last executing test programs: 13.488407133s ago: executing program 3 (id=1636): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") 11.66115498s ago: executing program 3 (id=1643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000180)='0x0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000340)='Tes', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000640)='Conf 2\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r4, &(0x7f00000006c0)='midi.usb0\x00') 11.65180446s ago: executing program 4 (id=1644): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r2, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) fsopen(0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./debug\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000580)='l^\xa2\xac\x99\xdd\x9e\xeb\xa8\xf2V,\xeah\xe3ic\xc36\x01\x1d\xf3\xe1g \x83\xbe\x8b\x8a\x888a\xcbK\xd4\xf8\xac\xc5]\xf5@\xfc.\aiM\xcc\xccP5\xf5q\xea\x145\x88@\xa7\x92\x7f\xf0+\xab\xf2#\xf4\xf9\xf1\xf4^\x1f\xe8\xder6\xe5&\\\xfd\xaeb\xa9\x18\xbe,)\xc4\x87\xb2\"\xb3\x92\xc5', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 10.687874475s ago: executing program 4 (id=1648): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 9.773593108s ago: executing program 2 (id=1650): socket(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup(r3, 0x0, 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f0000000300), &(0x7f0000000400)='%+9llu \x00'}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00') 9.624224072s ago: executing program 3 (id=1651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x5, 0x9, 0x7, 0x4}, 0x9c) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6c733d63703934392c747970653d98acdea62c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c007496a2b3c48cfe4c5574da530133a8589587ad88b51629276eea19ddb84318479a84749d142bbf83909a0de8e6b6636b2cfef7c68f86d3f06b69a22babacd1868fc19444c1f3d636380e311e6d2dc48a8ede637b5d684b3e"], 0x1, 0x5f1, &(0x7f0000000680)="$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") r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x44000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000c80)={0x40, 0x1, 'client0\x00', 0x1, "abfe1010fea1e9c8", "8eda5422ae6ab0805254fd33b2bd9a30dd168627ef68405bcba13938f091c865", 0x351}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file3\x00', 0x2) 9.530841505s ago: executing program 0 (id=1652): preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x45, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9.486567136s ago: executing program 1 (id=1653): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x80000001, 0x3, 0x2, 0x9, 0x0, 0x2, 0xd20}, {0x80000019, 0x6, 0x6, 0x8, 0x0, 0x5, 0xd}, {0x5e2796afef1a2f31, 0x0, 0x0, 0x9, 0x1, 0x80000001, 0xe}, {0x80000001, 0xa948a1e9, 0x7, 0x1008, 0x56b7, 0x110, 0x3}]}) 6.800613215s ago: executing program 1 (id=1654): syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x22) 6.800172135s ago: executing program 2 (id=1655): socket$key(0xf, 0x3, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000088e000/0x4000)=nil, 0x4000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f000029f000/0x3000)=nil, 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0xd, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x7, 0x2, 0x20000000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x4}}]}}, 0x0, 0x4a}, 0x28) 6.759840537s ago: executing program 4 (id=1656): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 6.657745909s ago: executing program 3 (id=1657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x10, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 6.527788442s ago: executing program 0 (id=1658): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) fsopen(0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./debug\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000580)='l^\xa2\xac\x99\xdd\x9e\xeb\xa8\xf2V,\xeah\xe3ic\xc36\x01\x1d\xf3\xe1g \x83\xbe\x8b\x8a\x888a\xcbK\xd4\xf8\xac\xc5]\xf5@\xfc.\aiM\xcc\xccP5\xf5q\xea\x145\x88@\xa7\x92\x7f\xf0+\xab\xf2#\xf4\xf9\xf1\xf4^\x1f\xe8\xder6\xe5&\\\xfd\xaeb\xa9\x18\xbe,)\xc4\x87\xb2\"\xb3\x92\xc5', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 5.640488575s ago: executing program 1 (id=1659): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 5.639984255s ago: executing program 0 (id=1660): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) close(r3) close(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='4', 0x1) 5.511036249s ago: executing program 2 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000180)='0x0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000340)='Tes', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000640)='Conf 2\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r4, &(0x7f00000006c0)='midi.usb0\x00') 5.130268648s ago: executing program 3 (id=1662): kexec_load(0x5, 0x0, 0x0, 0xa0000) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x5, 0x9, 0x7, 0x4}, 0x9c) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6c733d63703934392c747970653d98acdea62c706172743d3078303030303030303030303030303030392c706172743d3078303030303030303030303030303030392c007496a2b3c48cfe4c5574da530133a8589587ad88b51629276eea19ddb84318479a84749d142bbf83909a0de8e6b6636b2cfef7c68f86d3f06b69a22babacd1868fc19444c1f3d636380e311e6d2dc48a8ede637b5d684b3e"], 0x1, 0x5f1, &(0x7f0000000680)="$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") r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x44000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000c80)={0x40, 0x1, 'client0\x00', 0x1, "abfe1010fea1e9c8", "8eda5422ae6ab0805254fd33b2bd9a30dd168627ef68405bcba13938f091c865", 0x351}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file3\x00', 0x2) 4.415378847s ago: executing program 2 (id=1668): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 4.371158428s ago: executing program 1 (id=1669): getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x41044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x7fffffff, '\x00', @value64=0x10000000000000}}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d8000001170002"], 0x44}}, 0x0) ioctl$MON_IOCG_STATS(r1, 0xc0109207, &(0x7f00000001c0)) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x9}}, 0x20) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r4}}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="014000000200000004012200a4e200000100db1c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001800"/28], 0x48) 128.623607ms ago: executing program 2 (id=1670): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x22) 128.267897ms ago: executing program 0 (id=1671): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap(&(0x7f0000100000/0x20000)=nil, 0x20000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) fsopen(0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./debug\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='password\x00', &(0x7f0000000580)='l^\xa2\xac\x99\xdd\x9e\xeb\xa8\xf2V,\xeah\xe3ic\xc36\x01\x1d\xf3\xe1g \x83\xbe\x8b\x8a\x888a\xcbK\xd4\xf8\xac\xc5]\xf5@\xfc.\aiM\xcc\xccP5\xf5q\xea\x145\x88@\xa7\x92\x7f\xf0+\xab\xf2#\xf4\xf9\xf1\xf4^\x1f\xe8\xder6\xe5&\\\xfd\xaeb\xa9\x18\xbe,)\xc4\x87\xb2\"\xb3\x92\xc5', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 109.514868ms ago: executing program 4 (id=1672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[], 0x0) 91.822608ms ago: executing program 3 (id=1673): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 362.92µs ago: executing program 2 (id=1674): socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x9, 0x40}, @ringbuf_query, @ringbuf_query, @ldst={0x0, 0x0, 0x2, 0x3, 0x0, 0x18, 0x10}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002"], 0x0, 0x2a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYRES8], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) 0s ago: executing program 1 (id=1675): socket$nl_generic(0x10, 0x3, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0run() failed ... [ 226.325648][ T27] audit: type=1800 audit(1785988324.244:65): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.392" name="ipv4_address" dev="configfs" ino=38884 res=0 errno=0 [ 226.374576][ T27] audit: type=1800 audit(1785988324.264:66): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.392" name="ipv4_port" dev="configfs" ino=38885 res=0 errno=0 [ 226.515378][ T4320] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.460992][ T5962] loop1: detected capacity change from 0 to 4096 [ 227.597291][ T4320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.608433][ T5965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.616066][ T4320] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.659168][ T4320] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 227.704325][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.751647][ T5962] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 228.065083][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 228.443889][ T26] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 228.560387][ T26] usb 2-1: config 1 has no interface number 0 [ 228.746840][ T4323] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 228.804802][ T26] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 228.824526][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.840751][ T26] usb 2-1: Product: syz [ 228.849892][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 228.849906][ T27] audit: type=1800 audit(1785988326.764:70): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.401" name="ipv4_address" dev="configfs" ino=38960 res=0 errno=0 [ 228.850225][ T26] usb 2-1: Manufacturer: syz [ 228.883095][ T27] audit: type=1800 audit(1785988326.794:71): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.401" name="ipv4_port" dev="configfs" ino=38961 res=0 errno=0 [ 228.912257][ T26] usb 2-1: SerialNumber: syz [ 228.934462][ T27] audit: type=1800 audit(1785988326.794:72): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.401" name="num" dev="configfs" ino=38962 res=0 errno=0 [ 229.031608][ T27] audit: type=1800 audit(1785988326.794:73): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.401" name="local" dev="configfs" ino=38963 res=0 errno=0 [ 230.309508][ T27] audit: type=1800 audit(1785988326.794:74): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.401" name="blocks" dev="configfs" ino=38964 res=0 errno=0 [ 231.733307][ T4791] usb 3-1: USB disconnect, device number 12 [ 232.397210][ T27] audit: type=1800 audit(1785988330.304:75): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="ipv4_address" dev="configfs" ino=40043 res=0 errno=0 [ 232.591343][ T26] usb 2-1: selecting invalid altsetting 1 [ 232.713302][ T26] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 232.796034][ T27] audit: type=1800 audit(1785988330.444:76): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="ipv4_port" dev="configfs" ino=40044 res=0 errno=0 [ 233.140299][ T4323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.233211][ T4323] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 233.276602][ T27] audit: type=1800 audit(1785988330.544:77): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="num" dev="configfs" ino=40045 res=0 errno=0 [ 233.391572][ T4323] usb 4-1: can't read configurations, error -71 [ 233.581217][ T26] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -22! [ 233.588440][ T26] speedtch: probe of 2-1:1.1 failed with error -22 [ 233.599214][ T26] usb 2-1: USB disconnect, device number 12 [ 233.635144][ T27] audit: type=1800 audit(1785988330.624:78): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="block_bytes" dev="configfs" ino=40046 res=0 errno=0 [ 233.781124][ T27] audit: type=1800 audit(1785988330.824:79): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="dev" dev="configfs" ino=40047 res=0 errno=0 [ 236.476525][ T6027] Bluetooth: MGMT ver 1.22 [ 236.638161][ T27] audit: type=1800 audit(1785988334.554:80): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.413" name="ipv4_address" dev="configfs" ino=40168 res=0 errno=0 [ 236.709600][ T27] audit: type=1800 audit(1785988334.564:81): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.413" name="ipv4_port" dev="configfs" ino=40169 res=0 errno=0 [ 237.003121][ T6037] loop0: detected capacity change from 0 to 32768 [ 237.014568][ T6037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.415 (6037) [ 237.037424][ T6042] loop4: detected capacity change from 0 to 512 [ 237.038597][ T27] audit: type=1800 audit(1785988334.564:82): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.413" name="num" dev="configfs" ino=40170 res=0 errno=0 [ 237.047674][ T6042] EXT4-fs: Ignoring removed nobh option [ 237.072089][ T6037] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.082799][ T6037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 