last executing test programs: 19m4.275662941s ago: executing program 32 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r2) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 15m20.965292641s ago: executing program 33 (id=891): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 13m28.837929216s ago: executing program 5 (id=1145): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x0, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x29, 0x800, 0x1, 0x0) mmap(&(0x7f0000354000/0x3000)=nil, 0x3000, 0x20, 0x10012, 0xffffffffffffffff, 0xfacb8000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62040, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 13m28.076250876s ago: executing program 5 (id=1147): r0 = socket$packet(0x11, 0x2, 0x300) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x0, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1/file3\x00', 0x0) setns(0xc9, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x7800) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc1000, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090005000008090002007332000080de00050001000700000009000200797a3100000000050001000717030000797a3100"/66], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) 13m27.783023853s ago: executing program 5 (id=1149): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a1, &(0x7f0000000a00)="$eJzs3MtvFVUYAPBvprel5SGI+ICAVsFIfLS0PGRhYjSasNBo1AXGVb0tBClgoCZCiKILjHFhSNwblyb+Ba50Y9SViS5xb0iIYQO6umbuzPR5bx/0trf2/n7J9J4zc27P+ebM3J45M70BdKz+7EcSsTkirkfE1oiozC7Qn7/cuXW5+s+ty9UkarU3/06yt8XtW5erxa+oL5lN+YparchvaFDv1XciRsbHx84X+cGJM+8PXrh46ZlTZ0ZOjp0cOzt89Oihg3t6jgwfXkwYtULTAllct3d9dG73zmNvX3u1evzau798l7V3c7G9jKOV+vO929Djra6szbZMSyeVNjaEJcn6rbtYrketqyv6JrdtjZc/bWvjgJVWafT3uXClBqxjSbS7BUB7lH/os+vfcllovNDCsUfb3XwhjyiL+06x5FsqkRZlumdd37ZSb0Qcv/Lv19kSKzQPAQAw3Q/Z+OfpRuO/NB6YVu6e4h7Ktoi4NyK2R8R9EbEjIu6PqJd9MCIeWmL9s++QzB3/pDdmZGtdS6xhftn477ni3tbM8V85+ottXUVuSz3+7uTEqfGxA8U+2R/dG7L80Iy3zPTjS79/OXvdF8U0e/+08V+2ZPXPjDC9MXuCbnRkYmT5kedufhKxqzI9/jKIZHKgn0TEzojYdZd1nHry293NtjWKvxwLL6gFVyK1byKeyPv/Sszo/2SyTNL0/uTQs0eGDw/2xvjYgcHyqJjr19+uvt6s/mXF3wJZ/29sePzn8WfXiElvxIWLl07X79deuItK/vysmjTZtKOIv7tp/HOP/+q+iJ7krXq6pyxVvPYkr2QvfeX6D0cmJs4PT723zNdfh/L49++din8kps7/7fnlWSR/vDH5/j0R8XBEPFL03aMR8VhE7J0n/J9f3Pdes23N+3+eWfkWyuIfnaf/s4+8LDXV/0tPdJ3+6ftm9dcWPP6z/j9UT+0v1izm82+xDVzOvgMAAID/i7T+DHySDkym03RgIH+Gf0dsTCsR8dSJcx+cHc2fld8W3Wk507V12nzoUDE3XOaHZ+UPFvPGX3X11fMD1XPjo+0OHjrcpibnf+av1t5qAdaidfVEH7Akzn/oXM5/6FyNzv/afN+mAawbz7e7AUB79DRe/fFqtwNoi6Vf//euSDuA1Wf+DzqX8x86l/MfOlLT/41Pl/Uv/6ueKGcklvl7KmsknEaJvrXRjDIR6YJl0pWovQW93Djx2uf5IbQ2du9UorLoL7O4y8SGpvt5jmObV++jCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCX+CwAA///vaOGC") open(&(0x7f0000000000)='./file1\x00', 0x20c1, 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 13m26.70065865s ago: executing program 5 (id=1151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 13m26.238944402s ago: executing program 5 (id=1153): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002882, 0x0) dup(0xffffffffffffffff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0xdfe1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x4, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd}, 0xfffffffffffffe00) socket$kcm(0x10, 0x2, 0x10) 13m25.969096478s ago: executing program 5 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001380)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 13m25.269365556s ago: executing program 34 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001380)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 10m59.388744308s ago: executing program 0 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) 10m55.681956181s ago: executing program 0 (id=1519): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800006, &(0x7f0000000600)=ANY=[], 0x8, 0xb7, &(0x7f0000001a40)="$eJzs0rFJBUEQBuD/3Ts9DkELsAd7MDW3ggsNjRRBK7EDW7GE68DgUpOR5U7BxEAQFb4v2J2dYeGH3efXp9McJ3WfVFUdJhmz1tc3t1eXF23dJ8lj+gxZve/8c13q4y3rpJ2Tl/MMD1uvDeflbpp3meal/YqjqtqGB7+TGQAA+J4uZ1u1+9Qfv7rUJ9l3PxkLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M94CwAA///K8iH3") 10m55.172480823s ago: executing program 0 (id=1520): r0 = socket$packet(0x11, 0x2, 0x300) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$eJzs3UFr02AYB/AnXZdVUdhZPAS8eCrqJ6jKBsOAoPSgJ4XpZRPBXaKnfgu/gV/FryM57VZpU1Y2IlNoktX8fqeH95/mfd63kPfU9N39TyfHn88+/vj5PUajJIaTmMR5EvsxiJ2ozOKSpHYUANga5/N5/JpX/uLyZy20BAA07B/PfwDgP+D8B4D+cf4DQP+8fvP2xdM8P3iVZaOIcnZrOVrOimmVHx7lB4+ypf31p8qimO5c5I+rPLuc78btVf6kNk/j4YMqX2TPX+a7y2hYXVFM9+K4ruFJsvE9AAAAAAAAAAAAAAAAAAAAAACAto2zC7Xv9xmP0z/kVXV4lK7Grr7fZxj3hjUTpo0sAwAAAAAAAAAAAAAAAAAAALba2ddvJ+9PTz98ublFuYn7xKDbVdyNTd/5TuPf4N5qhhY36tq5knb7aaVY7PMNaONKce2jY9DogwkAAAAAAAAAAAAAAAAAAHpo/aPfrjsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO6s//+/uWIxz6DrhQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Gu/AwAA//+a6T6f") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x0, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1/file3\x00', 0x0) setns(0xc9, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x7800) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc1000, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090005000008090002007332000080de00050001000700000009000200797a3100000000050001000717030000797a3100"/66], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008010) 10m53.777635849s ago: executing program 0 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 10m53.533967835s ago: executing program 0 (id=1524): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x0, 0xfffffffd}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair(0x29, 0x800, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62040, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 10m53.451326957s ago: executing program 6 (id=1525): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) syz_io_uring_setup(0xcac, &(0x7f0000000540)={0x0, 0x469ea, 0xc00, 0x2, 0x12}, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 10m52.794312603s ago: executing program 0 (id=1527): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) 10m52.758402894s ago: executing program 6 (id=1528): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002882, 0x0) dup(0xffffffffffffffff) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000100)=0xdfe1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240448d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x4, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd}, 0xfffffffffffffe00) socket$kcm(0x10, 0x2, 0x10) 10m51.36411192s ago: executing program 35 (id=1527): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) 10m51.33520596s ago: executing program 6 (id=1533): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='oom_score_adj < -', 0x11) 10m50.286720626s ago: executing program 6 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 10m50.15968458s ago: executing program 6 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10m49.650960903s ago: executing program 6 (id=1537): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001380)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x100000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 10m48.887603832s ago: executing program 36 (id=1537): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001380)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x100000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 10m42.18576876s ago: executing program 1 (id=1549): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffeffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680), 0x0, 0x20004855) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg1\x00'}) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) 10m41.828009329s ago: executing program 1 (id=1550): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) 10m41.703466622s ago: executing program 1 (id=1551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10m41.250005053s ago: executing program 1 (id=1552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 10m41.141464556s ago: executing program 1 (id=1553): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000000c0)={0x0, "5b817d6be34d2a8c560d42b98447cb07e2852ce3725e7e73ca4ea2616bc8b076"}) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) 10m40.000149104s ago: executing program 1 (id=1554): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f0000002080)=0x9c, 0x23b) 10m39.613458034s ago: executing program 37 (id=1554): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r0, &(0x7f0000002080)=0x9c, 0x23b) 10m12.31575004s ago: executing program 8 (id=1600): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000640)={0x50, 0x0, r1, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x47f, 0xf, 0x0, 0x0, r2}]) 10m8.032658147s ago: executing program 8 (id=1609): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002882, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000100)=0xdfe1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240448d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x4, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd}, 0xfffffffffffffe00) socket$kcm(0x10, 0x2, 0x10) 10m7.406880483s ago: executing program 8 (id=1610): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x7b9, 0x0) sendmsg$rds(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10m6.174049964s ago: executing program 8 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 10m5.795402094s ago: executing program 8 (id=1614): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 10m4.922259385s ago: executing program 8 (id=1617): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x64000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}], 0x6, 0x0, &(0x7f00000002c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {0x0, 0x80000000}], 0x6, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000005c0)={{r8, r7, 0x7, [0x4, 0x4936bda7]}, {0x80000000, r9, 0x4, [0xc1, 0x85]}, 0x10000000, [0xff00, 0x1000]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0)=[{}, {{0x80000000}}]}) r12 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r12, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000580)={{r10, 0x0, 0xc, [0x4, 0x6]}, {r11, 0x0, 0x1, [0x7, 0x6]}, 0x2, [0xfffffff9, 0x10]}) 10m3.15712128s ago: executing program 38 (id=1617): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x64000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}], 0x6, 0x0, &(0x7f00000002c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {0x0, 0x80000000}], 0x6, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000005c0)={{r8, r7, 0x7, [0x4, 0x4936bda7]}, {0x80000000, r9, 0x4, [0xc1, 0x85]}, 0x10000000, [0xff00, 0x1000]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0)=[{}, {{0x80000000}}]}) r12 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r12, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000000580)={{r10, 0x0, 0xc, [0x4, 0x6]}, {r11, 0x0, 0x1, [0x7, 0x6]}, 0x2, [0xfffffff9, 0x10]}) 2m12.013285207s ago: executing program 2 (id=2700): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf2501000000040008801400020077673100000000000000000025a70000"], 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x40) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001400)='2\n', 0x2) 2m10.507049375s ago: executing program 2 (id=2703): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 2m8.576935674s ago: executing program 2 (id=2707): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e84380001000000000000f32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060af1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2446c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8bf1fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3bbe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a1337afd3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdf3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee565db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8198fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x4, 0xfffffff7, 0x0, '\x00', {0x1, 0x5, 0xadf, 0xc, r2, r3, 0x8000, '\x00', 0x100000007, 0x8, 0xffffffff, 0x7, {0x100000000008, 0x27}, {0x7, 0x6}, {0x0, 0x7}, {0x1000000003, 0xa00}, 0xb, 0xb, 0x5, 0x9}}}}) umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 2m8.468809636s ago: executing program 2 (id=2708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) 2m7.15332873s ago: executing program 2 (id=2710): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 2m6.644132472s ago: executing program 2 (id=2712): memfd_create(&(0x7f0000000000)='\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0x29, 0x225, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) 1m50.648915493s ago: executing program 39 (id=2712): memfd_create(&(0x7f0000000000)='\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0x29, 0x225, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) 40.072737679s ago: executing program 4 (id=2897): r0 = socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000440)="a5ad", 0x2}], 0x1}, 0x20040845) 36.863027067s ago: executing program 4 (id=2901): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r1, 0x0, r0, 0x0, 0x20000000008, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) 30.330968647s ago: executing program 4 (id=2916): r0 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) 4.308632507s ago: executing program 7 (id=2971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) 4.256867979s ago: executing program 3 (id=2972): sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004844}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) syz_usb_connect(0x0, 0x2e, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x3, 0x6, 0x0, 0x400, 0x4, 0x540100, r1}) r2 = socket(0x2, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0xfd}, 0x3, 0x6, 0x0, 0x100, 0x0, 0x180105, r4}) 4.167976091s ago: executing program 9 (id=2973): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)='C', 0x1}, {&(0x7f00000005c0)="db", 0x1}], 0x2, 0x0, 0x0, 0x40000000}, 0x28000800) 3.900544818s ago: executing program 7 (id=2974): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, 0xffffffffffffffff, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.107028505s ago: executing program 3 (id=2975): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1214082, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d30303030303030303030303030303030303030303030342c71756965742c747970653de523729b2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x32e, &(0x7f0000000b00)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='always', 0x6) 2.097260495s ago: executing program 9 (id=2976): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x40200) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f00000008c0)=[{0x3, 0xbbdd, 0x1000}, {0x0, 0x9270, 0x1800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 418.961289ms ago: executing program 9 (id=2977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @empty, 0x3}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x28}}], 0x2, 0x20000000) 173.448045ms ago: executing program 3 (id=2978): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) truncate(&(0x7f0000000100)='./file1\x00', 0x4) 0s ago: executing program 3 (id=2979): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000300)='0x010', 0x5) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000480)='1\n\x00', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f0000000500)='0x40\n\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000740)='dummy_udc.0', 0xb) close(r3) kernel console output (not intermixed with test programs): ockdep_hardirqs_on+0x98/0x150 [ 1119.122483][T12708] ? hci_send_to_monitor+0xd7/0x4f0 [ 1119.127719][T12708] hci_rx_work+0x43a/0xd60 [ 1119.132169][T12708] ? process_scheduled_works+0x975/0x1600 [ 1119.137917][T12708] process_scheduled_works+0xa60/0x1600 [ 1119.143523][T12708] ? worker_attach_to_pool+0x370/0x370 [ 1119.149011][T12708] ? assign_work+0x3cc/0x5d0 [ 1119.153633][T12708] worker_thread+0xa5e/0xfe0 [ 1119.158255][T12708] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1119.164168][T12708] ? _raw_spin_unlock+0x40/0x40 [ 1119.169028][T12708] ? __kthread_parkme+0x71/0x1c0 [ 1119.173963][T12708] kthread+0x2fa/0x390 [ 1119.178026][T12708] ? pr_cont_work+0x550/0x550 [ 1119.182695][T12708] ? kthread_blkcg+0xd0/0xd0 [ 1119.187272][T12708] ret_from_fork+0x48/0x80 [ 1119.191677][T12708] ? kthread_blkcg+0xd0/0xd0 [ 1119.196267][T12708] ret_from_fork_asm+0x11/0x20 [ 1119.201081][T12708] [ 1119.217953][T12708] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1119.232372][T12708] Bluetooth: hci1: failed to register connection device [ 1120.465302][T15902] loop2: detected capacity change from 0 to 2048 [ 1120.731267][T15902] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1121.016876][T15902] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1121.139206][T15902] UDF-fs: Scanning with blocksize 512 failed [ 1121.156513][T15900] syz.4.2198: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1121.222307][T15900] CPU: 0 PID: 15900 Comm: syz.4.2198 Not tainted syzkaller #0 [ 1121.229844][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1121.239939][T15900] Call Trace: [ 1121.243253][T15900] [ 1121.246216][T15900] dump_stack_lvl+0x18c/0x250 [ 1121.250935][T15900] ? show_regs_print_info+0x20/0x20 [ 1121.256168][T15900] ? load_image+0x420/0x420 [ 1121.260180][T15902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1121.260690][T15900] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1121.275885][T15900] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1121.282432][T15900] warn_alloc+0x246/0x340 [ 1121.286806][T15900] ? zone_watermark_ok_safe+0x230/0x230 [ 1121.292387][T15900] ? _raw_spin_unlock+0x28/0x40 [ 1121.297267][T15900] ? __vb2_queue_alloc+0x78f/0x1410 [ 1121.302651][T15900] __vmalloc_node_range+0x661/0x1320 [ 1121.308013][T15900] ? free_vm_area+0x50/0x50 [ 1121.312560][T15900] vmalloc_user+0x74/0x80 [ 1121.316923][T15900] ? vb2_vmalloc_alloc+0xef/0x330 [ 1121.321983][T15900] vb2_vmalloc_alloc+0xef/0x330 [ 1121.326871][T15900] ? __copy_timestamp+0x1f0/0x1f0 [ 1121.328237][T12708] Bluetooth: hci1: command 0x2016 tx timeout [ 1121.331905][T15900] __vb2_queue_alloc+0x78f/0x1410 [ 1121.342951][T15900] vb2_core_reqbufs+0x9e8/0x10d0 [ 1121.347930][T15900] ? vb2_verify_memory_type+0x570/0x570 [ 1121.353480][T15900] ? do_vfs_ioctl+0x156c/0x1cc0 [ 1121.358395][T15900] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 1121.363851][T15900] __video_do_ioctl+0xa34/0xde0 [ 1121.368745][T15900] ? video_ioctl2+0x30/0x30 [ 1121.373247][T15900] ? __might_fault+0xc6/0x120 [ 1121.377954][T15900] ? __might_fault+0xaa/0x120 [ 1121.382636][T15900] video_usercopy+0x889/0x1360 [ 1121.387426][T15900] ? video_ioctl2+0x30/0x30 [ 1121.391953][T15900] ? v4l_printk_ioctl+0x160/0x160 [ 1121.397009][T15900] v4l2_ioctl+0x18a/0x1e0 [ 1121.401347][T15900] ? v4l2_poll+0x2b0/0x2b0 [ 1121.405760][T15900] __se_sys_ioctl+0xfd/0x170 [ 1121.410359][T15900] do_syscall_64+0x55/0xb0 [ 1121.414775][T15900] ? clear_bhb_loop+0x40/0x90 [ 1121.419465][T15900] ? clear_bhb_loop+0x40/0x90 [ 1121.424155][T15900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1121.430052][T15900] RIP: 0033:0x7f8e8659e0d9 [ 1121.434471][T15900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.454078][T15900] RSP: 002b:00007f8e874e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.462495][T15900] RAX: ffffffffffffffda RBX: 00007f8e86825fa0 RCX: 00007f8e8659e0d9 [ 1121.470468][T15900] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1121.478438][T15900] RBP: 00007f8e86635024 R08: 0000000000000000 R09: 0000000000000000 [ 1121.486422][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.494393][T15900] R13: 00007f8e86826038 R14: 00007f8e86825fa0 R15: 00007ffc2a8eb118 [ 1121.502378][T15900] [ 1121.593733][T15900] Mem-Info: [ 1121.679760][T15887] loop7: detected capacity change from 0 to 32768 [ 1121.685342][T15900] active_anon:34816 inactive_anon:0 isolated_anon:0 [ 1121.685342][T15900] active_file:15287 inactive_file:40401 isolated_file:0 [ 1121.685342][T15900] unevictable:1768 dirty:147 writeback:0 [ 1121.685342][T15900] slab_reclaimable:11062 slab_unreclaimable:95863 [ 1121.685342][T15900] mapped:26025 shmem:28296 pagetables:1064 [ 1121.685342][T15900] sec_pagetables:0 bounce:0 [ 1121.685342][T15900] kernel_misc_reclaimable:0 [ 1121.685342][T15900] free:1311086 free_pcp:7457 free_cma:0 [ 1121.752066][T15900] Node 0 active_anon:138764kB inactive_anon:0kB active_file:61148kB inactive_file:161400kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:104100kB dirty:588kB writeback:0kB shmem:111648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12176kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no [ 1121.785702][T15900] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1121.821529][T15900] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1121.856033][T15900] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1121.862106][T15900] Node 0 DMA32 free:1324056kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:142824kB inactive_anon:0kB active_file:61148kB inactive_file:160576kB unevictable:1536kB writepending:588kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:20436kB local_pcp:4660kB free_cma:0kB [ 1121.875259][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1121.893894][T15900] lowmem_reserve[]: 0 0 0 0 0 [ 1121.906890][T15887] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 1121.915226][T15900] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1121.943805][T15900] lowmem_reserve[]: 0 0 0 0 0 [ 1121.949000][T15900] Node 1 Normal free:3904928kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9312kB local_pcp:0kB free_cma:0kB [ 1121.949617][T15887] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1122.009559][T15900] lowmem_reserve[]: 0 0 0 0 0 [ 1122.014400][T15900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1122.064163][T15900] Node 0 DMA32: 25*4kB (ME) 9*8kB (ME) 81*16kB (UE) 805*32kB (UME) 71*64kB (UE) 14*128kB (UME) 8*256kB (UME) 25*512kB (UME) 7*1024kB (M) 7*2048kB (UME) 306*4096kB (UM) = 1323292kB [ 1122.122164][T15900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1122.135555][T15900] Node 1 Normal: 272*4kB (UME) 72*8kB (UME) 60*16kB (UME) 241*32kB (UME) 79*64kB (UE) 17*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3904928kB [ 1122.173869][T15900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1122.195413][ T8] usb 3-1: device descriptor read/64, error -71 [ 1122.229866][T15900] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1122.251740][T15900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1122.275666][T15887] XFS (loop7): Ending clean mount [ 1122.289938][T15887] XFS (loop7): Quotacheck needed: Please wait. [ 1122.296343][T15900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1122.324356][T15900] 84065 total pagecache pages [ 1122.339095][T15900] 0 pages in swap cache [ 1122.362238][T15900] Free swap = 124996kB [ 1122.383770][T15900] Total swap = 124996kB [ 1122.388638][T15900] 2097051 pages RAM [ 1122.392473][T15900] 0 pages HighMem/MovableOnly [ 1122.405482][T15900] 416959 pages reserved [ 1122.409673][T15900] 0 pages cma reserved [ 1122.423905][T15887] XFS (loop7): Quotacheck: Done. [ 1122.505751][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1122.655429][T12259] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1122.705396][ T8] usb 3-1: device descriptor read/64, error -71 [ 1122.835350][ T8] usb usb3-port1: attempt power cycle [ 1123.835230][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1124.108622][ T8] usb 3-1: device not accepting address 33, error -71 [ 1124.470925][T15972] loop4: detected capacity change from 0 to 64 [ 1124.485962][T15972] hfs: unable to parse mount options [ 1126.270701][T15989] loop9: detected capacity change from 0 to 1024 [ 1128.452390][T16011] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1128.462281][T16011] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1130.519685][T16055] loop9: detected capacity change from 0 to 128 [ 1130.555024][T16055] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1130.591927][T16055] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1130.641932][T16055] ext4 filesystem being mounted at mnt:[4026533099] supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.680655][T16055] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1130.899440][ T5806] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1130.965250][T10800] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 1131.105322][ T5806] usb 8-1: Using ep0 maxpacket: 32 [ 1131.117179][ T5806] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.145235][ T5806] usb 8-1: config 0 has no interfaces? [ 1131.220053][T10800] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1131.229245][T10800] usb 5-1: config 179 has no interface number 0 [ 1131.237323][T10800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1131.249475][T10800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1131.261872][ T5806] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1131.275190][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.306185][ T5806] usb 8-1: Product: syz [ 1131.310495][ T5806] usb 8-1: Manufacturer: syz [ 1131.324652][ T5806] usb 8-1: SerialNumber: syz [ 1131.329646][T10800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1131.351017][ T5806] usb 8-1: config 0 descriptor?? [ 1131.368335][T10800] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1131.393916][T16075] loop2: detected capacity change from 0 to 512 [ 1131.400553][T10800] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1131.415995][T16075] EXT4-fs: Ignoring removed oldalloc option [ 1131.438713][T10800] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1131.449353][T10800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.482591][T16052] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1131.491565][T16052] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1131.495749][T16075] EXT4-fs (loop2): 1 truncate cleaned up [ 1131.535835][T16075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.394217][ T176] usb 5-1: USB disconnect, device number 37 [ 1133.394218][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1133.394262][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1133.646581][T12819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.853957][T16090] comedi comedi1: board detection failed [ 1134.007972][T16091] loop2: detected capacity change from 0 to 2048 [ 1135.871037][ T176] usb 8-1: USB disconnect, device number 22 [ 1136.879367][T16091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1139.076384][T16121] loop2: detected capacity change from 0 to 32768 [ 1139.175167][T16142] loop7: detected capacity change from 0 to 8 [ 1139.943788][T16142] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1139.952064][T16142] SQUASHFS error: Failed to read block 0x4de: -5 [ 1139.959340][T16142] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1139.968424][T16142] SQUASHFS error: Failed to read block 0x4df: -5 [ 1139.975820][T16142] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1139.983893][T16142] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1139.994675][T16142] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1140.002811][T16142] SQUASHFS error: Failed to read block 0x4de: -5 [ 1140.150120][ T28] audit: type=1800 audit(1787542372.490:63): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2239" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1140.736247][T16121] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1141.335827][T16121] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop2": -EINTR [ 1141.355705][T16121] XFS (loop2): log mount failed [ 1141.795294][ T5837] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 1141.991588][ T5837] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1142.027795][ T5837] usb 5-1: config 179 has no interface number 0 [ 1142.034149][ T5837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1142.050603][ T5837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1142.081400][ T5837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1142.221594][ T5837] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1142.256884][ T5837] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1142.365970][ T5837] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1142.481056][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.684117][T16154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1142.699176][T16154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1143.404256][ T23] usb 5-1: USB disconnect, device number 38 [ 1143.404263][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1143.404312][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1143.679437][ T8388] udevd[8388]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1146.108901][T16243] loop4: detected capacity change from 0 to 128 [ 1146.204384][T16243] ufs: ufstype=hp is supported read-only [ 1146.755403][T12310] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1147.170795][T16243] ufs: ufs_fill_super(): bad magic number [ 1147.176831][T12310] usb 8-1: Using ep0 maxpacket: 32 [ 1147.202426][T12310] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1147.264305][T12310] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.275861][T12310] usb 8-1: config 0 has no interface number 0 [ 1147.290363][T12310] usb 8-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1147.304535][T12310] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1147.315010][T12310] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1147.324691][T12310] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.361698][T12310] usb 8-1: Product: syz [ 1147.385901][T12310] usb 8-1: Manufacturer: syz [ 1147.401261][T12310] usb 8-1: SerialNumber: syz [ 1147.417518][T12310] usb 8-1: config 0 descriptor?? [ 1147.431517][T12310] appletouch 8-1:0.85: Could not find int-in endpoint [ 1147.447044][T12310] appletouch: probe of 8-1:0.85 failed with error -5 [ 1147.460967][T12310] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 1147.744463][T16245] loop2: detected capacity change from 0 to 40427 [ 1147.770106][T16245] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable [ 1148.615293][T13941] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1148.809883][T13941] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1148.831278][T13941] usb 5-1: config 179 has no interface number 0 [ 1148.845595][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1148.870928][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1148.914103][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1148.953598][T16292] loop2: detected capacity change from 0 to 256 [ 1148.961105][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1148.987149][T13941] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1149.718273][ T5838] usb 8-1: USB disconnect, device number 23 [ 1150.190958][T13941] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1150.200222][T13941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.240162][T16276] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1150.250829][T16276] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1150.741849][T13941] usb 5-1: USB disconnect, device number 39 [ 1150.741910][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1150.756198][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1151.668484][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2271'. [ 1151.865190][ T5838] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1151.990263][T16301] loop2: detected capacity change from 0 to 32768 [ 1152.019051][T16301] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1152.032857][T16301] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1152.187820][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 1152.195705][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.207240][ T5838] usb 5-1: config 0 has no interfaces? [ 1152.218923][ T5838] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1152.240334][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.259368][ T5838] usb 5-1: Product: syz [ 1152.263724][ T5838] usb 5-1: Manufacturer: syz [ 1152.269681][ T5838] usb 5-1: SerialNumber: syz [ 