last executing test programs: 7.002057933s ago: executing program 3 (id=1008): r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r0, &(0x7f00000002c0)="5bf9", 0x4000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ef3e95405c0a1fbd1a53010203120902120001000000000904"], 0x0) 6.803466816s ago: executing program 0 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 6.439410421s ago: executing program 0 (id=1012): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.269730494s ago: executing program 0 (id=1014): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close(0x3) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x8080c62) fallocate(r0, 0x3, 0x4, 0x8000c62) 5.858149511s ago: executing program 4 (id=1017): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) memfd_create(&(0x7f0000000080)='ext4\x00', 0x5) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000280)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) truncate(0x0, 0x1bf8) 5.431203337s ago: executing program 3 (id=1020): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES16=r4], 0x14) 5.377220458s ago: executing program 1 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.130407782s ago: executing program 0 (id=1023): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x3, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x9, [@ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0xfd, 0x0, [], 0x2}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x49, &(0x7f0000000280)={0x5, 0xf, 0x49, 0x2, [@generic={0x25, 0x10, 0x3, "05f114ee34f8d327d7fc8a90aea590ead24be0528f12b0a2cb532727a46bb474f20d"}, @generic={0x1f, 0x10, 0x4, "a053bd11d6a3ebb361229eabedba7af78e70e7c7ce0cfe91f3b48d7b"}]}, 0x1, [{0x0, 0x0}]}) 5.052125803s ago: executing program 1 (id=1025): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x98, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x20000000}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, 0x0) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) clock_getres(0xfffffffffffffffb, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x8000, 0x8, 0x0, 0x0, 0x10, 0x1, 0xb966, 0x1, 0x1000, 0xdf, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400) 4.920048805s ago: executing program 2 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3.965663529s ago: executing program 4 (id=1027): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f141202000000000001090224000100006000090401800203000000092106040001220500"], 0x0) 3.93403558s ago: executing program 2 (id=1028): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x10002}, {0xa, 0xce23, 0x3, @remote, 0x3}, r3, 0x7}}, 0x48) 3.786945372s ago: executing program 2 (id=1029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "8927e51abf39f408", "8c15c787a43dbe22f2933a422f12af0f", "daf48ba2", "cf449e8c1404623d"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 2.861545466s ago: executing program 2 (id=1030): syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, 'G'}]}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beae"], 0x0) r5 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/231) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000000040)=0x7) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0xc1, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd322a270ca1677d1bd2f7cdb48d028b6bb07fde67fbfe2840299d6d55f383bd8b93022790a915db30550abf59c7ecab7bae554898c4e95dab00b36d09d0"}, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.330656474s ago: executing program 1 (id=1031): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) 2.315568354s ago: executing program 3 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 2.062858628s ago: executing program 3 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000088000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.93823278s ago: executing program 3 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.876818471s ago: executing program 1 (id=1035): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close(0x3) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x8080c62) fallocate(r0, 0x3, 0x4, 0x8000c62) 1.831324832s ago: executing program 3 (id=1036): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = open(&(0x7f0000000100)='./file1\x00', 0x40016b042, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffff090000000000000000850000003600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r4, &(0x7f0000000380)=[{&(0x7f0000000000)="84", 0x1}], 0x1, 0x1ffffff, 0x0, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x20441, 0x42) fallocate(r5, 0x20, 0x0, 0x8000) 1.695087114s ago: executing program 0 (id=1037): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) memfd_create(&(0x7f0000000080)='ext4\x00', 0x5) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000280)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) truncate(0x0, 0x1bf8) 1.440128828s ago: executing program 4 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.048490574s ago: executing program 4 (id=1039): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x10002}, {0xa, 0xce23, 0x3, @remote, 0x3}, r3, 0x7}}, 0x48) 801.625108ms ago: executing program 4 (id=1040): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x3f5a}], 0x1, 0x0, 0x0) 690.442919ms ago: executing program 4 (id=1041): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000340)={0x40, 0x6, 0x2, 'N\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 445.965453ms ago: executing program 1 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 397.584623ms ago: executing program 2 (id=1043): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {0x0}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240f6f7995e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b589c7", 0x91}, {&(0x7f0000000100)="df3b06000000fd03ce04654680d6c9431d9e7af9e172000000aa", 0x1a}, {&(0x7f0000000940)="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", 0xe39}], 0x5}, 0x40080) 322.486205ms ago: executing program 2 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x20, 0x65, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5a, 0x100, @void}}}}}, 0x2e) 178.115217ms ago: executing program 1 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) close(r0) 0s ago: executing program 0 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) kernel console output (not intermixed with test programs): 66511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.079800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.087706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.097081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.107109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.117868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.126543][ T4277] device veth0_vlan entered promiscuous mode [ 88.173982][ T4273] device veth1_vlan entered promiscuous mode [ 88.182698][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.206082][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.215196][ T4277] device veth1_vlan entered promiscuous mode [ 88.228556][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.236907][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.250236][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.258967][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.269008][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.277444][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.286326][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.294709][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.326491][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.340096][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.369390][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.395641][ T4273] device veth0_macvtap entered promiscuous mode [ 88.408950][ T4272] device veth0_macvtap entered promiscuous mode [ 88.448382][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.469467][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.484246][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.497827][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.507107][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.522967][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.545381][ T4272] device veth1_macvtap entered promiscuous mode [ 88.554527][ T4277] device veth0_macvtap entered promiscuous mode [ 88.571101][ T4273] device veth1_macvtap entered promiscuous mode [ 88.583155][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.600261][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.612134][ T4277] device veth1_macvtap entered promiscuous mode [ 88.647887][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.683930][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.696040][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.707020][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.735945][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.744391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.751222][ T4364] loop2: detected capacity change from 0 to 512 [ 88.776014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.788039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.813445][ T4364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.823872][ T4364] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.832554][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.864007][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.900385][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.924427][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.937190][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.948462][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.971130][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.990353][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.004482][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.015308][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.027451][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.037832][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.050776][ T4363] EXT4-fs (loop2): unmounting filesystem. [ 89.057421][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 89.064146][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 89.072804][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.086377][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.099520][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.112128][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.128471][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 89.128885][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 89.180841][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.197869][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.208970][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 89.215140][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.232690][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.246893][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.263406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.274365][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.293148][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.302433][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.312428][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.321482][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.331747][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.343861][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.354336][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.354354][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.354365][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.354378][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.360328][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.413019][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.423553][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.432587][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.441541][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.454678][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.476903][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.499730][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.516051][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.527885][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.542585][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.555602][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.567249][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.577686][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.588449][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.598409][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.609673][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.620059][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.630807][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642719][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.670163][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.681561][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.699566][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.718970][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.727829][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.738706][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.966284][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.996280][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.042911][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.066399][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.082905][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.092833][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.129003][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.148988][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.169430][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.179268][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.198972][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.222908][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.238432][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.246322][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.284149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.308786][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.335531][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.352096][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.407738][ T4380] loop2: detected capacity change from 0 to 128 [ 90.629115][ T56] kworker/u4:4: attempt to access beyond end of device [ 90.629115][ T56] loop2: rw=1, sector=482, nr_sectors = 1 limit=128 [ 90.796528][ T4391] device syzkaller1 entered promiscuous mode [ 90.904477][ T4395] loop1: detected capacity change from 0 to 1024 [ 90.932106][ T4395] EXT4-fs: inline encryption not supported [ 91.013716][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.233997][ T4403] loop2: detected capacity change from 0 to 2048 [ 91.275982][ T4403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.371298][ T26] audit: type=1804 audit(1782395548.122:2): pid=4403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.18" name="/newroot/5/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 91.445875][ T4395] syz.1.14 (4395) used greatest stack depth: 20688 bytes left [ 91.524425][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 91.633535][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 91.931120][ T7] cfg80211: failed to load regulatory.db [ 92.026983][ T4427] loop0: detected capacity change from 0 to 512 [ 92.094402][ T4427] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.24: inode has both inline data and extents flags [ 92.109466][ T4427] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.24: couldn't read orphan inode 15 (err -117) [ 92.196766][ T4427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.272794][ T4435] loop1: detected capacity change from 0 to 512 [ 92.299316][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.313973][ T4435] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.381950][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 92.393674][ T4439] loop4: detected capacity change from 0 to 512 [ 92.475763][ T4439] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.534788][ T4439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.546872][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 92.626067][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 92.635698][ T4439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 92.665335][ T4439] System zones: 1-12 [ 92.692416][ T4439] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.29: bad orphan inode 131072 [ 92.753909][ T4439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.800827][ T4453] loop1: detected capacity change from 0 to 1024 [ 92.982506][ T4453] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 93.008412][ T4453] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 93.038393][ T4453] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.33: Failed to acquire dquot type 0 [ 93.112975][ T4453] EXT4-fs (loop1): 1 truncate cleaned up [ 93.132145][ T4453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.186656][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 93.223868][ T4453] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 93.289848][ T4453] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 93.342602][ T4453] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.33: Failed to acquire dquot type 0 [ 93.474108][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 93.910206][ T4482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 95.062330][ T4502] tipc: Started in network mode [ 95.092189][ T4502] tipc: Node identity b24f444fd5ea, cluster identity 4711 [ 95.146756][ T4502] tipc: Enabled bearer , priority 0 [ 95.179437][ T4505] device syzkaller0 entered promiscuous mode [ 95.210438][ T4502] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 95.271845][ T4502] tipc: Resetting bearer [ 95.315577][ T4501] tipc: Resetting bearer [ 95.443104][ T4501] tipc: Disabling bearer [ 95.933457][ T4520] loop2: detected capacity change from 0 to 256 [ 96.003352][ T4520] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.421300][ T4529] netlink: 'syz.2.58': attribute type 13 has an invalid length. [ 96.437417][ T4529] netlink: 'syz.2.58': attribute type 17 has an invalid length. [ 96.633638][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.686001][ T4529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.397276][ T4547] device syzkaller0 entered promiscuous mode [ 97.636312][ T4560] loop3: detected capacity change from 0 to 256 [ 97.709747][ T4560] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.670901][ T4587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.75'. [ 99.896554][ T4613] loop0: detected capacity change from 0 to 256 [ 99.972815][ T4613] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.228469][ T4617] device syzkaller0 entered promiscuous mode [ 100.371741][ T4623] loop4: detected capacity change from 0 to 2048 [ 100.377835][ T4625] loop1: detected capacity change from 0 to 512 [ 100.473336][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.483015][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.570502][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 100.628964][ T26] audit: type=1804 audit(1782395557.382:3): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.85" name="/newroot/13/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 100.705103][ T26] audit: type=1326 audit(1782395557.452:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.1.88" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f79ce59 code=0x7ffc0000 [ 100.763923][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 100.821072][ T26] audit: type=1326 audit(1782395557.502:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.1.88" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f449f79ce59 code=0x7ffc0000 [ 100.948191][ T26] audit: type=1326 audit(1782395557.502:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.1.88" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f79ce59 code=0x7ffc0000 [ 101.016893][ T4638] loop1: detected capacity change from 0 to 128 [ 101.047713][ T26] audit: type=1326 audit(1782395557.502:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.1.88" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449f79ce59 code=0x7ffc0000 [ 101.073953][ T4639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.90'. [ 101.157055][ T4638] syz.1.91: attempt to access beyond end of device [ 101.157055][ T4638] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 102.947494][ T4672] loop3: detected capacity change from 0 to 2048 [ 103.183653][ T4672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.256804][ T26] audit: type=1804 audit(1782395560.002:8): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.103" name="/newroot/19/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 103.355544][ T4687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 103.394747][ T4686] loop2: detected capacity change from 0 to 1024 [ 103.459601][ T4686] ======================================================= [ 103.459601][ T4686] WARNING: The mand mount option has been deprecated and [ 103.459601][ T4686] and is ignored by this kernel. Remove the mand [ 103.459601][ T4686] option from the mount to silence this warning. [ 103.459601][ T4686] ======================================================= [ 103.598953][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 103.658105][ C0] sched: RT throttling activated [ 103.943204][ T4686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.993022][ T4686] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.253898][ T26] audit: type=1800 audit(1782395561.002:9): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.106" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 104.315441][ T4686] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.106: lblock 0 mapped to illegal pblock 0 (length 1) [ 104.353456][ T26] audit: type=1800 audit(1782395561.052:10): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.106" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 104.421956][ T4686] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 104.472073][ T4686] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.472073][ T4686] [ 104.665559][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 105.129289][ T4723] device syzkaller0 entered promiscuous mode [ 105.136031][ T4715] loop2: detected capacity change from 0 to 8192 [ 105.234231][ T4715] loop2: p2 p4 [ 105.250217][ T4715] loop2: partition table partially beyond EOD, truncated [ 105.272779][ T4715] loop2: p2 start 269365764 is beyond EOD, truncated [ 105.284418][ T4715] loop2: p4 size 262144 extends beyond EOD, truncated [ 106.777639][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.819644][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 106.832601][ T4762] capability: warning: `syz.4.132' uses 32-bit capabilities (legacy support in use) [ 106.840098][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.840225][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.841827][ T4757] device bridge_slave_0 left promiscuous mode [ 106.843122][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.851092][ T4762] program syz.4.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.890172][ T4757] device bridge_slave_1 left promiscuous mode [ 106.890384][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.950338][ T4757] bond0: (slave bond_slave_0): Releasing backup interface [ 107.039036][ T4757] bond0: (slave bond_slave_1): Releasing backup interface [ 107.066796][ T4754] process 'syz.0.129' launched './file1' with NULL argv: empty string added [ 107.153929][ T4757] team0: Port device team_slave_0 removed [ 107.203154][ T4757] team0: Port device team_slave_1 removed [ 107.223702][ T4757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.253518][ T4757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.284626][ T4757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.311661][ T4757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.364980][ T4756] tipc: Enabled bearer , priority 0 [ 107.400708][ T4758] device syzkaller0 entered promiscuous mode [ 107.413977][ T4763] netlink: 'syz.0.129': attribute type 9 has an invalid length. [ 107.428916][ T4764] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 107.483220][ T4772] tipc: Resetting bearer [ 107.505211][ T4769] tipc: Started in network mode [ 107.510655][ T4769] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 107.518369][ T4769] tipc: Enabled bearer , priority 0 [ 107.569032][ T4755] tipc: Resetting bearer [ 107.636761][ T4755] tipc: Disabling bearer [ 107.779247][ T4786] loop1: detected capacity change from 0 to 8192 [ 108.238806][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 108.650326][ T4317] tipc: Node number set to 11578026 [ 108.760102][ T4825] tipc: Started in network mode [ 108.778389][ T4825] tipc: Node identity 06a03b72ce96, cluster identity 4711 [ 108.785699][ T4825] tipc: Enabled bearer , priority 0 [ 108.825307][ T4827] device syzkaller0 entered promiscuous mode [ 108.868770][ T4825] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 108.966808][ T4827] tipc: Resetting bearer [ 109.011232][ T4821] tipc: Resetting bearer [ 109.084778][ T4821] tipc: Disabling bearer [ 109.131976][ T4830] loop0: detected capacity change from 0 to 8192 [ 109.298032][ T4836] loop1: detected capacity change from 0 to 128 [ 109.510455][ T4845] syz.0.163 uses obsolete (PF_INET,SOCK_PACKET) [ 109.718236][ T4816] loop3: detected capacity change from 0 to 40427 [ 109.801010][ T4816] F2FS-fs (loop3): invalid crc value [ 109.875420][ T4816] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.111594][ T4816] F2FS-fs (loop3): Start checkpoint disabled! [ 110.181524][ T4816] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 110.243645][ T4871] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 110.263927][ T4871] netlink: 'syz.4.171': attribute type 2 has an invalid length. [ 110.291701][ T4816] syz.3.151: attempt to access beyond end of device [ 110.291701][ T4816] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 110.663521][ T4881] loop0: detected capacity change from 0 to 128 [ 110.934715][ T4878] loop4: detected capacity change from 0 to 8192 [ 110.970711][ T4357] kworker/u4:8: attempt to access beyond end of device [ 110.970711][ T4357] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 111.399913][ T4899] loop1: detected capacity change from 0 to 512 [ 111.539419][ T4899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.570129][ T4899] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.628490][ T4904] loop3: detected capacity change from 0 to 512 [ 112.070119][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 112.261091][ T4924] loop2: detected capacity change from 0 to 128 [ 112.504157][ T4261] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.570275][ T4926] loop3: detected capacity change from 0 to 8192 [ 112.708302][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 112.727847][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.774440][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.798868][ T4261] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 26 [ 112.843039][ T4261] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.869564][ T4937] loop0: detected capacity change from 0 to 1024 [ 112.906715][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.920244][ T4261] usb 2-1: SerialNumber: syz [ 113.017697][ T4937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.047000][ T4937] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.060418][ T4261] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 113.105920][ T4261] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 113.118295][ T4947] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 113.153675][ T4261] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 113.246866][ T4261] usb 2-1: USB disconnect, device number 2 [ 113.285240][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 113.462439][ T4954] loop0: detected capacity change from 0 to 256 [ 113.501177][ T4950] loop2: detected capacity change from 0 to 4096 [ 113.600194][ T4950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.831753][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 114.266795][ T4967] loop2: detected capacity change from 0 to 512 [ 114.424747][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.485006][ T4967] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.775593][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 115.002104][ T4986] loop4: detected capacity change from 0 to 256 [ 115.101017][ T4986] FAT-fs (loop4): Directory bread(block 64) failed [ 115.107652][ T4986] FAT-fs (loop4): Directory bread(block 65) failed [ 115.172716][ T4984] Zero length message leads to an empty skb [ 115.204789][ T4986] FAT-fs (loop4): Directory bread(block 66) failed [ 115.230730][ T4991] xt_TCPMSS: Only works on TCP SYN packets [ 115.232473][ T4986] FAT-fs (loop4): Directory bread(block 67) failed [ 115.279421][ T4986] FAT-fs (loop4): Directory bread(block 68) failed [ 115.309220][ T4986] FAT-fs (loop4): Directory bread(block 69) failed [ 115.342734][ T4986] FAT-fs (loop4): Directory bread(block 70) failed [ 115.349510][ T4986] FAT-fs (loop4): Directory bread(block 71) failed [ 115.356222][ T4986] FAT-fs (loop4): Directory bread(block 72) failed [ 115.393886][ T4986] FAT-fs (loop4): Directory bread(block 73) failed [ 115.542818][ T4986] syz.4.213: attempt to access beyond end of device [ 115.542818][ T4986] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 115.650847][ T4986] syz.4.213: attempt to access beyond end of device [ 115.650847][ T4986] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 115.752709][ T26] audit: type=1800 audit(1782395572.502:11): pid=4986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.213" name="file0" dev="loop4" ino=1048601 res=0 errno=0 [ 115.948279][ T4317] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.160112][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.169016][ T4317] usb 4-1: not running at top speed; connect to a high speed hub [ 116.183937][ T4317] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 116.213870][ T4317] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 116.257140][ T4317] usb 4-1: config 17 has no interface number 0 [ 116.276341][ T4317] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 116.298989][ T4317] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.314743][ T4317] usb 4-1: config 17 interface 8 has no altsetting 0 [ 116.347258][ T4317] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 116.407634][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.446585][ T4317] usb 4-1: Product: syz [ 116.457572][ T4317] usb 4-1: Manufacturer: syz [ 116.472899][ T4317] usb 4-1: SerialNumber: syz [ 116.652390][ T5009] netlink: 'syz.0.220': attribute type 8 has an invalid length. [ 117.296534][ T4337] kernel write not supported for file /null (pid: 4337 comm: kworker/1:6) [ 118.577793][ T5036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.230'. [ 118.592833][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 118.603640][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 118.619256][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 118.736329][ T4317] usb 4-1: selecting invalid altsetting 0 [ 118.761733][ T5037] xt_TCPMSS: Only works on TCP SYN packets [ 118.859515][ T4317] usb 4-1: USB disconnect, device number 2 [ 118.987471][ T5042] netlink: 52 bytes leftover after parsing attributes in process `syz.1.233'. [ 119.171423][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.167826][ T5091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.248'. [ 120.985152][ T5123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.261'. [ 122.723274][ T5160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 124.423812][ T5179] usb usb7: usbfs: process 5179 (syz.1.283) did not claim interface 0 before use [ 124.585474][ T5181] loop1: detected capacity change from 0 to 128 [ 124.646593][ T5181] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 124.664050][ T5181] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.706295][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 124.987861][ T5187] loop1: detected capacity change from 0 to 8192 [ 125.415638][ T5194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 126.382522][ T5217] loop1: detected capacity change from 0 to 8192 [ 126.598698][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 126.910620][ T5228] loop2: detected capacity change from 0 to 2048 [ 126.993797][ T5228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.286819][ T4326] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.349032][ T4326] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.388258][ T4326] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.388258][ T4326] [ 127.433571][ T4326] EXT4-fs (loop2): Total free blocks count 0 [ 127.460431][ T4326] EXT4-fs (loop2): Free/Dirty block details [ 127.466947][ T4326] EXT4-fs (loop2): free_blocks=2415919104 [ 127.491396][ T4326] EXT4-fs (loop2): dirty_blocks=32 [ 127.496646][ T4326] EXT4-fs (loop2): Block reservation details [ 127.541997][ T4326] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 127.571806][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 127.923173][ T5266] loop1: detected capacity change from 0 to 512 [ 127.989640][ T5266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.093860][ T5266] EXT4-fs (loop1): 1 truncate cleaned up [ 128.121988][ T5266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.284891][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 128.294789][ T5274] device syzkaller0 entered promiscuous mode [ 128.347036][ T5273] loop0: detected capacity change from 0 to 2048 [ 128.460576][ T5273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.596440][ T4326] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.682723][ T4326] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 128.768136][ T4326] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.768136][ T4326] [ 128.777866][ T4326] EXT4-fs (loop0): Total free blocks count 0 [ 128.808496][ T4326] EXT4-fs (loop0): Free/Dirty block details [ 128.814482][ T4326] EXT4-fs (loop0): free_blocks=2415919104 [ 128.820764][ T4326] EXT4-fs (loop0): dirty_blocks=32 [ 128.825929][ T4326] EXT4-fs (loop0): Block reservation details [ 128.832404][ T4326] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 128.840741][ T4326] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 129.564689][ T5315] loop0: detected capacity change from 0 to 512 [ 129.574356][ T5314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 129.661103][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 129.759799][ T5315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.818823][ T5315] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.157030][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 130.379072][ T5346] device syzkaller0 entered promiscuous mode [ 130.627674][ T5358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'. [ 130.994024][ T5377] loop4: detected capacity change from 0 to 1024 [ 131.334474][ T26] audit: type=1326 audit(1782395588.082:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.2.356" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455d39ce59 code=0x7ffc0000 [ 131.452799][ T26] audit: type=1326 audit(1782395588.122:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.2.356" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455d39ce59 code=0x7ffc0000 [ 131.584094][ T26] audit: type=1326 audit(1782395588.142:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.2.356" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f455d39ce59 code=0x7ffc0000 [ 131.663059][ T5393] loop0: detected capacity change from 0 to 2048 [ 131.692028][ T26] audit: type=1326 audit(1782395588.142:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.2.356" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455d39ce59 code=0x7ffc0000 [ 131.736000][ T5398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 131.746003][ T5395] device syzkaller0 entered promiscuous mode [ 131.767595][ T5393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.904838][ T26] audit: type=1326 audit(1782395588.142:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5385 comm="syz.2.356" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455d39ce59 code=0x7ffc0000 [ 132.037386][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 132.074283][ T5405] loop1: detected capacity change from 0 to 1024 [ 132.239432][ T5405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.346163][ T5405] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.447125][ T5405] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.362: Freeing blocks not in datazone - block = 0, count = 16 [ 132.518257][ T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 132.664933][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 132.749011][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.771241][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 132.832720][ T7] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 132.854665][ T7] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 132.898165][ T7] usb 4-1: config 17 has no interface number 0 [ 132.906376][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.913241][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.928213][ T7] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 132.959060][ T7] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.997138][ T7] usb 4-1: config 17 interface 8 has no altsetting 0 [ 133.036798][ T7] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 133.078231][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.118162][ T7] usb 4-1: Product: syz [ 133.122448][ T7] usb 4-1: Manufacturer: syz [ 133.163110][ T7] usb 4-1: SerialNumber: syz [ 133.576918][ T5448] loop0: detected capacity change from 0 to 512 [ 133.637351][ T5448] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.378: inode #1: comm syz.0.378: iget: illegal inode # [ 133.759381][ T5448] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.378: error while reading EA inode 1 err=-117 [ 133.814055][ T5448] EXT4-fs (loop0): 1 orphan inode deleted [ 133.832702][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.482305][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 134.496510][ T5435] loop4: detected capacity change from 0 to 40427 [ 134.539519][ T5435] F2FS-fs (loop4): invalid crc value [ 134.575584][ T5435] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.624728][ T5468] loop2: detected capacity change from 0 to 512 [ 134.656311][ T5468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.722797][ T5468] EXT4-fs (loop2): 1 truncate cleaned up [ 134.738339][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.794004][ T5435] F2FS-fs (loop4): Start checkpoint disabled! [ 134.972151][ T5475] loop1: detected capacity change from 0 to 164 [ 134.986957][ T5435] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 135.628849][ T4326] kworker/u4:6: attempt to access beyond end of device [ 135.628849][ T4326] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.134465][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 136.575069][ T5514] loop4: detected capacity change from 0 to 2048 [ 136.636418][ T5514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.662726][ T26] audit: type=1804 audit(1782395593.412:17): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.391" name="/newroot/65/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 136.788407][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 137.171289][ T5534] loop4: detected capacity change from 0 to 512 [ 137.267022][ T5534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.388432][ T5534] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.655931][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 138.097115][ T5546] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 138.125489][ T5521] loop2: detected capacity change from 0 to 40427 [ 138.164763][ T5521] F2FS-fs (loop2): invalid crc value [ 138.212425][ T5521] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.255361][ T7] usb 4-1: selecting invalid altsetting 0 [ 138.428433][ T5521] F2FS-fs (loop2): Start checkpoint disabled! [ 138.490278][ T5521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 138.941926][ T4357] kworker/u4:8: attempt to access beyond end of device [ 138.941926][ T4357] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 139.557320][ T5574] loop1: detected capacity change from 0 to 736 [ 139.822385][ T5574] rock: directory entry would overflow storage [ 139.870305][ T5574] rock: sig=0x3b10, size=4, remaining=3 [ 140.463594][ T4337] usb 4-1: USB disconnect, device number 3 [ 142.944049][ T5632] device syzkaller1 entered promiscuous mode [ 143.315082][ T5641] netlink: 'syz.2.444': attribute type 8 has an invalid length. [ 144.265738][ T5650] loop4: detected capacity change from 0 to 2048 [ 144.292878][ T5655] xt_hashlimit: size too large, truncated to 1048576 [ 144.403622][ T5650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.467402][ T26] audit: type=1804 audit(1782395601.212:18): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.448" name="/newroot/81/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 144.702152][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 144.753868][ T5672] device syzkaller1 entered promiscuous mode [ 145.287330][ T5686] autofs4:pid:5686:autofs_fill_super: called with bogus options [ 146.422109][ T5709] loop2: detected capacity change from 0 to 256 [ 146.551782][ T5711] xt_TCPMSS: Only works on TCP SYN packets [ 147.457830][ T5715] device syzkaller1 entered promiscuous mode [ 147.795116][ T5721] loop2: detected capacity change from 0 to 4096 [ 147.862875][ T5721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.980566][ T5729] device syzkaller0 entered promiscuous mode [ 148.117685][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 148.333634][ T5736] loop1: detected capacity change from 0 to 512 [ 148.444341][ T5736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.472150][ T5736] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.853857][ T5751] device syzkaller0 entered promiscuous mode [ 148.883122][ T5751] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 148.892035][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 150.229584][ T5764] device syzkaller0 entered promiscuous mode [ 150.541416][ T5772] loop0: detected capacity change from 0 to 128 [ 150.586504][ T5772] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 150.664667][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.699953][ T5772] ext2 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.865241][ T5780] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.937315][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 151.184456][ T5792] loop0: detected capacity change from 0 to 1764 [ 151.657816][ T5792] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 152.112975][ T5801] device syzkaller0 entered promiscuous mode [ 152.157471][ T5804] loop4: detected capacity change from 0 to 512 [ 152.173117][ T5804] EXT4-fs: Ignoring removed oldalloc option [ 152.179372][ T5804] EXT4-fs: Ignoring removed i_version option [ 152.228552][ T5804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.296535][ T5804] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.324202][ T5804] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.508: invalid indirect mapped block 4294967295 (level 1) [ 152.354527][ T5804] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.508: invalid indirect mapped block 4294967295 (level 1) [ 152.374856][ T5804] EXT4-fs (loop4): 2 truncates cleaned up [ 152.380909][ T5804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.406389][ T5812] loop3: detected capacity change from 0 to 512 [ 152.432163][ T5812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.471631][ T5812] EXT4-fs (loop3): 1 truncate cleaned up [ 152.519692][ T5804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.508'. [ 152.533951][ T5812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.088357][ T4321] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 153.364840][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 153.387236][ T4321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.523503][ T4321] usb 1-1: not running at top speed; connect to a high speed hub [ 153.813778][ T4321] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 154.057707][ T4321] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 154.202108][ T4321] usb 1-1: config 17 has no interface number 0 [ 154.269138][ T4321] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 154.621537][ T4321] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.914627][ T4321] usb 1-1: config 17 interface 8 has no altsetting 0 [ 155.104335][ T4321] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 155.231608][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.353451][ T4321] usb 1-1: Product: syz [ 155.401432][ T4321] usb 1-1: Manufacturer: syz [ 155.451737][ T4321] usb 1-1: SerialNumber: syz [ 155.607425][ T4321] usb 1-1: can't set config #17, error -71 [ 155.708686][ T4321] usb 1-1: USB disconnect, device number 2 [ 155.902094][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 156.024462][ T5838] loop2: detected capacity change from 0 to 512 [ 156.035727][ T5838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.863271][ T5846] loop3: detected capacity change from 0 to 128 [ 156.870830][ T5838] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.521: iget: bad i_size value: 38620345925642 [ 156.906081][ T5838] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.521: couldn't read orphan inode 15 (err -117) [ 156.932579][ T5846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.968629][ T5846] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.019995][ T5838] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.243602][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 157.464988][ T5853] loop4: detected capacity change from 0 to 8192 [ 157.970435][ T5876] loop3: detected capacity change from 0 to 1024 [ 157.983620][ T5876] EXT4-fs: Ignoring removed orlov option [ 158.042125][ T5876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.390720][ T5884] capability: warning: `syz.3.531' uses deprecated v2 capabilities in a way that may be insecure [ 158.431308][ T5884] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.568473][ T5844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 158.650740][ T4612] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 158.697663][ T4612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.697663][ T4612] [ 158.734558][ T4612] EXT4-fs (loop2): Total free blocks count 0 [ 158.762295][ T4612] EXT4-fs (loop2): Free/Dirty block details [ 158.780688][ T4612] EXT4-fs (loop2): free_blocks=0 [ 158.797389][ T4612] EXT4-fs (loop2): dirty_blocks=6496 [ 159.741881][ T4612] EXT4-fs (loop2): Block reservation details [ 159.788170][ T4612] EXT4-fs (loop2): i_reserved_data_blocks=6496 [ 160.111508][ T4357] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 160.270496][ T5900] loop0: detected capacity change from 0 to 512 [ 160.311693][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.536838][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 160.598828][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 160.991869][ T5912] loop2: detected capacity change from 0 to 4096 [ 161.095424][ T5912] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.133170][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 161.280187][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 162.338759][ T5928] tc action pedit 'at' offset -32769 out of bounds [ 162.490493][ T5933] device syzkaller0 entered promiscuous mode [ 162.605045][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 163.978484][ T4316] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 164.267639][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.342951][ T4316] usb 3-1: not running at top speed; connect to a high speed hub [ 164.466073][ T4316] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 164.537762][ T4316] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 164.626788][ T4316] usb 3-1: config 17 has no interface number 0 [ 164.671368][ T5964] program syz.4.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.698751][ T4316] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 164.791866][ T4316] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.887942][ T4316] usb 3-1: config 17 interface 8 has no altsetting 0 [ 164.943048][ T4316] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 165.040529][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.108821][ T4316] usb 3-1: Product: syz [ 165.159586][ T4316] usb 3-1: Manufacturer: syz [ 165.164457][ T4316] usb 3-1: SerialNumber: syz [ 169.832451][ T4316] usb 3-1: selecting invalid altsetting 0 [ 169.861509][ T4316] usb 3-1: USB disconnect, device number 2 [ 169.991528][ T5995] loop4: detected capacity change from 0 to 4096 [ 170.086252][ T6003] loop1: detected capacity change from 0 to 1024 [ 170.094531][ T5995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.103271][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.107705][ T6003] EXT4-fs: Ignoring removed orlov option [ 170.148756][ T6003] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.217219][ T6006] loop0: detected capacity change from 0 to 512 [ 171.024537][ T26] audit: type=1800 audit(1782395627.772:19): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.577" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 171.238877][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.254101][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 171.471743][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 171.594662][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 172.063318][ T6035] loop1: detected capacity change from 0 to 1024 [ 172.214680][ T6035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.263603][ T6035] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.332066][ T6045] netlink: 68 bytes leftover after parsing attributes in process `syz.3.584'. [ 173.353731][ T6054] loop4: detected capacity change from 0 to 512 [ 173.403552][ T4609] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 173.452328][ T4609] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 173.470599][ T4609] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.470599][ T4609] [ 173.485082][ T6054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.500982][ T4609] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 4) [ 173.521787][ T4609] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 173.541622][ T4609] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.541622][ T4609] [ 173.556856][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 173.568907][ T6054] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.587: missing EA_INODE flag [ 173.648411][ T6054] EXT4-fs (loop4): Remounting filesystem read-only [ 173.655014][ T6054] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.587: error while reading EA inode 2 err=-117 [ 173.705827][ T6057] loop3: detected capacity change from 0 to 4096 [ 173.722355][ T6054] EXT4-fs (loop4): Remounting filesystem read-only [ 173.741967][ T6054] EXT4-fs (loop4): 1 truncate cleaned up [ 173.753610][ T6060] loop1: detected capacity change from 0 to 512 [ 173.763349][ T6054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.062274][ T6060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.635386][ T6057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.854905][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 174.885831][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 175.053628][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 175.085782][ T6072] loop1: detected capacity change from 0 to 512 [ 175.152475][ T6072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.223684][ T6072] EXT4-fs (loop1): 1 truncate cleaned up [ 175.282169][ T6072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.524844][ T6087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.596'. [ 175.861933][ T6094] usb usb7: usbfs: process 6094 (syz.0.600) did not claim interface 0 before use [ 175.992277][ T6098] loop2: detected capacity change from 0 to 512 [ 176.109379][ T6098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.162654][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 176.363557][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 176.743991][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 177.550926][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 177.736260][ T6121] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 178.198341][ T4337] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 178.458579][ T4337] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.514283][ T4337] usb 1-1: not running at top speed; connect to a high speed hub [ 178.687642][ T4337] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 178.892585][ T4337] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 179.125974][ T4337] usb 1-1: config 17 has no interface number 0 [ 179.300679][ T4337] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 179.394596][ T4337] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.446413][ T4337] usb 1-1: config 17 interface 8 has no altsetting 0 [ 179.564557][ T4337] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 179.689606][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.814808][ T4337] usb 1-1: Product: syz [ 179.868807][ T4337] usb 1-1: Manufacturer: syz [ 179.925986][ T4337] usb 1-1: SerialNumber: syz [ 180.967102][ T6138] loop1: detected capacity change from 0 to 512 [ 181.025467][ T6138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.280870][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 181.962710][ T4337] usb 1-1: selecting invalid altsetting 0 [ 182.122787][ T6147] loop3: detected capacity change from 0 to 1024 [ 182.156781][ T4337] usb 1-1: USB disconnect, device number 3 [ 182.248468][ T6147] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 182.334758][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.533696][ T6147] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 182.544748][ T6147] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.620: Failed to acquire dquot type 0 [ 182.576328][ T6147] EXT4-fs (loop3): 1 truncate cleaned up [ 182.587024][ T6147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.899625][ T6174] xt_TCPMSS: Only works on TCP SYN packets [ 183.000213][ T6147] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 183.045850][ T6147] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 183.253945][ T6147] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.620: Failed to acquire dquot type 0 [ 183.589099][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 183.729048][ T6183] netlink: 68 bytes leftover after parsing attributes in process `syz.1.630'. [ 184.689902][ T6189] loop0: detected capacity change from 0 to 512 [ 184.724560][ T6189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.780420][ T6189] EXT4-fs (loop0): 1 truncate cleaned up [ 184.806535][ T6189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.247580][ T6213] qfq: no options [ 