237.091593][ T6037] BTRFS info (device loop0): turning on sync discard [ 237.098413][ T6037] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 237.107998][ T6037] BTRFS info (device loop0): use zstd compression, level 3 [ 237.115289][ T6037] BTRFS info (device loop0): turning on async discard [ 237.122086][ T6037] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 237.132842][ T6037] BTRFS info (device loop0): trying to use backup root at mount time [ 237.141051][ T6037] BTRFS info (device loop0): enabling auto defrag [ 237.147569][ T6037] BTRFS info (device loop0): using free space tree [ 237.179837][ T6042] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 237.224171][ T6042] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.269899][ T27] audit: type=1800 audit(1785988334.584:83): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.413" name="local" dev="configfs" ino=40171 res=0 errno=0 [ 237.292494][ T6042] EXT4-fs (loop4): 1 truncate cleaned up [ 237.310300][ T6042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 237.338909][ T6042] ext4: Unknown parameter './file2' [ 237.351387][ T27] audit: type=1800 audit(1785988334.584:84): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.413" name="blocks" dev="configfs" ino=40172 res=0 errno=0 [ 237.410129][ T27] audit: type=1800 audit(1785988334.584:85): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.413" name="dev" dev="configfs" ino=40173 res=0 errno=0 [ 237.471126][ T27] audit: type=1800 audit(1785988335.224:86): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.417" name="ipv4_address" dev="configfs" ino=39018 res=0 errno=0 [ 237.572257][ T4409] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 237.596456][ T6037] BTRFS error (device loop0): failed to load root extent [ 237.603628][ T6037] BTRFS warning (device loop0): try to load backup roots slot 1 [ 237.611746][ T5118] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 237.635138][ T27] audit: type=1800 audit(1785988335.224:87): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.417" name="ipv4_port" dev="configfs" ino=39019 res=0 errno=0 [ 237.671079][ T6037] BTRFS warning (device loop0): couldn't read tree root [ 237.678240][ T6037] BTRFS warning (device loop0): try to load backup roots slot 2 [ 237.689933][ T27] audit: type=1800 audit(1785988335.224:88): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.417" name="num" dev="configfs" ino=39020 res=0 errno=0 [ 237.691664][ T6037] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 237.722235][ T6037] BTRFS warning (device loop0): couldn't read tree root [ 237.729282][ T6037] BTRFS warning (device loop0): try to load backup roots slot 3 [ 237.772236][ T6037] BTRFS info (device loop0): enabling ssd optimizations [ 237.779731][ T6037] BTRFS info (device loop0): rebuilding free space tree [ 237.819812][ T6037] BTRFS info (device loop0): checking UUID tree [ 237.847236][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 237.951686][ T27] audit: type=1800 audit(1785988335.254:89): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.417" name="block_bytes" dev="configfs" ino=39023 res=0 errno=0 [ 239.281642][ T6082] fuse: Unknown parameter 'grou00000000000000000000' [ 239.397575][ T4273] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.990399][ T6115] loop0: detected capacity change from 0 to 128 [ 241.021122][ T6115] md: invalid superblock checksum on loop0 [ 241.027323][ T6115] md: loop0 does not have a valid v1.1 superblock, not importing! [ 241.105675][ T6098] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 241.306768][ T6098] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.339992][ T6098] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.367988][ T6098] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.388236][ T6098] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.415103][ T6098] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 241.434469][ T6098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.742107][ T6136] fuse: Unknown parameter 'grou00000000000000000000' [ 241.924791][ T6139] loop1: detected capacity change from 0 to 512 [ 241.977500][ T6139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.082512][ T6139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.091679][ T6139] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.227942][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 243.421059][ T6098] usb 1-1: USB disconnect, device number 11 [ 243.645878][ T6162] binder: 6161:6162 ioctl c00c620f 0 returned -14 [ 244.528235][ T6174] fuse: Unknown parameter 'use00000000000000000000' [ 244.757770][ T6177] loop1: detected capacity change from 0 to 4096 [ 244.901645][ T6183] fuse: Unknown parameter 'group_i00000000000000000000' [ 245.195957][ T6177] ntfs: volume version 3.1. [ 245.210757][ T6187] loop3: detected capacity change from 0 to 512 [ 245.474021][ T6187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.716910][ T6187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 245.755307][ T6187] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.990665][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 245.990680][ T27] audit: type=1800 audit(1785988343.904:98): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="ipv4_address" dev="configfs" ino=40562 res=0 errno=0 [ 246.089471][ T27] audit: type=1800 audit(1785988343.934:99): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="ipv4_port" dev="configfs" ino=40563 res=0 errno=0 [ 246.125300][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 246.159875][ T27] audit: type=1800 audit(1785988343.934:100): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="num" dev="configfs" ino=40564 res=0 errno=0 [ 246.210217][ T27] audit: type=1800 audit(1785988343.944:101): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="local" dev="configfs" ino=40565 res=0 errno=0 [ 246.234474][ T6097] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 246.265286][ T27] audit: type=1800 audit(1785988343.974:102): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="blocks" dev="configfs" ino=40566 res=0 errno=0 [ 246.286185][ T27] audit: type=1800 audit(1785988343.974:103): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="dev" dev="configfs" ino=40567 res=0 errno=0 [ 246.414235][ T6210] loop1: detected capacity change from 0 to 512 [ 246.493702][ T6210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.689512][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 249.338841][ T6229] jffs2: notice: (6229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.520481][ T6236] fuse: Unknown parameter 'group_i00000000000000000000' [ 249.623458][ T6097] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.638673][ T6097] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 249.648945][ T6240] loop4: detected capacity change from 0 to 512 [ 249.657063][ T6097] usb 1-1: can't read configurations, error -71 [ 249.665312][ T6240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.932880][ T27] audit: type=1800 audit(1785988347.844:104): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="ipv4_address" dev="configfs" ino=39453 res=0 errno=0 [ 249.978770][ T6240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 249.989065][ T6240] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.020372][ T27] audit: type=1800 audit(1785988347.874:105): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="ipv4_port" dev="configfs" ino=39454 res=0 errno=0 [ 250.290013][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'. [ 250.640671][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 250.655524][ T27] audit: type=1800 audit(1785988347.914:106): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="num" dev="configfs" ino=39455 res=0 errno=0 [ 250.914165][ T27] audit: type=1800 audit(1785988347.914:107): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="local" dev="configfs" ino=39456 res=0 errno=0 [ 251.735129][ T27] audit: type=1800 audit(1785988347.914:108): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="blocks" dev="configfs" ino=39457 res=0 errno=0 [ 252.011035][ T6265] tipc: Trying to set illegal importance in message [ 252.059498][ T27] audit: type=1800 audit(1785988347.934:109): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="dev" dev="configfs" ino=39458 res=0 errno=0 [ 253.668852][ T6276] fuse: Unknown parameter 'group_i00000000000000000000' [ 254.834522][ T6287] loop2: detected capacity change from 0 to 512 [ 254.843763][ T6287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.965059][ T3653] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 255.038986][ T6287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.084812][ T6287] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.427660][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.433996][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.685259][ T4323] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 257.718837][ T3653] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.750066][ T3653] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 257.772055][ T3653] usb 4-1: can't read configurations, error -71 [ 257.807086][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 257.882663][ T4323] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 257.904476][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.929914][ T4323] usb 5-1: Product: syz [ 257.934277][ T4323] usb 5-1: Manufacturer: syz [ 257.977707][ T4323] usb 5-1: SerialNumber: syz [ 257.994595][ T4323] usb 5-1: config 0 descriptor?? [ 258.016332][ T4323] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 258.715502][ T4323] gspca_sunplus: reg_w_riv err -110 [ 258.721265][ T4323] sunplus: probe of 5-1:0.0 failed with error -110 [ 259.231643][ T6312] loop4: detected capacity change from 0 to 512 [ 259.257384][ T6312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.344254][ T6312] EXT4-fs (loop4): 1 truncate cleaned up [ 259.355185][ T6312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.442307][ T6312] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 259.481608][ T6327] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 259.554352][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.666727][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.449310][ T6332] fuse: Unknown parameter 'group_id00000000000000000000' [ 260.496011][ T3653] usb 5-1: USB disconnect, device number 3 [ 260.625193][ T6324] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 261.773360][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 261.930700][ T6349] loop4: detected capacity change from 0 to 512 [ 261.975667][ T6349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.039903][ T6351] jffs2: notice: (6351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.087260][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.108697][ T6349] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.282813][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 262.702191][ T6360] loop4: detected capacity change from 0 to 4096 [ 263.776287][ T6360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.225149][ T6360] EXT4-fs (loop4): Test dummy encryption mode enabled [ 264.231990][ T6360] EXT4-fs (loop4): first meta block group too large: 184549376 (group descriptor block count 1) [ 264.505615][ T4286] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 266.354653][ T6393] loop0: detected capacity change from 0 to 512 [ 266.397138][ T6393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.444848][ T6393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 266.803983][ T6393] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.458582][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 268.275256][ T4791] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 268.505431][ T4791] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 269.263631][ T4791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.406485][ T4791] usb 4-1: Product: syz [ 269.457681][ T4791] usb 4-1: Manufacturer: syz [ 269.471814][ T4791] usb 4-1: SerialNumber: syz [ 269.516999][ T4791] usb 4-1: config 0 descriptor?? [ 269.526517][ T4791] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 269.567188][ T6416] loop4: detected capacity change from 0 to 256 [ 269.589398][ T6416] exfat: Unknown parameter '&EƯ~ B [ 269.589398][ T6416] lNһ>LfkL)>JZ#B|nYLjft3w4F?T"W#dT' [ 270.129074][ T6401] loop3: detected capacity change from 0 to 512 [ 270.409069][ T6401] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.534894][ T4791] gspca_sunplus: reg_w_riv err -110 [ 270.545296][ T4791] sunplus: probe of 4-1:0.0 failed with error -110 [ 270.577259][ T6401] EXT4-fs (loop3): 1 truncate cleaned up [ 270.582971][ T6401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.632281][ T6401] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 270.731348][ T6401] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 270.792278][ T6427] binder: 6426:6427 ioctl c00c620f 0 returned -14 [ 270.880064][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.935311][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.066399][ T4323] usb 4-1: USB disconnect, device number 20 [ 271.134254][ T6438] loop4: detected capacity change from 0 to 512 [ 271.171159][ T6438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.314857][ T6438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 271.378545][ T6438] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.188677][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 272.477045][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 275.175396][ T6472] CIFS: Attempting to mount \\127.0.0.1\share [ 275.228527][ T6472] CIFS: VFS: Error connecting to socket. Aborting operation. [ 275.243568][ T6472] CIFS: VFS: cifs_mount failed w/return code = -4 [ 275.488239][ T6474] binder: 6473:6474 ioctl c00c620f 0 returned -14 [ 276.055300][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 276.357318][ T4323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.375188][ T4323] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 276.450889][ T4323] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 276.471117][ T4323] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.511561][ T4323] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 276.528820][ T27] audit: type=1800 audit(1785988374.444:110): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.541" name="ipv4_address" dev="configfs" ino=39905 res=0 errno=0 [ 276.531887][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.574214][ T6486] loop3: detected capacity change from 0 to 512 [ 276.595346][ T27] audit: type=1800 audit(1785988374.464:111): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.541" name="ipv4_port" dev="configfs" ino=39906 res=0 errno=0 [ 276.631531][ T6486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.681370][ T27] audit: type=1800 audit(1785988374.474:112): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.541" name="num" dev="configfs" ino=39907 res=0 errno=0 [ 276.730563][ T6486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 276.745175][ T6486] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.758378][ T27] audit: type=1800 audit(1785988374.474:113): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.541" name="local" dev="configfs" ino=39908 res=0 errno=0 [ 276.778581][ T27] audit: type=1800 audit(1785988374.474:114): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.541" name="blocks" dev="configfs" ino=39909 res=0 errno=0 [ 276.798855][ T27] audit: type=1800 audit(1785988374.494:115): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.541" name="dev" dev="configfs" ino=39912 res=0 errno=0 [ 277.399179][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 277.705614][ T4323] gud: probe of 5-1:1.0 failed with error -71 [ 277.774657][ T4323] usb 5-1: USB disconnect, device number 4 [ 277.985089][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 278.979492][ T6505] jffs2: notice: (6505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 280.361968][ T6520] binder: 6518:6520 ioctl c00c620f 0 returned -14 [ 281.152340][ T27] audit: type=1800 audit(1785988379.064:116): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="ipv4_address" dev="configfs" ino=41256 res=0 errno=0 [ 281.240437][ T27] audit: type=1800 audit(1785988379.094:117): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="ipv4_port" dev="configfs" ino=41257 res=0 errno=0 [ 281.340600][ T27] audit: type=1800 audit(1785988379.094:118): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="num" dev="configfs" ino=41258 res=0 errno=0 [ 281.391200][ T6531] jffs2: notice: (6531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 281.418854][ T6529] loop4: detected capacity change from 0 to 2048 [ 281.431048][ T27] audit: type=1800 audit(1785988379.094:119): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.552" name="local" dev="configfs" ino=41259 res=0 errno=0 [ 281.533739][ T6529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 281.581757][ T6529] EXT4-fs error (device loop4): __ext4_new_inode:1081: comm syz.4.553: reserved inode found cleared - inode=1 [ 281.655120][ T6538] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 281.765068][ T6097] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 282.000653][ T6097] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.025099][ T6097] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.072710][ T6097] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.985663][ T6097] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.125107][ T6097] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 283.134219][ T6097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.458304][ T6097] gud: probe of 1-1:1.0 failed with error -71 [ 284.470211][ T6097] usb 1-1: USB disconnect, device number 14 [ 284.576658][ T6565] binder: 6564:6565 ioctl c00c620f 0 returned -14 [ 287.886239][ T6601] netlink: 'syz.4.574': attribute type 10 has an invalid length. [ 287.993940][ T6601] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 289.331383][ T6625] loop0: detected capacity change from 0 to 2048 [ 289.346624][ T4791] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 289.418260][ T6625] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 289.485524][ T6625] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 289.514153][ T6625] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 289.556234][ T6625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.557394][ T4791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.616249][ T4791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.636624][ T4791] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.640678][ T6636] loop1: detected capacity change from 0 to 512 [ 289.667426][ T4791] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.690709][ T4791] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 289.710901][ T4791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.735194][ T6636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.786227][ T6636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.815169][ T6636] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.835289][ T3653] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 289.973339][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 290.204894][ T4791] gud: probe of 3-1:1.0 failed with error -71 [ 291.832807][ T4791] usb 3-1: USB disconnect, device number 13 [ 291.879413][ T3653] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.934851][ T3653] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 291.963195][ T3653] usb 5-1: can't read configurations, error -71 [ 292.008956][ T6654] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 292.123811][ T6654] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.572883][ T6684] loop3: detected capacity change from 0 to 512 [ 293.633135][ T6684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.854935][ T6684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 293.874306][ T6684] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.007381][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 294.175376][ T4493] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 294.405172][ T4493] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 294.456224][ T4493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.464453][ T4493] usb 1-1: Product: syz [ 294.485072][ T4323] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 294.518764][ T4493] usb 1-1: Manufacturer: syz [ 294.588859][ T4493] usb 1-1: SerialNumber: syz [ 294.722222][ T4323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.753060][ T4493] usb 1-1: config 0 descriptor?? [ 294.803745][ T4323] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.912158][ T4493] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 294.954792][ T4323] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.033420][ T4323] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.088006][ T4323] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 295.140590][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.275771][ T6693] loop0: detected capacity change from 0 to 512 [ 295.305459][ T6693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 295.378229][ T6693] EXT4-fs (loop0): 1 truncate cleaned up [ 295.383942][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 295.461188][ T6693] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 295.501346][ T6708] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 295.565159][ T4493] gspca_sunplus: reg_w_riv err -110 [ 295.570692][ T4493] sunplus: probe of 1-1:0.0 failed with error -110 [ 295.615608][ T4323] gud 4-1:1.0: No supported pixel formats found [ 295.621920][ T4323] gud: probe of 4-1:1.0 failed with error -22 [ 295.657948][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.684320][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.732690][ T4323] usb 1-1: USB disconnect, device number 15 [ 295.828745][ T4320] usb 4-1: USB disconnect, device number 21 [ 296.109511][ T6724] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 296.120387][ T6724] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 296.282041][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 296.315334][ T4323] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 296.511203][ T6732] loop3: detected capacity change from 0 to 512 [ 296.531095][ T6732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.709009][ T6732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.732396][ T6732] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.755388][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 298.478421][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 298.524747][ T4323] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 298.552767][ T4323] usb 5-1: can't read configurations, error -71 [ 299.385056][ T3653] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 299.674431][ T6766] netlink: 'syz.3.624': attribute type 10 has an invalid length. [ 299.708909][ T6766] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.687082][ T6779] fuse: Bad value for 'fd' [ 301.720133][ T6767] qfq: no options [ 302.450636][ T3653] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.491415][ T3653] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 302.534362][ T3653] usb 2-1: can't read configurations, error -71 [ 302.663250][ T6793] loop1: detected capacity change from 0 to 512 [ 302.665273][ T4506] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 302.706804][ T6793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.750407][ T6793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.826815][ T6793] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.899645][ T4506] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.929524][ T4506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.117862][ T4506] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.128335][ T4506] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.142830][ T4506] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 303.152787][ T4506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.175237][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 303.607133][ T4506] gud 4-1:1.0: No supported pixel formats found [ 303.622545][ T4506] gud: probe of 4-1:1.0 failed with error -22 [ 303.899094][ T4506] usb 4-1: USB disconnect, device number 22 [ 305.464639][ T22] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 306.227113][ T6829] fuse: Bad value for 'fd' [ 308.784620][ T6842] loop0: detected capacity change from 0 to 512 [ 308.930988][ T6842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.193864][ T6842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 309.324562][ T6842] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.583329][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.101666][ T22] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 310.109394][ T22] usb 5-1: can't read configurations, error -71 [ 310.305321][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 310.725357][ T6097] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 310.985165][ T4506] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 311.187276][ T3653] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 311.743339][ T4506] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 311.804324][ T4506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.882933][ T6875] fuse: Bad value for 'fd' [ 311.912023][ T4506] usb 3-1: Product: syz [ 311.969597][ T4506] usb 3-1: Manufacturer: syz [ 312.034451][ T4506] usb 3-1: SerialNumber: syz [ 312.195823][ T4506] usb 3-1: config 0 descriptor?? [ 312.355235][ T4506] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 312.879136][ T6865] loop2: detected capacity change from 0 to 512 [ 313.025897][ T4506] gspca_sunplus: reg_w_riv err -110 [ 313.037054][ T4506] sunplus: probe of 3-1:0.0 failed with error -110 [ 313.085948][ T6865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.416034][ T6865] EXT4-fs (loop2): 1 truncate cleaned up [ 313.506770][ T6865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 313.526089][ T3653] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.807872][ T6865] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 314.050674][ T6883] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 314.869128][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.914251][ T6097] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.012646][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.472685][ T3653] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.482615][ T3653] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 315.491991][ T3653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.500598][ T6097] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 315.508829][ T6097] usb 1-1: can't read configurations, error -71 [ 315.516380][ T3653] usb 2-1: can't set config #1, error -71 [ 315.523695][ T3653] usb 2-1: USB disconnect, device number 15 [ 315.579005][ T14] usb 3-1: USB disconnect, device number 14 [ 315.839563][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 316.242942][ T6911] fuse: Bad value for 'fd' [ 316.503661][ T6898] loop3: detected capacity change from 0 to 32768 [ 316.546177][ T6898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.659 (6898) [ 316.651927][ T6898] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.704195][ T6898] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 316.775800][ T6898] BTRFS info (device loop3): setting nodatasum [ 316.782273][ T6898] BTRFS info (device loop3): force zlib compression, level 3 [ 316.798421][ T6898] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 316.809326][ T6898] BTRFS info (device loop3): use lzo compression, level 0 [ 316.817015][ T6898] BTRFS info (device loop3): turning on flush-on-commit [ 316.824218][ T6898] BTRFS info (device loop3): enabling auto defrag [ 316.831762][ T6898] BTRFS info (device loop3): max_inline at 4096 [ 316.850390][ T6898] BTRFS info (device loop3): using free space tree [ 316.868523][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.874889][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.887274][ T6097] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 316.965195][ T14] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 317.014110][ T6898] BTRFS info (device loop3): enabling ssd optimizations [ 317.078735][ T6097] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.101544][ T6097] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.160300][ T6097] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 317.195138][ T6097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.759079][ T6097] gud: probe of 1-1:1.0 failed with error -121 [ 318.990771][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.318087][ T22] usb 1-1: USB disconnect, device number 18 [ 320.494074][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.025608][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 321.033272][ T14] usb 2-1: can't read configurations, error -71 [ 322.748679][ T6979] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 322.947037][ T6988] loop1: detected capacity change from 0 to 512 [ 322.998438][ T6988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.096301][ T6988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 323.113581][ T6988] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.205096][ T4351] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 323.212938][ T4326] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 323.267547][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 323.521937][ T4351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.681605][ T4351] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.852635][ T4351] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 327.198611][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.984014][ T4351] usb 5-1: can't set config #1, error -71 [ 328.025194][ T4351] usb 5-1: USB disconnect, device number 11 [ 328.066056][ T4326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.099648][ T4326] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 328.120185][ T4326] usb 1-1: can't read configurations, error -71 [ 328.162341][ T7033] loop0: detected capacity change from 0 to 512 [ 328.179234][ T7033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.236818][ T7033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 328.250709][ T7033] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.383544][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 329.295468][ T4351] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 329.521623][ T4351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.579780][ T4351] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 329.659596][ T4351] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 329.729218][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.015077][ T4393] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 330.325558][ T4351] gud: probe of 2-1:1.0 failed with error -121 [ 333.686809][ T4505] usb 2-1: USB disconnect, device number 18 [ 333.692913][ T4393] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.725708][ T4393] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 333.733354][ T4393] usb 3-1: can't read configurations, error -71 [ 334.767254][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 334.767270][ T27] audit: type=1800 audit(1785988432.684:122): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.721" name="ipv4_address" dev="configfs" ino=44044 res=0 errno=0 [ 334.924981][ T27] audit: type=1800 audit(1785988432.754:123): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.721" name="dev" dev="configfs" ino=44049 res=0 errno=0 [ 335.765606][ T4326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 335.966999][ T4326] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.998937][ T4326] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 336.049560][ T4326] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 336.077037][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.118964][ T27] audit: type=1800 audit(1785988434.034:124): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.735" name="ipv4_address" dev="configfs" ino=44236 res=0 errno=0 [ 336.156507][ T27] audit: type=1800 audit(1785988434.064:125): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.735" name="dev" dev="configfs" ino=44237 res=0 errno=0 [ 336.185044][ T4393] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 336.279371][ T7146] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 336.536433][ T4326] gud: probe of 3-1:1.0 failed with error -121 [ 338.712107][ T4351] usb 3-1: USB disconnect, device number 17 [ 340.175430][ T4393] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.237937][ T4393] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 340.388172][ T4393] usb 4-1: can't read configurations, error -71 [ 340.872501][ T7164] program syz.1.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.740817][ T7169] loop2: detected capacity change from 0 to 2048 [ 341.810365][ T27] audit: type=1800 audit(1785988439.724:126): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.746" name="ipv4_address" dev="configfs" ino=44265 res=0 errno=0 [ 341.871458][ T7169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.886972][ T27] audit: type=1800 audit(1785988439.724:127): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.746" name="dev" dev="configfs" ino=44266 res=0 errno=0 [ 341.943403][ T7176] input: syz0 as /devices/virtual/input/input7 [ 342.177974][ T7186] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (1) [ 342.188480][ T7186] logitech-hidpp-device 0005:046D:B012.0001: Event data for report 17 was too short (19 vs 0) [ 342.206990][ T4351] logitech-hidpp-device 0005:046D:B012.0001: Device not connected [ 343.145466][ T4351] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 343.374070][ T4351] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 343.403309][ T4351] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 343.433895][ T4351] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 343.474220][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.490848][ T7204] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.765591][ T7201] syz.4.756 (7201) used greatest stack depth: 20624 bytes left [ 343.847851][ T22] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 343.974728][ T4351] gud: probe of 1-1:1.0 failed with error -121 [ 344.073646][ T7215] loop1: detected capacity change from 0 to 512 [ 344.085318][ T7215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.106529][ T7215] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.759: bad orphan inode 131083 [ 344.118480][ T7215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.158941][ T7216] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 345.085903][ T7226] overlayfs: missing 'lowerdir' [ 346.096200][ T4393] usb 1-1: USB disconnect, device number 21 [ 346.571776][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 346.957071][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.996357][ T22] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 347.015912][ T22] usb 3-1: can't read configurations, error -71 [ 347.205532][ T7243] device syzkaller0 entered promiscuous mode [ 347.499907][ T7245] program syz.3.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.240556][ T7264] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 349.165056][ T14] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 349.258231][ T6086] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 349.452076][ T6086] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.482397][ T6086] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 349.544535][ T6086] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 349.617650][ T6086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.014038][ T6086] gud: probe of 5-1:1.0 failed with error -121 [ 351.047649][ T7295] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 352.897502][ T6086] usb 5-1: USB disconnect, device number 12 [ 354.545206][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.164887][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 355.172605][ T14] usb 2-1: can't read configurations, error -71 [ 356.596638][ T7323] program syz.3.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.911610][ T7331] loop3: detected capacity change from 0 to 1024 [ 357.100686][ T7331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 357.125144][ T7331] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.168559][ T7331] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.800: lblock 3 mapped to illegal pblock 3 (length 3) [ 357.216834][ T7331] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 357.265531][ T7331] EXT4-fs (loop3): This should not happen!! Data will be lost [ 357.265531][ T7331] [ 357.348906][ T4534] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 3) [ 357.370782][ T4534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 357.384216][ T4534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 357.384216][ T4534] [ 357.397813][ T4534] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 7: comm kworker/u4:14: lblock 7 mapped to illegal pblock 7 (length 9) [ 357.509307][ T4534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 357.522324][ T4534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 357.522324][ T4534] [ 357.537459][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 358.049811][ T7351] loop0: detected capacity change from 0 to 512 [ 358.070069][ T7351] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 358.209231][ T7350] loop1: detected capacity change from 0 to 512 [ 358.240933][ T7351] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.804: bad orphan inode 131083 [ 358.253713][ T7351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 358.842757][ T7350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.688918][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 359.707418][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 359.733992][ T7350] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.768255][ T7360] jffs2: notice: (7360) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 359.943334][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 360.135404][ T4791] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 360.166788][ T7371] program syz.1.