1152.277872][ T5838] usb 5-1: config 0 descriptor?? [ 1152.308788][T16301] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1152.338873][T13941] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1152.346362][T13941] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1152.491565][T13941] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms [ 1152.505335][T13941] gfs2: fsid=syz:syz.0: jid=0: Done [ 1152.510982][T16301] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1154.500615][T10799] usb 5-1: USB disconnect, device number 40 [ 1154.525236][ T23] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1154.720131][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2277'. [ 1154.752226][ T23] usb 10-1: Using ep0 maxpacket: 32 [ 1154.780007][ T23] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1154.788536][ T23] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.799480][ T23] usb 10-1: config 0 has no interface number 0 [ 1154.806171][ T23] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1154.820347][ T23] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1154.835197][ T23] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1154.844734][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.856953][ T23] usb 10-1: Product: syz [ 1154.861518][ T23] usb 10-1: Manufacturer: syz [ 1154.867862][ T23] usb 10-1: SerialNumber: syz [ 1154.888403][ T23] usb 10-1: config 0 descriptor?? [ 1154.908177][ T23] appletouch 10-1:0.85: Could not find int-in endpoint [ 1154.916734][ T23] appletouch: probe of 10-1:0.85 failed with error -5 [ 1154.924373][ T23] usbhid 10-1:0.85: couldn't find an input interrupt endpoint [ 1156.611950][ T5838] usb 10-1: USB disconnect, device number 16 [ 1156.687804][ T9] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 1156.996273][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1157.004647][ T9] usb 3-1: config 179 has no interface number 0 [ 1157.012234][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1157.024015][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1157.035552][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1157.047437][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1157.119202][T16390] loop9: detected capacity change from 0 to 8 [ 1159.186868][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1159.242986][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1159.252348][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.932240][ T9] usb 3-1: can't set config #179, error -71 [ 1159.994020][ T9] usb 3-1: USB disconnect, device number 35 [ 1161.886848][T10799] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1162.157067][T16422] loop7: detected capacity change from 0 to 32768 [ 1162.170360][T16422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2295 (16422) [ 1162.223094][T16422] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1162.233363][T16422] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1162.242100][T16422] BTRFS info (device loop7): use zlib compression, level 3 [ 1162.249664][T16422] BTRFS info (device loop7): turning on sync discard [ 1162.256421][T16422] BTRFS info (device loop7): using free space tree [ 1162.263998][T10799] usb 10-1: Using ep0 maxpacket: 32 [ 1162.300757][T10799] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1162.341140][T16422] BTRFS info (device loop7): enabling ssd optimizations [ 1162.367848][T10799] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.424295][T10799] usb 10-1: config 0 has no interface number 0 [ 1162.442681][T10799] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1162.503847][T10799] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1162.704560][T10799] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1162.732611][T10799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.755818][T10799] usb 10-1: Product: syz [ 1162.760142][T10799] usb 10-1: Manufacturer: syz [ 1162.956347][ T28] audit: type=1800 audit(1787542395.250:64): pid=16447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2295" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1163.483765][T10799] usb 10-1: SerialNumber: syz [ 1163.519102][T10799] usb 10-1: config 0 descriptor?? [ 1163.576790][T10799] usb 10-1: can't set config #0, error -71 [ 1163.580679][T12259] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1163.626099][T10799] usb 10-1: USB disconnect, device number 17 [ 1163.690219][ T8384] udevd[8384]: setting mode of /dev/bus/usb/010/017 to 020664 failed: No such file or directory [ 1163.725601][ T8384] udevd[8384]: setting owner of /dev/bus/usb/010/017 to uid=0, gid=0 failed: No such file or directory [ 1164.215246][T16465] loop7: detected capacity change from 0 to 8 [ 1164.547209][T16466] loop4: detected capacity change from 0 to 8 [ 1166.897457][T10799] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 1166.976566][T16466] SQUASHFS error: Failed to allocate zlib workspace [ 1166.983807][T16466] squashfs image failed sanity check [ 1169.315714][T16496] dlm: no local IP address has been set [ 1169.321811][T16496] dlm: cannot start dlm midcomms -107 [ 1170.125354][T13941] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1170.365529][T13941] usb 3-1: Using ep0 maxpacket: 32 [ 1170.390355][T13941] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1170.433373][T13941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.448188][T13941] usb 3-1: config 0 has no interface number 0 [ 1170.454929][T13941] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1170.474323][T13941] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1170.504731][T13941] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1170.520695][T13941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.536184][T13941] usb 3-1: Product: syz [ 1170.545376][T13941] usb 3-1: Manufacturer: syz [ 1170.549984][T13941] usb 3-1: SerialNumber: syz [ 1170.593628][T13941] usb 3-1: config 0 descriptor?? [ 1170.608513][T13941] appletouch 3-1:0.85: Could not find int-in endpoint [ 1170.620468][T13941] appletouch: probe of 3-1:0.85 failed with error -5 [ 1170.675627][T13941] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 1170.709410][T16506] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1171.034121][T16510] loop7: detected capacity change from 0 to 8 [ 1171.123016][T16510] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1171.131307][T16510] SQUASHFS error: Failed to read block 0x4de: -5 [ 1171.140482][T16510] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1171.148628][T16510] SQUASHFS error: Failed to read block 0x4df: -5 [ 1171.155387][T16510] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1171.163439][T16510] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1171.171895][T16510] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1171.180068][T16510] SQUASHFS error: Failed to read block 0x4de: -5 [ 1171.200014][ T28] audit: type=1800 audit(1787542403.670:65): pid=16510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2311" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1172.200262][ T9] usb 3-1: USB disconnect, device number 36 [ 1172.990713][T16533] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1173.838635][T16555] dlm: no local IP address has been set [ 1173.844294][T16555] dlm: cannot start dlm midcomms -107 [ 1174.125290][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1174.485162][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1174.505957][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1174.514866][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.531289][ T9] usb 3-1: config 0 has no interface number 0 [ 1174.549816][ T9] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1174.571274][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1174.590602][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1174.600032][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.610138][ T9] usb 3-1: Product: syz [ 1174.614364][ T9] usb 3-1: Manufacturer: syz [ 1174.622459][ T9] usb 3-1: SerialNumber: syz [ 1174.636452][ T9] usb 3-1: config 0 descriptor?? [ 1174.660931][ T9] appletouch 3-1:0.85: Could not find int-in endpoint [ 1174.669065][ T9] appletouch: probe of 3-1:0.85 failed with error -5 [ 1174.679643][ T9] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 1174.845267][ T5837] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1175.049792][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.061959][ T5837] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1175.071099][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.086638][ T5837] usb 5-1: config 0 descriptor?? [ 1175.106797][ T5806] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 1175.314224][ T5837] usbhid 5-1:0.0: can't add hid device: -71 [ 1175.320961][ T5837] usbhid: probe of 5-1:0.0 failed with error -71 [ 1175.332158][ T5806] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1175.347377][ T5806] usb 10-1: config 179 has no interface number 0 [ 1175.350851][ T5837] usb 5-1: USB disconnect, device number 41 [ 1175.357869][ T5806] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1175.372253][ T5806] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1175.422623][ T5806] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1175.480717][ T5806] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1175.492599][ T5806] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1175.507564][ T5806] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1175.523364][ T5806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.556533][T16573] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1175.564595][T16573] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1175.908869][ T5837] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1176.028712][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1176.037128][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1176.052626][ T9] usb 10-1: USB disconnect, device number 19 [ 1176.273732][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.327970][ T5837] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1176.387251][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.405199][ T5837] usb 5-1: config 0 descriptor?? [ 1176.691521][ T5838] usb 3-1: USB disconnect, device number 37 [ 1177.282089][ T5837] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1177.589664][ T5837] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input77 [ 1177.599635][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.606254][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.963830][T16632] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1178.048614][ T5838] usb 5-1: USB disconnect, device number 42 [ 1178.054663][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1178.508458][T16647] dlm: no local IP address has been set [ 1178.514186][T16647] dlm: cannot start dlm midcomms -107 [ 1178.715468][T10799] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 1178.805249][ T5806] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1179.038139][T10799] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1179.091783][T10799] usb 10-1: config 179 has no interface number 0 [ 1179.110179][T10799] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1179.158482][ T5806] usb 8-1: Using ep0 maxpacket: 32 [ 1179.169762][T10799] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1179.187872][ T5806] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1179.205335][ T5806] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.215794][T10799] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1179.243731][ T5806] usb 8-1: config 0 has no interface number 0 [ 1179.250174][T10799] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1179.266004][ T5806] usb 8-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.285366][T10799] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1179.309131][ T5806] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1179.325632][T10799] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1179.337998][ T5806] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1179.355297][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.363493][T10799] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.383118][ T5806] usb 8-1: Product: syz [ 1179.396238][ T5806] usb 8-1: Manufacturer: syz [ 1179.407872][T16646] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1179.416526][ T5806] usb 8-1: SerialNumber: syz [ 1179.424493][T16646] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1179.454666][ T5806] usb 8-1: config 0 descriptor?? [ 1179.512247][ T5806] appletouch 8-1:0.85: Could not find int-in endpoint [ 1179.519449][T16661] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1179.593288][ T5806] appletouch: probe of 8-1:0.85 failed with error -5 [ 1179.627407][ T5806] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 1179.744784][T16665] loop2: detected capacity change from 0 to 512 [ 1179.759254][ T9] usb 10-1: USB disconnect, device number 20 [ 1179.759281][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1179.774416][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1179.835971][T16665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.850182][T16665] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.875305][T16665] EXT4-fs (loop2): shut down requested (1) [ 1180.071120][T12819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.175622][ T5838] usb 8-1: USB disconnect, device number 24 [ 1181.779563][T16715] loop4: detected capacity change from 0 to 64 [ 1184.224739][T16737] dlm: no local IP address has been set [ 1184.230434][T16737] dlm: cannot start dlm midcomms -107 [ 1184.515465][ T5838] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1184.705213][ T5838] usb 10-1: Using ep0 maxpacket: 32 [ 1184.732290][ T5838] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1184.744725][ T5838] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.768460][ T5838] usb 10-1: config 0 has no interface number 0 [ 1184.774975][ T5838] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1184.796537][ T5838] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1184.813118][ T5838] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1184.825111][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.833382][ T5838] usb 10-1: Product: syz [ 1184.838084][ T5838] usb 10-1: Manufacturer: syz [ 1184.843398][ T5838] usb 10-1: SerialNumber: syz [ 1184.866992][ T5838] usb 10-1: config 0 descriptor?? [ 1184.883170][ T5838] appletouch 10-1:0.85: Could not find int-in endpoint [ 1184.893050][ T5838] appletouch: probe of 10-1:0.85 failed with error -5 [ 1184.901892][ T5838] usbhid 10-1:0.85: couldn't find an input interrupt endpoint [ 1186.698220][ T5806] usb 10-1: USB disconnect, device number 21 [ 1187.972680][T16808] loop4: detected capacity change from 0 to 64 [ 1187.982864][T16808] hfs: unable to parse mount options [ 1188.892169][T16814] syzkaller0: entered promiscuous mode [ 1188.901399][T16814] syzkaller0: entered allmulticast mode [ 1189.571135][T16827] dlm: no local IP address has been set [ 1189.576785][T16827] dlm: cannot start dlm midcomms -107 [ 1190.126468][ T9] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1190.605196][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1190.612772][ T9] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1190.621721][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.632485][ T9] usb 8-1: config 0 has no interface number 0 [ 1190.639833][ T9] usb 8-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1190.654445][ T9] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1190.676844][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1190.686093][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.694125][ T9] usb 8-1: Product: syz [ 1190.698547][ T9] usb 8-1: Manufacturer: syz [ 1190.703179][ T9] usb 8-1: SerialNumber: syz [ 1190.723849][ T9] usb 8-1: config 0 descriptor?? [ 1190.735941][ T9] appletouch 8-1:0.85: Could not find int-in endpoint [ 1190.742904][ T9] appletouch: probe of 8-1:0.85 failed with error -5 [ 1190.750848][ T9] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 1193.585195][ T5837] usb 8-1: USB