: 8 [ 852.158905][T10561] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.209205][T10561] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.495938][T10561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 852.532634][T10561] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 852.943650][T10561] usb 4-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 852.964659][T10561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.976116][T10561] usb 4-1: Product: syz [ 852.980488][T10561] usb 4-1: Manufacturer: syz [ 852.987077][T10561] usb 4-1: SerialNumber: syz [ 853.512908][T15179] syz.2.3201 (15179) used greatest stack depth: 17376 bytes left [ 853.769520][T10561] usb 4-1: can't set first interface for hiFace device. [ 853.810106][T10561] snd-usb-hiface: probe of 4-1:1.0 failed with error -5 [ 853.839414][T10561] usb 4-1: USB disconnect, device number 107 [ 854.236989][T15195] ip_tables: iptables: counters copy to user failed while replacing table [ 854.341572][T10561] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 854.361192][T15206] futex_wake_op: syz.1.3210 tries to shift op by 144; fix this program [ 854.412379][T15206] loop1: detected capacity change from 0 to 256 [ 854.595067][T15206] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 854.667903][ T27] audit: type=1800 audit(1790301692.968:82): pid=15206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3210" name="file1" dev="loop1" ino=1048622 res=0 errno=0 [ 855.600440][T10561] usb 4-1: device not accepting address 108, error -71 [ 856.949681][T15248] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3223'. [ 856.979458][T15248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3223'. [ 857.436058][T15256] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3227'. [ 857.488022][T15259] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3227'. [ 857.682794][T10561] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 857.881449][T10561] usb 3-1: Using ep0 maxpacket: 32 [ 857.890904][T10561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.927196][T10561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.947546][T10561] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 857.961352][T10561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.981756][T10561] usb 3-1: config 0 descriptor?? [ 858.010319][T10561] hub 3-1:0.0: USB hub found [ 858.193517][T10561] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 858.617982][T10561] hid-generic 0003:046D:C31C.0051: unknown main item tag 0x0 [ 858.634899][T15275] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3235'. [ 858.646128][T10561] hid-generic 0003:046D:C31C.0051: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 858.658091][T15275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3235'. [ 859.384100][ T4357] usb 3-1: USB disconnect, device number 31 [ 859.793152][T15294] device syzkaller0 entered promiscuous mode [ 859.830718][T15294] tipc: Started in network mode [ 859.840075][T15294] tipc: Node identity 8ee6d50b8f89, cluster identity 4711 [ 859.855644][T15294] tipc: Enabled bearer , priority 0 [ 859.855827][T15296] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.3244'. [ 859.904508][T15294] tipc: Resetting bearer [ 859.942038][T15293] tipc: Resetting bearer [ 860.030548][T15293] tipc: Disabling bearer [ 860.261649][T15304] loop3: detected capacity change from 0 to 256 [ 860.285790][T15304] exfat: Deprecated parameter 'utf8' [ 860.304094][T15304] exfat: Deprecated parameter 'utf8' [ 860.323850][T15304] exfat: Deprecated parameter 'namecase' [ 860.373473][T15304] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 861.785338][T15331] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3257'. [ 861.938679][T15333] device syzkaller0 entered promiscuous mode [ 861.986442][T15333] tipc: Enabled bearer , priority 0 [ 862.045468][T15339] loop1: detected capacity change from 0 to 128 [ 862.049406][T15333] tipc: Resetting bearer [ 862.116060][T15337] device syzkaller0 entered promiscuous mode [ 862.151774][T15332] tipc: Resetting bearer [ 862.159772][T15339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 862.209514][T15339] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.321971][T15332] tipc: Disabling bearer [ 862.423487][T14104] EXT4-fs (loop1): unmounting filesystem. [ 863.465902][T15374] netlink: 488 bytes leftover after parsing attributes in process `syz.3.3270'. [ 864.066068][T15380] ip_tables: iptables: counters copy to user failed while replacing table [ 867.087750][T15398] tipc: Enabling of bearer rejected, failed to enable media [ 867.424026][T15413] tipc: Enabled bearer , priority 0 [ 867.459451][T15412] tipc: Disabling bearer [ 867.480568][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 867.562906][ T4357] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 867.798460][ T4357] usb 6-1: Using ep0 maxpacket: 16 [ 867.808547][ T4357] usb 6-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 867.850726][ T4357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.910009][ T4357] usb 6-1: Product: syz [ 867.918016][ T4357] usb 6-1: Manufacturer: syz [ 867.961813][ T4357] usb 6-1: SerialNumber: syz [ 868.224076][ T4357] plfxlc 6-1:251.0: Firmware Version: 0 [ 868.230224][ T4357] plfxlc 6-1:251.0: Unit type is station [ 868.392231][T15443] ip_tables: iptables: counters copy to user failed while replacing table [ 868.524692][ T4357] plfxlc 6-1:251.0: vendor command failed (-71) [ 868.535599][ T4357] plfxlc 6-1:251.0: FPGA download failed (-22) [ 868.546704][T15445] device syzkaller0 entered promiscuous mode [ 868.898584][T15462] FAULT_INJECTION: forcing a failure. [ 868.898584][T15462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 868.964314][T15462] CPU: 1 PID: 15462 Comm: syz.2.3292 Not tainted syzkaller #0 [ 868.971857][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 868.981959][T15462] Call Trace: [ 868.985277][T15462] [ 868.988234][T15462] dump_stack_lvl+0x188/0x24e [ 868.993038][T15462] ? show_regs_print_info+0x12/0x12 [ 868.998288][T15462] ? load_image+0x410/0x410 [ 869.002857][T15462] ? __lock_acquire+0x7c40/0x7c40 [ 869.007940][T15462] ? verify_lock_unused+0x140/0x140 [ 869.013196][T15462] should_fail_ex+0x390/0x4c0 [ 869.017933][T15462] prepare_alloc_pages+0x1e1/0x5b0 [ 869.023101][T15462] __alloc_pages+0x130/0x4f0 [ 869.027743][T15462] ? lock_chain_count+0x20/0x20 [ 869.032600][T15462] ? zone_statistics+0x170/0x170 [ 869.037574][T15462] ? count_memcg_event_mm+0x8a/0x3c0 [ 869.042875][T15462] ? count_memcg_event_mm+0x36b/0x3c0 [ 869.048355][T15462] ? count_memcg_event_mm+0x8a/0x3c0 [ 869.053693][T15462] ? put_page+0x270/0x270 [ 869.058063][T15462] __folio_alloc+0xe/0x30 [ 869.062458][T15462] vma_alloc_folio+0x499/0x900 [ 869.067287][T15462] handle_mm_fault+0x1fe3/0x3d40 [ 869.072290][T15462] ? numa_migrate_prep+0x250/0x250 [ 869.077465][T15462] __get_user_pages+0x40d/0xec0 [ 869.082344][T15462] ? populate_vma_page_range+0x2b0/0x2b0 [ 869.087992][T15462] populate_vma_page_range+0x214/0x2b0 [ 869.093471][T15462] __mm_populate+0x25c/0x380 [ 869.098088][T15462] ? check_vma_flags+0x4c0/0x4c0 [ 869.103042][T15462] ? up_write+0x1b6/0x410 [ 869.107384][T15462] ? do_mlock+0x194/0x640 [ 869.111755][T15462] do_mlock+0x53a/0x640 [ 869.115962][T15462] ? lru_gen_add_folio+0xe20/0xe20 [ 869.121106][T15462] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 869.127230][T15462] ? lock_chain_count+0x20/0x20 [ 869.132109][T15462] ? syscall_enter_from_user_mode+0x21/0x80 [ 869.138028][T15462] __x64_sys_mlock+0x5c/0x70 [ 869.142628][T15462] do_syscall_64+0x4c/0xa0 [ 869.147048][T15462] ? clear_bhb_loop+0x60/0xb0 [ 869.151730][T15462] ? clear_bhb_loop+0x60/0xb0 [ 869.156408][T15462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.162535][T15462] RIP: 0033:0x7fbff159e159 [ 869.166989][T15462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.186626][T15462] RSP: 002b:00007fbff24f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 869.195064][T15462] RAX: ffffffffffffffda RBX: 00007fbff1825fa0 RCX: 00007fbff159e159 [ 869.203061][T15462] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 869.211057][T15462] RBP: 00007fbff163506b R08: 0000000000000000 R09: 0000000000000000 [ 869.219035][T15462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.227040][T15462] R13: 00007fbff1826038 R14: 00007fbff1825fa0 R15: 00007ffe0c27dda8 [ 869.235046][T15462] [ 870.361676][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.327219][ T4357] plfxlc 6-1:251.0: pureLifi:Device error [ 872.335231][ T4357] plfxlc: probe of 6-1:251.0 failed with error -22 [ 872.346025][ T4357] usb 6-1: USB disconnect, device number 119 [ 872.374854][T15473] tipc: Enabling of bearer rejected, failed to enable media [ 873.912171][T15519] tipc: Enabled bearer , priority 0 [ 873.950943][T15518] tipc: Disabling bearer [ 874.277969][T15525] device syzkaller0 entered promiscuous mode [ 874.383334][T15541] device syzkaller0 entered promiscuous mode [ 878.738122][T15572] device syzkaller0 entered promiscuous mode [ 880.545882][T15614] device syzkaller0 entered promiscuous mode [ 880.559378][T15616] FAULT_INJECTION: forcing a failure. [ 880.559378][T15616] name failslab, interval 1, probability 0, space 0, times 0 [ 880.610182][T15616] CPU: 1 PID: 15616 Comm: syz.6.3333 Not tainted syzkaller #0 [ 880.617740][T15616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 880.627842][T15616] Call Trace: [ 880.631156][T15616] [ 880.634124][T15616] dump_stack_lvl+0x188/0x24e [ 880.638859][T15616] ? show_regs_print_info+0x12/0x12 [ 880.644106][T15616] ? load_image+0x410/0x410 [ 880.648647][T15616] ? __lock_acquire+0x7c40/0x7c40 [ 880.653709][T15616] should_fail_ex+0x390/0x4c0 [ 880.658425][T15616] should_failslab+0x5/0x20 [ 880.662950][T15616] slab_pre_alloc_hook+0x59/0x300 [ 880.667998][T15616] kmem_cache_alloc_lru+0x49/0x2e0 [ 880.673128][T15616] ? sock_alloc_inode+0x24/0xc0 [ 880.678007][T15616] sock_alloc_inode+0x24/0xc0 [ 880.682702][T15616] ? sockfs_init_fs_context+0xa0/0xa0 [ 880.688086][T15616] new_inode_pseudo+0x5f/0x1c0 [ 880.692867][T15616] __sock_create+0x129/0x940 [ 880.697471][T15616] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 880.703472][T15616] __sys_socket+0xc4/0x190 [ 880.707917][T15616] __x64_sys_socket+0x76/0x80 [ 880.712612][T15616] do_syscall_64+0x4c/0xa0 [ 880.717046][T15616] ? clear_bhb_loop+0x60/0xb0 [ 880.721737][T15616] ? clear_bhb_loop+0x60/0xb0 [ 880.726426][T15616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.732361][T15616] RIP: 0033:0x7ff9cab9e159 [ 880.736792][T15616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.756408][T15616] RSP: 002b:00007ff9cbb10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 880.764837][T15616] RAX: ffffffffffffffda RBX: 00007ff9cae25fa0 RCX: 00007ff9cab9e159 [ 880.772820][T15616] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 880.780800][T15616] RBP: 00007ff9cac3506b R08: 0000000000000000 R09: 0000000000000000 [ 880.788779][T15616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.796775][T15616] R13: 00007ff9cae26038 R14: 00007ff9cae25fa0 R15: 00007ffe54a4a5a8 [ 880.804770][T15616] [ 880.901816][T15616] socket: no more sockets [ 880.960644][T15624] device syzkaller0 entered promiscuous mode [ 881.421320][ T26] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 881.621650][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 881.689010][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 881.823099][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.075945][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 882.182111][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 882.236314][ T26] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 882.289975][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.335309][ T26] usb 2-1: Product: syz [ 882.380822][ T26] usb 2-1: Manufacturer: syz [ 882.411018][ T26] usb 2-1: SerialNumber: syz [ 882.768557][ T26] usb 2-1: can't set first interface for hiFace device. [ 882.829091][ T26] snd-usb-hiface: probe of 2-1:1.0 failed with error -5 [ 882.872390][ T26] usb 2-1: USB disconnect, device number 111 [ 882.995584][T15657] ip_tables: iptables: counters copy to user failed while replacing table [ 883.382334][ T26] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 883.621688][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 883.638586][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 883.843977][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.044009][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 884.082535][ T26] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 884.171734][T15665] device syzkaller0 entered promiscuous mode [ 884.179311][ T26] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 884.199735][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.227257][ T26] usb 2-1: can't set config #1, error -71 [ 884.242891][ T26] usb 2-1: USB disconnect, device number 112 [ 884.421941][ T4324] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 884.468284][T15671] FAULT_INJECTION: forcing a failure. [ 884.468284][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 884.511042][T15671] CPU: 1 PID: 15671 Comm: syz.1.3349 Not tainted syzkaller #0 [ 884.518599][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 884.528703][T15671] Call Trace: [ 884.532020][T15671] [ 884.535002][T15671] dump_stack_lvl+0x188/0x24e [ 884.539744][T15671] ? show_regs_print_info+0x12/0x12 [ 884.544990][T15671] ? load_image+0x410/0x410 [ 884.549555][T15671] ? __lock_acquire+0x7c40/0x7c40 [ 884.554634][T15671] should_fail_ex+0x390/0x4c0 [ 884.559370][T15671] should_failslab+0x5/0x20 [ 884.563914][T15671] slab_pre_alloc_hook+0x59/0x300 [ 884.568994][T15671] kmem_cache_alloc_lru+0x49/0x2e0 [ 884.574131][T15671] ? sock_alloc_inode+0x24/0xc0 [ 884.579042][T15671] sock_alloc_inode+0x24/0xc0 [ 884.583754][T15671] ? sockfs_init_fs_context+0xa0/0xa0 [ 884.589170][T15671] new_inode_pseudo+0x5f/0x1c0 [ 884.593956][T15671] __sock_create+0x129/0x940 [ 884.598561][T15671] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 884.604568][T15671] __sys_socket+0xc4/0x190 [ 884.609005][T15671] __x64_sys_socket+0x76/0x80 [ 884.613705][T15671] do_syscall_64+0x4c/0xa0 [ 884.618244][T15671] ? clear_bhb_loop+0x60/0xb0 [ 884.622949][T15671] ? clear_bhb_loop+0x60/0xb0 [ 884.627639][T15671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.633555][T15671] RIP: 0033:0x7f9c6af9e159 [ 884.637986][T15671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.657625][T15671] RSP: 002b:00007f9c6beee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 884.666054][T15671] RAX: ffffffffffffffda RBX: 00007f9c6b225fa0 RCX: 00007f9c6af9e159 [ 884.674041][T15671] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 884.682029][T15671] RBP: 00007f9c6b03506b R08: 0000000000000000 R09: 0000000000000000 [ 884.690013][T15671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.697990][T15671] R13: 00007f9c6b226038 R14: 00007f9c6b225fa0 R15: 00007ffebb36a538 [ 884.705985][T15671] [ 884.811502][ T4324] usb 4-1: Using ep0 maxpacket: 32 [ 884.819955][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.840922][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.857698][ T4324] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 884.870917][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.887200][ T4324] usb 4-1: config 0 descriptor?? [ 884.904782][ T4324] hub 4-1:0.0: USB hub found [ 884.931405][T15671] socket: no more sockets [ 885.106039][ T4324] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 885.134905][T15678] device syzkaller0 entered promiscuous mode [ 885.514734][ T4324] hid-generic 0003:046D:C31C.0052: unknown main item tag 0x0 [ 885.551882][ T4324] hid-generic 0003:046D:C31C.0052: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 885.902184][T10561] usb 4-1: USB disconnect, device number 110 [ 885.967691][T15695] fido_id[15695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 886.544843][T15712] device syzkaller0 entered promiscuous mode [ 886.711529][T10561] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 886.882620][T15718] device syzkaller0 entered promiscuous mode [ 886.901752][T10561] usb 3-1: Using ep0 maxpacket: 8 [ 886.915430][T10561] usb 3-1: unable to get BOS descriptor or descriptor too short [ 886.946540][T10561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.960441][T10561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 886.972818][T10561] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 886.996887][T10561] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 887.016321][T10561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.033732][T10561] usb 3-1: Product: syz [ 887.038069][T10561] usb 3-1: Manufacturer: syz [ 887.057575][T10561] usb 3-1: SerialNumber: syz [ 887.240301][T15725] ip_tables: iptables: counters copy to user failed while replacing table [ 887.293367][T15724] loop6: detected capacity change from 0 to 2048 [ 887.293569][T10561] usb 3-1: can't set first interface for hiFace device. [ 887.331975][T10561] snd-usb-hiface: probe of 3-1:1.0 failed with error -5 [ 887.361584][T10561] usb 3-1: USB disconnect, device number 32 [ 887.374493][T15724] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 887.705972][T15724] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 887.775854][T15724] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 887.848688][T15724] EXT4-fs (loop6): This should not happen!! Data will be lost [ 887.848688][T15724] [ 887.861849][T15724] EXT4-fs (loop6): Total free blocks count 0 [ 887.871652][T10561] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 887.881323][T15724] EXT4-fs (loop6): Free/Dirty block details [ 887.912547][T15724] EXT4-fs (loop6): free_blocks=4096 [ 887.920323][T15724] EXT4-fs (loop6): dirty_blocks=64 [ 887.930487][T15724] EXT4-fs (loop6): Block reservation details [ 887.938343][T15724] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 887.963676][T15749] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 888.066322][T10561] usb 3-1: Using ep0 maxpacket: 8 [ 888.079262][T10561] usb 3-1: unable to get BOS descriptor or descriptor too short [ 888.106631][T10561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 888.135083][T10561] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 888.135116][T10561] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 888.137593][T10561] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 888.221625][T10561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.221654][T10561] usb 3-1: Product: syz [ 888.221668][T10561] usb 3-1: Manufacturer: syz [ 888.221683][T10561] usb 3-1: SerialNumber: syz [ 888.440496][T15709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.457918][ T4320] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 888.477139][T15709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.651778][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 888.659033][ T4320] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 888.679088][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.696351][ T4320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 888.701748][T15763] device syzkaller0 entered promiscuous mode [ 888.718358][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.747680][ T4320] usb 2-1: Product: syz [ 888.758838][ T4320] usb 2-1: Manufacturer: syz [ 888.764510][ T4320] usb 2-1: SerialNumber: syz [ 888.858913][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3374'. [ 889.010869][ T4320] usb 2-1: 0:2 : does not exist [ 889.027368][ T4320] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 889.094569][ T4320] usb 2-1: USB disconnect, device number 113 [ 889.130413][T15709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.160943][T15709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.196144][T15709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.208626][T15709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.227019][ T1182] usb 3-1: USB disconnect, device number 33 [ 889.363308][T14618] udevd[14618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.183099][T15798] device syzkaller0 entered promiscuous mode [ 892.538547][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 894.855704][T15850] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3398'. [ 894.962637][T15850] tipc: Invalid UDP bearer configuration [ 894.962690][T15850] tipc: Enabling of bearer rejected, failed to enable media [ 895.075382][T15852] loop3: detected capacity change from 0 to 512 [ 895.372637][T15852] EXT4-fs: Mount option(s) incompatible with ext3 [ 896.589194][T15868] device syzkaller0 entered promiscuous mode [ 899.661679][T15919] device syzkaller0 entered promiscuous mode [ 900.325582][T15923] device syzkaller0 entered promiscuous mode [ 901.799913][T15941] loop1: detected capacity change from 0 to 512 [ 902.002601][T15941] EXT4-fs (loop1): Test dummy encryption mode enabled [ 902.056265][T15941] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.3425: inode has both inline data and extents flags [ 902.072882][T15941] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3425: couldn't read orphan inode 15 (err -117) [ 902.085533][T15941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 902.577053][T15941] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 904.797351][T14104] EXT4-fs (loop1): unmounting filesystem. [ 906.281068][T15962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3428'. [ 906.293446][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.465166][T15976] se_dev->se_dev_ptr already set for storage object [ 906.510533][T15976] Config c/1 of g1 needs at least one function. [ 906.533294][T15976] udc usbip-vudc.0: failed to start g1: -22 [ 906.646185][T15976] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 906.774855][T15976] UDC core: g1: couldn't find an available UDC or it's busy [ 906.785070][T15984] capability: warning: `syz.5.3432' uses deprecated v2 capabilities in a way that may be insecure [ 907.281827][T15998] loop3: detected capacity change from 0 to 1024 [ 908.510314][T15998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 908.796800][T16012] loop5: detected capacity change from 0 to 512 [ 908.835707][T14543] EXT4-fs (loop3): unmounting filesystem. [ 908.843153][T16012] EXT4-fs (loop5): Test dummy encryption mode enabled [ 908.859781][T16012] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.3440: inode has both inline data and extents flags [ 908.885542][T16012] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.3440: couldn't read orphan inode 15 (err -117) [ 908.967330][T16012] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 909.218337][ T6308] EXT4-fs (loop5): unmounting filesystem. [ 909.280402][T16021] device syzkaller0 entered promiscuous mode [ 910.095339][T16034] loop1: detected capacity change from 0 to 1024 [ 910.121066][T16034] EXT4-fs: inline encryption not supported [ 910.353199][T16034] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 910.383112][T16034] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 910.412814][T16034] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3446: Failed to acquire dquot type 0 [ 910.461508][T16034] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 910.505418][T16034] EXT4-fs (loop1): 1 truncate cleaned up [ 910.511243][T16034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 910.603840][T16034] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 910.703521][T16034] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 910.736477][T16034] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3446: Failed to acquire dquot type 0 [ 910.845230][T14104] EXT4-fs (loop1): unmounting filesystem. [ 911.008735][T16041] ip_tables: iptables: counters copy to user failed while replacing table [ 911.331400][ T5387] plfxlc 7-1:251.0: Request_firmware failed (-110) [ 911.340221][ T5387] plfxlc 7-1:251.0: FPGA download failed (-22) [ 913.386001][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 914.100805][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3444'. [ 914.113319][T16027] device ip6gre2 entered promiscuous mode [ 914.120339][T16028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3444'. [ 914.133435][T16028] device ip6gre3 entered promiscuous mode [ 914.217776][ T5387] plfxlc 7-1:251.0: pureLifi:Device error [ 914.238779][ T5387] plfxlc: probe of 7-1:251.0 failed with error -22 [ 914.345027][ T5387] usb 7-1: USB disconnect, device number 83 [ 914.940660][T16064] device syzkaller0 entered promiscuous mode [ 915.617662][ T5387] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 915.856952][ T5387] usb 6-1: Using ep0 maxpacket: 16 [ 915.888114][ T5387] usb 6-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 915.921373][ T5387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.932378][ T5387] usb 6-1: Product: syz [ 915.943306][ T5387] usb 6-1: Manufacturer: syz [ 915.950301][ T5387] usb 6-1: SerialNumber: syz [ 916.112424][T16085] xt_hashlimit: size too large, truncated to 1048576 [ 916.261970][ T5387] plfxlc 6-1:251.0: Firmware Version: 0 [ 916.270422][ T5387] plfxlc 6-1:251.0: Unit type is station [ 916.917416][ T4320] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 917.115229][ T4320] usb 7-1: Using ep0 maxpacket: 16 [ 917.122447][ T4320] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 917.143287][ T4320] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 917.168407][ T4320] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 917.178298][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.186518][ T4320] usb 7-1: Product: syz [ 917.191030][ T4320] usb 7-1: Manufacturer: syz [ 917.195735][ T4320] usb 7-1: SerialNumber: syz [ 917.447332][ T4320] usb 7-1: 0:2 : does not exist [ 917.465830][ T4320] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 917.510769][ T4320] usb 7-1: USB disconnect, device number 84 [ 917.758424][T13285] udevd[13285]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.535587][T16096] ip_tables: iptables: counters copy to user failed while replacing table [ 920.103902][ T1182] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 920.112421][ T1182] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 920.132184][ T14] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 920.238355][T16102] device syzkaller0 entered promiscuous mode [ 920.253007][ T14] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 920.404710][ T5387] plfxlc 6-1:251.0: vendor command failed (-71) [ 920.428732][ T5387] plfxlc 6-1:251.0: FPGA download failed (-22) [ 920.904580][T16122] loop6: detected capacity change from 0 to 2048 [ 921.044218][T16122] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 921.198746][T16120] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 921.288559][ T4357] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 921.310633][T16120] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 921.357114][T16120] EXT4-fs (loop6): This should not happen!! Data will be lost [ 921.357114][T16120] [ 921.427571][T16120] EXT4-fs (loop6): Total free blocks count 0 [ 921.441887][T16120] EXT4-fs (loop6): Free/Dirty block details [ 921.476324][T16120] EXT4-fs (loop6): free_blocks=4096 [ 921.512751][T16120] EXT4-fs (loop6): dirty_blocks=64 [ 921.531704][T16120] EXT4-fs (loop6): Block reservation details [ 921.566860][T16120] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 921.706203][ T4905] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 923.866075][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 925.155226][T16144] device syzkaller0 entered promiscuous mode [ 925.205212][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 925.262383][T16162] loop5: detected capacity change from 0 to 256 [ 925.289024][ T5387] plfxlc 6-1:251.0: pureLifi:Device error [ 925.294840][ T5387] plfxlc: probe of 6-1:251.0 failed with error -22 [ 925.337108][ T5387] usb 6-1: USB disconnect, device number 120 [ 925.359074][T16162] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 927.264099][T16166] device syzkaller0 entered promiscuous mode [ 927.291206][T16174] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3477'. [ 927.466890][ T1182] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 927.656530][ T1182] usb 2-1: Using ep0 maxpacket: 16 [ 927.679542][ T1182] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 927.706614][ T1182] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.719714][ T1182] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 927.736665][ T1182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.582706][ T1182] usb 2-1: Product: syz [ 928.587220][ T1182] usb 2-1: Manufacturer: syz [ 928.591855][ T1182] usb 2-1: SerialNumber: syz [ 928.665034][ T1182] usb 2-1: can't set config #1, error -71 [ 928.687750][ T1182] usb 2-1: USB disconnect, device number 114 [ 928.741528][T16188] ip_tables: iptables: counters copy to user failed while replacing table [ 931.157239][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 931.803227][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.036293][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3485'. [ 932.050383][T16186] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.181977][T16186] device bridge_slave_1 left promiscuous mode [ 932.188262][T16186] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.407492][T16216] device syzkaller0 entered promiscuous mode [ 932.777495][T16227] tipc: Trying to set illegal importance in message [ 933.014446][T16233] device syzkaller0 entered promiscuous mode [ 933.067441][ T1182] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 933.190398][T16238] loop5: detected capacity change from 0 to 512 [ 933.247103][ T1182] usb 3-1: Using ep0 maxpacket: 16 [ 933.308732][T16238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 933.318287][T16238] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.329285][ T1182] usb 3-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 933.340196][ T1182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.343171][ T26] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 933.348606][ T1182] usb 3-1: Product: syz [ 933.361364][ T1182] usb 3-1: Manufacturer: syz [ 933.366014][ T1182] usb 3-1: SerialNumber: syz [ 933.468596][ T6308] EXT4-fs (loop5): unmounting filesystem. [ 933.514732][T16248] ip_tables: iptables: counters copy to user failed while replacing table [ 933.582883][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 933.586486][ T1182] plfxlc 3-1:251.0: Firmware Version: 0 [ 933.595192][ T1182] plfxlc 3-1:251.0: Unit type is station [ 933.599039][ T26] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 933.642542][ T26] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.656734][ T26] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 933.672991][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.682209][ T26] usb 7-1: Product: syz [ 933.686437][ T26] usb 7-1: Manufacturer: syz [ 933.691477][ T26] usb 7-1: SerialNumber: syz [ 933.927691][ T26] usb 7-1: 0:2 : does not exist [ 933.953668][ T26] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 934.022867][ T26] usb 7-1: USB disconnect, device number 85 [ 937.547634][ T1182] plfxlc 3-1:251.0: vendor command failed (-71) [ 937.608392][ T1182] plfxlc 3-1:251.0: FPGA download failed (-22) [ 938.634749][ T1182] plfxlc 3-1:251.0: pureLifi:Device error [ 938.652833][ T1182] plfxlc: probe of 3-1:251.0 failed with error -22 [ 938.713403][ T1182] usb 3-1: USB disconnect, device number 34 [ 938.786951][T16312] FAULT_INJECTION: forcing a failure. [ 938.786951][T16312] name failslab, interval 1, probability 0, space 0, times 0 [ 938.852471][T16312] CPU: 1 PID: 16312 Comm: syz.1.3516 Not tainted syzkaller #0 [ 938.860028][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 938.870220][T16312] Call Trace: [ 938.873544][T16312] [ 938.876515][T16312] dump_stack_lvl+0x188/0x24e [ 938.881250][T16312] ? show_regs_print_info+0x12/0x12 [ 938.886512][T16312] ? load_image+0x410/0x410 [ 938.891080][T16312] ? __lock_acquire+0x7c40/0x7c40 [ 938.896171][T16312] should_fail_ex+0x390/0x4c0 [ 938.900898][T16312] should_failslab+0x5/0x20 [ 938.905435][T16312] slab_pre_alloc_hook+0x59/0x300 [ 938.910527][T16312] kmem_cache_alloc_lru+0x49/0x2e0 [ 938.915690][T16312] ? sock_alloc_inode+0x24/0xc0 [ 938.920600][T16312] sock_alloc_inode+0x24/0xc0 [ 938.925336][T16312] ? sockfs_init_fs_context+0xa0/0xa0 [ 938.930743][T16312] new_inode_pseudo+0x5f/0x1c0 [ 938.935539][T16312] __sock_create+0x129/0x940 [ 938.940151][T16312] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 938.946297][T16312] __sys_socket+0xc4/0x190 [ 938.950738][T16312] __x64_sys_socket+0x76/0x80 [ 938.955437][T16312] do_syscall_64+0x4c/0xa0 [ 938.959867][T16312] ? clear_bhb_loop+0x60/0xb0 [ 938.964587][T16312] ? clear_bhb_loop+0x60/0xb0 [ 938.969275][T16312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.975194][T16312] RIP: 0033:0x7f9c6af9e159 [ 938.979630][T16312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.999259][T16312] RSP: 002b:00007f9c6beee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 939.007716][T16312] RAX: ffffffffffffffda RBX: 00007f9c6b225fa0 RCX: 00007f9c6af9e159 [ 939.015703][T16312] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 939.023691][T16312] RBP: 00007f9c6b03506b R08: 0000000000000000 R09: 0000000000000000 [ 939.031675][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.039663][T16312] R13: 00007f9c6b226038 R14: 00007f9c6b225fa0 R15: 00007ffebb36a538 [ 939.047719][T16312] [ 939.054845][T13739] Bluetooth: hci0: command 0x0406 tx timeout [ 939.093719][T16312] socket: no more sockets [ 939.204790][T16320] loop5: detected capacity change from 0 to 512 [ 939.221710][T16320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 939.233276][T16320] System zones: 1-12 [ 939.265585][T16320] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.3519: missing EA_INODE flag [ 939.393196][T16326] se_dev->se_dev_ptr already set for storage object [ 939.395297][T16326] Config c/1 of g1 needs at least one function. [ 939.395380][T16326] udc usbip-vudc.0: failed to start g1: -22 [ 939.395403][T16326] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 939.402205][T16320] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3519: error while reading EA inode 12 err=-117 [ 939.445606][T16326] UDC core: g1: couldn't find an available UDC or it's busy [ 939.477332][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 939.538254][T16320] EXT4-fs (loop5): 1 orphan inode deleted [ 939.544127][T16320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 939.657853][ T4318] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 939.824838][T16330] device syzkaller0 entered promiscuous mode [ 939.864328][T16332] device syzkaller0 entered promiscuous mode [ 940.017974][ T4318] usb 7-1: Using ep0 maxpacket: 16 [ 940.063598][ T4318] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 940.189214][ T4318] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.236621][ T4318] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 940.308432][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.335014][ T4318] usb 7-1: Product: syz [ 940.363126][ T4318] usb 7-1: Manufacturer: syz [ 940.387491][ T4318] usb 7-1: SerialNumber: syz [ 940.506382][ T6308] EXT4-fs (loop5): unmounting filesystem. [ 940.647574][ T4318] usb 7-1: 0:2 : does not exist [ 940.675143][ T4318] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 940.777517][ T4318] usb 7-1: USB disconnect, device number 86 [ 941.325196][T16254] udevd[16254]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.764318][T16346] loop3: detected capacity change from 0 to 512 [ 941.866398][T16346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 941.966658][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.081951][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.111810][T16348] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.136804][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.163156][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.177987][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.193139][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.219225][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.248235][T16348] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.336653][T16346] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #2: comm syz.3.3525: checksumming directory block 0 [ 942.455053][T14543] EXT4-fs (loop3): unmounting filesystem. [ 942.840141][T16355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 942.872111][T16355] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 942.905056][T16355] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 944.644869][T16359] loop3: detected capacity change from 0 to 2048 [ 944.723853][T16359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 944.779230][T16359] tmpfs: Unknown parameter '00000000000000000000' [ 945.228641][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 947.598095][T14543] EXT4-fs (loop3): unmounting filesystem. [ 948.117870][T16369] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 948.137026][T16369] syzkaller1: linktype set to 805 [ 948.375440][T16374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3532'. [ 948.385814][T16376] se_dev->se_dev_ptr already set for storage object [ 948.412561][T16376] Config c/1 of g1 needs at least one function. [ 948.449358][T16376] udc usbip-vudc.0: failed to start g1: -22 [ 948.455342][T16376] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 948.478891][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 948.507816][T16376] UDC core: g1: couldn't find an available UDC or it's busy [ 949.283411][T16400] loop1: detected capacity change from 0 to 2048 [ 952.204264][T16396] device syzkaller0 entered promiscuous mode [ 952.554766][T16408] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3544'. [ 952.604911][T16408] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3544'. [ 952.779674][ T126] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 