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.200521][ T4791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 364.215734][ T4791] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 364.233624][ T4791] usb 1-1: can't read configurations, error -71 [ 364.732593][ T7402] jffs2: notice: (7402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 364.780423][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 364.955986][ T7409] loop0: detected capacity change from 0 to 512 [ 364.964645][ T7409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.008935][ T7409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 365.026241][ T7409] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.298360][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 365.717304][ T7425] program syz.3.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.641926][ T7450] loop3: detected capacity change from 0 to 512 [ 367.673572][ T7450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.707020][ T4393] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 367.760699][ T7450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 367.772030][ T7450] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.001719][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 368.517209][ T7460] Illegal XDP return value 32768 on prog (id 59) dev syz_tun, expect packet loss! [ 370.271662][ T4393] usb 5-1: unable to get BOS descriptor or descriptor too short [ 370.300745][ T4393] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 370.315096][ T4393] usb 5-1: can't read configurations, error -71 [ 370.650820][ T27] audit: type=1800 audit(1785988468.564:128): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="ipv4_address" dev="configfs" ino=44815 res=0 errno=0 [ 370.685401][ T27] audit: type=1800 audit(1785988468.564:129): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="ipv4_port" dev="configfs" ino=44816 res=0 errno=0 [ 370.840489][ T27] audit: type=1800 audit(1785988468.564:130): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="num" dev="configfs" ino=44817 res=0 errno=0 [ 371.635046][ T27] audit: type=1800 audit(1785988468.564:131): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="block_bytes" dev="configfs" ino=44818 res=0 errno=0 [ 371.656013][ T27] audit: type=1800 audit(1785988468.564:132): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="dev" dev="configfs" ino=44819 res=0 errno=0 [ 371.887668][ T7489] loop0: detected capacity change from 0 to 512 [ 372.714130][ T7499] program syz.1.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.759934][ T7489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 373.016411][ T7489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 373.043489][ T7489] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.171152][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 373.423991][ T7519] MTD: Couldn't look up './dev/mtdblock0': -2 [ 373.467088][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 373.495219][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.993721][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.235524][ T7538] Device name cannot be null; rc = [-22] [ 375.599209][ T4393] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 375.671881][ T7540] loop3: detected capacity change from 0 to 512 [ 375.695265][ T7540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.673835][ T7547] program syz.0.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.877206][ T7540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 376.906661][ T7540] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.306944][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.313349][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.625095][ T4275] Bluetooth: hci2: command 0x2016 tx timeout [ 380.118483][ T4393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 380.151186][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 380.168969][ T4393] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 380.179008][ T4393] usb 2-1: can't read configurations, error -71 [ 380.538073][ T7563] loop0: detected capacity change from 0 to 1024 [ 380.621308][ T7563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 380.665868][ T7563] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.765648][ T7563] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.865: lblock 3 mapped to illegal pblock 3 (length 3) [ 380.840832][ T7563] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 380.901768][ T7563] EXT4-fs (loop0): This should not happen!! Data will be lost [ 380.901768][ T7563] [ 381.011763][ T5126] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:25: lblock 8 mapped to illegal pblock 8 (length 8) [ 381.052214][ T5126] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 381.103354][ T5126] EXT4-fs (loop0): This should not happen!! Data will be lost [ 381.103354][ T5126] [ 381.148031][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 381.278495][ T7579] jffs2: notice: (7579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 382.342710][ T7592] loop3: detected capacity change from 0 to 512 [ 382.584812][ T7588] program syz.1.873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.681246][ T7592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.943950][ T7592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 383.093600][ T7592] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.401796][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 383.489498][ T7607] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 383.511596][ T6086] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 383.591758][ T7609] loop3: detected capacity change from 0 to 1024 [ 383.691736][ T7609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 383.720696][ T7609] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.108318][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 386.133314][ T7618] fuse: Bad value for 'fd' [ 387.157506][ T6086] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.236069][ T6086] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 387.361813][ T6086] usb 2-1: can't read configurations, error -71 [ 388.984659][ T7642] program syz.4.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.101655][ T7651] device syzkaller0 entered promiscuous mode [ 390.262893][ C0] hrtimer: interrupt took 1244394 ns [ 393.151299][ T7682] program syz.0.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.184242][ T7701] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 394.261150][ T7701] input: syz0 as /devices/virtual/input/input8 [ 398.773365][ T7744] loop1: detected capacity change from 0 to 1024 [ 399.020348][ T7744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 399.139054][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 399.667097][ T7725] loop0: detected capacity change from 0 to 32768 [ 399.716559][ T7765] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 401.642820][ T7798] loop1: detected capacity change from 0 to 1024 [ 401.751945][ T7798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 401.795740][ T7798] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.069526][ T4534] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 402.155947][ T4534] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 402.241387][ T4534] EXT4-fs (loop1): This should not happen!! Data will be lost [ 402.241387][ T4534] [ 402.296601][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 402.578817][ T7819] netlink: 'syz.1.947': attribute type 10 has an invalid length. [ 402.621737][ T7819] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 406.566421][ T7864] netlink: 'syz.0.966': attribute type 10 has an invalid length. [ 406.636033][ T7869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.085609][ T7907] netlink: 'syz.1.979': attribute type 10 has an invalid length. [ 409.439085][ T7916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.982'. [ 410.641174][ T7942] loop3: detected capacity change from 0 to 128 [ 411.858544][ T7741] EXT4-fs (loop4): unmounting filesystem. [ 413.054750][ T7980] netlink: 'syz.1.1003': attribute type 10 has an invalid length. [ 414.677038][ T7997] overlayfs: unrecognized mount option "/" or missing value [ 415.217835][ T7992] loop1: detected capacity change from 0 to 512 [ 415.356047][ T7992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.754369][ T7992] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 418.768675][ T8032] netlink: 'syz.1.1017': attribute type 10 has an invalid length. [ 418.934217][ T8031] netlink: 'syz.4.1018': attribute type 10 has an invalid length. [ 423.897047][ T8073] netlink: 'syz.0.1033': attribute type 10 has an invalid length. [ 425.954133][ T8100] input: syz0 as /devices/virtual/input/input9 [ 428.577796][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.585127][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.483520][ T8145] xt_hashlimit: size too large, truncated to 1048576 [ 432.836939][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.894633][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.904541][ T8092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.915555][ T8092] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.925938][ T8092] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.936310][ T8092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.474313][ T8158] netlink: 'syz.1.1054': attribute type 10 has an invalid length. [ 436.408265][ T8203] overlayfs: failed to clone upperpath [ 437.182405][ T8214] netlink: 'syz.4.1072': attribute type 10 has an invalid length. [ 437.648628][ T6088] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 438.097329][ T6088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 438.118451][ T6088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.147023][ T6088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 438.565210][ T8238] program syz.3.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.019058][ T6088] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 439.078983][ T6088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.108988][ T6088] usb 2-1: Product: syz [ 439.123463][ T6088] usb 2-1: Manufacturer: syz [ 439.147894][ T6088] usb 2-1: SerialNumber: syz [ 439.174765][ T6088] usb 2-1: config 0 descriptor?? [ 439.419359][ T6088] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 439.645584][ T6088] usb 2-1: USB disconnect, device number 25 [ 439.750163][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.757769][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.996285][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.004639][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.044822][ T8275] program syz.0.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.690249][ T8287] loop5: detected capacity change from 0 to 7 [ 443.730245][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.739732][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 443.751509][ T8250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.769173][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.778416][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 443.815811][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.825061][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 443.859378][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.868710][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 443.911723][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.920967][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 443.952457][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 443.961697][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 444.003390][ T8291] fuse: Bad value for 'fd' [ 444.005032][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.017128][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 444.025435][ T8287] ldm_validate_partition_table(): Disk read failed. [ 444.045263][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.056123][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 444.095232][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.106059][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 444.125739][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 444.136482][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 444.184928][ T8287] Dev loop5: unable to read RDB block 0 [ 444.194853][ T8287] loop5: unable to read partition table [ 444.203129][ T8287] loop5: partition table beyond EOD, truncated [ 444.233451][ T8287] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 444.857821][ T8250] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.875052][ T8250] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.884137][ T8250] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.899848][ T8250] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.097571][ T8135] bond0 speed is unknown, defaulting to 1000 [ 445.795126][ T4791] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 450.857336][ T4791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 450.919375][ T4791] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 450.985020][ T4791] usb 2-1: can't read configurations, error -71 [ 451.345049][ T26] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 451.540346][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 451.562580][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.601496][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 451.655123][ T26] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 451.677096][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.694629][ T26] usb 4-1: Product: syz [ 451.703857][ T26] usb 4-1: Manufacturer: syz [ 451.715628][ T26] usb 4-1: SerialNumber: syz [ 451.743804][ T26] usb 4-1: config 0 descriptor?? [ 451.930909][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.938286][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.016401][ T26] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 452.246971][ T6094] usb 4-1: USB disconnect, device number 25 [ 453.321282][ T8369] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 453.479582][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.633832][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.955031][ T4326] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 458.430300][ T4326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 458.771909][ T4326] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 458.780580][ T4326] usb 4-1: can't read configurations, error -71 [ 462.719687][ T8340] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.739054][ T8340] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.759242][ T8340] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.781800][ T8340] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.796064][ T8429] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 470.385284][ T6098] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 470.784484][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.793190][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.004913][ T6098] usb 2-1: device not accepting address 28, error -71 [ 472.445155][ T6098] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 472.615089][ T6098] usb 2-1: device descriptor read/64, error -71 [ 472.894979][ T6098] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 473.065109][ T6098] usb 2-1: device descriptor read/64, error -71 [ 473.199244][ T6098] usb usb2-port1: attempt power cycle [ 473.635112][ T6098] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 473.678878][ T6098] usb 2-1: device descriptor read/8, error -71 [ 473.978963][ T6098] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 474.025781][ T6098] usb 2-1: device descriptor read/8, error -71 [ 474.047898][ T8460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.137191][ T8460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.155078][ T6098] usb usb2-port1: unable to enumerate USB device [ 474.733116][ T8460] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.742435][ T8460] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.751842][ T8460] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.760958][ T8460] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.109970][ T8495] bond0 speed is unknown, defaulting to 1000 [ 475.800536][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.808123][ T8525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.819439][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.831205][ T8525] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.030016][ T8525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.368257][ T8525] syz.4.1152 (8525) used greatest stack depth: 20560 bytes left [ 476.725011][ T6098] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 481.586174][ T6098] usb 4-1: unable to get BOS descriptor or descriptor too short [ 481.935704][ T6098] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 481.943346][ T6098] usb 4-1: can't read configurations, error -71 [ 484.909095][ T4286] Bluetooth: hci5: command 0xfc11 tx timeout [ 484.916300][ T4275] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 485.088909][ T8603] fuse: Bad value for 'fd' [ 488.787302][ T8645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1192'. [ 488.902615][ T8645] device syzkaller1 entered promiscuous mode [ 489.389658][ T6094] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 489.606772][ T6094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.680659][ T6094] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 489.777467][ T4275] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 489.779247][ T6094] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.793075][ T4275] CPU: 0 PID: 4275 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 489.804370][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.814533][ T4275] Workqueue: hci2 hci_rx_work [ 489.819304][ T4275] Call Trace: [ 489.822594][ T4275] [ 489.825553][ T4275] dump_stack_lvl+0x188/0x24e [ 489.830271][ T4275] ? show_regs_print_info+0x12/0x12 [ 489.835504][ T4275] ? load_image+0x410/0x410 [ 489.840215][ T4275] sysfs_create_dir_ns+0x26a/0x290 [ 489.845489][ T4275] ? __lock_acquire+0x7c40/0x7c40 [ 489.850573][ T4275] ? sysfs_warn_dup+0xa0/0xa0 [ 489.855283][ T4275] ? do_raw_spin_unlock+0x11d/0x230 [ 489.860504][ T4275] kobject_add_internal+0x617/0xca0 [ 489.865773][ T4275] kobject_add+0x160/0x230 [ 489.870261][ T4275] ? kobject_init+0x1c0/0x1c0 [ 489.875009][ T4275] ? __raw_spin_lock_init+0x41/0x100 [ 489.880437][ T4275] ? klist_children_get+0x50/0x50 [ 489.885544][ T4275] ? get_device_parent+0x121/0x3e0 [ 489.890714][ T4275] device_add+0x470/0x1050 [ 489.895192][ T4275] hci_conn_add_sysfs+0xd1/0x1e0 [ 489.900179][ T4275] le_conn_complete_evt+0xfac/0x15c0 [ 489.905515][ T4275] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 489.911801][ T4275] ? lockdep_hardirqs_on+0x94/0x140 [ 489.917044][ T4275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 489.923251][ T4275] ? hci_remote_host_features_evt+0x230/0x230 [ 489.929370][ T4275] ? hci_le_enh_conn_complete_evt+0x2f/0x460 [ 489.935395][ T4275] hci_le_enh_conn_complete_evt+0x185/0x460 [ 489.941341][ T4275] ? hci_remote_host_features_evt+0x230/0x230 [ 489.947529][ T4275] hci_event_packet+0x7b3/0x1290 [ 489.952546][ T4275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 489.958743][ T4275] ? bis_list+0x280/0x280 [ 489.963119][ T4275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 489.969322][ T4275] ? hci_rx_work+0x3e0/0xd40 [ 489.973960][ T4275] hci_rx_work+0x3eb/0xd40 [ 489.978485][ T4275] ? process_one_work+0x7b4/0x1160 [ 489.983756][ T4275] process_one_work+0x8ab/0x1160 [ 489.988736][ T4275] ? worker_detach_from_pool+0x240/0x240 [ 489.994417][ T4275] ? _raw_spin_lock_irq+0xb7/0xf0 [ 489.999502][ T4275] ? _raw_spin_lock_irqsave+0x100/0x100 [ 490.005097][ T4275] ? wq_worker_running+0x97/0x190 [ 490.010265][ T4275] worker_thread+0xaf5/0x12a0 [ 490.014998][ T4275] kthread+0x29d/0x330 [ 490.019107][ T4275] ? worker_clr_flags+0x1a0/0x1a0 [ 490.024169][ T4275] ? kthread_blkcg+0xd0/0xd0 [ 490.028795][ T4275] ret_from_fork+0x1f/0x30 [ 490.033287][ T4275] [ 490.096851][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.134905][ T6094] usb 2-1: Product: syz [ 490.155149][ T4275] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 490.168844][ T4275] Bluetooth: hci2: failed to register connection device [ 490.178202][ T6094] usb 2-1: Manufacturer: syz [ 490.193229][ T6094] usb 2-1: SerialNumber: syz [ 490.240230][ T6094] cdc_mbim 2-1:1.0: skipping garbage [ 490.443030][ T8645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 491.016909][ T6094] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 491.027387][ T6094] cdc_mbim 2-1:1.0: bind() failure [ 491.184737][ T6094] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 491.209595][ T6094] cdc_ncm 2-1:1.1: bind() failure [ 491.311830][ T6094] usb 2-1: USB disconnect, device number 34 [ 492.456903][ T8692] netlink: 'syz.4.1210': attribute type 10 has an invalid length. [ 499.452777][ T8776] loop3: detected capacity change from 0 to 1024 [ 499.460309][ T8776] EXT4-fs: Ignoring removed bh option [ 499.465804][ T8776] EXT4-fs: Ignoring removed oldalloc option [ 499.471749][ T8776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 499.528006][ T8776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 500.619090][ T8776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 500.631704][ T8776] System zones: 0-1, 3-36 [ 500.943953][ T8776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 501.383605][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.390085][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.127018][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 502.508759][ T8787] process 'syz.0.1237' launched '/dev/fd/6' with NULL argv: empty string added [ 503.745127][ T6094] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 504.048791][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 504.090534][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.411562][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 504.652744][ T6094] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 504.799744][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.920523][ T6094] usb 4-1: Product: syz [ 504.976204][ T6094] usb 4-1: Manufacturer: syz [ 505.037620][ T6094] usb 4-1: SerialNumber: syz [ 505.148639][ T6094] usb 4-1: config 0 descriptor?? [ 505.247377][ T8829] device syzkaller0 entered promiscuous mode [ 505.369863][ T6094] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 505.573784][ T26] usb 4-1: USB disconnect, device number 30 [ 508.287606][ T8863] netlink: 'syz.1.1255': attribute type 10 has an invalid length. [ 511.607648][ T8882] device syzkaller0 entered promiscuous mode [ 512.044957][ T6094] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 512.235028][ T6094] usb 2-1: device descriptor read/64, error -71 [ 512.924989][ T6094] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 513.085055][ T6094] usb 2-1: device descriptor read/64, error -71 [ 513.205201][ T6094] usb usb2-port1: attempt power cycle [ 513.218906][ T8901] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 513.653017][ T6094] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 513.660908][ T8910] 9pnet_fd: Insufficient options for proto=fd [ 513.695739][ T6094] usb 2-1: device descriptor read/8, error -71 [ 514.115012][ T6094] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 514.156244][ T6094] usb 2-1: device descriptor read/8, error -71 [ 514.435770][ T6094] usb usb2-port1: unable to enumerate USB device [ 515.146777][ T8920] device syzkaller0 entered promiscuous mode [ 515.779234][ T8929] fuse: Bad value for 'fd' [ 516.105087][ T8261] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 516.273462][ T8933] CIFS: VFS: Unable to allocate memory for devname [ 516.369073][ T8261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 516.392174][ T8261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.434448][ T8261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 516.583937][ T8261] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 516.615099][ T8261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.640437][ T8261] usb 2-1: Product: syz [ 516.659766][ T8261] usb 2-1: Manufacturer: syz [ 516.674186][ T8261] usb 2-1: SerialNumber: syz [ 516.703970][ T8261] usb 2-1: config 0 descriptor?? [ 516.928269][ T8261] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 517.270056][ T6094] usb 2-1: USB disconnect, device number 39 [ 520.201277][ T27] audit: type=1800 audit(1785988618.114:133): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1287" name="SYSV798dd81c" dev="hugetlbfs" ino=0 res=0 errno=0 [ 522.464957][ T6094] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 522.666687][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 522.693982][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.744750][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 522.787725][ T6094] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 522.828138][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.867612][ T6094] usb 4-1: Product: syz [ 522.871830][ T6094] usb 4-1: Manufacturer: syz [ 522.908307][ T6094] usb 4-1: SerialNumber: syz [ 522.947721][ T6094] usb 4-1: config 0 descriptor?? [ 523.260784][ T6094] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 