disconnect, device number 25 [ 1193.809004][T16855] loop9: detected capacity change from 0 to 512 [ 1193.836753][T16856] loop7: detected capacity change from 0 to 64 [ 1193.847527][T16856] hfs: unable to parse mount options [ 1194.445762][T16855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1194.606866][T16855] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.671894][T16855] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #2: comm syz.9.2405: corrupted inode contents [ 1194.801247][ T28] audit: type=1800 audit(1787542427.250:66): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2406" name="idProduct" dev="configfs" ino=47256 res=0 errno=0 [ 1194.868166][T16855] EXT4-fs error (device loop9): ext4_dirty_inode:6144: inode #2: comm syz.9.2405: mark_inode_dirty error [ 1195.184980][ T28] audit: type=1800 audit(1787542427.260:67): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2406" name="UDC" dev="configfs" ino=47257 res=0 errno=0 [ 1195.345009][T16855] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #2: comm syz.9.2405: corrupted inode contents [ 1195.506752][T16855] EXT4-fs error (device loop9): __ext4_ext_dirty:208: inode #2: comm syz.9.2405: mark_inode_dirty error [ 1195.663073][T12398] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.954621][T16877] dlm: no local IP address has been set [ 1195.960307][T16877] dlm: cannot start dlm midcomms -107 [ 1196.515450][ T5806] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1196.825881][ T5806] usb 8-1: Using ep0 maxpacket: 32 [ 1196.841440][ T5806] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1196.870096][ T5806] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.905411][ T5806] usb 8-1: config 0 has no interface number 0 [ 1196.911975][ T5806] usb 8-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1196.961377][ T5806] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1196.990757][ T5806] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1197.016901][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.028183][ T5806] usb 8-1: Product: syz [ 1197.032411][ T5806] usb 8-1: Manufacturer: syz [ 1197.039692][ T5806] usb 8-1: SerialNumber: syz [ 1197.051944][ T5806] usb 8-1: config 0 descriptor?? [ 1197.066388][T16887] syzkaller0: entered promiscuous mode [ 1197.067293][ T5806] appletouch 8-1:0.85: Could not find int-in endpoint [ 1197.082919][T16887] syzkaller0: entered allmulticast mode [ 1197.109807][ T5806] appletouch: probe of 8-1:0.85 failed with error -5 [ 1197.118912][ T5806] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 1197.379297][T13941] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1197.569623][T13941] usb 5-1: Using ep0 maxpacket: 32 [ 1197.590972][T13941] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1197.601724][T13941] usb 5-1: config 0 has no interface number 0 [ 1197.612288][T13941] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1197.624125][T13941] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1197.641192][T13941] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1197.653684][T13941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.662184][T13941] usb 5-1: Product: syz [ 1197.666836][T13941] usb 5-1: Manufacturer: syz [ 1197.671527][T13941] usb 5-1: SerialNumber: syz [ 1197.708805][T13941] usb 5-1: config 0 descriptor?? [ 1197.749533][T13941] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1197.971401][T13941] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 1197.978791][T13941] quatech2: probe of 5-1:0.51 failed with error -90 [ 1198.176774][T13941] usb 5-1: USB disconnect, device number 43 [ 1201.415378][ T5837] usb 8-1: USB disconnect, device number 26 [ 1202.385493][ T5837] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1202.619190][T16941] dlm: no local IP address has been set [ 1202.624766][T16941] dlm: cannot start dlm midcomms -107 [ 1202.675477][ T5837] usb 10-1: Using ep0 maxpacket: 32 [ 1202.688365][ T5837] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1202.697086][ T5837] usb 10-1: config 0 has no interface number 0 [ 1202.703298][ T5837] usb 10-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1202.713720][ T5837] usb 10-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1202.752164][ T5837] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1202.771905][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.793827][ T5837] usb 10-1: Product: syz [ 1202.799710][ T5837] usb 10-1: Manufacturer: syz [ 1202.804619][ T5837] usb 10-1: SerialNumber: syz [ 1202.814542][ T5837] usb 10-1: config 0 descriptor?? [ 1202.825855][ T5837] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1202.895392][ T5806] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1203.330143][ T5837] usb 10-1: qt2_setup_urbs - submit read urb failed -90 [ 1203.349311][ T5837] quatech2: probe of 10-1:0.51 failed with error -90 [ 1203.465262][ T5806] usb 8-1: Using ep0 maxpacket: 32 [ 1203.480401][ T5806] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1203.501002][ T5806] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.532833][ T5838] usb 10-1: USB disconnect, device number 22 [ 1203.534732][ T5806] usb 8-1: config 0 has no interface number 0 [ 1203.569743][ T5806] usb 8-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1203.601592][T16947] syzkaller0: entered promiscuous mode [ 1203.607417][ T5806] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1203.614257][T16947] syzkaller0: entered allmulticast mode [ 1203.621947][ T5806] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1203.639366][ T5806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.649803][ T5806] usb 8-1: Product: syz [ 1203.654026][ T5806] usb 8-1: Manufacturer: syz [ 1203.660092][ T5806] usb 8-1: SerialNumber: syz [ 1203.669450][ T5806] usb 8-1: config 0 descriptor?? [ 1203.681113][ T5806] appletouch 8-1:0.85: Could not find int-in endpoint [ 1203.689641][ T5806] appletouch: probe of 8-1:0.85 failed with error -5 [ 1203.699472][ T5806] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 1206.685508][T13941] usb 8-1: USB disconnect, device number 27 [ 1209.172098][T17000] loop2: detected capacity change from 0 to 64 [ 1209.591991][T17002] syzkaller0: entered promiscuous mode [ 1209.598769][T17002] syzkaller0: entered allmulticast mode [ 1209.612514][T17007] dlm: no local IP address has been set [ 1209.618193][T17007] dlm: cannot start dlm midcomms -107 [ 1209.914295][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1210.127617][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1210.155496][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1210.163773][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.228083][ T9] usb 5-1: config 0 has no interface number 0 [ 1210.275521][ T9] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1210.434481][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1210.552342][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1210.645663][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.674204][ T9] usb 5-1: Product: syz [ 1210.682020][ T9] usb 5-1: Manufacturer: syz [ 1210.687171][ T9] usb 5-1: SerialNumber: syz [ 1210.711019][ T9] usb 5-1: config 0 descriptor?? [ 1210.722857][ T9] appletouch 5-1:0.85: Could not find int-in endpoint [ 1210.730158][ T9] appletouch: probe of 5-1:0.85 failed with error -5 [ 1210.738051][ T9] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 1213.425457][ T5837] usb 5-1: USB disconnect, device number 44 [ 1213.977342][T17039] loop4: detected capacity change from 0 to 8 [ 1214.101796][T17039] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1214.110042][T17039] SQUASHFS error: Failed to read block 0x4de: -5 [ 1214.117416][T17039] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1214.125542][T17039] SQUASHFS error: Failed to read block 0x4df: -5 [ 1214.132708][T17039] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1214.141054][T17039] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1214.152068][T17039] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1214.160324][T17039] SQUASHFS error: Failed to read block 0x4de: -5 [ 1214.187992][ T28] audit: type=1800 audit(1787542446.650:68): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2458" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1215.005157][T10799] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1215.705182][T10799] usb 8-1: Using ep0 maxpacket: 32 [ 1218.502651][T10799] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1218.528927][T10799] usb 8-1: can't read configurations, error -71 [ 1218.945218][T17072] dlm: no local IP address has been set [ 1218.950933][T17072] dlm: cannot start dlm midcomms -107 [ 1218.960514][T17069] loop2: detected capacity change from 0 to 64 [ 1218.973511][T17069] hfs: unable to parse mount options [ 1219.335238][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1219.617163][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1219.642949][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1219.656892][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.700291][ T9] usb 5-1: config 0 has no interface number 0 [ 1219.727462][ T9] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1219.795593][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1219.845179][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1219.854280][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.962625][ T9] usb 5-1: Product: syz [ 1219.984881][ T9] usb 5-1: Manufacturer: syz [ 1220.022630][ T9] usb 5-1: SerialNumber: syz [ 1220.054282][ T9] usb 5-1: config 0 descriptor?? [ 1220.170658][ T9] appletouch 5-1:0.85: Could not find int-in endpoint [ 1221.502723][ T9] appletouch: probe of 5-1:0.85 failed with error -5 [ 1221.576453][ T9] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 1221.654117][T10799] usb 5-1: USB disconnect, device number 45 [ 1222.215532][T17092] syzkaller0: entered promiscuous mode [ 1222.235137][T17092] syzkaller0: entered allmulticast mode [ 1223.726773][T17106] loop2: detected capacity change from 0 to 64 [ 1223.737128][T17106] hfs: unable to parse mount options [ 1225.384864][T17112] dlm: no local IP address has been set [ 1225.390583][T17112] dlm: cannot start dlm midcomms -107 [ 1225.546857][ T8384] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1225.665256][T13941] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1225.855293][T13941] usb 10-1: Using ep0 maxpacket: 32 [ 1225.871415][T13941] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1225.881066][T13941] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.898108][T13941] usb 10-1: config 0 has no interface number 0 [ 1225.922754][T13941] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1225.951990][T13941] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1226.005511][T13941] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1226.014769][T13941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.023716][T13941] usb 10-1: Product: syz [ 1226.033219][T13941] usb 10-1: Manufacturer: syz [ 1226.064584][T13941] usb 10-1: SerialNumber: syz [ 1226.217028][T13941] usb 10-1: config 0 descriptor?? [ 1226.234812][T13941] appletouch 10-1:0.85: Could not find int-in endpoint [ 1226.993582][T13941] appletouch: probe of 10-1:0.85 failed with error -5 [ 1227.026315][T13941] usbhid 10-1:0.85: couldn't find an input interrupt endpoint [ 1228.365011][T13941] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 1228.489293][T10800] usb 10-1: USB disconnect, device number 23 [ 1228.680192][T13941] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1228.693357][T13941] usb 5-1: config 179 has no interface number 0 [ 1228.734015][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1229.716275][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1229.727913][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1229.743076][T13941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1229.838238][T13941] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1229.889558][T13941] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1229.921779][T13941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.954491][T17135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1229.964666][T17135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1230.280909][T17165] loop9: detected capacity change from 0 to 512 [ 1230.439745][T17165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.465737][ T9] usb 5-1: USB disconnect, device number 46 [ 1230.465846][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1230.485104][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1230.516747][T17165] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.552706][T17165] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #2: comm syz.9.2503: corrupted inode contents [ 1230.628934][T17165] EXT4-fs error (device loop9): ext4_dirty_inode:6144: inode #2: comm syz.9.2503: mark_inode_dirty error [ 1230.644547][T17165] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #2: comm syz.9.2503: corrupted inode contents [ 1230.663008][T17165] EXT4-fs error (device loop9): __ext4_ext_dirty:208: inode #2: comm syz.9.2503: mark_inode_dirty error [ 1231.150337][T12398] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.647003][T17182] dlm: no local IP address has been set [ 1231.652611][T17182] dlm: cannot start dlm midcomms -107 [ 1231.934204][ T28] audit: type=1800 audit(1787542464.410:69): pid=17184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2508" name="zone_nr_conv" dev="configfs" ino=46711 res=0 errno=0 [ 1232.055258][ T23] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1232.255348][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1232.269783][ T23] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1232.308717][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.334175][ T23] usb 5-1: config 0 has no interface number 0 [ 1232.341064][ T23] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1232.354925][ T23] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1232.378252][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1232.390968][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.399642][ T23] usb 5-1: Product: syz [ 1232.403951][ T23] usb 5-1: Manufacturer: syz [ 1232.409287][ T23] usb 5-1: SerialNumber: syz [ 1232.436035][ T23] usb 5-1: config 0 descriptor?? [ 1232.473331][ T23] appletouch 5-1:0.85: Could not find int-in endpoint [ 1232.519023][ T23] appletouch: probe of 5-1:0.85 failed with error -5 [ 1232.534699][ T23] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 1232.672915][T17201] loop2: detected capacity change from 0 to 512 [ 1232.727806][T17201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1232.743086][T17201] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.855396][ T23] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 1233.069156][T17201] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.2514: corrupted inode contents [ 1233.173046][ T23] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1233.221888][T17201] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #2: comm syz.2.2514: mark_inode_dirty error [ 1233.288616][ T23] usb 8-1: config 179 has no interface number 0 [ 1233.331884][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1233.358185][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1233.371702][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1233.383294][ T23] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1233.401956][T17201] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #2: comm syz.2.2514: corrupted inode contents [ 1233.419888][ T23] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1233.448067][T17201] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #2: comm syz.2.2514: mark_inode_dirty error [ 1233.477657][ T23] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1233.495437][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.517213][T12819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.550821][T17199] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1233.575284][T17199] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1233.866262][ T9] usb 8-1: USB disconnect, device