953.001321][ T126] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.022665][ T126] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.057156][ T126] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.100184][ T126] usb 6-1: config 0 interface 0 has no altsetting 0 [ 953.134374][ T126] usb 6-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 953.166044][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.196447][ T126] usb 6-1: config 0 descriptor?? [ 953.388885][T16433] se_dev->se_dev_ptr already set for storage object [ 953.417279][T16433] Config c/1 of g1 needs at least one function. [ 953.444458][T16433] udc usbip-vudc.0: failed to start g1: -22 [ 953.486334][T16433] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 953.550346][T16433] UDC core: g1: couldn't find an available UDC or it's busy [ 953.641495][ T126] input: HID 1b96:0011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1B96:0011.0053/input/input95 [ 953.780007][ T126] ntrig 0003:1B96:0011.0053: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.5-1/input0 [ 953.860469][T16410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.869802][T16410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.910665][ T126] usb 6-1: USB disconnect, device number 121 [ 954.042505][T16443] fido_id[16443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 954.369918][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 955.879482][T13739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 955.923077][T13739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 955.940191][T13739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 955.975150][T13739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 955.982902][T13739] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 955.992388][T13739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 957.486956][T16415] device syzkaller0 entered promiscuous mode [ 957.494228][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3548'. [ 957.527236][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'. [ 958.032388][T10288] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.110613][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 958.969428][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 958.985517][T16480] loop2: detected capacity change from 0 to 256 [ 959.044073][T10288] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.124286][T16480] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 959.224019][T16480] syz.2.3560: attempt to access beyond end of device [ 959.224019][T16480] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 959.249080][T16484] loop3: detected capacity change from 0 to 512 [ 959.252149][T10288] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.279889][T16484] EXT4-fs: Ignoring removed orlov option [ 959.286299][T16480] syz.2.3560: attempt to access beyond end of device [ 959.286299][T16480] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 959.330009][T16484] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)! [ 959.360375][ T27] audit: type=1800 audit(1790301797.660:83): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3560" name="file1" dev="loop2" ino=1048623 res=0 errno=0 [ 959.448417][T10288] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.460356][T16484] EXT4-fs (loop3): group descriptors corrupted! [ 960.201904][T16459] chnl_net:caif_netlink_parms(): no params data found [ 960.423190][T16489] fuse: Bad value for 'user_id' [ 960.526550][T16489] syz.2.3560: attempt to access beyond end of device [ 960.526550][T16489] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 960.681466][T16498] exFAT-fs (loop2): hint_cluster is invalid (1) [ 960.787379][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 960.831816][T16489] exFAT-fs (loop2): Filesystem has been set read-only [ 960.867145][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 960.908170][T16489] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 0, err : -5) [ 960.997927][T16498] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.079162][T16498] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 9, err : -5) [ 961.126236][T16459] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.150897][T16459] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.159229][T16459] device bridge_slave_0 entered promiscuous mode [ 961.165565][T16498] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.172466][T16498] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 8, err : -5) [ 961.221231][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.247063][T16459] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.264662][T16459] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.272489][T16489] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 0, err : -5) [ 961.306498][T16459] device bridge_slave_1 entered promiscuous mode [ 961.317630][T16498] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.357148][T16498] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 32, err : -5) [ 961.408828][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.415905][T16459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.428619][T16489] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 1, err : -5) [ 961.481161][T16459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.500519][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.509283][T16489] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 2, err : -5) [ 961.520795][T16498] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.529537][T16498] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 32, err : -5) [ 961.577501][T10288] tipc: Disabling bearer [ 961.584095][T10288] tipc: Left network mode [ 961.595669][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.668991][T16489] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 3, err : -5) [ 961.677964][T16459] team0: Port device team_slave_0 added [ 961.693456][T16459] team0: Port device team_slave_1 added [ 961.721020][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.750939][T16489] exFAT-fs (loop2): error, failed to bmap (inode : ffff888072b307e0 iblock : 4, err : -5) [ 961.790932][T16505] se_dev->se_dev_ptr already set for storage object [ 961.794671][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.825093][T16505] Config c/1 of g1 needs at least one function. [ 961.856685][T16505] udc usbip-vudc.0: failed to start g1: -22 [ 961.862784][T16505] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 961.864181][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.873476][T16505] UDC core: g1: couldn't find an available UDC or it's busy [ 961.925899][T16489] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 961.983176][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3565'. [ 962.274460][T16510] device syzkaller0 entered promiscuous mode [ 962.326331][T16459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.347971][T16459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.419525][T16521] ip_tables: iptables: counters copy to user failed while replacing table [ 962.439936][T16459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.918371][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 964.997034][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 965.535349][T16545] xt_hashlimit: size too large, truncated to 1048576 [ 966.237529][T16459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.244824][T16459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.291167][T16459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.352299][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3568'. [ 966.411249][T16534] device syzkaller0 entered promiscuous mode [ 967.725663][T16459] device hsr_slave_0 entered promiscuous mode [ 967.780580][T16459] device hsr_slave_1 entered promiscuous mode [ 967.817831][T16459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.846623][T16459] Cannot create hsr debugfs directory [ 967.918689][T16556] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3571'. [ 967.953257][T16556] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3571'. [ 969.367608][T16571] loop2: detected capacity change from 0 to 128 [ 970.749602][T10288] device hsr_slave_0 left promiscuous mode [ 970.762500][T10288] device hsr_slave_1 left promiscuous mode [ 970.801687][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.809185][T10288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.852723][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.860229][T10288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.958221][T10288] device bridge_slave_0 left promiscuous mode [ 970.966875][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.031762][T10288] device veth1_macvtap left promiscuous mode [ 971.037880][T10288] device veth0_macvtap left promiscuous mode [ 971.062312][T16596] loop2: detected capacity change from 0 to 4096 [ 971.081151][T10288] device veth1_vlan left promiscuous mode [ 971.095206][T10288] device veth0_vlan left promiscuous mode [ 971.168733][T16596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 973.936109][T14841] EXT4-fs (loop2): unmounting filesystem. [ 974.467326][T10288] team0 (unregistering): Port device team_slave_1 removed [ 974.537174][T10288] team0 (unregistering): Port device team_slave_0 removed [ 974.597364][T10288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.659410][T10288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.076113][T10288] bond0 (unregistering): Released all slaves [ 975.214196][T16459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 975.231022][T16459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 975.272948][T16598] device syzkaller0 entered promiscuous mode [ 978.737369][T16459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 978.760080][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3584'. [ 978.820919][T16459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 979.732960][T16459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.896325][T16459] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.950713][T16674] loop3: detected capacity change from 0 to 128 [ 980.202500][T16459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 980.382687][T16459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 980.676261][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 980.695221][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 980.773296][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 980.783787][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 980.801315][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.808552][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.837947][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 980.866696][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 980.891322][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.899100][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.928351][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 980.962363][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.996898][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 981.042145][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 981.067243][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 981.099526][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 981.139685][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 981.168681][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 981.190942][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 981.217243][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 981.252035][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 981.279727][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 981.301598][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 981.964658][T16705] loop6: detected capacity change from 0 to 2048 [ 982.179792][T16705] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 982.242420][T16705] tmpfs: Unknown parameter '00000000000000000000' [ 982.382507][T16703] device syzkaller0 entered promiscuous mode [ 985.022336][ T7680] EXT4-fs (loop6): unmounting filesystem. [ 985.339167][T16738] loop6: detected capacity change from 0 to 2048 [ 985.400438][T16659] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 992.533710][T16791] loop6: detected capacity change from 0 to 512 [ 992.557847][T16791] EXT4-fs (loop6): Test dummy encryption mode enabled [ 992.599371][T16791] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.3607: inode has both inline data and extents flags [ 992.634596][T16791] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.3607: couldn't read orphan inode 15 (err -117) [ 992.649997][T16791] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 