523.464522][ T6094] usb 4-1: USB disconnect, device number 31 [ 525.246222][ T9025] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 527.475931][ T9055] device syzkaller0 entered promiscuous mode [ 527.597938][ T9058] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 527.930586][ T27] audit: type=1800 audit(1785988625.844:134): pid=9067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1316" name="SYSV798dd820" dev="hugetlbfs" ino=0 res=0 errno=0 [ 528.597423][ T9082] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 531.037715][ T9126] netlink: 'syz.1.1346': attribute type 10 has an invalid length. [ 531.934972][ T26] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 532.165123][ T8253] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 532.169401][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 532.224292][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.246701][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 532.288501][ T26] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 532.319700][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.340151][ T26] usb 4-1: Product: syz [ 532.348871][ T26] usb 4-1: Manufacturer: syz [ 532.364993][ T26] usb 4-1: SerialNumber: syz [ 532.392512][ T26] usb 4-1: config 0 descriptor?? [ 532.400441][ T8253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 532.416431][ T8253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.444133][ T8253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 532.485801][ T8253] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 532.516250][ T8253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.546332][ T8253] usb 2-1: Product: syz [ 532.561310][ T8253] usb 2-1: Manufacturer: syz [ 532.579624][ T8253] usb 2-1: SerialNumber: syz [ 532.623565][ T26] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 532.651749][ T8253] usb 2-1: config 0 descriptor?? [ 532.826649][ T26] usb 4-1: USB disconnect, device number 32 [ 532.883822][ T8253] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 533.110463][ T26] usb 2-1: USB disconnect, device number 40 [ 533.447475][ T9185] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 534.194538][ T27] audit: type=1800 audit(1785988632.104:135): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1370" name="ipv4_address" dev="configfs" ino=50203 res=0 errno=0 [ 534.241896][ T27] audit: type=1800 audit(1785988632.134:136): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1370" name="ipv4_port" dev="configfs" ino=50206 res=0 errno=0 [ 534.347448][ T27] audit: type=1800 audit(1785988632.134:137): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1370" name="num" dev="configfs" ino=50207 res=0 errno=0 [ 534.446907][ T27] audit: type=1800 audit(1785988632.134:138): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1370" name="block_bytes" dev="configfs" ino=50208 res=0 errno=0 [ 534.694960][ T27] audit: type=1800 audit(1785988632.144:139): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1370" name="dev" dev="configfs" ino=50209 res=0 errno=0 [ 535.008732][ T9206] device syzkaller0 entered promiscuous mode [ 535.165395][ T26] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 535.359617][ T26] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 535.379294][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.414917][ T26] usb 4-1: Product: syz [ 535.429424][ T26] usb 4-1: Manufacturer: syz [ 535.454477][ T26] usb 4-1: SerialNumber: syz [ 535.492875][ T26] usb 4-1: config 0 descriptor?? [ 535.518679][ T26] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 536.137615][ T9204] loop3: detected capacity change from 0 to 512 [ 536.699022][ T26] gspca_sunplus: reg_w_riv err -110 [ 536.704446][ T26] sunplus: probe of 4-1:0.0 failed with error -110 [ 536.711687][ T9204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 536.928742][ T9204] EXT4-fs (loop3): 1 truncate cleaned up [ 536.934453][ T9204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 537.077932][ T9238] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 537.255433][ T9204] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 537.895038][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.015060][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.113337][ T26] usb 4-1: USB disconnect, device number 33 [ 538.720812][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 540.461303][ T6098] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 540.796751][ T6098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 540.840700][ T6098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.884955][ T6098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 540.986330][ T6098] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 541.047146][ T6098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.094975][ T6098] usb 4-1: Product: syz [ 541.099358][ T6098] usb 4-1: Manufacturer: syz [ 541.103982][ T6098] usb 4-1: SerialNumber: syz [ 541.149678][ T6098] usb 4-1: config 0 descriptor?? [ 541.385148][ T6098] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 541.603376][ T6098] usb 4-1: USB disconnect, device number 34 [ 541.716792][ T8253] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 543.611955][ T8253] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 543.643420][ T8253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.653078][ T8253] usb 2-1: Product: syz [ 543.658261][ T8253] usb 2-1: Manufacturer: syz [ 543.663544][ T8253] usb 2-1: SerialNumber: syz [ 543.706705][ T8253] usb 2-1: config 0 descriptor?? [ 543.732353][ T8253] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 545.496959][ T8253] gspca_sunplus: reg_w_riv err -110 [ 545.503384][ T8253] sunplus: probe of 2-1:0.0 failed with error -110 [ 545.748564][ T6098] usb 2-1: USB disconnect, device number 41 [ 549.424914][ T6098] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 550.139031][ T6098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 550.199049][ T6098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.293979][ T6098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 550.518347][ T6098] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 550.558108][ T6098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.594965][ T6098] usb 4-1: Product: syz [ 550.609470][ T6098] usb 4-1: Manufacturer: syz [ 550.614125][ T6098] usb 4-1: SerialNumber: syz [ 550.703643][ T6098] usb 4-1: config 0 descriptor?? [ 550.931642][ T6098] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 551.054941][ T6094] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 551.136409][ T6098] usb 4-1: USB disconnect, device number 35 [ 551.259284][ T6094] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 551.295058][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.330439][ T6094] usb 2-1: Product: syz [ 551.373585][ T6094] usb 2-1: Manufacturer: syz [ 551.386303][ T6094] usb 2-1: SerialNumber: syz [ 551.413190][ T6094] usb 2-1: config 0 descriptor?? [ 551.614451][ T6094] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 551.851241][ T9380] loop1: detected capacity change from 0 to 512 [ 551.981715][ T9380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 552.145138][ T6094] gspca_sunplus: reg_w_riv err -110 [ 552.150686][ T6094] sunplus: probe of 2-1:0.0 failed with error -110 [ 552.457812][ T9380] EXT4-fs (loop1): 1 truncate cleaned up [ 552.595029][ T9380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 552.788022][ T9380] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 554.414514][ T9411] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 555.688365][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.036587][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.609084][ T9399] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 557.881971][ T8253] usb 2-1: USB disconnect, device number 42 [ 557.925164][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 558.695012][ T26] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 558.917006][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 559.085246][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 559.118529][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 559.188029][ T26] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 559.237981][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.270987][ T26] usb 2-1: Product: syz [ 559.295176][ T26] usb 2-1: Manufacturer: syz [ 559.306042][ T26] usb 2-1: SerialNumber: syz [ 559.347510][ T26] usb 2-1: config 0 descriptor?? [ 559.625000][ T26] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 560.325580][ T26] usb 2-1: USB disconnect, device number 43 [ 562.638740][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.645259][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.370108][ T9520] fuse: Bad value for 'fd' [ 569.660852][ T27] audit: type=1800 audit(1785988667.474:140): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1485" name="SYSV798dd824" dev="hugetlbfs" ino=0 res=0 errno=0 [ 570.820182][ T9582] loop3: detected capacity change from 0 to 512 [ 570.833055][ T9582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 570.872151][ T9582] EXT4-fs (loop3): 1 truncate cleaned up [ 570.884958][ T9582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 570.920421][ T9582] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 570.975938][ T9591] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 571.505145][ T6094] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 571.694873][ T6094] usb 4-1: Using ep0 maxpacket: 8 [ 571.701845][ T6094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.732415][ T6094] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 571.775508][ T6094] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 571.805005][ T6094] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.824948][ T6094] usb 4-1: Product: syz [ 571.839530][ T6094] usb 4-1: Manufacturer: syz [ 571.844171][ T6094] usb 4-1: SerialNumber: syz [ 571.887100][ T6094] usb 4-1: config 0 descriptor?? [ 574.439509][ T6094] usb 4-1: USB disconnect, device number 36 [ 575.363068][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 575.770769][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 576.357317][ T9635] fuse: Bad value for 'fd' [ 577.938965][ T8253] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 578.456690][ T8253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 578.469445][ T8253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 578.480896][ T8253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 578.508211][ T8253] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 578.525021][ T8253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.534254][ T8253] usb 2-1: Product: syz [ 578.540095][ T8253] usb 2-1: Manufacturer: syz [ 578.546188][ T8253] usb 2-1: SerialNumber: syz [ 578.618124][ T8253] usb 2-1: config 0 descriptor?? [ 578.722877][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 578.839576][ T8253] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 579.225086][ T26] usb 2-1: USB disconnect, device number 44 [ 579.477720][ T9682] device syzkaller0 entered promiscuous mode [ 580.073829][ T9697] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 581.112270][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 581.323884][ T9710] fuse: Bad value for 'fd' [ 582.844934][ T6094] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 583.024140][ T9739] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 583.046924][ T6094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 583.080662][ T6094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 583.128879][ T6094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 583.189922][ T6094] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 583.247283][ T6094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.294977][ T6094] usb 2-1: Product: syz [ 583.312784][ T6094] usb 2-1: Manufacturer: syz [ 583.333238][ T6094] usb 2-1: SerialNumber: syz [ 583.368175][ T6094] usb 2-1: config 0 descriptor?? [ 583.649386][ T9747] fuse: Bad value for 'fd' [ 583.759131][ T6094] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 584.025055][ T6094] usb 2-1: USB disconnect, device number 45 [ 584.982077][ T9764] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 586.935726][ T9786] netlink: 'syz.4.1554': attribute type 10 has an invalid length. [ 590.311875][ T9813] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 591.580925][ T9832] program syz.3.