number 30 [ 1233.866322][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1233.881125][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 1234.279009][T17221] loop9: detected capacity change from 0 to 4096 [ 1234.381359][T10800] usb 5-1: USB disconnect, device number 47 [ 1234.459329][T17222] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1236.763640][T17253] dlm: no local IP address has been set [ 1236.769561][T17253] dlm: cannot start dlm midcomms -107 [ 1237.679907][ T5837] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1238.486820][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1238.535154][ T5837] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1238.572474][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.635370][ T5837] usb 3-1: config 0 has no interface number 0 [ 1238.641540][ T5837] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.718907][ T5837] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1238.745448][ T5837] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1238.764929][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.806194][ T5837] usb 3-1: Product: syz [ 1238.831237][ T5837] usb 3-1: Manufacturer: syz [ 1238.849274][ T5837] usb 3-1: SerialNumber: syz [ 1238.876108][ T5837] usb 3-1: config 0 descriptor?? [ 1238.898932][ T5837] appletouch 3-1:0.85: Could not find int-in endpoint [ 1238.927699][ T5837] appletouch: probe of 3-1:0.85 failed with error -5 [ 1238.951456][ T5837] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 1238.965358][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1238.978939][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.988196][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.215299][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1239.230249][ T9] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1239.243863][ T9] usb 10-1: config 0 has no interface number 0 [ 1239.279641][ T9] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1239.634111][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.643554][ T9] usb 10-1: Product: syz [ 1239.652361][ T9] usb 10-1: Manufacturer: syz [ 1239.658377][ T9] usb 10-1: SerialNumber: syz [ 1239.669080][ T9] usb 10-1: config 0 descriptor?? [ 1239.686928][ T9] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1239.892251][ T9] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1239.912172][ T9] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1240.200773][T10800] usb 3-1: USB disconnect, device number 38 [ 1240.206854][T13941] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1240.324401][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1240.333139][ T9] usb 10-1: USB disconnect, device number 24 [ 1240.358356][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1240.378046][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1240.395937][ T9] quatech2 10-1:0.51: device disconnected [ 1240.405722][T13941] usb 5-1: Using ep0 maxpacket: 32 [ 1240.428040][T13941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.464123][T13941] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1240.486553][T13941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.512627][T13941] usb 5-1: Product: syz [ 1240.518157][T13941] usb 5-1: Manufacturer: syz [ 1240.537826][T13941] usb 5-1: SerialNumber: syz [ 1240.588273][T13941] usb 5-1: config 0 descriptor?? [ 1240.607363][T13941] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1240.832558][T12310] usb 5-1: USB disconnect, device number 48 [ 1244.603763][T17308] dlm: no local IP address has been set [ 1244.609435][T17308] dlm: cannot start dlm midcomms -107 [ 1245.715899][ T9] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1246.072522][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1246.080368][ T9] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1246.089354][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.099925][ T9] usb 10-1: config 0 has no interface number 0 [ 1246.119271][ T9] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.138930][ T9] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1246.793341][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1246.858001][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.866272][ T9] usb 10-1: Product: syz [ 1246.871609][ T9] usb 10-1: Manufacturer: syz [ 1246.876623][ T9] usb 10-1: SerialNumber: syz [ 1246.888727][ T9] usb 10-1: config 0 descriptor?? [ 1246.897382][ T9] appletouch 10-1:0.85: Could not find int-in endpoint [ 1246.904674][ T9] appletouch: probe of 10-1:0.85 failed with error -5 [ 1246.916784][ T9] usbhid 10-1:0.85: couldn't find an input interrupt endpoint [ 1247.890278][T10800] usb 10-1: USB disconnect, device number 25 [ 1248.370606][T17334] loop4: detected capacity change from 0 to 8 [ 1248.438784][T17334] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1248.446978][T17334] SQUASHFS error: Failed to read block 0x4de: -5 [ 1248.462284][T17334] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1248.470543][T17334] SQUASHFS error: Failed to read block 0x4df: -5 [ 1248.477180][T17334] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1248.485303][T17334] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1248.493703][T17334] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1248.501847][T17334] SQUASHFS error: Failed to read block 0x4de: -5 [ 1249.055823][ T28] audit: type=1800 audit(1787542480.990:70): pid=17334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2558" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1250.362763][T17351] loop7: detected capacity change from 0 to 512 [ 1250.471649][T17358] loop9: detected capacity change from 0 to 64 [ 1252.292719][T17351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.328285][T17351] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.415823][T17351] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.2565: corrupted inode contents [ 1252.468236][T17351] EXT4-fs error (device loop7): ext4_dirty_inode:6144: inode #2: comm syz.7.2565: mark_inode_dirty error [ 1252.530755][T17351] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.2565: corrupted inode contents [ 1252.690113][T17351] EXT4-fs error (device loop7): __ext4_ext_dirty:208: inode #2: comm syz.7.2565: mark_inode_dirty error [ 1252.707489][T17368] loop9: detected capacity change from 0 to 8 [ 1252.724587][T17368] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1252.732616][T17368] SQUASHFS error: Failed to read block 0x4de: -5 [ 1252.739095][T17368] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1252.747049][T17368] SQUASHFS error: Failed to read block 0x4df: -5 [ 1252.753493][T17368] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1252.761504][T17368] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1252.768254][T17368] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1252.776206][T17368] SQUASHFS error: Failed to read block 0x4de: -5 [ 1252.782885][ T28] audit: type=1800 audit(1787542485.260:71): pid=17368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2570" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 1253.816220][T12259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.526852][T17395] loop7: detected capacity change from 0 to 2048 [ 1255.246257][T17395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1255.352044][T12259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.499905][T17407] loop9: detected capacity change from 0 to 8 [ 1255.524325][T17406] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1255.532395][T17406] SQUASHFS error: Failed to read block 0x4de: -5 [ 1255.538960][T17406] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1255.546989][T17406] SQUASHFS error: Failed to read block 0x4df: -5 [ 1255.553520][T17406] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1255.561539][T17406] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1255.568597][T17406] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1255.577635][T17406] SQUASHFS error: Failed to read block 0x4de: -5 [ 1255.584347][ T28] audit: type=1800 audit(1787542488.060:72): pid=17406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2582" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 1255.703595][T17409] loop7: detected capacity change from 0 to 64 [ 1255.710536][T17409] hfs: unable to parse mount options [ 1255.761138][ T8384] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1256.221248][T17416] loop4: detected capacity change from 0 to 512 [ 1256.222005][T17415] loop2: detected capacity change from 0 to 256 [ 1256.380205][T17416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.697697][T17416] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.164114][T17416] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.2584: corrupted inode contents [ 1257.233852][T17416] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #2: comm syz.4.2584: mark_inode_dirty error [ 1257.285178][T17416] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #2: comm syz.4.2584: corrupted inode contents [ 1257.309873][T17416] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #2: comm syz.4.2584: mark_inode_dirty error [ 1257.515221][T13941] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1257.555705][ T7358] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.475205][T13941] usb 8-1: Using ep0 maxpacket: 32 [ 1258.487767][T13941] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1258.613099][T17438] dlm: no local IP address has been set [ 1258.618716][T17438] dlm: cannot start dlm midcomms -107 [ 1258.631105][T13941] usb 8-1: config 0 has no interface number 0 [ 1258.667962][T13941] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1258.680089][T13941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.688370][T13941] usb 8-1: Product: syz [ 1258.692617][T13941] usb 8-1: Manufacturer: syz [ 1258.703027][T13941] usb 8-1: SerialNumber: syz [ 1258.726272][T13941] usb 8-1: config 0 descriptor?? [ 1258.738130][T13941] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1258.753055][T17442] loop2: detected capacity change from 0 to 64 [ 1258.760381][T17442] hfs: unable to parse mount options [ 1258.815155][ T8388] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1258.897077][T12310] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1258.954781][T13941] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1259.338765][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1259.876244][T13941] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1259.894690][T13941] usb 8-1: USB disconnect, device number 31 [ 1259.913532][T12310] usb 5-1: Using ep0 maxpacket: 32 [ 1259.914143][T13941] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1259.944463][T12310] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1259.966646][T13941] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1259.988007][T13941] quatech2 8-1:0.51: device disconnected [ 1259.995400][T12310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.067215][T12310] usb 5-1: config 0 has no interface number 0 [ 1260.084073][T12310] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1260.133316][T12310] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1260.157484][T12310] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1260.169380][T12310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.179277][T12310] usb 5-1: Product: syz [ 1260.184606][T12310] usb 5-1: Manufacturer: syz [ 1260.196008][T12310] usb 5-1: SerialNumber: syz [ 1260.203200][T12310] usb 5-1: config 0 descriptor?? [ 1260.219558][T12310] appletouch 5-1:0.85: Could not find int-in endpoint [ 1260.227100][T12310] appletouch: probe of 5-1:0.85 failed with error -5 [ 1260.235886][T12310] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 1260.422980][T13941] usb 5-1: USB disconnect, device number 49 [ 1261.093937][T17457] loop4: detected capacity change from 0 to 256 [ 1263.233090][T17466] loop7: detected capacity change from 0 to 8 [ 1263.291146][T17466] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1263.299202][T17466] SQUASHFS error: Failed to read block 0x4de: -5 [ 1263.305702][T17466] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1263.313606][T17466] SQUASHFS error: Failed to read block 0x4df: -5 [ 1263.320132][T17466] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1263.328077][T17466] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1263.334597][T17466] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1263.342586][T17466] SQUASHFS error: Failed to read block 0x4de: -5 [ 1263.355572][ T28] audit: type=1800 audit(1787542495.840:73): pid=17466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2599" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1264.227803][T17470] loop4: detected capacity change from 0 to 64 [ 1264.234790][T17470] hfs: unable to parse mount options [ 1266.283664][T17481] syzkaller0: entered promiscuous mode [ 1266.312736][T17481] syzkaller0: entered allmulticast mode [ 1266.644396][T17495] loop9: detected capacity change from 0 to 256 [ 1273.357888][T17530] loop7: detected capacity change from 0 to 64 [ 1273.364893][T17530] hfs: unable to parse mount options [ 1274.254849][T17541] loop9: detected capacity change from 0 to 256 [ 1279.435532][T17571] loop2: detected capacity change from 0 to 64 [ 1279.442534][T17571] hfs: unable to parse mount options [ 1279.502217][T17547] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1280.065104][T12310] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1281.462349][T17579] loop9: detected capacity change from 0 to 256 [ 1281.575093][T12310] usb 3-1: Using ep0 maxpacket: 32 [ 1282.339507][T12310] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1283.025110][T12310] usb 3-1: config 0 has no interface number 0 [ 1283.168010][T12310] usb 3-1: string descriptor 0 read error: -71 [ 1283.175496][T12310] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1283.184705][T12310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.197026][T12310] usb 3-1: config 0 descriptor?? [ 1283.202537][T12310] usb 3-1: can't set config #0, error -71 [ 1283.210322][T12310] usb 3-1: USB disconnect, device number 39 [ 1283.545495][T10800] IPVS: starting estimator thread 0... [ 1283.765769][T17592] IPVS: using max 17 ests per chain, 40800 per kthread [ 1285.699070][T17614] loop2: detected capacity change from 0 to 256 [ 1285.852565][ T23] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1287.737894][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1287.786752][ T23] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1287.794903][ T23] usb 5-1: config 0 has no interface number 0 [ 1287.837340][ T23] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1287.856379][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.873637][ T23] usb 5-1: Product: syz [ 1287.886052][ T23] usb 5-1: Manufacturer: syz [ 1287.903021][ T23] usb 5-1: SerialNumber: syz [ 1287.926183][ T23] usb 5-1: config 0 descriptor?? [ 1287.948842][ T23] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1288.161527][ T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1288.240757][ T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1288.566081][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1288.567253][T12310] usb 5-1: USB disconnect, device number 50 [ 1288.668255][T12310] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1288.754404][T12310] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1288.792155][T12310] quatech2 5-1:0.51: device disconnected [ 1290.962736][T17638] loop7: detected capacity change from 0 to 256 [ 1292.806771][T17654] tipc: Started in network mode [ 1292.811754][T17654] tipc: Node identity de9a2e76890f, cluster identity 4711 [ 1292.982605][T17654] tipc: Enabled bearer , priority 0 [ 1293.138198][T17661] syzkaller0: entered promiscuous mode [ 1293.327112][T17661] syzkaller0: entered allmulticast mode [ 1293.756046][ T28] audit: type=1800 audit(1787542526.240:74): pid=17665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2663" name="zone_nr_conv" dev="configfs" ino=49447 res=0 errno=0 [ 1293.817580][T17654] tipc: Resetting bearer [ 1293.895825][T17650] tipc: Resetting bearer [ 1293.996191][T17650] tipc: Disabling bearer [ 1294.208907][T17673] loop7: detected capacity change from 0 to 256 [ 1296.760380][ T5838] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1296.966978][ T5838] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.998791][ T5838] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1297.023515][ T5838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1297.042245][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.069735][ T5838] usbtmc 8-1:16.0: bulk endpoints not found [ 1298.277530][ T28] audit: type=1800 audit(1787542530.760:75): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2673" name="zone_nr_conv" dev="configfs" ino=49496 res=0 errno=0 [ 1298.389858][T17685] loop2: detected capacity change from 0 to 32768 [ 1298.433109][T17685] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1298.460081][T17685] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1298.513060][T17699] loop9: detected capacity change from 0 to 256 [ 1298.527084][T17698] loop4: detected capacity change from 0 to 8192 [ 1298.568483][T17698] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1298.806736][T17685] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 32ms [ 1299.018611][T10800] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1300.395274][T10800] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1300.410952][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.421947][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.813009][ T5838] usb 8-1: USB disconnect, device number 32 [ 1301.068865][T10800] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 673ms [ 1301.083408][T10800] gfs2: fsid=syz:syz.0: jid=0: Done [ 1301.105294][T17685] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1301.161439][T17685] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1304.342739][T17727] loop7: detected capacity change from 0 to 512 [ 1304.373144][T17727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1304.392592][T17727] EXT4-fs: Ignoring removed i_version option [ 1304.427336][T17727] EXT4-fs (loop7): 1 orphan inode deleted [ 1304.434561][T17727] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1304.595914][T12259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.783103][T17733] loop7: detected capacity change from 0 to 256 [ 1305.710781][T17735] loop9: detected capacity change from 0 to 4096 [ 1305.800718][T17742] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1305.879335][T17735] syz.9.2685: attempt to access beyond end of device [ 1305.879335][T17735] loop9: rw=0, sector=25880, nr_sectors = 8 limit=4096 [ 1305.913365][T17735] NILFS (loop9): I/O error reading node block for GC (ino=9223372036854775807, vblocknr=3235) [ 1305.939205][T17735] NILFS (loop9): error -5 preparing GC: cannot read source blocks [ 1305.988674][T17745] loop7: detected capacity change from 0 to 2048 [ 1306.036182][T17745] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1306.075685][T17745] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1306.083402][T17745] UDF-fs: Scanning with blocksize 512 failed [ 1306.106775][ T5838] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1306.131719][T17745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1307.454319][ T5838] usb 5-1: device descriptor read/64, error -71 [ 1307.642611][ T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1307.815499][ T5838] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1307.995198][ T5838] usb 5-1: device descriptor read/64, error -71 [ 1308.022004][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.038370][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1308.048208][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1308.058715][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.097590][ T9] usb 8-1: config 0 descriptor?? [ 1308.125462][ T5838] usb usb5-port1: attempt power cycle [ 1308.535147][ T5838] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 1308.586394][ T5838] usb 5-1: device descriptor read/8, error -71 [ 1308.764137][T17765] loop9: detected capacity change from 0 to 256 [ 1308.857541][ T5838] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 1309.614904][ T5838] usb 5-1: device descriptor read/8, error -71 [ 1309.895266][ T5838] usb usb5-port1: unable to enumerate USB device [ 1309.959188][T17770] fuse: Bad value for 'group_id' [ 1310.008689][ T9] usb 8-1: USB disconnect, device number 33 [ 1310.237241][T12310] smpboot: CPU 1 is now offline [ 1312.014474][T17785] binder: 17784:17785 ioctl c0306201 200000000080 returned -14 [ 1312.075377][T17785] binder: 17784:17785 ioctl c0306201 2000000003c0 returned -14 [ 1312.315102][ T5837] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1313.623124][T17794] fuse: Bad value for 'group_id' [ 1313.690672][ T5837] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.852465][ T5837] usb 10-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1314.921920][ T5837] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1314.977064][ T5837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.081684][ T5837] usb 10-1: can't set config #179, error -71 [ 1315.248636][ T5837] usb 10-1: USB disconnect, device number 26 [ 1315.536643][ T28] audit: type=1800 audit(1787542548.020:76): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2711" name="zone_nr_conv" dev="configfs" ino=48790 res=0 errno=0 [ 1315.838598][T17813] loop2: detected capacity change from 0 to 8 [ 1317.476570][T17813] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1319.035581][T17813] SQUASHFS error: Failed to read block 0x4de: -5 [ 1319.116088][T17813] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1319.141695][T17824] fuse: Bad value for 'group_id' [ 1319.197317][T17813] SQUASHFS error: Failed to read block 0x4df: -5 [ 1319.297918][T17813] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1319.615214][T12310] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 1320.710286][T17813] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1320.802122][T17813] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1320.887711][T17813] SQUASHFS error: Failed to read block 0x4de: -5 [ 1320.935272][T12310] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.973445][ T28] audit: type=1800 audit(1787542553.450:77): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2712" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1320.997912][T12310] usb 8-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1321.037120][T12310] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1321.080500][ T28] audit: type=1800 audit(1787542553.530:78): pid=17841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2721" name="zone_nr_conv" dev="configfs" ino=48889 res=0 errno=0 [ 1321.106206][T12310] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.046665][ T5837] usb 8-1: USB disconnect, device number 34 [ 1324.622162][T12310] IPVS: starting estimator thread 0... [ 1325.428381][T17854] IPVS: using max 35 ests per chain, 84000 per kthread [ 1327.513259][T17862] loop9: detected capacity change from 0 to 32768 [ 1327.569028][T17862] JBD2: Ignoring recovery information on journal [ 1327.706404][T17862] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1328.210088][ T28] audit: type=1804 audit(1787542560.680:79): pid=17862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2728" name="/newroot/312/file1/file1" dev="loop9" ino=17059 res=1 errno=0 [ 1328.349270][ T28] audit: type=1800 audit(1787542560.830:80): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2731" name="zone_nr_conv" dev="configfs" ino=48979 res=0 errno=0 [ 1328.548290][T12398] ocfs2: Unmounting device (7,9) on (node local) [ 1330.432457][T17881] loop7: detected capacity change from 0 to 32768 [ 1331.509452][T17881] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1331.926098][T12259] ocfs2: Unmounting device (7,7) on (node local) [ 1332.636971][T17898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1332.654709][T17898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1332.663468][T17898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1332.673628][T17898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1332.681945][T17898] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1332.690694][T17898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1332.887547][T17902] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1333.460371][ T995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.544198][T17896] chnl_net:caif_netlink_parms(): no params data found [ 1333.981135][ T995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.408466][ T995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.701347][ T995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.725485][T12708] Bluetooth: hci3: command tx timeout [ 1334.993174][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.017287][T17896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.042741][T17896] bridge_slave_0: entered allmulticast mode [ 1335.061128][T17896] bridge_slave_0: entered promiscuous mode [ 1335.086871][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.111819][T17896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.134830][T17896] bridge_slave_1: entered allmulticast mode [ 1335.176817][T17896] bridge_slave_1: entered promiscuous mode [ 1335.252452][T17896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.350429][T17896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.581525][T17896] team0: Port device team_slave_0 added [ 1335.587740][T12310] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1336.373711][ T9] IPVS: starting estimator thread 0... [ 1336.474396][T17896] team0: Port device team_slave_1 added [ 1336.989768][T12708] Bluetooth: hci3: command tx timeout [ 1337.040943][T12310] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.150188][T12310] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1337.215123][T17930] IPVS: using max 35 ests per chain, 84000 per kthread [ 1337.237130][T17896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.244270][T12310] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.294924][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.330370][T12310] usb 10-1: config 0 descriptor?? [ 1337.386902][T12310] pwc: Askey VC010 type 2 USB webcam detected. [ 1337.473845][T17896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.625679][T17896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.632687][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.856176][T17896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.868458][T12310] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1337.895947][T12310] pwc: recv_control_msg error -32 req 02 val 2700 [ 1337.924756][T12310] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1337.983746][T12310] pwc: recv_control_msg error -32 req 04 val 1000 [ 1338.230265][T12310] pwc: recv_control_msg error -32 req 04 val 1400 [ 1338.266457][T12310] pwc: recv_control_msg error -32 req 02 val 2000 [ 1338.525393][T12310] pwc: recv_control_msg error -71 req 04 val 1500 [ 1338.571814][T12310] pwc: recv_control_msg error -71 req 02 val 2500 [ 1338.606693][T12310] pwc: recv_control_msg error -71 req 02 val 2400 [ 1338.649065][T12310] pwc: recv_control_msg error -71 req 02 val 2600 [ 1338.686990][T12310] pwc: recv_control_msg error -71 req 02 val 2900 [ 1338.737859][T12310] pwc: recv_control_msg error -71 req 02 val 2800 [ 1338.776621][T12310] pwc: recv_control_msg error -71 req 04 val 1100 [ 1338.799179][T17896] hsr_slave_0: entered promiscuous mode [ 1338.832425][T12310] pwc: recv_control_msg error -71 req 04 val 1200 [ 1338.865495][T12310] pwc: Registered as video103. [ 1338.880770][T17896] hsr_slave_1: entered promiscuous mode [ 1338.906680][T12310] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input78 [ 1338.932532][T17896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1338.993181][T17896] Cannot create hsr debugfs directory [ 1339.008659][T12310] usb 10-1: USB disconnect, device number 27 [ 1339.055108][T12708] Bluetooth: hci3: command tx timeout [ 1339.440074][T17954] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 1339.632350][T17945] loop4: detected capacity change from 0 to 32768 [ 1339.688759][T17945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2749 (17945) [ 1339.822507][T17945] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1339.909210][T17945] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1339.945244][T17945] BTRFS info (device loop4): using free space tree [ 1340.084393][T17945] BTRFS info (device loop4): enabling ssd optimizations [ 1340.124286][T17945] BTRFS info (device loop4): auto enabling async discard [ 1340.512537][T17945] BTRFS info (device loop4): balance: start -d -m -s [ 1340.912527][T17945] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 1341.125359][T12708] Bluetooth: hci3: command tx timeout [ 1341.566113][T17945] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 1341.900762][T17945] BTRFS info (device loop4): balance: canceled [ 1341.934877][T18003] loop9: detected capacity change from 0 to 32768 [ 1342.083364][T18003] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1342.198918][ T7358] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1342.247038][T18003] XFS (loop9): Ending clean mount [ 1342.856311][ T995] hsr_slave_0: left promiscuous mode [ 1342.914957][T12398] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1343.019839][ T995] hsr_slave_1: left promiscuous mode [ 1343.064287][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.096034][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.155840][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.163262][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.258665][ T995] bridge_slave_1: left allmulticast mode [ 1343.295711][ T995] bridge_slave_1: left promiscuous mode [ 1343.329735][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.028080][ T995] bridge_slave_0: left allmulticast mode [ 1344.033745][ T995] bridge_slave_0: left promiscuous mode [ 1344.101823][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.212021][ T995] veth1_macvtap: left promiscuous mode [ 1344.245228][ T995] veth0_macvtap: left promiscuous mode [ 1344.261610][ T995] veth1_vlan: left promiscuous mode [ 1344.275345][ T995] veth0_vlan: left promiscuous mode [ 1344.325851][ T5837] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1344.545594][ T5837] usb 10-1: Using ep0 maxpacket: 32 [ 1344.564231][ T5837] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1344.597418][ T5837] usb 10-1: config 0 has no interface number 0 [ 1344.661097][ T5837] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1344.685659][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.714047][ T5837] usb 10-1: Product: syz [ 1344.724311][ T5837] usb 10-1: Manufacturer: syz [ 1344.751295][ T5837] usb 10-1: SerialNumber: syz [ 1344.786438][ T5837] usb 10-1: config 0 descriptor?? [ 1344.808811][ T5837] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1345.023391][ T5837] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1345.091617][ T5837] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1345.418375][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1345.427035][ T5837] usb 10-1: USB disconnect, device number 28 [ 1345.452976][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1345.519725][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1345.580600][ T5837] quatech2 10-1:0.51: device disconnected [ 1346.465941][ T8] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1346.680782][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 1346.702103][ T8] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1346.739477][ T8] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1346.751377][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.774280][ T8] usb 8-1: Product: syz [ 1346.778763][ T8] usb 8-1: Manufacturer: syz [ 1346.800731][ T8] usb 8-1: SerialNumber: syz [ 1346.812003][ T8] usb 8-1: config 0 descriptor?? [ 1346.836843][ T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1346.855197][ T8] usb 8-1: setting power ON [ 1346.870038][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 