992.743695][ T7680] EXT4-fs (loop6): unmounting filesystem. [ 992.863281][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3608'. [ 993.249165][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.873165][T16804] loop6: detected capacity change from 0 to 1024 [ 993.923600][T16804] EXT4-fs: inline encryption not supported [ 993.991974][T16804] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 994.044517][T16804] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 994.053984][T16804] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.3611: Failed to acquire dquot type 0 [ 994.119315][T16804] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 994.137845][T16804] EXT4-fs (loop6): 1 truncate cleaned up [ 994.143586][T16804] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 994.252239][T16804] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 994.320179][T16804] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 994.340442][T16804] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.3611: Failed to acquire dquot type 0 [ 994.549449][ T7680] EXT4-fs (loop6): unmounting filesystem. [ 994.561267][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 994.685386][T16725] device syzkaller0 entered promiscuous mode [ 994.811529][T16459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.819102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 994.842317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 996.923463][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 996.953165][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.034881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 997.094027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.152423][T16459] device veth0_vlan entered promiscuous mode [ 997.161455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.189988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.233844][T16459] device veth1_vlan entered promiscuous mode [ 997.428238][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 997.468590][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 997.521220][T16850] loop2: detected capacity change from 0 to 2048 [ 997.525462][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 997.563290][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.608250][T16850] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 997.609615][T16459] device veth0_macvtap entered promiscuous mode [ 997.679746][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3619'. [ 997.785721][T16459] device veth1_macvtap entered promiscuous mode [ 997.895233][T16864] device syzkaller0 entered promiscuous mode [ 997.945089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 997.955670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 998.346550][T16877] loop2: detected capacity change from 0 to 4096 [ 998.380342][T16877] EXT4-fs: inline encryption not supported [ 998.426070][T16877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 998.474349][T16877] EXT4-fs (loop2): Test dummy encryption mode enabled [ 998.532057][T16877] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 998.563417][T16877] System zones: 0-5 [ 998.584318][T16877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 998.945092][ T4357] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 999.311572][ T4357] usb 3-1: not running at top speed; connect to a high speed hub [ 999.356923][ T4357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.413833][ T4357] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 999.460067][ T4357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.645324][ T4357] usb 3-1: Found UVC 1.00 device (046d:0825) [ 999.692769][ T4357] usb 3-1: No streaming interface found for terminal 2. [ 1000.132196][ T1182] usb 3-1: USB disconnect, device number 35 [ 1000.518567][T16901] futex_wake_op: syz.1.3627 tries to shift op by 144; fix this program [ 1000.549576][T16901] loop1: detected capacity change from 0 to 256 [ 1000.587491][T16901] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1001.396597][T14841] EXT4-fs (loop2): unmounting filesystem. [ 1001.584619][T16908] loop2: detected capacity change from 0 to 128 [ 1001.631103][T16908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1001.661942][T16908] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.729317][T16908] syz.2.3629 (pid 16908) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1002.093174][T16910] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1002.203452][T14841] EXT4-fs (loop2): unmounting filesystem. [ 1002.498451][T16924] loop1: detected capacity change from 0 to 256 [ 1005.963153][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.974259][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.984328][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.996376][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.006603][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.017162][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.027068][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.045910][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.057137][T16459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.087050][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1006.109877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1006.122961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1006.139978][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.151558][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.161518][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.172513][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.182422][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.192913][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.203188][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.213711][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.224848][T16459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.238642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1006.248305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1006.260559][T16459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.269847][T16459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.279435][T16459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.288939][T16459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.395940][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.403837][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.422960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1006.465557][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.473524][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.489531][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1025.427894][T16978] futex_wake_op: syz.5.3632 tries to shift op by 144; fix this program [ 1025.477591][T16978] loop5: detected capacity change from 0 to 256 [ 1025.526874][T16978] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1025.614280][ T27] audit: type=1800 audit(1790301863.892:84): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3632" name="file1" dev="loop5" ino=1048629 res=0 errno=0 [ 1026.314790][T16971] loop1: detected capacity change from 0 to 1024 [ 1026.386518][T16971] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1026.460012][T16971] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1026.510157][T16971] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.3633: Freeing blocks not in datazone - block = 0, count = 4096 [ 1026.911360][T16971] EXT4-fs (loop1): 1 orphan inode deleted [ 1027.082832][T16971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1027.509387][T14104] EXT4-fs (loop1): unmounting filesystem. [ 1027.848342][ T26] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1027.903215][T17012] device syzkaller0 entered promiscuous mode [ 1027.916453][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'. [ 1028.048312][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 1028.068694][ T26] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1028.114237][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.246924][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1028.350231][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.434427][ T26] usb 3-1: Product: syz [ 1028.480054][ T26] usb 3-1: Manufacturer: syz [ 1028.531537][ T26] usb 3-1: SerialNumber: syz [ 1028.957155][ T26] usb 3-1: 0:2 : does not exist [ 1028.991005][ T26] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1029.095604][ T26] usb 3-1: USB disconnect, device number 36 [ 1029.355987][T16994] udevd[16994]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.856101][T17038] loop6: detected capacity change from 0 to 16 [ 1032.899265][T17038] erofs: (device loop6): mounted with root inode @ nid 36. [ 1034.316374][ T4280] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1035.325923][T17028] loop2: detected capacity change from 0 to 4096 [ 1036.325331][T17028] EXT4-fs: failed to create workqueue [ 1036.331456][T17028] EXT4-fs (loop2): mount failed [ 1036.855764][T17038] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1036.951508][ T27] audit: type=1800 audit(1790301875.160:85): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3649" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1037.168152][T17050] loop1: detected capacity change from 0 to 512 [ 1037.253553][T17050] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1037.639038][T17050] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #11: comm syz.1.3652: casefold flag without casefold feature [ 1037.724358][T17050] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3652: couldn't read orphan inode 11 (err -117) [ 1037.800056][T17050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1038.459598][T17067] loop3: detected capacity change from 0 to 2048 [ 1039.212209][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1040.255548][T17054] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1040.318711][T17075] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 1041.329862][ T26] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1041.701860][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1041.715270][ T26] usb 4-1: config 0 has no interface number 0 [ 1041.726618][ T26] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1041.764028][ T26] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.839260][ T26] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.904713][ T26] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1041.954123][T17079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1041.962280][T17079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1042.258258][ T26] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1042.272375][T17079] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1042.279737][T17079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1042.279964][ T26] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 1042.285785][T17079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1042.299986][ T26] usb 4-1: Manufacturer: syz [ 1042.308375][T17079] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1042.312381][ T26] usb 4-1: config 0 descriptor?? [ 1042.315812][T17079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1042.326586][T17079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1042.348315][T17079] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1042.355686][T17079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1042.361761][T17079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1042.374571][T14104] EXT4-fs (loop1): unmounting filesystem. [ 1042.395381][T17079] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1042.402772][T17079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1042.408734][T17079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1042.433261][T17079] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1043.383014][ T26] uclogic 0003:145F:0212.0054: pen parameters not found [ 1043.397496][ T26] uclogic 0003:145F:0212.0054: interface is invalid, ignoring [ 1043.511471][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1043.640266][T13739] Bluetooth: hci1: command 0x0c1a tx timeout [ 1043.669872][T17100] loop6: detected capacity change from 0 to 256 [ 1043.674747][ T14] usb 4-1: USB disconnect, device number 111 [ 1043.710455][T17100] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1044.446924][T17111] MTRR 2 not used [ 1044.464518][T13739] Bluetooth: hci0: command 0x0c1a tx timeout [ 1044.471488][T13739] Bluetooth: hci3: command 0x0c1a tx timeout [ 1044.478730][T13739] Bluetooth: hci2: command 0x0c1a tx timeout [ 1044.504904][T13739] Bluetooth: hci4: command 0x0c1a