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.818517][ T9840] fuse: Bad value for 'fd' [ 593.183250][ T9846] fuse: Bad value for 'fd' [ 594.393539][ T9866] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 596.274285][ T9885] fuse: Bad value for 'fd' [ 596.401085][ T9888] fuse: Bad value for 'fd' [ 599.291835][ T9914] netlink: 'syz.4.1591': attribute type 10 has an invalid length. [ 600.203009][ T9930] fuse: Bad value for 'fd' [ 600.673051][ T9941] netlink: 'syz.3.1598': attribute type 10 has an invalid length. [ 605.151976][ T9966] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 606.865639][ T9983] fuse: Bad value for 'fd' [ 607.084236][ T9992] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 608.356565][T10008] program syz.3.1615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.605929][T10013] loop1: detected capacity change from 0 to 512 [ 611.676398][T10013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 611.826695][T10013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 611.897043][T10035] fuse: Bad value for 'fd' [ 611.941265][T10013] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.141641][T10041] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 612.151194][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 615.354752][T10072] loop1: detected capacity change from 0 to 1024 [ 615.362055][T10072] EXT4-fs: Ignoring removed bh option [ 615.367532][T10072] EXT4-fs: Ignoring removed oldalloc option [ 615.373462][T10072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 615.504168][T10072] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 615.790799][T10072] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 615.801678][T10072] System zones: 0-1, 3-36 [ 616.026799][T10072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 618.090333][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 618.101892][T10081] loop3: detected capacity change from 0 to 512 [ 618.207644][T10081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 618.336865][T10081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 618.385119][T10081] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.707995][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 620.974964][T10135] loop3: detected capacity change from 0 to 1024 [ 620.982252][T10135] EXT4-fs: Ignoring removed bh option [ 620.987721][T10135] EXT4-fs: Ignoring removed oldalloc option [ 620.993658][T10135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 621.028525][T10135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 621.498698][T10135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 621.508721][T10135] System zones: 0-1, 3-36 [ 621.595726][T10135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 623.660925][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 624.606631][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.614078][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.542437][T10169] dyndbg: bad flag-op l, at start of li [ 625.560715][T10169] dyndbg: flags parse failed [ 630.460408][T10189] ------------[ cut here ]------------ [ 630.466525][T10189] WARNING: CPU: 1 PID: 10189 at net/sched/sch_taprio.c:1026 taprio_get_start_time+0x139/0x160 [ 630.476867][T10189] Modules linked in: [ 630.480790][T10189] CPU: 1 PID: 10189 Comm: syz.3.1673 Not tainted syzkaller #0 [ 630.488360][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.498498][T10189] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 630.504616][T10189] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6c 0e 6c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 e1 1a f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 630.524351][T10189] RSP: 0018:ffffc90004496d68 EFLAGS: 00010287 [ 630.530490][T10189] RAX: ffffffff88674d09 RBX: ffffc90004496e78 RCX: 0000000000080000 [ 630.538530][T10189] RDX: ffffc9000e6b8000 RSI: 0000000000001d1c RDI: 0000000000001d1d [ 630.546572][T10189] RBP: 0000000000000001 R08: ffffffff90b103ff R09: 1ffffffff216207f [ 630.554583][T10189] R10: dffffc0000000000 R11: fffffbfff2162080 R12: 00000092c83fe2fd [ 630.562620][T10189] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.570664][T10189] FS: 00007f66b83dc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 630.579651][T10189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.586294][T10189] CR2: 00002000000012c0 CR3: 0000000073533000 CR4: 00000000003506e0 [ 630.594315][T10189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 630.602350][T10189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 630.610381][T10189] Call Trace: [ 630.613691][T10189] [ 630.616700][T10189] taprio_change+0x3f99/0x5390 [ 630.621535][T10189] ? taprio_destroy+0x4b0/0x4b0 [ 630.626455][T10189] ? lockdep_init_map_type+0x98/0x8d0 [ 630.631872][T10189] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 630.637103][T10189] ? memset+0x1e/0x40 [ 630.641210][T10189] ? fifo_init+0x3f6/0x6d0 [ 630.645705][T10189] ? qdisc_peek_head+0x40/0x40 [ 630.650544][T10189] ? mutex_is_locked+0xe/0x40 [ 630.655323][T10189] ? taprio_peek+0x590/0x590 [ 630.659957][T10189] qdisc_create+0x7ef/0x10c0 [ 630.664636][T10189] ? qdisc_notify+0x370/0x370 [ 630.669389][T10189] ? lockdep_rtnl_is_held+0x22/0x30 [ 630.674626][T10189] ? qdisc_lookup+0x35d/0x6b0 [ 630.679376][T10189] tc_modify_qdisc+0xb43/0x1de0 [ 630.684281][T10189] ? qdisc_offload_query_caps+0x150/0x150 [ 630.690095][T10189] ? qdisc_offload_query_caps+0x150/0x150 [ 630.695977][T10189] rtnetlink_rcv_msg+0x863/0xfb0 [ 630.700974][T10189] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 630.706170][T10189] ? rtnetlink_bind+0x80/0x80 [ 630.710895][T10189] ? mark_lock+0x94/0x320 [ 630.715297][T10189] ? __lock_acquire+0x138a/0x7c40 [ 630.720377][T10189] ? __lock_acquire+0x138a/0x7c40 [ 630.725475][T10189] ? verify_lock_unused+0x140/0x140 [ 630.730750][T10189] ? verify_lock_unused+0x140/0x140 [ 630.736032][T10189] ? __alloc_skb+0xf9/0x7d0 [ 630.740590][T10189] ? verify_lock_unused+0x140/0x140 [ 630.745893][T10189] netlink_rcv_skb+0x1ef/0x440 [ 630.750719][T10189] ? rtnetlink_bind+0x80/0x80 [ 630.755474][T10189] ? netlink_ack+0x1160/0x1160 [ 630.760297][T10189] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.765583][T10189] netlink_unicast+0x7ad/0x920 [ 630.770416][T10189] netlink_sendmsg+0x8ad/0xbd0 [ 630.775256][T10189] ? netlink_getsockopt+0x550/0x550 [ 630.780495][T10189] ? apparmor_socket_sendmsg+0x8a/0x330 [ 630.786224][T10189] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 630.791700][T10189] ? security_socket_sendmsg+0x7c/0xa0 [ 630.797293][T10189] ? netlink_getsockopt+0x550/0x550 [ 630.802541][T10189] ____sys_sendmsg+0x5ed/0x9a0 [ 630.807394][T10189] ? __sys_sendmsg_sock+0x30/0x30 [ 630.812467][T10189] ? __import_iovec+0x306/0x510 [ 630.817491][T10189] ? import_iovec+0x6f/0xa0 [ 630.822140][T10189] ___sys_sendmsg+0x2a2/0x360 [ 630.826910][T10189] ? __sys_sendmsg+0x2a0/0x2a0 [ 630.831769][T10189] __se_sys_sendmsg+0x1c3/0x2b0 [ 630.836702][T10189] ? __x64_sys_sendmsg+0x80/0x80 [ 630.841698][T10189] ? lockdep_hardirqs_on+0x94/0x140 [ 630.846968][T10189] do_syscall_64+0x4c/0xa0 [ 630.851456][T10189] ? clear_bhb_loop+0x60/0xb0 [ 630.856206][T10189] ? clear_bhb_loop+0x60/0xb0 [ 630.860922][T10189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.866891][T10189] RIP: 0033:0x7f66b759e0d9 [ 630.871365][T10189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.891222][T10189] RSP: 002b:00007f66b83dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.899709][T10189] RAX: ffffffffffffffda RBX: 00007f66b7825fa0 RCX: 00007f66b759e0d9 [ 630.907767][T10189] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 630.915822][T10189] RBP: 00007f66b7635024 R08: 0000000000000000 R09: 0000000000000000 [ 630.923828][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.931867][T10189] R13: 00007f66b7826038 R14: 00007f66b7825fa0 R15: 00007ffe40ff0258 [ 630.939911][T10189] [ 630.942977][T10189] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 630.950272][T10189] CPU: 1 PID: 10189 Comm: syz.3.1673 Not tainted syzkaller #0 [ 630.957756][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.967844][T10189] Call Trace: [ 630.971144][T10189] [ 630.974094][T10189] dump_stack_lvl+0x188/0x24e [ 630.978812][T10189] ? memcpy+0x3c/0x60 [ 630.982827][T10189] ? show_regs_print_info+0x12/0x12 [ 630.988139][T10189] ? load_image+0x410/0x410 [ 630.992750][T10189] panic+0x2d3/0x710 [ 630.996692][T10189] ? bpf_jit_dump+0xd0/0xd0 [ 631.001242][T10189] __warn+0x2f8/0x4f0 [ 631.005271][T10189] ? taprio_get_start_time+0x139/0x160 [ 631.010781][T10189] ? taprio_get_start_time+0x139/0x160 [ 631.016361][T10189] report_bug+0x2ba/0x4f0 [ 631.020737][T10189] ? taprio_get_start_time+0x139/0x160 [ 631.026241][T10189] handle_bug+0x3a/0x70 [ 631.030429][T10189] exc_invalid_op+0x16/0x40 [ 631.035079][T10189] asm_exc_invalid_op+0x16/0x20 [ 631.039968][T10189] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 631.046077][T10189] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6c 0e 6c f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 e1 1a f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 631.065714][T10189] RSP: 0018:ffffc90004496d68 EFLAGS: 00010287 [ 631.071831][T10189] RAX: ffffffff88674d09 RBX: ffffc90004496e78 RCX: 0000000000080000 [ 631.079845][T10189] RDX: ffffc9000e6b8000 RSI: 0000000000001d1c RDI: 0000000000001d1d [ 631.087863][T10189] RBP: 0000000000000001 R08: ffffffff90b103ff R09: 1ffffffff216207f [ 631.095893][T10189] R10: dffffc0000000000 R11: fffffbfff2162080 R12: 00000092c83fe2fd [ 631.103913][T10189] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.111924][T10189] ? taprio_get_start_time+0x139/0x160 [ 631.117438][T10189] ? taprio_get_start_time+0x139/0x160 [ 631.122942][T10189] taprio_change+0x3f99/0x5390 [ 631.127763][T10189] ? taprio_destroy+0x4b0/0x4b0 [ 631.132658][T10189] ? lockdep_init_map_type+0x98/0x8d0 [ 631.138075][T10189] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 631.143249][T10189] ? memset+0x1e/0x40 [ 631.147259][T10189] ? fifo_init+0x3f6/0x6d0 [ 631.151734][T10189] ? qdisc_peek_head+0x40/0x40 [ 631.156549][T10189] ? mutex_is_locked+0xe/0x40 [ 631.161287][T10189] ? taprio_peek+0x590/0x590 [ 631.165921][T10189] qdisc_create+0x7ef/0x10c0 [ 631.170551][T10189] ? qdisc_notify+0x370/0x370 [ 631.175262][T10189] ? lockdep_rtnl_is_held+0x22/0x30 [ 631.180588][T10189] ? qdisc_lookup+0x35d/0x6b0 [ 631.185302][T10189] tc_modify_qdisc+0xb43/0x1de0 [ 631.190209][T10189] ? qdisc_offload_query_caps+0x150/0x150 [ 631.195993][T10189] ? qdisc_offload_query_caps+0x150/0x150 [ 631.201765][T10189] rtnetlink_rcv_msg+0x863/0xfb0 [ 631.206758][T10189] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 631.211931][T10189] ? rtnetlink_bind+0x80/0x80 [ 631.216651][T10189] ? mark_lock+0x94/0x320 [ 631.221015][T10189] ? __lock_acquire+0x138a/0x7c40 [ 631.226108][T10189] ? __lock_acquire+0x138a/0x7c40 [ 631.231169][T10189] ? verify_lock_unused+0x140/0x140 [ 631.236406][T10189] ? verify_lock_unused+0x140/0x140 [ 631.241634][T10189] ? __alloc_skb+0xf9/0x7d0 [ 631.246178][T10189] ? verify_lock_unused+0x140/0x140 [ 631.251535][T10189] netlink_rcv_skb+0x1ef/0x440 [ 631.256344][T10189] ? rtnetlink_bind+0x80/0x80 [ 631.261067][T10189] ? netlink_ack+0x1160/0x1160 [ 631.265877][T10189] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.271118][T10189] netlink_unicast+0x7ad/0x920 [ 631.275928][T10189] netlink_sendmsg+0x8ad/0xbd0 [ 631.280741][T10189] ? netlink_getsockopt+0x550/0x550 [ 631.285977][T10189] ? apparmor_socket_sendmsg+0x8a/0x330 [ 631.291559][T10189] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 631.296872][T10189] ? security_socket_sendmsg+0x7c/0xa0 [ 631.302460][T10189] ? netlink_getsockopt+0x550/0x550 [ 631.307709][T10189] ____sys_sendmsg+0x5ed/0x9a0 [ 631.312524][T10189] ? __sys_sendmsg_sock+0x30/0x30 [ 631.317587][T10189] ? __import_iovec+0x306/0x510 [ 631.322483][T10189] ? import_iovec+0x6f/0xa0 [ 631.327050][T10189] ___sys_sendmsg+0x2a2/0x360 [ 631.331774][T10189] ? __sys_sendmsg+0x2a0/0x2a0 [ 631.336619][T10189] __se_sys_sendmsg+0x1c3/0x2b0 [ 631.341508][T10189] ? __x64_sys_sendmsg+0x80/0x80 [ 631.346502][T10189] ? lockdep_hardirqs_on+0x94/0x140 [ 631.351741][T10189] do_syscall_64+0x4c/0xa0 [ 631.356188][T10189] ? clear_bhb_loop+0x60/0xb0 [ 631.360911][T10189] ? clear_bhb_loop+0x60/0xb0 [ 631.365616][T10189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.371536][T10189] RIP: 0033:0x7f66b759e0d9 [ 631.375973][T10189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.395599][T10189] RSP: 002b:00007f66b83dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.404041][T10189] RAX: ffffffffffffffda RBX: 00007f66b7825fa0 RCX: 00007f66b759e0d9 [ 631.412225][T10189] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 631.420227][T10189] RBP: 00007f66b7635024 R08: 0000000000000000 R09: 0000000000000000 [ 631.428223][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.436225][T10189] R13: 00007f66b7826038 R14: 00007f66b7825fa0 R15: 00007ffe40ff0258 [ 631.444237][T10189] [ 631.447882][T10189] Kernel Offset: disabled [ 631.452321][T10189] Rebooting in 86400 seconds..