1346.877430][ T995] team0 (unregistering): Port device team_slave_1 removed [ 1347.006281][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1347.053201][ T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1347.082815][ T8] usb 8-1: media controller created [ 1347.158786][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.194013][ T995] team0 (unregistering): Port device team_slave_0 removed [ 1347.261837][ T8] usb 8-1: selecting invalid altsetting 6 [ 1347.292397][ T8] usb 8-1: digital interface selection failed (-22) [ 1347.330932][ T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1347.383598][ T8] usb 8-1: setting power OFF [ 1347.394295][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 1347.410063][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1347.420580][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.433236][ T8] (NULL device *): no alternate interface [ 1347.490673][ T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1347.559606][ T8] usb 8-1: USB disconnect, device number 35 [ 1347.592310][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.615953][T18011] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 1347.841966][T18011] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1347.879373][T18011] usb 10-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.905706][T18011] usb 10-1: config 179 has no interface number 0 [ 1347.938614][T18011] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1347.961134][T18011] usb 10-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1348.020653][T18011] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1348.060278][T18011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.340361][ T8] usb 10-1: USB disconnect, device number 29 [ 1348.549003][ T995] bond0 (unregistering): Released all slaves [ 1349.801270][T17896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1349.862434][T17896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1349.933425][T17896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1349.990786][T17896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1350.317325][T17896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.391100][T17896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.437851][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.445034][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.501863][T18067] loop4: detected capacity change from 0 to 32768 [ 1350.526142][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.533272][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.663974][T17896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1350.709259][T18067] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1350.778694][T17896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1350.807835][T18091] loop9: detected capacity change from 0 to 64 [ 1350.914870][T18067] XFS (loop4): Ending clean mount [ 1351.401980][ T7358] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1351.513946][T17896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.541624][T18016] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1351.785182][T18016] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1351.797084][T17896] veth0_vlan: entered promiscuous mode [ 1351.834416][T18016] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.860549][T17896] veth1_vlan: entered promiscuous mode [ 1351.908203][T18016] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1351.973238][T18016] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.991540][T17896] veth0_macvtap: entered promiscuous mode [ 1352.043785][T18116] loop9: detected capacity change from 0 to 2048 [ 1352.057379][T18016] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1352.072834][T17896] veth1_macvtap: entered promiscuous mode [ 1352.110945][T18016] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1352.192719][T18016] usb 8-1: Product: syz [ 1352.202296][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.214101][T18116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.234926][T18016] usb 8-1: Manufacturer: syz [ 1352.271406][T18016] cdc_wdm 8-1:1.0: skipping garbage [ 1352.286232][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.336801][T18016] cdc_wdm 8-1:1.0: skipping garbage [ 1352.363356][T18115] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1352.384159][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.405289][T18016] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1353.495245][T18016] cdc_wdm 8-1:1.0: Unknown control protocol [ 1353.510801][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.536668][T18115] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1353.553197][T18016] usb 8-1: USB disconnect, device number 36 [ 1353.584874][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.628482][T18115] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1353.628482][T18115] [ 1353.651150][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.678068][T18115] EXT4-fs (loop9): Total free blocks count 0 [ 1353.697557][T17896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.715161][T18115] EXT4-fs (loop9): Free/Dirty block details [ 1353.740788][T18115] EXT4-fs (loop9): free_blocks=2415919504 [ 1353.760935][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.775938][T18115] EXT4-fs (loop9): dirty_blocks=16 [ 1353.781070][T18115] EXT4-fs (loop9): Block reservation details [ 1353.807469][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.817729][T18115] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1353.837862][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.914202][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.939519][T17896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.967535][T17896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.990284][T17896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.013974][T17896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.043520][T17896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.063871][T17896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.075082][T18016] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1354.092202][T17896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.157249][ T3520] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1354.287242][T18016] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1354.321083][T18016] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.356394][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.379501][T18016] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1354.405369][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.430701][T18016] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.505479][T18016] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1354.523478][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.762632][T18016] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1355.425418][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.815263][T18016] usb 8-1: Product: syz [ 1356.819515][T18016] usb 8-1: Manufacturer: syz [ 1357.425085][T18016] usb 8-1: can't set config #1, error -71 [ 1357.469183][T18016] usb 8-1: USB disconnect, device number 37 [ 1359.090661][T18149] loop7: detected capacity change from 0 to 512 [ 1359.172555][T18149] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1359.258350][T18149] EXT4-fs (loop7): invalid journal inode [ 1359.264179][T18149] EXT4-fs (loop7): can't get journal size [ 1360.364255][T18149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 1360.406200][T18157] loop4: detected capacity change from 0 to 64 [ 1360.810309][T18149] System zones: 1-12, 13-13 [ 1360.824334][T18157] hfs: unable to parse mount options [ 1360.871899][T18149] EXT4-fs: error -4 creating inode table initialization thread [ 1360.931529][T18149] EXT4-fs (loop7): mount failed [ 1361.911318][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.144815][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.222655][T18186] loop3: detected capacity change from 0 to 256 [ 1364.415746][T18186] exfat: Deprecated parameter 'namecase' [ 1364.421462][T18186] exfat: Deprecated parameter 'namecase' [ 1364.526306][T18186] exfat: Deprecated parameter 'namecase' [ 1364.532025][T18186] exfat: Deprecated parameter 'utf8' [ 1364.694483][T18192] loop4: detected capacity change from 0 to 64 [ 1366.029480][T18186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 1366.047584][T18192] hfs: unable to parse mount options [ 1366.118668][T17547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1370.110782][T18244] loop3: detected capacity change from 0 to 64 [ 1370.576890][T18244] hfs: unable to parse mount options [ 1370.655099][T17623] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1372.021853][ T28] audit: type=1800 audit(1787542604.500:81): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2811" name="idProduct" dev="configfs" ino=51663 res=0 errno=0 [ 1373.223041][T18249] loop4: detected capacity change from 0 to 32768 [ 1373.241477][T18276] binder: 18275:18276 ioctl c0306201 200000000080 returned -14 [ 1373.274775][T18249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2809 (18249) [ 1373.447679][T18249] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1373.542774][T18249] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1373.622378][T18249] BTRFS info (device loop4): setting nodatasum [ 1374.400016][T18249] BTRFS info (device loop4): force zlib compression, level 3 [ 1374.779884][T18285] loop7: detected capacity change from 0 to 64 [ 1375.255925][T18285] hfs: unable to parse mount options [ 1375.266116][T18249] BTRFS info (device loop4): turning on flush-on-commit [ 1375.321684][T17547] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1375.334869][T18249] BTRFS info (device loop4): max_inline at 4096 [ 1375.378082][T18269] loop3: detected capacity change from 0 to 40427 [ 1375.409275][T18249] BTRFS info (device loop4): using free space tree [ 1375.449162][T18269] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1375.485348][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1375.485889][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1375.545494][T18269] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1375.622509][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1375.622869][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1375.713763][T18269] F2FS-fs (loop3): Image doesn't support compression [ 1375.756555][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1375.779391][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1375.861577][T18269] F2FS-fs (loop3): Image doesn't support compression [ 1375.893277][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1375.893915][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1375.983765][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1375.995681][ T28] audit: type=1800 audit(1787542608.480:82): pid=18306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2823" name="idProduct" dev="configfs" ino=51759 res=0 errno=0 [ 1376.063902][T18269] F2FS-fs (loop3): invalid crc value [ 1376.122900][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1376.126298][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1376.290996][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1376.382158][T18249] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1376.477076][T18269] F2FS-fs (loop3): Start checkpoint disabled! [ 1376.556856][T18249] BTRFS error (device loop4): open_ctree failed: -12 [ 1376.677615][T18322] binder: 18321:18322 ioctl c0306201 200000000080 returned -14 [ 1377.170947][T18333] loop7: detected capacity change from 0 to 64 [ 1378.588937][T18333] hfs: unable to parse mount options [ 1378.646569][T17623] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1378.990163][ T28] audit: type=1800 audit(1787542611.470:83): pid=18340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2832" name="idProduct" dev="configfs" ino=51820 res=0 errno=0 [ 1379.145836][T18341] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 1379.298925][T18341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1379.497230][T18351] bond1: (slave geneve2): making interface the new active one [ 1379.684699][T18351] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1379.960788][T18351] syz.4.2828 (18351) used greatest stack depth: 17736 bytes left [ 1380.256337][T18353] loop3: detected capacity change from 0 to 32768 [ 1381.036147][T18381] loop9: detected capacity change from 0 to 64 [ 1381.845191][T18353] JBD2: Ignoring recovery information on journal [ 1381.862779][T18381] hfs: unable to parse mount options [ 1382.022180][T18353] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1382.286170][ T28] audit: type=1800 audit(1787542614.770:84): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2842" name="idProduct" dev="configfs" ino=51928 res=0 errno=0 [ 1382.578658][T17896] ocfs2: Unmounting device (7,3) on (node local) [ 1383.211179][T12708] Bluetooth: hci4: Unknown advertising packet type: 0x18 [ 1383.211202][T12708] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 1383.220641][T12708] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 1383.228021][T12708] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1383.442186][T18422] loop9: detected capacity change from 0 to 64 [ 1384.745554][T18422] hfs: unable to parse mount options [ 1385.143213][ T28] audit: type=1800 audit(1787542617.620:85): pid=18432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2853" name="idProduct" dev="configfs" ino=52044 res=0 errno=0 [ 1385.163663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1385.947791][T18437] loop9: detected capacity change from 0 to 32768 [ 1386.043703][T18437] JBD2: Ignoring recovery information on journal [ 1386.135675][T18437] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1387.688724][T12708] Bluetooth: hci0: Unknown advertising packet type: 0x18 [ 1387.688754][T12708] Bluetooth: hci0: Unknown advertising packet type: 0x1e [ 1387.696142][T12708] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 1387.703176][T12708] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1387.984931][T18471] loop3: detected capacity change from 0 to 64 [ 1389.375762][T18471] hfs: unable to parse mount options [ 1389.615599][T17623] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1389.750516][T12398] ocfs2: Unmounting device (7,9) on (node local) [ 1390.427525][ T28] audit: type=1800 audit(1787542622.910:86): pid=18496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2864" name="idProduct" dev="configfs" ino=52178 res=0 errno=0 [ 1394.272792][T18523] loop7: detected capacity change from 0 to 64 [ 1395.633901][T18523] hfs: unable to parse mount options [ 1395.711528][T17623] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1395.974562][ T28] audit: type=1800 audit(1787542628.450:87): pid=18533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2878" name="idProduct" dev="configfs" ino=52271 res=0 errno=0 [ 1396.064327][T18538] binder: 18534:18538 ioctl c0306201 200000000080 returned -14 [ 1396.137346][T18540] binder: BINDER_SET_CONTEXT_MGR already set [ 1396.143355][T18540] binder: 18534:18540 ioctl 4018620d 200000000100 returned -16 [ 1396.239885][T18538] binder: 18534:18538 ioctl c0306201 2000000003c0 returned -14 [ 1396.286442][T18538] binder_alloc: 18534: binder_alloc_buf, no vma [ 1398.653081][ T28] audit: type=1800 audit(1787542631.130:88): pid=18573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2889" name="idProduct" dev="configfs" ino=52371 res=0 errno=0 [ 1398.673566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.620431][T18577] loop4: detected capacity change from 0 to 64 [ 1400.325792][T18577] hfs: unable to parse mount options [ 1400.595672][T18558] loop3: detected capacity change from 0 to 32768 [ 1400.698509][T18567] loop7: detected capacity change from 0 to 32768 [ 1400.768189][T18567] JBD2: Ignoring recovery information on journal [ 1400.781304][T18558] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1400.824646][T18591] binder: 18590:18591 ioctl c0306201 200000000080 returned -14 [ 1400.927359][T18567] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1400.951092][T18591] binder: 