tx timeout [ 1044.558848][T17112] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3662'. [ 1044.687468][T17112] syz.6.3662: attempt to access beyond end of device [ 1044.687468][T17112] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 1044.704249][T17112] syz.6.3662: attempt to access beyond end of device [ 1044.704249][T17112] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1044.755527][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1044.762591][ T27] audit: type=1800 audit(1790301883.020:86): pid=17112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3662" name="file1" dev="loop6" ino=1048632 res=0 errno=0 [ 1046.206869][T17125] loop2: detected capacity change from 0 to 512 [ 1046.221323][T17113] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.302313][T17125] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1046.521520][T13739] Bluetooth: hci0: command 0x0406 tx timeout [ 1046.528392][T17113] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.534811][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 1046.672116][T17125] EXT4-fs (loop2): 1 orphan inode deleted [ 1046.677996][T17125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1046.687499][T13739] Bluetooth: hci4: command 0x0406 tx timeout [ 1046.697487][T17125] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.320395][ T14] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1047.330898][ T5067] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1047.351680][ T5067] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 1 [ 1048.460727][ T14] usb 2-1: device not accepting address 115, error -71 [ 1048.938141][T14841] EXT4-fs (loop2): unmounting filesystem. [ 1049.315715][T17152] device syzkaller0 entered promiscuous mode [ 1051.574717][T17171] loop3: detected capacity change from 0 to 512 [ 1051.642051][T17171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1051.960742][T17171] devpts: called with bogus options [ 1052.152706][T14543] EXT4-fs (loop3): unmounting filesystem. [ 1055.053818][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.382311][T17191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1057.388423][T17191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1057.394550][T17191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1057.400601][T17191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1057.406746][T17191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1057.412777][T17191] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1057.422657][T17191] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1057.714940][T17206] netlink: 'syz.2.3684': attribute type 4 has an invalid length. [ 1059.252089][ T1182] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1060.170435][T13739] Bluetooth: hci2: command 0x0c1a tx timeout [ 1060.177753][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1060.267933][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 1060.268005][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 1060.268054][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 1060.268081][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 1060.782326][ T1182] usb 7-1: Using ep0 maxpacket: 8 [ 1060.864310][ T1182] usb 7-1: device descriptor read/all, error -71 [ 1062.197915][T17236] loop1: detected capacity change from 0 to 1024 [ 1062.206809][T17237] loop3: detected capacity change from 0 to 2048 [ 1062.282592][T17113] Bluetooth: hci4: command 0x0406 tx timeout [ 1062.306121][T17237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1062.427601][T17240] device syzkaller0 entered promiscuous mode [ 1062.657897][T17235] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1063.112096][T17235] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1063.337947][T17235] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1063.337947][T17235] [ 1063.348588][T17235] EXT4-fs (loop3): Total free blocks count 0 [ 1063.367056][T17235] EXT4-fs (loop3): Free/Dirty block details [ 1063.383040][T17235] EXT4-fs (loop3): free_blocks=4096 [ 1063.388338][T17235] EXT4-fs (loop3): dirty_blocks=64 [ 1063.450841][T17235] EXT4-fs (loop3): Block reservation details [ 1063.497302][T17235] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1063.551994][T17237] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 1064.382720][ T1182] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1064.503303][T17288] loop5: detected capacity change from 0 to 256 [ 1064.589828][ T1182] usb 4-1: Using ep0 maxpacket: 16 [ 1064.611748][ T1182] usb 4-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 1064.652645][ T1182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.672569][ T1182] usb 4-1: Product: syz [ 1064.676810][ T1182] usb 4-1: Manufacturer: syz [ 1064.681453][ T1182] usb 4-1: SerialNumber: syz [ 1064.925233][ T1182] plfxlc 4-1:251.0: Firmware Version: 0 [ 1064.951253][ T1182] plfxlc 4-1:251.0: Unit type is station [ 1065.423309][ T14] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1065.613103][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1065.620897][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1065.640319][ T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.661087][ T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1065.679566][ T14] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1065.701619][ T14] usb 6-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1065.724228][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.732419][ T14] usb 6-1: Product: syz [ 1065.737197][ T14] usb 6-1: Manufacturer: syz [ 1065.741833][ T14] usb 6-1: SerialNumber: syz [ 1065.982352][ T14] usb 6-1: can't set first interface for hiFace device. [ 1066.007936][ T14] snd-usb-hiface: probe of 6-1:1.0 failed with error -5 [ 1066.027219][ T14] usb 6-1: USB disconnect, device number 122 [ 1066.609839][ T14] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1066.811259][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1066.851280][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1066.897812][ T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.908240][ T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1066.918041][ T14] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1066.975793][ T14] usb 6-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1066.985349][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.994210][ T14] usb 6-1: Product: syz [ 1066.998397][ T14] usb 6-1: Manufacturer: syz [ 1067.003129][ T14] usb 6-1: SerialNumber: syz [ 1067.248381][T17315] loop3: detected capacity change from 0 to 2048 [ 1067.300599][T17315] EXT4-fs error (device loop3): __ext4_iget:5102: inode #2: block 127754: comm syz.3.3701: invalid block [ 1067.373928][T17315] EXT4-fs (loop3): get root inode failed [ 1067.379770][T17315] EXT4-fs (loop3): mount failed [ 1067.435861][T17295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.461984][T17295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.473960][T17295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.495102][T17295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.513510][ T14] usb 6-1: can't set first interface for hiFace device. [ 1067.520526][ T14] snd-usb-hiface: probe of 6-1:1.0 failed with error -5 [ 1067.555153][ T14] usb 6-1: USB disconnect, device number 123 [ 1068.701886][T17321] device syzkaller0 entered promiscuous mode [ 1068.883312][ T1182] plfxlc 4-1:251.0: vendor command failed (-71) [ 1068.889745][ T1182] plfxlc 4-1:251.0: FPGA download failed (-22) [ 1070.051568][T17350] loop2: detected capacity change from 0 to 2048 [ 1070.150806][T17350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1070.330168][T17349] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1070.356447][T17349] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1070.375680][T17349] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1070.375680][T17349] [ 1070.387905][T17349] EXT4-fs (loop2): Total free blocks count 0 [ 1070.401276][T17349] EXT4-fs (loop2): Free/Dirty block details [ 1070.407611][T17349] EXT4-fs (loop2): free_blocks=4096 [ 1070.413135][T17349] EXT4-fs (loop2): dirty_blocks=64 [ 1070.425805][T17349] EXT4-fs (loop2): Block reservation details [ 1070.432124][T17349] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1070.462540][T17350] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 1070.961380][T17367] loop1: detected capacity change from 0 to 512 [ 1071.095736][T17367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1071.123025][T17367] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.291003][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.3711: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1071.397523][T17364] loop2: detected capacity change from 0 to 32768 [ 1071.399560][T17371] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1071.432991][T17371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1071.459174][T17371] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1071.461810][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1071.505958][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 1071.507276][T17364] loop2: p1 p2 p3 < p5 p6 p7 > [ 1071.537515][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1071.552041][T17364] loop2: p2 size 16775168 extends beyond EOD, truncated [ 1071.564308][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1071.591939][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 1071.603658][T17364] loop2: p5 start 4294970168 is beyond EOD, [ 1071.625062][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 17: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1071.643518][T17364] truncated [ 1071.661527][T17367] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 18: comm syz.1.3711: lblock 23 mapped to illegal pblock 18 (length 1) [ 1071.677249][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 19: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 1071.715754][T17367] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 20: comm syz.1.3711: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 1072.011989][T17373] loop2: detected capacity change from 0 to 4096 [ 1072.041193][T17373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1073.959917][T14104] EXT4-fs (loop1): unmounting filesystem. [ 1074.621776][T17380] loop1: detected capacity change from 0 to 2048 [ 1075.866792][T17380] loop1: p1 < > p4 [ 1075.866792][T17380] p4: [ 1075.886354][T17380] loop1: p4 size 722688 extends beyond EOD, truncated [ 1076.703338][T16987] udevd[16987]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1076.717330][T16996] udevd[16996]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1076.731166][T17312] udevd[17312]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 1076.750724][T16994] udevd[16994]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1076.790380][T17382] udevd[17382]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1077.104513][T14841] EXT4-fs (loop2): unmounting filesystem. [ 1077.162634][T16987] udevd[16987]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1077.188950][T16996] udevd[16996]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1080.559794][ T1182] plfxlc 4-1:251.0: pureLifi:Device error [ 1080.586792][ T1182] plfxlc: probe of 4-1:251.0 failed with error -22 [ 1080.638285][ T1182] usb 4-1: USB disconnect, device number 112 [ 1080.999456][T17409] ip_tables: iptables: counters copy to user failed while replacing table [ 1081.032037][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 1081.115031][T17421] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3717'. [ 1081.856789][T17421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.864132][T17421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.061526][T17438] device syzkaller0 entered promiscuous mode [ 1083.262947][T17440] tipc: Enabling of bearer rejected, failed to enable media [ 1083.746232][T17447] loop6: detected capacity change from 0 to 512 [ 1083.797210][T17447] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1083.840870][T17447] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1083.882501][T17447] EXT4-fs (loop6): 1 truncate cleaned up [ 1083.923375][T17447] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1084.073557][T17447] EXT4-fs (loop6): unmounting filesystem. [ 1085.252656][T17464] device syzkaller0 entered promiscuous mode [ 1086.526164][T17488] device syzkaller0 entered promiscuous mode [ 1086.776618][T17488] tipc: Enabling of bearer rejected, failed to enable media [ 1090.915329][T17514] loop1: detected capacity change from 0 to 512 [ 1091.081830][T17514] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.3744: missing EA_INODE flag [ 1091.166553][T17514] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3744: error while reading EA inode 2 err=-117 [ 1091.218142][T17514] EXT4-fs (loop1): 1 orphan inode deleted [ 1091.233069][T17522] loop5: detected capacity change from 0 to 128 [ 1091.243286][T17514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1091.276693][T17522] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1091.342315][T17514] EXT4-fs (loop1): shut down requested (2) [ 1093.050592][T17541] input: syz1 as /devices/virtual/input/input96 [ 1094.877121][T14104] EXT4-fs (loop1): unmounting filesystem. [ 1094.887426][T17549] could not allocate digest TFM handle xcbc(twofish-asm) [ 1095.582334][T17562] device syzkaller0 entered promiscuous mode [ 1095.630345][T17565] loop1: detected capacity change from 0 to 256 [ 1095.716986][T17565] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x087a2d51, utbl_chksum : 0xe619d30d) [ 1095.743519][T17562] tipc: Enabling of bearer rejected, failed to enable media [ 1095.788064][T17565] syz.1.3750: attempt to access beyond end of device [ 1095.788064][T17565] loop1: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 1095.844582][T17565] syz.1.3750: attempt to access beyond end of device [ 1095.844582][T17565] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1095.957810][T17571] syz.1.3750: attempt to access beyond end of device [ 1095.957810][T17571] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1095.997497][ T27] audit: type=1800 audit(1790301934.234:87): pid=17565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3750" name="file1" dev="loop1" ino=1048641 res=0 errno=0 [ 1096.372297][T10288] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1096.391986][ T27] audit: type=1800 audit(1790301934.624:88): pid=17571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3750" name="file1" dev="loop1" ino=1048641 res=0 errno=0 [ 1096.979931][T17580] loop3: detected capacity change from 0 to 512 [ 1097.040095][T17580] ext4: Unknown parameter 'subj_user' [ 1097.202688][T17593] loop2: detected capacity change from 0 to 128 [ 1098.456367][ T14] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1098.771659][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.797709][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.846690][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1098.890470][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1098.910739][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.941892][ T14] usb 2-1: config 0 descriptor?? [ 1098.981491][T17612] device syzkaller0 entered promiscuous mode [ 1099.114580][T17612] tipc: Enabling of bearer rejected, failed to enable media [ 1100.482949][T17623] loop2: detected capacity change from 0 to 2048 [ 1100.590421][T17623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1100.696900][ T4321] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1100.804230][T17623] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1100.822137][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 1100.838944][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 1100.877460][ T14] usb 2-1: USB disconnect, device number 117 [ 1100.893259][T17623] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1100.894106][T17630] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 1100.920748][ T4321] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1100.936365][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.945907][ T4321] usb 6-1: Product: syz [ 1100.950276][ T4321] usb 6-1: Manufacturer: syz [ 1100.955057][ T4321] usb 6-1: SerialNumber: syz [ 1100.959809][T17623] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1100.959809][T17623] [ 1100.972799][T17623] EXT4-fs (loop2): Total free blocks count 0 [ 1100.979735][T17623] EXT4-fs (loop2): Free/Dirty block details [ 1100.990224][T17623] EXT4-fs (loop2): free_blocks=4096 [ 1100.995568][T17623] EXT4-fs (loop2): dirty_blocks=64 [ 1101.001388][T17630] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1101.001388][T17630] [ 1101.011839][T17630] EXT4-fs (loop2): Total free blocks count 0 [ 1101.787518][T17637] random: crng reseeded on system resumption [ 1103.339815][T17639] fuse: blksize only supported for fuseblk [ 1104.864948][ T4321] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1104.900102][ T4321] usb 6-1: USB disconnect, device number 124 [ 1104.975631][ T4321] usblp0: removed [ 1105.348680][T17664] tipc: Enabling of bearer rejected, failed to enable media [ 1106.995916][T17683] loop3: detected capacity change from 0 to 2048 [ 1107.132995][T17683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1107.178349][T17683] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.280539][T14543] EXT4-fs (loop3): unmounting filesystem. [ 1107.536223][T17695] loop1: detected capacity change from 0 to 4096 [ 1109.040837][T17695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1111.754774][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1112.017765][T14104] EXT4-fs (loop1): unmounting filesystem. [ 1112.260801][T17724] loop3: detected capacity change from 0 to 512 [ 1112.316783][T17726] device syzkaller0 entered promiscuous mode [ 1112.326556][T17724] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1112.382247][T17724] EXT4-fs (loop3): 1 truncate cleaned up [ 1112.382283][T17724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1112.443872][T17726] tipc: Enabling of bearer rejected, failed to enable media [ 1112.578309][T17724] mmap: syz.3.3794 (17724) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1112.608521][ T9777] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1112.739824][T14543] EXT4-fs (loop3): unmounting filesystem. [ 1112.811983][ T9777] usb 6-1: Using ep0 maxpacket: 16 [ 1112.822205][ T9777] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1112.836186][ T9777] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.040361][ T9777] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1113.055460][ T9777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.067084][ T9777] usb 6-1: Product: syz [ 1113.071397][ T9777] usb 6-1: Manufacturer: syz [ 1113.076027][ T9777] usb 6-1: SerialNumber: syz [ 1113.773101][ T9777] usb 6-1: 0:2 : does not exist [ 1113.799403][ T9777] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1113.915451][ T9777] usb 6-1: USB disconnect, device number 125 [ 1114.574442][T17512] udevd[17512]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.956816][T17763] loop3: detected capacity change from 0 to 2048 [ 1115.259454][T17763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1116.450553][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.904376][T17773] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1117.147167][T17773] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 1117.256833][T17763] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1117.348462][T17773] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1117.348462][T17773] [ 1117.399093][T17763] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1117.399093][T17763] [ 1117.469372][T17773] EXT4-fs (loop3): Total free blocks count 0 [ 1117.475474][T17773] EXT4-fs (loop3): Free/Dirty block details [ 1117.481957][T17773] EXT4-fs (loop3): free_blocks=4096 [ 1117.487256][T17773] EXT4-fs (loop3): dirty_blocks=64 [ 1117.492597][T17763] EXT4-fs (loop3): Total free blocks count 0 [ 1117.853429][T17784] loop2: detected capacity change from 0 to 256 [ 1118.015317][T13739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1118.027986][T13739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1118.037067][T13739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1118.045111][T13739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1118.053123][T13739] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1118.060511][T13739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1118.460352][T17790] device syzkaller0 entered promiscuous mode [ 1119.735302][T17798] tipc: Enabling of bearer rejected, failed to enable media [ 1120.149867][T13739] Bluetooth: hci5: command 0x0409 tx timeout [ 1120.721993][ T4539] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.795068][T17785] chnl_net:caif_netlink_parms(): no params data found [ 1120.840673][T17817] loop3: detected capacity change from 0 to 2048 [ 1120.900613][ T4539] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.907418][T17817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1121.008137][ T4539] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.019968][ T4321] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1121.055186][T17832] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1121.095018][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.109250][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.127796][T17785] device bridge_slave_0 entered promiscuous mode [ 1121.129621][T17832] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 19 with error 28 [ 1121.141598][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.158330][T17832] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1121.158330][T17832] [ 1121.159230][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.170684][T17832] EXT4-fs (loop3): Total free blocks count 0 [ 1121.184201][T17785] device bridge_slave_1 entered promiscuous mode [ 1121.190943][T17832] EXT4-fs (loop3): Free/Dirty block details [ 1121.190967][T17832] EXT4-fs (loop3): free_blocks=4096 [ 1121.190986][T17832] EXT4-fs (loop3): dirty_blocks=64 [ 1121.191000][T17832] EXT4-fs (loop3): Block reservation details [ 1121.191014][T17832] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 1121.219872][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 1121.242183][T17815] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1121.245122][ T4321] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1121.268738][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.279502][ T4321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1121.289766][ T4321] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1121.302646][ T4321] usb 3-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1121.303077][ T4539] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.312751][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.331835][ T4321] usb 3-1: Product: syz [ 1121.336134][ T4321] usb 3-1: Manufacturer: syz [ 1121.341176][ T4321] usb 3-1: SerialNumber: syz [ 1121.376472][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.388540][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.544765][T17785] team0: Port device team_slave_0 added [ 1121.574005][ T4321] usb 3-1: can't set first interface for hiFace device. [ 1121.616214][ T4321] snd-usb-hiface: probe of 3-1:1.0 failed with error -5 [ 1121.644115][T17785] team0: Port device team_slave_1 added [ 1121.664069][ T4321] usb 3-1: USB disconnect, device number 37 [ 1121.817784][T17836] device syzkaller0 entered promiscuous mode [ 1122.209729][T17113] Bluetooth: hci5: command 0x041b tx timeout [ 1122.464678][T17843] loop1: detected capacity change from 0 to 256 [ 1123.511285][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.522994][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.549012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.612314][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.707170][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.743375][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.769424][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.904398][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.786122][T17856] futex_wake_op: syz.2.3825 tries to shift op by 144; fix this program [ 1124.851179][T17856] loop2: detected capacity change from 0 to 256 [ 1124.871374][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1124.883706][T13739] Bluetooth: hci5: command 0x040f tx timeout [ 1125.207721][T17856] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1125.313435][ T27] audit: type=1800 audit(1790301963.510:89): pid=17856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3825" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 1125.453275][T17785] device hsr_slave_0 entered promiscuous mode [ 1125.507378][T17785] device hsr_slave_1 entered promiscuous mode [ 1125.533983][T17785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1125.557809][T17785] Cannot create hsr debugfs directory [ 1125.590927][ T4539] tipc: Left network mode [ 1125.647980][T17864] tipc: Enabling of bearer rejected, failed to enable media [ 1126.683382][T17868] device syzkaller0 entered promiscuous mode [ 1127.061421][T13739] Bluetooth: hci5: command 0x0419 tx timeout [ 1127.181206][T17898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3830'. [ 