18590:18591 ioctl c0306201 2000000003c0 returned -14 [ 1401.029346][T18558] XFS (loop3): Ending clean mount [ 1401.149936][ T28] audit: type=1804 audit(1787542633.630:89): pid=18567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2887" name="/newroot/350/file1/file1" dev="loop7" ino=17059 res=1 errno=0 [ 1401.601073][T12259] ocfs2: Unmounting device (7,7) on (node local) [ 1401.692615][T17896] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1401.955666][T18615] binder: 18614:18615 ioctl c0306201 200000000080 returned -14 [ 1402.263427][ T28] audit: type=1800 audit(1787542634.730:90): pid=18621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2898" name="idProduct" dev="configfs" ino=52452 res=0 errno=0 [ 1403.975114][ T176] IPVS: starting estimator thread 0... [ 1404.075819][T18640] IPVS: using max 35 ests per chain, 84000 per kthread [ 1404.367755][T18642] loop9: detected capacity change from 0 to 64 [ 1404.374702][T18642] hfs: unable to parse mount options [ 1405.665666][T18646] binder: 18644:18646 ioctl c0306201 200000000080 returned -14 [ 1405.748357][T18646] binder: BINDER_SET_CONTEXT_MGR already set [ 1405.754371][T18646] binder: 18644:18646 ioctl 4018620d 200000000100 returned -16 [ 1405.876586][T18652] binder: 18644:18652 ioctl c0306201 2000000003c0 returned -14 [ 1406.281994][T18663] binder: 18660:18663 ioctl c0306201 200000000080 returned -14 [ 1406.556267][ T28] audit: type=1800 audit(1787542639.040:91): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2907" name="idProduct" dev="configfs" ino=52540 res=0 errno=0 [ 1408.257219][T18676] loop9: detected capacity change from 0 to 64 [ 1410.657621][T18685] loop7: detected capacity change from 0 to 64 [ 1411.354027][T18685] hfs: unable to parse mount options [ 1411.408794][T18687] binder: 18686:18687 ioctl c0306201 200000000080 returned -14 [ 1411.463150][T18687] binder: 18686:18687 ioctl c0306201 2000000003c0 returned -14 [ 1411.786347][T18698] binder: 18696:18698 ioctl c0306201 200000000080 returned -14 [ 1413.319488][T18725] loop9: detected capacity change from 0 to 64 [ 1414.616623][T18725] hfs: unable to parse mount options [ 1415.606819][T18731] binder: 18729:18731 ioctl c0306201 200000000080 returned -14 [ 1415.664188][T18731] binder: BINDER_SET_CONTEXT_MGR already set [ 1415.747715][T18731] binder: 18729:18731 ioctl 4018620d 200000000100 returned -16 [ 1415.826666][T18739] binder: 18729:18739 ioctl c0306201 2000000003c0 returned -14 [ 1415.971746][T18748] binder: 18747:18748 ioctl c0306201 200000000080 returned -14 [ 1416.048237][T18748] binder: BINDER_SET_CONTEXT_MGR already set [ 1416.095114][T18748] binder: 18747:18748 ioctl 4018620d 200000004a80 returned -16 [ 1416.671746][T18740] loop3: detected capacity change from 0 to 32768 [ 1416.781465][T18740] JBD2: Ignoring recovery information on journal [ 1416.953958][T18740] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1417.427908][T18779] loop9: detected capacity change from 0 to 64 [ 1417.434886][T18779] hfs: unable to parse mount options [ 1418.995431][T17896] ocfs2: Unmounting device (7,3) on (node local) [ 1419.253605][T17898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1419.268282][T17898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1419.276925][T17898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1419.284543][T17898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1419.292324][T17898] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1419.301201][T17898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1421.265338][T18797] binder: 18795:18797 ioctl c0306201 200000000080 returned -14 [ 1421.345673][T18797] binder: BINDER_SET_CONTEXT_MGR already set [ 1421.373762][T12708] Bluetooth: hci2: command tx timeout [ 1421.385281][T18797] binder: 18795:18797 ioctl 4018620d 200000004a80 returned -16 [ 1421.406108][T18800] binder: 18799:18800 ioctl c0306201 200000000080 returned -14 [ 1421.431072][T18797] binder: 18795:18797 ioctl c0306201 2000000003c0 returned -14 [ 1421.458896][T18800] binder: BINDER_SET_CONTEXT_MGR already set [ 1421.493426][T18797] binder_alloc: 18795: binder_alloc_buf, no vma [ 1421.503295][T18800] binder: 18799:18800 ioctl 4018620d 200000000100 returned -16 [ 1421.818946][ T8804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.163426][ T8804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.570132][T18825] loop9: detected capacity change from 0 to 64 [ 1423.370882][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.445023][T12708] Bluetooth: hci2: command tx timeout [ 1423.618413][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.800487][T18825] hfs: unable to parse mount options [ 1423.904402][ T8804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.029782][T18810] loop7: detected capacity change from 0 to 32768 [ 1424.150233][T18810] JBD2: Ignoring recovery information on journal [ 1424.162483][ T8804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.547498][T12708] Bluetooth: hci2: command tx timeout [ 1425.673957][T18810] JBD2: journal reset failed [ 1425.716076][T18810] (syz.7.2941,18810,0):ocfs2_journal_load:1168 ERROR: Failed to load journal! [ 1425.763053][T18810] (syz.7.2941,18810,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4 [ 1426.013582][T18784] chnl_net:caif_netlink_parms(): no params data found [ 1426.058316][T18842] binder: 18841:18842 ioctl c0306201 200000000080 returned -14 [ 1426.123332][T18842] binder: BINDER_SET_CONTEXT_MGR already set [ 1426.188344][T18846] binder: 18841:18846 ioctl c0306201 2000000003c0 returned -14 [ 1426.251666][T18842] binder: 18841:18842 ioctl 4018620d 200000004a80 returned -16 [ 1426.314145][T18849] binder_alloc: 18841: binder_alloc_buf, no vma [ 1426.436009][ T8804] tipc: Left network mode [ 1427.605182][T12708] Bluetooth: hci2: command tx timeout [ 1427.642987][T18873] loop3: detected capacity change from 0 to 64 [ 1428.485843][T18874] binder: 18871:18874 ioctl c0306201 2000000003c0 returned -14 [ 1428.495920][T18873] hfs: unable to parse mount options [ 1428.572677][T17623] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1428.748861][T18784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.809997][T18784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.273976][T18784] bridge_slave_0: entered allmulticast mode [ 1430.316938][T18784] bridge_slave_0: entered promiscuous mode [ 1430.356063][T18784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.395419][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.402704][T18784] bridge_slave_1: entered allmulticast mode [ 1430.483587][T18784] bridge_slave_1: entered promiscuous mode [ 1430.643546][T18876] loop7: detected capacity change from 0 to 32768 [ 1431.037290][T18784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.200194][T18784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.221727][T18887] loop3: detected capacity change from 0 to 32768 [ 1431.302976][T18887] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1431.450041][T18887] XFS (loop3): Ending clean mount [ 1431.489436][ T8804] batman_adv: batadv0: Interface deactivated: gretap1 [ 1431.803720][T17896] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1431.884566][ T8804] batman_adv: batadv0: Removing interface: gretap1 [ 1431.972052][T18784] team0: Port device team_slave_0 added [ 1432.456732][T18784] team0: Port device team_slave_1 added [ 1434.019343][T18784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.090765][T18784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1434.193786][T18935] loop3: detected capacity change from 0 to 64 [ 1434.305030][ T5837] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1435.580672][T18935] hfs: unable to parse mount options [ 1435.660659][T18784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.750511][T18784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.763222][ T5837] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.823601][T18784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.857654][ T5837] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1435.902218][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.956583][ T5837] usb 8-1: config 0 descriptor?? [ 1435.996156][ T5837] pwc: Askey VC010 type 2 USB webcam detected. [ 1436.006142][T18784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.369489][ T5837] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1437.686964][T18946] loop3: detected capacity change from 0 to 64 [ 1437.763646][ T5837] pwc: recv_control_msg error -71 req 02 val 2700 [ 1437.834212][ T5837] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1437.895314][ T5837] pwc: recv_control_msg error -71 req 04 val 1000 [ 1437.952069][ T5837] pwc: recv_control_msg error -71 req 04 val 1300 [ 1438.039098][ T5837] pwc: recv_control_msg error -71 req 04 val 1400 [ 1438.083298][ T5837] pwc: recv_control_msg error -71 req 02 val 2000 [ 1438.136849][ T5837] pwc: recv_control_msg error -71 req 02 val 2100 [ 1438.178261][ T5837] pwc: recv_control_msg error -71 req 04 val 1500 [ 1438.190142][ T5837] pwc: recv_control_msg error -71 req 02 val 2500 [ 1438.227105][ T5837] pwc: recv_control_msg error -71 req 02 val 2400 [ 1438.297452][ T5837] pwc: recv_control_msg error -71 req 02 val 2600 [ 1438.364644][ T5837] pwc: recv_control_msg error -71 req 02 val 2900 [ 1438.388672][ T8804] hsr_slave_0: left promiscuous mode [ 1438.407374][ T5837] pwc: recv_control_msg error -71 req 02 val 2800 [ 1438.419660][ T8804] hsr_slave_1: left promiscuous mode [ 1439.788959][ T5837] pwc: recv_control_msg error -71 req 04 val 1100 [ 1439.952476][ T5837] pwc: recv_control_msg error -71 req 04 val 1200 [ 1440.023635][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1440.051052][ T5837] pwc: Registered as video103. [ 1440.087585][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.107188][ T5837] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input79 [ 1440.162269][ T8804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1440.220935][ T5837] usb 8-1: USB disconnect, device number 38 [ 1440.378474][ T8804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.697428][T18985] loop3: detected capacity change from 0 to 64 [ 1441.707964][T18985] hfs: unable to parse mount options [ 1441.755639][ T8804] bridge_slave_1: left allmulticast mode [ 1441.815044][ T8804] bridge_slave_1: left promiscuous mode [ 1441.820740][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.929881][ T8804] bridge_slave_0: left allmulticast mode [ 1441.960607][ T8804] bridge_slave_0: left promiscuous mode [ 1441.991984][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.104188][ T8804] veth1_macvtap: left promiscuous mode [ 1442.141562][ T8804] veth0_macvtap: left promiscuous mode [ 1442.165140][ T8804] veth1_vlan: left promiscuous mode [ 1442.188011][ T8804] veth0_vlan: left promiscuous mode [ 1442.273311][T18996] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1442.285152][T18996] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1442.293595][T18996] CPU: 0 PID: 18996 Comm: syz.3.2979 Not tainted syzkaller #0 [ 1442.301037][T18996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1442.311098][T18996] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1442.317102][T18996] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f b5 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 26 b5 23 fb 41 be 78 12 00 00 4d [ 1442.336699][T18996] RSP: 0018:ffffc9000442f7e0 EFLAGS: 00010246 [ 1442.342754][T18996] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1442.350736][T18996] RDX: ffff8880294d3c00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1442.358695][T18996] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1442.366668][T18996] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1442.374623][T18996] R13: ffff88805e290530 R14: ffff888023a35280 R15: 0000000000000000 [ 1442.382618][T18996] FS: 00007fd2fe2906c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1442.391554][T18996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.398124][T18996] CR2: 00007f88cad627e8 CR3: 000000005d9b4000 CR4: 00000000003506f0 [ 1442.406085][T18996] Call Trace: [ 1442.409353][T18996] [ 1442.412265][T18996] ? dummy_wakeup+0x270/0x270 [ 1442.416937][T18996] usb_gadget_set_selfpowered+0x6e/0x230 [ 1442.422559][T18996] composite_dev_prepare+0x2fa/0x320 [ 1442.427835][T18996] configfs_composite_bind+0xa1/0x13f0 [ 1442.433279][T18996] ? kernfs_put+0x309/0x360 [ 1442.437768][T18996] ? webusb_landingPage_store+0x1c0/0x1c0 [ 1442.443473][T18996] gadget_bind_driver+0x2b3/0x770 [ 1442.448486][T18996] ? gadget_match_driver+0x130/0x130 [ 1442.453774][T18996] really_probe+0x247/0xae0 [ 1442.458262][T18996] ? pm_runtime_barrier+0x14b/0x1c0 [ 1442.463452][T18996] __driver_probe_device+0x1f5/0x390 [ 1442.468747][T18996] driver_probe_device+0x4f/0x420 [ 1442.473759][T18996] __driver_attach+0x444/0x6d0 [ 1442.478519][T18996] bus_for_each_dev+0x235/0x2b0 [ 1442.483355][T18996] ? driver_attach+0x50/0x50 [ 1442.487929][T18996] ? bus_remove_file+0x140/0x140 [ 1442.492851][T18996] ? do_raw_spin_unlock+0x121/0x230 [ 1442.498038][T18996] bus_add_driver+0x340/0x630 [ 1442.502704][T18996] driver_register+0x23a/0x310 [ 1442.507469][T18996] usb_gadget_register_driver_owner+0xf9/0x270 [ 1442.513611][T18996] gadget_dev_desc_UDC_store+0x1c7/0x2e0 [ 1442.519239][T18996] configfs_write_iter+0x312/0x400 [ 1442.524366][T18996] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 1442.529900][T18996] vfs_write+0x474/0x9a0 [ 1442.534152][T18996] ? file_end_write+0x250/0x250 [ 1442.538992][T18996] ? __fget_files+0x3fc/0x460 [ 1442.543676][T18996] ? __fdget_pos+0x2a3/0x330 [ 1442.548250][T18996] ? ksys_write+0x74/0x260 [ 1442.552658][T18996] ksys_write+0x151/0x260 [ 1442.556974][T18996] ? __ia32_sys_read+0x90/0x90 [ 1442.561748][T18996] ? lockdep_hardirqs_on+0x98/0x150 [ 1442.566935][T18996] do_syscall_64+0x55/0xb0 [ 1442.571351][T18996] ? clear_bhb_loop+0x40/0x90 [ 1442.576030][T18996] ? clear_bhb_loop+0x40/0x90 [ 1442.580734][T18996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1442.586628][T18996] RIP: 0033:0x7fd2fd39e0d9 [ 1442.591046][T18996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.610635][T18996] RSP: 002b:00007fd2fe290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1442.619032][T18996] RAX: ffffffffffffffda RBX: 00007fd2fd625fa0 RCX: 00007fd2fd39e0d9 [ 1442.626987][T18996] RDX: 000000000000000b RSI: 0000200000000740 RDI: 0000000000000004 [ 1442.634965][T18996] RBP: 00007fd2fd435024 R08: 0000000000000000 R09: 0000000000000000 [ 1442.642920][T18996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1442.650877][T18996] R13: 00007fd2fd626038 R14: 00007fd2fd625fa0 R15: 00007ffe5ebd2228 [ 1442.658841][T18996] [ 1442.661855][T18996] Modules linked in: [ 1442.778331][ T8804] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1442.971511][T18996] ---[ end trace 0000000000000000 ]--- [ 1442.983193][T18996] RIP: 0010:dummy_set_selfpowered+0xbb/0x150 [ 1443.011236][T18996] Code: 94 c0 4d 8d b4 c6 80 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f b5 23 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 26 b5 23 fb 41 be 78 12 00 00 4d [ 1443.063244][T18996] RSP: 0018:ffffc9000442f7e0 EFLAGS: 00010246 [ 1443.090317][T18996] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1443.118178][T18996] RDX: ffff8880294d3c00 RSI: 0000000000000003 RDI: 0000000000000005 [ 1443.161289][T18996] RBP: 0000000000000003 R08: ffff888019e458df R09: 1ffff110033c8b1b [ 1443.171926][T18996] R10: dffffc0000000000 R11: ffffed10033c8b1c R12: dffffc0000000000 [ 1443.192482][T18996] R13: ffff88805e290530 R14: ffff888023a35280 R15: 0000000000000000 [ 1443.211731][T18996] FS: 00007fd2fe2906c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1443.221728][ T8804] bond1 (unregistering): Released all slaves [ 1443.228806][T18996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1443.237962][T18996] CR2: 0000001b33215ff8 CR3: 000000005d9b4000 CR4: 00000000003506f0 [ 1443.263327][T18996] Kernel panic - not syncing: Fatal exception [ 1443.269459][T18996] Kernel Offset: disabled [ 1443.273784][T18996] Rebooting in 86400 seconds..