1127.198352][T17898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.205750][T17898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.920317][T16902] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1128.180036][T16902] usb 6-1: Using ep0 maxpacket: 8 [ 1128.289571][T16902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1128.360905][T16902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.438054][T16902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1128.529806][T16902] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1128.601935][T16902] usb 6-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1128.674139][T16902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.723219][T16902] usb 6-1: Product: syz [ 1128.727498][T16902] usb 6-1: Manufacturer: syz [ 1128.769134][T17914] loop2: detected capacity change from 0 to 4096 [ 1128.780045][T16902] usb 6-1: SerialNumber: syz [ 1128.789650][T17916] loop3: detected capacity change from 0 to 2048 [ 1128.972735][T17914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1128.985165][T17916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1129.038798][T16902] usb 6-1: can't set first interface for hiFace device. [ 1129.074487][T16902] snd-usb-hiface: probe of 6-1:1.0 failed with error -5 [ 1129.989802][T16902] usb 6-1: USB disconnect, device number 126 [ 1130.462844][T14543] EXT4-fs (loop3): unmounting filesystem. [ 1130.533117][T16902] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1130.730428][T16902] usb 6-1: Using ep0 maxpacket: 8 [ 1130.736476][T16902] usb 6-1: device descriptor read/all, error -71 [ 1131.548147][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'. [ 1131.800918][T14841] EXT4-fs (loop2): unmounting filesystem. [ 1132.069501][T17955] loop3: detected capacity change from 0 to 512 [ 1132.169785][T17955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1132.199755][T17955] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.379665][T14543] EXT4-fs (loop3): unmounting filesystem. [ 1132.518500][T17964] loop3: detected capacity change from 0 to 256 [ 1132.838262][ T4539] device hsr_slave_0 left promiscuous mode [ 1132.872583][ T4539] device hsr_slave_1 left promiscuous mode [ 1132.889579][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.919792][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.938385][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.971153][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.991634][ T4539] device bridge_slave_1 left promiscuous mode [ 1132.997996][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.059382][ T4539] device bridge_slave_0 left promiscuous mode [ 1133.094921][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.210683][ T4539] device veth1_macvtap left promiscuous mode [ 1133.216810][ T4539] device veth0_macvtap left promiscuous mode [ 1133.465093][ T4539] device veth1_vlan left promiscuous mode [ 1133.621512][ T4539] device veth0_vlan left promiscuous mode [ 1134.450897][ T4322] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1134.470064][T18005] loop1: detected capacity change from 0 to 512 [ 1134.511795][T18005] EXT4-fs: Ignoring removed nobh option [ 1134.528668][T18005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1134.549966][T18005] ------------[ cut here ]------------ [ 1134.556406][T18005] EA inode 11 i_nlink=0 [ 1134.558323][T18005] WARNING: CPU: 0 PID: 18005 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 1134.573058][T18005] Modules linked in: [ 1134.577001][T18005] CPU: 0 PID: 18005 Comm: syz.1.3852 Not tainted syzkaller #0 [ 1134.584568][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1134.594777][T18005] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 1134.601622][T18005] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 f5 d6 9b ff 49 8b 34 24 48 c7 c7 00 a4 a0 8a 44 89 fa e8 02 19 16 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 1134.621615][T18005] RSP: 0018:ffffc900035b7380 EFLAGS: 00010246 [ 1134.627739][T18005] RAX: 2cf3b425f02d6a00 RBX: ffff88807299b6d0 RCX: 0000000000080000 [ 1134.635817][T18005] RDX: ffffc90015e67000 RSI: 000000000000d36d RDI: 000000000000d36e [ 1134.643904][T18005] RBP: ffffc900035b7470 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 1134.651981][T18005] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff88807299b518 [ 1134.660013][T18005] R13: dffffc0000000000 R14: ffff88807299b4d8 R15: 0000000000000000 [ 1134.668092][T18005] FS: 00007f9c6beee6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1134.677112][T18005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1134.683795][T18005] CR2: 00007f01aac03ff8 CR3: 000000002923f000 CR4: 00000000003526f0 [ 1134.691867][T18005] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1134.699890][T18005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1134.707965][T18005] Call Trace: [ 1134.711315][T18005] [ 1134.714291][T18005] ? ext4_xattr_block_csum+0x560/0x560 [ 1134.719814][T18005] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 1134.726068][T18005] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 1134.732158][T18005] ? errseq_check+0x3c/0x70 [ 1134.736718][T18005] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 1134.742467][T18005] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1134.748692][T18005] ext4_xattr_delete_inode+0xada/0xca0 [ 1134.754288][T18005] ? ext4_expand_extra_isize_ea+0x1d50/0x1d50 [ 1134.760413][T18005] ? __ext4_mark_inode_dirty+0x52e/0x7b0 [ 1134.766227][T18005] ext4_evict_inode+0xc1e/0x10e0 [ 1134.771255][T18005] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1134.777206][T18005] ? do_raw_spin_unlock+0x11d/0x230 [ 1134.782517][T18005] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1134.788469][T18005] evict+0x4b6/0x8b0 [ 1134.792485][T18005] ? proc_nr_inodes+0x2f0/0x2f0 [ 1134.797392][T18005] ? do_raw_spin_unlock+0x11d/0x230 [ 1134.802705][T18005] ? _raw_spin_unlock+0x24/0x40 [ 1134.807616][T18005] ? iput+0x79f/0x9c0 [ 1134.811724][T18005] ext4_orphan_cleanup+0xdfe/0x1650 [ 1134.817064][T18005] ? ext4_orphan_file_block_trigger+0x430/0x430 [ 1134.823424][T18005] ? ext4_orphan_del+0xc90/0xc90 [ 1134.828419][T18005] ? ext4_register_sysfs+0x27e/0x2c0 [ 1134.833796][T18005] ? errseq_check_and_advance+0x62/0x120 [ 1134.839497][T18005] ext4_fill_super+0x6f0c/0x78f0 [ 1134.844585][T18005] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1134.850931][T18005] ? set_blocksize+0x1d0/0x470 [ 1134.855749][T18005] ? sb_set_blocksize+0xa5/0xe0 [ 1134.860708][T18005] get_tree_bdev+0x3e6/0x610 [ 1134.865354][T18005] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1134.871715][T18005] vfs_get_tree+0x88/0x270 [ 1134.876182][T18005] do_new_mount+0x247/0xa40 [ 1134.880795][T18005] __se_sys_mount+0x2e3/0x3d0 [ 1134.885536][T18005] ? __x64_sys_mount+0xc0/0xc0 [ 1134.890353][T18005] ? lockdep_hardirqs_on+0x94/0x140 [ 1134.895662][T18005] ? __x64_sys_mount+0x1c/0xc0 [ 1134.900482][T18005] do_syscall_64+0x4c/0xa0 [ 1134.905008][T18005] ? clear_bhb_loop+0x60/0xb0 [ 1134.909728][T18005] ? clear_bhb_loop+0x60/0xb0 [ 1134.914504][T18005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.920455][T18005] RIP: 0033:0x7f9c6af9f3ca [ 1134.924980][T18005] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.944672][T18005] RSP: 002b:00007f9c6beede58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1134.953198][T18005] RAX: ffffffffffffffda RBX: 00007f9c6beedee0 RCX: 00007f9c6af9f3ca [ 1134.961261][T18005] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00007f9c6beedea0 [ 1134.969310][T18005] RBP: 0000200000000180 R08: 00007f9c6beedee0 R09: 0000000000200700 [ 1134.977375][T18005] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000100 [ 1134.985443][T18005] R13: 00007f9c6beedea0 R14: 0000000000000478 R15: 0000200000000040 [ 1134.993525][T18005] [ 1134.996594][T18005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1135.003888][T18005] CPU: 0 PID: 18005 Comm: syz.1.3852 Not tainted syzkaller #0 [ 1135.011385][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1135.021457][T18005] Call Trace: [ 1135.024745][T18005] [ 1135.027687][T18005] dump_stack_lvl+0x188/0x24e [ 1135.032378][T18005] ? memcpy+0x3c/0x60 [ 1135.036367][T18005] ? show_regs_print_info+0x12/0x12 [ 1135.041575][T18005] ? load_image+0x410/0x410 [ 1135.046102][T18005] panic+0x2d3/0x710 [ 1135.050013][T18005] ? bpf_jit_dump+0xd0/0xd0 [ 1135.054543][T18005] __warn+0x2f8/0x4f0 [ 1135.058534][T18005] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 1135.064534][T18005] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 1135.070550][T18005] report_bug+0x2ba/0x4f0 [ 1135.074923][T18005] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 1135.080936][T18005] handle_bug+0x3a/0x70 [ 1135.085109][T18005] exc_invalid_op+0x16/0x40 [ 1135.089628][T18005] asm_exc_invalid_op+0x16/0x20 [ 1135.094487][T18005] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 1135.101096][T18005] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 f5 d6 9b ff 49 8b 34 24 48 c7 c7 00 a4 a0 8a 44 89 fa e8 02 19 16 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 1135.120715][T18005] RSP: 0018:ffffc900035b7380 EFLAGS: 00010246 [ 1135.126797][T18005] RAX: 2cf3b425f02d6a00 RBX: ffff88807299b6d0 RCX: 0000000000080000 [ 1135.134782][T18005] RDX: ffffc90015e67000 RSI: 000000000000d36d RDI: 000000000000d36e [ 1135.142768][T18005] RBP: ffffc900035b7470 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 1135.150756][T18005] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff88807299b518 [ 1135.158743][T18005] R13: dffffc0000000000 R14: ffff88807299b4d8 R15: 0000000000000000 [ 1135.166771][T18005] ? ext4_xattr_block_csum+0x560/0x560 [ 1135.172257][T18005] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 1135.178340][T18005] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 1135.184383][T18005] ? errseq_check+0x3c/0x70 [ 1135.188940][T18005] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 1135.194614][T18005] ? __ext4_journal_ensure_credits+0x450/0x450 [ 1135.200810][T18005] ext4_xattr_delete_inode+0xada/0xca0 [ 1135.206318][T18005] ? ext4_expand_extra_isize_ea+0x1d50/0x1d50 [ 1135.212408][T18005] ? __ext4_mark_inode_dirty+0x52e/0x7b0 [ 1135.218060][T18005] ext4_evict_inode+0xc1e/0x10e0 [ 1135.223037][T18005] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1135.228968][T18005] ? do_raw_spin_unlock+0x11d/0x230 [ 1135.234205][T18005] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1135.240138][T18005] evict+0x4b6/0x8b0 [ 1135.244066][T18005] ? proc_nr_inodes+0x2f0/0x2f0 [ 1135.248954][T18005] ? do_raw_spin_unlock+0x11d/0x230 [ 1135.254186][T18005] ? _raw_spin_unlock+0x24/0x40 [ 1135.259061][T18005] ? iput+0x79f/0x9c0 [ 1135.263070][T18005] ext4_orphan_cleanup+0xdfe/0x1650 [ 1135.268298][T18005] ? ext4_orphan_file_block_trigger+0x430/0x430 [ 1135.274552][T18005] ? ext4_orphan_del+0xc90/0xc90 [ 1135.279515][T18005] ? ext4_register_sysfs+0x27e/0x2c0 [ 1135.284811][T18005] ? errseq_check_and_advance+0x62/0x120 [ 1135.290482][T18005] ext4_fill_super+0x6f0c/0x78f0 [ 1135.295508][T18005] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1135.301798][T18005] ? set_blocksize+0x1d0/0x470 [ 1135.306612][T18005] ? sb_set_blocksize+0xa5/0xe0 [ 1135.311522][T18005] get_tree_bdev+0x3e6/0x610 [ 1135.316139][T18005] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1135.322398][T18005] vfs_get_tree+0x88/0x270 [ 1135.326832][T18005] do_new_mount+0x247/0xa40 [ 1135.331352][T18005] __se_sys_mount+0x2e3/0x3d0 [ 1135.336050][T18005] ? __x64_sys_mount+0xc0/0xc0 [ 1135.340828][T18005] ? lockdep_hardirqs_on+0x94/0x140 [ 1135.346038][T18005] ? __x64_sys_mount+0x1c/0xc0 [ 1135.350815][T18005] do_syscall_64+0x4c/0xa0 [ 1135.355238][T18005] ? clear_bhb_loop+0x60/0xb0 [ 1135.359919][T18005] ? clear_bhb_loop+0x60/0xb0 [ 1135.364603][T18005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.370510][T18005] RIP: 0033:0x7f9c6af9f3ca [ 1135.374937][T18005] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.394557][T18005] RSP: 002b:00007f9c6beede58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1135.402988][T18005] RAX: ffffffffffffffda RBX: 00007f9c6beedee0 RCX: 00007f9c6af9f3ca [ 1135.410967][T18005] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00007f9c6beedea0 [ 1135.418950][T18005] RBP: 0000200000000180 R08: 00007f9c6beedee0 R09: 0000000000200700 [ 1135.426928][T18005] R10: 0000000000200700 R11: 0000000000000246 R12: 0000200000000100 [ 1135.434911][T18005] R13: 00007f9c6beedea0 R14: 0000000000000478 R15: 0000200000000040 [ 1135.442912][T18005] [ 1135.446087][T18005] Kernel Offset: disabled [ 1135.450514][T18005] Rebooting in 86400 seconds..