185.898233][ T6226] xt_TCPMSS: Only works on TCP SYN packets [ 186.140082][ T6230] netlink: 68 bytes leftover after parsing attributes in process `syz.1.644'. [ 186.202411][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 186.893369][ T6252] loop0: detected capacity change from 0 to 512 [ 186.974753][ T6252] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.653: inode has both inline data and extents flags [ 186.998874][ T6252] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.653: couldn't read orphan inode 15 (err -117) [ 187.088317][ T6252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.110859][ T6260] device syzkaller0 entered promiscuous mode [ 187.152205][ T26] audit: type=1800 audit(1782395643.902:20): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.653" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 187.263232][ T6265] loop3: detected capacity change from 0 to 512 [ 187.311507][ T6265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.373202][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 187.387707][ T6265] EXT4-fs (loop3): 1 truncate cleaned up [ 187.400543][ T6265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.715735][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 187.858295][ T6274] xt_TCPMSS: Only works on TCP SYN packets [ 188.453492][ T6278] loop1: detected capacity change from 0 to 512 [ 188.614697][ T6278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.756243][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 188.771980][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 188.939783][ T6294] loop1: detected capacity change from 0 to 512 [ 189.030749][ T6294] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.666: dx entry: limit 1024 != root limit 124 [ 189.068221][ T6294] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.666: Corrupt directory, running e2fsck is recommended [ 189.179955][ T6294] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 189.210551][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.670'. [ 189.315370][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.4.671'. [ 189.413144][ T6294] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.666: corrupted in-inode xattr [ 189.555210][ T6294] EXT4-fs (loop1): Remounting filesystem read-only [ 189.686539][ T6294] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.666: couldn't read orphan inode 15 (err -117) [ 189.937558][ T6294] EXT4-fs (loop1): Remounting filesystem read-only [ 190.202179][ T6294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.378577][ T6294] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 190.453150][ T6294] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 190.687282][ T6322] xt_TCPMSS: Only works on TCP SYN packets [ 190.953110][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 191.576631][ T6333] loop4: detected capacity change from 0 to 512 [ 191.686335][ T6333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.763561][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 191.789854][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'. [ 192.403369][ T6365] loop2: detected capacity change from 0 to 512 [ 192.466591][ T6367] loop1: detected capacity change from 0 to 512 [ 192.505179][ T6365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.521743][ T6367] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 192.531649][ T6367] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 192.742090][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 192.765824][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.698'. [ 192.907965][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 193.158110][ T6392] loop1: detected capacity change from 0 to 1024 [ 193.187197][ T6392] EXT4-fs: Ignoring removed orlov option [ 193.274030][ T6392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.606879][ T6409] loop2: detected capacity change from 0 to 512 [ 193.916452][ T6409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.050016][ T6409] EXT4-fs (loop2): 1 truncate cleaned up [ 194.096515][ T6409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.263107][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 194.331504][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337938][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.528190][ T6330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.538021][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 195.735646][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.727'. [ 197.633524][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.742'. [ 198.475803][ T26] audit: type=1326 audit(1782395655.222:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 198.572703][ T26] audit: type=1326 audit(1782395655.222:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 198.676484][ T26] audit: type=1326 audit(1782395655.222:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 198.724124][ T6505] netlink: 236 bytes leftover after parsing attributes in process `syz.3.748'. [ 198.774127][ T26] audit: type=1326 audit(1782395655.222:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 198.882979][ T26] audit: type=1326 audit(1782395655.222:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 198.968217][ T26] audit: type=1326 audit(1782395655.222:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 199.068379][ T26] audit: type=1326 audit(1782395655.222:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.745" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2b9ce59 code=0x7ffc0000 [ 199.111674][ T6516] loop1: detected capacity change from 0 to 1024 [ 199.171532][ T6516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.190289][ T6516] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.255003][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 199.302289][ T6516] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.753: lblock 3 mapped to illegal pblock 3 (length 3) [ 199.407605][ T6516] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 199.471993][ T6527] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.556100][ T6516] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.556100][ T6516] [ 200.853270][ T6544] netlink: 236 bytes leftover after parsing attributes in process `syz.4.762'. [ 203.623002][ T6519] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 203.978524][ T4487] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 204.001296][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 204.017578][ T4487] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 204.035917][ T4487] EXT4-fs (loop1): This should not happen!! Data will be lost [ 204.035917][ T4487] [ 204.081594][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 204.329541][ T6568] loop2: detected capacity change from 0 to 512 [ 204.445402][ T6568] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.773: dx entry: limit 1024 != root limit 124 [ 204.489798][ T6568] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.773: Corrupt directory, running e2fsck is recommended [ 204.565378][ T6568] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 204.565527][ T6568] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.773: corrupted in-inode xattr [ 204.580552][ T6568] EXT4-fs (loop2): Remounting filesystem read-only [ 204.580643][ T6568] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.773: couldn't read orphan inode 15 (err -117) [ 204.590937][ T6568] EXT4-fs (loop2): Remounting filesystem read-only [ 204.590979][ T6568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.607218][ T6568] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 204.647037][ T6580] netlink: 236 bytes leftover after parsing attributes in process `syz.3.778'. [ 204.779005][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 204.999668][ T6588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'. [ 205.322786][ T6597] loop3: detected capacity change from 0 to 512 [ 205.363653][ T6597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.437963][ T6597] EXT4-fs (loop3): 1 truncate cleaned up [ 205.471168][ T6597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.654814][ T6612] loop0: detected capacity change from 0 to 1024 [ 205.715641][ T6612] EXT4-fs: Ignoring removed orlov option [ 205.723298][ T6615] netlink: 236 bytes leftover after parsing attributes in process `syz.2.791'. [ 205.782232][ T6612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 205.928590][ T4323] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 206.147437][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.170938][ T4323] usb 2-1: not running at top speed; connect to a high speed hub [ 206.537739][ T4323] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 206.583515][ T4323] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 206.639613][ T4323] usb 2-1: config 17 has no interface number 0 [ 206.648608][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 206.654671][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 206.660867][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 206.666897][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 206.673140][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 206.724756][ T4323] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 206.791768][ T4323] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.840136][ T4323] usb 2-1: config 17 interface 8 has no altsetting 0 [ 206.880143][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 206.908944][ T4323] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 206.948222][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.972436][ T4323] usb 2-1: Product: syz [ 206.976698][ T4323] usb 2-1: Manufacturer: syz [ 207.034572][ T4323] usb 2-1: SerialNumber: syz [ 207.105294][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 207.124877][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 208.044478][ T6642] netlink: 236 bytes leftover after parsing attributes in process `syz.0.803'. [ 210.769568][ T6686] netlink: 236 bytes leftover after parsing attributes in process `syz.3.819'. [ 212.599758][ T4323] usb 2-1: selecting invalid altsetting 0 [ 212.717249][ T6718] loop2: detected capacity change from 0 to 512 [ 212.764345][ T6722] loop4: detected capacity change from 0 to 512 [ 212.793133][ T6718] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.815486][ T6722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.866616][ T6718] EXT4-fs (loop2): 1 truncate cleaned up [ 212.880878][ T6718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.898973][ T6722] EXT4-fs (loop4): 1 truncate cleaned up [ 212.904709][ T6722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 213.150441][ T6731] netlink: 236 bytes leftover after parsing attributes in process `syz.0.834'. [ 213.196751][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 213.729647][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 215.189177][ T4323] usb 2-1: USB disconnect, device number 3 [ 215.254936][ T6765] loop3: detected capacity change from 0 to 512 [ 215.344768][ T6765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.400038][ T6765] EXT4-fs (loop3): 1 truncate cleaned up [ 215.405784][ T6765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.754938][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 215.885336][ T6783] loop3: detected capacity change from 0 to 512 [ 215.904214][ T6783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.927439][ T6783] EXT4-fs (loop3): 1 truncate cleaned up [ 215.934484][ T6783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.245076][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 216.293312][ T6787] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 216.301577][ T6787] netlink: 152 bytes leftover after parsing attributes in process `syz.3.850'. [ 216.329456][ T6787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.351793][ T6735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.963836][ T6805] loop1: detected capacity change from 0 to 512 [ 217.066048][ T6805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.125030][ T6805] EXT4-fs (loop1): 1 truncate cleaned up [ 217.130674][ T6810] loop3: detected capacity change from 0 to 512 [ 217.163856][ T6805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 217.194397][ T6810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.256576][ T6818] tipc: Enabling of bearer rejected, failed to enable media [ 217.305302][ T6810] EXT4-fs (loop3): 1 truncate cleaned up [ 217.372638][ T6810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.540119][ T6832] netlink: 128 bytes leftover after parsing attributes in process `syz.2.865'. [ 217.608330][ T6832] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 217.734193][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 218.229053][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 218.325225][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 218.362710][ T6849] netlink: 236 bytes leftover after parsing attributes in process `syz.4.870'. [ 218.393261][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 218.512187][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.869'. [ 219.731430][ T6880] loop4: detected capacity change from 0 to 512 [ 219.747933][ T6881] tipc: Enabling of bearer rejected, failed to enable media [ 219.777839][ T6880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.870098][ T6880] EXT4-fs (loop4): 1 truncate cleaned up [ 219.875851][ T6880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 219.987251][ T6890] netlink: 'syz.0.884': attribute type 29 has an invalid length. [ 220.076415][ T6890] netlink: 'syz.0.884': attribute type 29 has an invalid length. [ 220.126584][ T6896] netlink: 'syz.0.884': attribute type 29 has an invalid length. [ 220.198905][ T6899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.885'. [ 221.031113][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 221.707911][ T6948] tipc: Enabling of bearer rejected, failed to enable media [ 222.006842][ T6960] loop2: detected capacity change from 0 to 512 [ 222.056374][ T6960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.095563][ T6962] loop4: detected capacity change from 0 to 512 [ 222.137776][ T6960] EXT4-fs (loop2): 1 truncate cleaned up [ 222.160936][ T6960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.180927][ T6962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.264535][ T6962] EXT4-fs (loop4): 1 truncate cleaned up [ 222.304778][ T6962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.559760][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 223.244960][ T6982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.904'. [ 223.328593][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 223.544948][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 223.734172][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.772668][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.819955][ T7] usb 1-1: config 0 has no interface number 0 [ 223.843525][ T7] usb 1-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.907972][ T7] usb 1-1: config 0 interface 1 has no altsetting 0 [ 223.970959][ T7] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 224.028538][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.047295][ T7] usb 1-1: Product: syz [ 224.056988][ T7] usb 1-1: Manufacturer: syz [ 224.077264][ T7] usb 1-1: SerialNumber: syz [ 224.109450][ T7] usb 1-1: config 0 descriptor?? [ 224.130509][ T7] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 224.157999][ T7] cx231xx 1-1:0.1: Not found matching IAD interface [ 224.300372][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 224.335034][ T126] usb 1-1: USB disconnect, device number 4 [ 224.407905][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.912'. [ 224.463147][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.576330][ T6999] device syzkaller0 entered promiscuous mode [ 224.649868][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 224.670685][ T7] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 224.689683][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.699086][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 224.710489][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 224.723975][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.736631][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.745083][ T7] usb 2-1: Product: syz [ 224.750792][ T7] usb 2-1: Manufacturer: syz [ 224.792688][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 224.803474][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 224.893660][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 224.904196][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 225.006475][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.031075][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.072333][ T126] usb 2-1: USB disconnect, device number 4 [ 225.828382][ T4323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 226.523927][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 226.537250][ T4323] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 226.546244][ T4323] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.559327][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.569805][ T4323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.579564][ T4323] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.592728][ T4323] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 226.601922][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.614426][ T4323] usb 5-1: config 0 descriptor?? [ 226.842166][ T129] usb 5-1: USB disconnect, device number 2 [ 227.438136][ T129] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 227.670129][ T129] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 227.679700][ T129] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.689876][ T129] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.701997][ T129] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.711636][ T129] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.734836][ T129] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 227.746076][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.765674][ T129] usb 5-1: config 0 descriptor?? [ 227.775496][ T129] hub 5-1:0.0: bad descriptor, ignoring hub [ 227.782073][ T129] hub: probe of 5-1:0.0 failed with error -5 [ 227.982294][ T129] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 228.099788][ T129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.141859][ T129] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 228.157081][ T129] usb 5-1: media controller created [ 228.189402][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.316585][ T129] DVB: Unable to find symbol dib7000p_attach() [ 228.323451][ T129] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 228.364941][ T7004] tipc: Enabling of bearer rejected, failed to enable media [ 228.508085][ T129] rc_core: IR keymap rc-dib0700-rc5 not found [ 228.514254][ T129] Registered IR keymap rc-empty [ 228.533546][ T129] dvb-usb: could not initialize remote control. [ 228.569193][ T129] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 228.633861][ T129] usb 5-1: USB disconnect, device number 3 [ 228.652276][ T7053] loop0: detected capacity change from 0 to 512 [ 228.715083][ T129] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 228.748254][ T7053] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.922: dx entry: limit 1024 != root limit 124 [ 228.808247][ T7053] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.922: Corrupt directory, running e2fsck is recommended [ 228.823104][ T7053] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 228.833246][ T7053] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.922: corrupted in-inode xattr [ 228.855877][ T7053] EXT4-fs (loop0): Remounting filesystem read-only [ 228.873273][ T7053] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.922: couldn't read orphan inode 15 (err -117) [ 228.898750][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 228.907954][ T7053] EXT4-fs (loop0): Remounting filesystem read-only [ 228.928309][ T33] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 228.936385][ T7053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 229.009683][ T7053] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 229.023451][ T7053] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 229.137251][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 229.145651][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.173259][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.216720][ T33] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 229.238914][ T33] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 229.253011][ T33] usb 2-1: Manufacturer: syz [ 229.798531][ T4323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.330531][ T33] usb 2-1: config 0 descriptor?? [ 230.388740][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.423402][ T7080] device syzkaller0 entered promiscuous mode [ 230.446298][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.465909][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.476379][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.573327][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.612285][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.724959][ T129] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 230.757586][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.794809][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.812115][ T33] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 230.828231][ T33] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 230.835289][ T33] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 230.858126][ T33] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 230.865184][ T33] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 230.896698][ T33] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 230.918135][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 230.953823][ T129] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 230.978105][ T129] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 230.998084][ T129] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 231.019494][ T7] usb 2-1: USB disconnect, device number 5 [ 231.032971][ T129] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 231.051537][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.059965][ T129] usb 4-1: Product: syz [ 231.064312][ T129] usb 4-1: Manufacturer: syz [ 231.070497][ T129] usb 4-1: SerialNumber: syz [ 231.080019][ T4323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 231.114702][ T4323] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 231.123238][ T4323] usb 1-1: can't read configurations, error -71 [ 231.151582][ T129] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 231.188176][ T129] imon 4-1:155.0: unable to initialize intf0, err -19 [ 231.195065][ T129] imon:imon_probe: failed to initialize context! [ 231.218258][ T129] imon 4-1:155.0: unable to register, err -19 [ 231.253035][ T7085] fido_id[7085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 232.175689][ T7069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.682573][ T33] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 232.768237][ T4323] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 232.911769][ T33] usb 3-1: not running at top speed; connect to a high speed hub [ 232.936211][ T33] usb 3-1: config 1 has an invalid interface number: 152 but max is 0 [ 232.944646][ T33] usb 3-1: config 1 has no interface number 0 [ 232.950911][ T33] usb 3-1: config 1 interface 152 has no altsetting 0 [ 232.958498][ T33] usb 3-1: language id specifier not provided by device, defaulting to English [ 232.969628][ T33] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=3b.f4 [ 232.978800][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.986911][ T33] usb 3-1: Product: 쥬⫆ꏇ鼔缎⬏㓨뷅㾲킦댯훚ꕂ챂ﭹ溃鯭⻔ℍ萌淄慅媠꿐퀯璫嵉憇⓷地ᱴ꣆勔씄皺ꮞ줧摶쏻煕沯㽝䙿䂶蟁ㇾ钮䏙㙿៶췄⃖䩋矵꺉ᛧ♜녛〫疵芳ᳶ▐ቴ侓뼨 [ 233.005687][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.011498][ T33] usb 3-1: Manufacturer: п [ 233.026784][ T33] usb 3-1: SerialNumber: Џ [ 233.036515][ T4323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.047952][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.068918][ T4323] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 233.083397][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.112831][ T4323] usb 1-1: config 0 descriptor?? [ 233.472313][ T33] gspca_main: spca501-2.14.0 probing 0497:c001 [ 233.514704][ T7] usb 4-1: USB disconnect, device number 4 [ 233.687791][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 233.702773][ T33] gspca_spca501: reg write: error -71 [ 233.708619][ T33] spca501 3-1:1.152: Reg write failed for 0x02,0x07,0x05 [ 233.739309][ T33] spca501: probe of 3-1:1.152 failed with error -22 [ 233.787836][ T33] usb 3-1: USB disconnect, device number 4 [ 233.936913][ T4323] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 233.944490][ T4323] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 233.952739][ T4323] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 233.961701][ T4323] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 234.204552][ T4337] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 234.499520][ T4337] usb 2-1: Using ep0 maxpacket: 16 [ 234.516400][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.621107][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.720131][ T4337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.847492][ T4323] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 234.899112][ T4323] usb 1-1: USB disconnect, device number 7 [ 234.909245][ T4337] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.953389][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.994254][ T4337] usb 2-1: config 0 descriptor?? [ 235.838522][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.891652][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.927896][ T7127] fido_id[7127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.972848][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 236.000820][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.028766][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.036094][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.081412][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.105329][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.117675][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.127669][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.155747][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.166957][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.176798][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.178893][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 236.190712][ T7136] device syzkaller0 entered promiscuous mode [ 236.206568][ T7] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.210150][ T4337] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 236.244252][ T4337] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input6 [ 236.254988][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.265558][ T7] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 236.299432][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.327415][ T7] usb 3-1: config 0 descriptor?? [ 236.404884][ T4337] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 236.437924][ T4337] usb 2-1: USB disconnect, device number 6 [ 236.620348][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 236.692708][ T7143] fido_id[7143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 236.762316][ T7] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 236.828158][ T4323] usb 5-1: Using ep0 maxpacket: 16 [ 236.835827][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.916977][ T4323] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 236.962796][ T4323] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 237.029997][ T4323] usb 5-1: Manufacturer: syz [ 237.045544][ T4323] usb 5-1: config 0 descriptor?? [ 237.113344][ T7156] xt_TCPMSS: Only works on TCP SYN packets [ 237.148229][ T129] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.368378][ T129] usb 1-1: Using ep0 maxpacket: 8 [ 237.405639][ T129] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.565183][ T129] usb 1-1: config 179 has no interface number 0 [ 237.703374][ T129] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 237.716104][ T129] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 237.727811][ T129] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.742120][ T129] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 237.753973][ T129] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.769623][ T129] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 237.789324][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.845586][ T4337] usb 3-1: USB disconnect, device number 5 [ 237.860591][ T7147] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 237.968314][ T6129] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.178323][ T6129] usb 2-1: Using ep0 maxpacket: 16 [ 238.186748][ T6129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.233192][ T6129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.258240][ T6129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.315355][ T6129] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.333022][ T4323] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0005/input/input7 [ 238.345555][ T6129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.360928][ T7161] fido_id[7161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 238.409398][ T6129] usb 2-1: config 0 descriptor?? [ 238.444329][ T4337] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 238.480114][ T4323] creative-sb0540 0003:041E:3100.0005: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 238.531581][ T129] usb 1-1: USB disconnect, device number 8 [ 238.538554][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.546959][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.561336][ T129] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 238.738665][ T4323] usb 5-1: USB disconnect, device number 4 [ 238.811292][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 238.828727][ T4317] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 238.842207][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.855311][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.870643][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.877969][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.885305][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.892882][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.900979][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.908370][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.915698][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.923629][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.931386][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.938791][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.946074][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.954072][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 238.976610][ T6129] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 239.008464][ T6129] HID 045e:07da: Invalid code 65791 type 1 [ 239.014731][ T6129] HID 045e:07da: Invalid code 768 type 1 [ 239.028266][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 239.033939][ T6129] HID 045e:07da: Invalid code 769 type 1 [ 239.040186][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.042786][ T4317] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 239.060107][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.078143][ T6129] HID 045e:07da: Invalid code 770 type 1 [ 239.083879][ T6129] HID 045e:07da: Invalid code 771 type 1 [ 239.093389][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.110606][ T4317] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.128238][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.136136][ T6129] HID 045e:07da: Invalid code 772 type 1 [ 239.141956][ T6129] HID 045e:07da: Invalid code 773 type 1 [ 239.147650][ T6129] HID 045e:07da: Invalid code 774 type 1 [ 239.159501][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.168806][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.177045][ T4317] usb 3-1: Product: syz [ 239.185755][ T6129] HID 045e:07da: Invalid code 775 type 1 [ 239.191851][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.199910][ T4317] usb 3-1: Manufacturer: syz [ 239.204566][ T4317] usb 3-1: SerialNumber: syz [ 239.210416][ T6129] HID 045e:07da: Invalid code 776 type 1 [ 239.226345][ T4317] usb 3-1: config 0 descriptor?? [ 239.239009][ T7167] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 239.250664][ T6129] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9 [ 239.263366][ T4317] hub 3-1:0.0: bad descriptor, ignoring hub [ 239.277463][ T4317] hub: probe of 3-1:0.0 failed with error -5 [ 239.352534][ T6129] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 239.372701][ T6129] usb 2-1: USB disconnect, device number 7 [ 239.456466][ T7183] device syzkaller0 entered promiscuous mode [ 239.541996][ T7181] fido_id[7181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 239.588232][ T4317] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 239.782124][ T4317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.814275][ T4317] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 239.827395][ T4317] usb 1-1: config 114 has no interface number 0 [ 239.839818][ T4317] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 239.850843][ T4317] usb 1-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 239.862019][ T4317] usb 1-1: config 114 interface 240 has no altsetting 0 [ 239.881672][ T4317] usb 1-1: string descriptor 0 read error: -22 [ 239.899203][ T4317] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 239.908392][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.921166][ T7175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.938589][ T7167] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 239.949405][ T7175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.970395][ T4317] ir_usb 1-1:114.240: required endpoints missing [ 240.143941][ T7167] usb 3-1: device firmware changed [ 240.151975][ T33] usb 3-1: USB disconnect, device number 6 [ 240.182139][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.200202][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.236295][ T7195] loop4: detected capacity change from 0 to 1024 [ 240.294678][ T7195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.304246][ T7195] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.330023][ T7195] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.968: lblock 3 mapped to illegal pblock 3 (length 3) [ 240.349663][ T7195] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 240.367490][ T33] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.378304][ T7195] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.378304][ T7195] [ 240.408797][ T126] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.434815][ T7195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.528204][ T4317] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.558130][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 240.579959][ T33] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.589404][ T33] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 240.597046][ T33] usb 3-1: can't read configurations, error -71 [ 240.610137][ T126] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 240.618567][ T126] usb 2-1: config 2 has no interface number 0 [ 240.624858][ T126] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 240.635433][ T126] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 240.646654][ T126] usb 2-1: config 2 interface 43 has no altsetting 0 [ 240.656245][ T126] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 240.665718][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.674154][ T126] usb 2-1: Product: syz [ 240.678685][ T126] usb 2-1: Manufacturer: syz [ 240.683394][ T126] usb 2-1: SerialNumber: syz [ 240.692059][ T7191] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 240.704336][ T7191] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 240.718247][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 240.725904][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.744905][ T4317] usb 4-1: config 2 has an invalid interface number: 205 but max is 0 [ 240.754796][ T4317] usb 4-1: config 2 has no interface number 0 [ 240.760999][ T4317] usb 4-1: config 2 interface 205 has no altsetting 0 [ 240.770795][ T4317] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=62.7c [ 240.780199][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.788273][ T4317] usb 4-1: Product: syz [ 240.792688][ T4317] usb 4-1: Manufacturer: syz [ 240.797345][ T4317] usb 4-1: SerialNumber: syz [ 240.924729][ T126] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 240.942488][ T126] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 240.968191][ T7200] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 240.999567][ T126] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 241.020564][ T4317] gspca_main: etoms-2.14.0 probing 102c:6251 [ 241.023859][ T126] usb 2-1: USB disconnect, device number 8 [ 241.063657][ T5818] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 241.102707][ T5818] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 241.117044][ T5818] EXT4-fs (loop4): This should not happen!! Data will be lost [ 241.117044][ T5818] [ 241.131935][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 241.169567][ T4317] usb 4-1: USB disconnect, device number 5 [ 241.741809][ T7219] device syzkaller0 entered promiscuous mode [ 242.097026][ T7231] loop1: detected capacity change from 0 to 512 [ 242.169189][ T7231] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.980: dx entry: limit 1024 != root limit 124 [ 242.244562][ T7231] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.980: Corrupt directory, running e2fsck is recommended [ 242.280095][ T7231] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 242.296785][ T7231] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.980: corrupted in-inode xattr [ 242.311375][ T7231] EXT4-fs (loop1): Remounting filesystem read-only [ 242.318372][ T7231] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.980: couldn't read orphan inode 15 (err -117) [ 242.373085][ T7231] EXT4-fs (loop1): Remounting filesystem read-only [ 242.384522][ T7231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.401095][ T33] usb 1-1: USB disconnect, device number 9 [ 242.408341][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 242.523388][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 242.628142][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 242.635305][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.679744][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.714631][ T4317] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.738092][ T129] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 242.747116][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.773009][ T4317] usb 5-1: config 0 descriptor?? [ 242.793083][ T4317] hub 5-1:0.0: USB hub found [ 242.948295][ T129] usb 4-1: Using ep0 maxpacket: 32 [ 242.964841][ T129] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 242.993893][ T4317] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 243.016574][ T129] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 243.045896][ T129] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 243.068177][ T4337] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 243.082566][ T129] usb 4-1: Product: syz [ 243.096550][ T129] usb 4-1: Manufacturer: syz [ 243.112099][ T129] usb 4-1: SerialNumber: syz [ 243.146803][ T129] usb 4-1: config 0 descriptor?? [ 243.159350][ T7245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.186812][ T129] hub 4-1:0.0: bad descriptor, ignoring hub [ 243.194143][ T129] hub: probe of 4-1:0.0 failed with error -5 [ 243.281737][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 243.289964][ T4337] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 243.300168][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.308381][ T4337] usb 3-1: Product: syz [ 243.314475][ T4337] usb 3-1: Manufacturer: syz [ 243.328301][ T4337] usb 3-1: SerialNumber: syz [ 243.336189][ T4337] usb 3-1: config 0 descriptor?? [ 243.351968][ T4337] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 243.412279][ T4317] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 243.440182][ T4317] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 243.645062][ T7265] device syzkaller0 entered promiscuous mode [ 243.766100][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.801324][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.031291][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.048485][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.061855][ T7234] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 244.070550][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.118881][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.133775][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.145734][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.159943][ T4337] gspca_stk1135: reg_w 0x0 err -71 [ 244.167532][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.190476][ T4337] gspca_stk1135: Sensor write failed [ 244.202231][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.210010][ T4337] gspca_stk1135: Sensor write failed [ 244.216351][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.224032][ T4337] gspca_stk1135: Sensor read failed [ 244.229816][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.236527][ T4337] gspca_stk1135: Sensor read failed [ 244.242488][ T4337] gspca_stk1135: Detected sensor type unknown (0x0) [ 244.249943][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.256557][ T4337] gspca_stk1135: Sensor read failed [ 244.262629][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.269565][ T4337] gspca_stk1135: Sensor read failed [ 244.275155][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.282534][ T4337] gspca_stk1135: Sensor write failed [ 244.289968][ T4337] gspca_stk1135: serial bus timeout: status=0x00 [ 244.297105][ T4337] gspca_stk1135: Sensor write failed [ 244.321678][ T4337] stk1135: probe of 3-1:0.0 failed with error -71 [ 244.351127][ T4337] usb 3-1: USB disconnect, device number 9 [ 244.723286][ T129] usb 5-1: USB disconnect, device number 5 [ 244.898157][ T4337] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 245.098209][ T4337] usb 2-1: Using ep0 maxpacket: 16 [ 245.114640][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.181479][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.209438][ T4337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.235564][ T4337] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 245.245135][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.281719][ T4337] usb 2-1: config 0 descriptor?? [ 245.358148][ T129] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 245.376899][ T7300] device syzkaller0 entered promiscuous mode [ 245.528873][ T129] usb 5-1: device descriptor read/64, error -71 [ 245.615034][ T126] usb 4-1: USB disconnect, device number 6 [ 245.711479][ T7307] loop0: detected capacity change from 0 to 1024 [ 245.774810][ T7307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 245.805913][ T7307] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.818217][ T129] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.877132][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:19: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.913242][ T6412] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 245.926703][ T6412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 245.926703][ T6412] [ 245.947171][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 245.955887][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 245.979490][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 245.988107][ T129] usb 5-1: device descriptor read/64, error -71 [ 246.001001][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.036457][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.066639][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.078241][ T126] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 246.108376][ T129] usb usb5-port1: attempt power cycle [ 246.128111][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.136645][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.149038][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.167639][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.188320][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.195636][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.216109][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.248234][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.251849][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1011'. [ 246.255552][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.270071][ T126] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 246.298107][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.313806][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.327018][ T126] usb 4-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 246.328363][ T4337] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 246.367365][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.380656][ T4337] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input10 [ 246.396412][ T126] usb 4-1: Product: syz [ 246.406203][ T126] usb 4-1: Manufacturer: syz [ 246.424778][ T4337] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 246.438765][ T126] usb 4-1: SerialNumber: syz [ 246.460566][ T126] usb 4-1: config 0 descriptor?? [ 246.481767][ T4337] usb 2-1: USB disconnect, device number 9 [ 246.671389][ T4261] usb 4-1: USB disconnect, device number 7 [ 246.729415][ T7332] fido_id[7332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 246.961106][ T7338] loop4: detected capacity change from 0 to 1024 [ 247.016017][ T7340] device syzkaller0 entered promiscuous mode [ 247.027664][ T7342] loop1: detected capacity change from 0 to 1024 [ 247.043723][ T7340] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 247.068448][ T7338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 247.078301][ T7338] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.116687][ T7342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 247.160057][ T7338] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.1017: lblock 3 mapped to illegal pblock 3 (length 3) [ 247.168572][ T7342] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.264662][ T7338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 247.317467][ T7338] EXT4-fs (loop4): This should not happen!! Data will be lost [ 247.317467][ T7338] [ 247.358794][ T5818] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:18: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.386790][ T5818] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 247.401309][ T5818] EXT4-fs (loop1): This should not happen!! Data will be lost [ 247.401309][ T5818] [ 247.422456][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 248.041132][ T7372] xt_TCPMSS: Only works on TCP SYN packets [ 248.260345][ T7315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 248.712087][ T6412] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:19: lblock 8 mapped to illegal pblock 8 (length 8) [ 248.731311][ T6412] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 248.744017][ T6412] EXT4-fs (loop4): This should not happen!! Data will be lost [ 248.744017][ T6412] [ 248.779926][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 248.848161][ T126] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 249.029664][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 249.039823][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 249.050222][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 249.059999][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 249.073057][ T126] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 249.082361][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.090586][ T126] usb 1-1: Product: syz [ 249.094959][ T126] usb 1-1: Manufacturer: syz [ 249.099654][ T126] usb 1-1: SerialNumber: syz [ 249.114364][ T126] usb 1-1: config 0 descriptor?? [ 249.122356][ T126] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 249.178337][ T4337] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 249.329332][ T126] scsi host1: usb-storage 1-1:0.0 [ 249.345734][ T126] usb 1-1: USB disconnect, device number 10 [ 249.381237][ T4337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 249.401161][ T4337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 249.419972][ T4337] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 249.433245][ T4337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.442190][ T4337] usb 5-1: Product: syz [ 249.446640][ T4337] usb 5-1: Manufacturer: syz [ 249.457005][ T4337] usb 5-1: SerialNumber: syz [ 249.463776][ T4337] usb 5-1: config 0 descriptor?? [ 249.471848][ T4337] hub 5-1:0.0: bad descriptor, ignoring hub [ 249.477817][ T4337] hub: probe of 5-1:0.0 failed with error -5 [ 249.486404][ T4337] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 249.908276][ T126] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.090175][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 250.101013][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 250.108595][ T3624] usb 5-1: reset full-speed USB device number 9 using dummy_hcd [ 250.112073][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 250.129571][ T4261] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 250.139613][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 250.152415][ T126] usb 1-1: string descriptor 0 read error: -22 [ 250.158789][ T126] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 250.168218][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.179112][ T126] usb 1-1: config 0 descriptor?? [ 250.186233][ T126] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 250.255077][ T7350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.322895][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.343404][ T4261] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 250.374448][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.420872][ T126] scsi host1: usb-storage 1-1:0.0 [ 250.454470][ T4261] usb 3-1: Product: syz [ 250.459395][ T126] usb 1-1: USB disconnect, device number 11 [ 250.467203][ T4261] usb 3-1: Manufacturer: syz [ 250.480907][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 250.483531][ T4261] usb 3-1: SerialNumber: syz [ 250.521951][ T7392] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1032'. [ 250.537064][ T7394] loop1: detected capacity change from 0 to 1024 [ 250.622607][ T7394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 250.639127][ T7394] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.692323][ T129] usb 5-1: USB disconnect, device number 9 [ 250.738994][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 250.798999][ T4326] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm kworker/u4:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 250.833860][ T4326] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 250.861666][ T4326] EXT4-fs (loop1): This should not happen!! Data will be lost [ 250.861666][ T4326] [ 250.879559][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 250.937581][ T7403] loop3: detected capacity change from 0 to 1024 [ 250.947357][ T7403] EXT4-fs: Ignoring removed orlov option [ 250.953747][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.978792][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.000667][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.026964][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.047265][ T7403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 251.115193][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.198361][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.349996][ T7410] loop0: detected capacity change from 0 to 1024 [ 251.456872][ T4261] usb 3-1: MIDIStreaming interface descriptor not found [ 251.466549][ T7410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 251.485231][ T7410] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.548495][ T4261] usb 3-1: USB disconnect, device number 10 [ 251.608119][ T7410] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.1037: lblock 3 mapped to illegal pblock 3 (length 3) [ 251.728174][ T7410] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 251.769720][ T7410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 251.769720][ T7410] [ 251.786362][ T7158] udevd[7158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.568107][ T129] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 252.719655][ T4350] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 252.758963][ T4350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 252.778123][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 252.785564][ T129] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 252.796525][ T4350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 252.796525][ T4350] [ 252.809987][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 252.829714][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 252.858990][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 252.882424][ T7439] ------------[ cut here ]------------ [ 252.888593][ T7439] WARNING: CPU: 0 PID: 7439 at net/sched/sch_taprio.c:1026 taprio_get_start_time+0x139/0x160 [ 252.896096][ T129] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 252.898888][ T7439] Modules linked in: [ 252.898965][ T7439] CPU: 0 PID: 7439 Comm: syz.1.1045 Not tainted syzkaller #0 [ 252.898990][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.899013][ T7439] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 252.922717][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.929636][ T7439] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 21 72 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 f9 20 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 252.929661][ T7439] RSP: 0018:ffffc90003c06d68 EFLAGS: 00010283 [ 252.929685][ T7439] RAX: ffffffff886127c9 RBX: ffffc90003c06e78 RCX: 0000000000080000 [ 252.929704][ T7439] RDX: ffffc9000fba6000 RSI: 0000000000007100 RDI: 0000000000007101 [ 252.946590][ T129] usb 5-1: Product: syz [ 252.963520][ T7439] RBP: 0000000000000002 R08: ffffffff90af23af R09: 1ffffffff215e475 [ 252.963546][ T7439] R10: dffffc0000000000 R11: fffffbfff215e476 R12: 18bc57745224cfca [ 252.963565][ T7439] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.963587][ T7439] FS: 00007f44a05776c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.963609][ T7439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.963626][ T7439] CR2: 00007f449d9f5ff8 CR3: 0000000027b6e000 CR4: 00000000003506f0 [ 252.963647][ T7439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.001630][ T129] usb 5-1: Manufacturer: syz [ 253.006102][ T7439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.006122][ T7439] Call Trace: [ 253.006132][ T7439] [ 253.006146][ T7439] taprio_change+0x3f99/0x5390 [ 253.031235][ T129] usb 5-1: SerialNumber: syz [ 253.037857][ T7439] ? taprio_destroy+0x4b0/0x4b0 [ 253.037898][ T7439] ? lockdep_init_map_type+0x98/0x8d0 [ 253.084812][ T7439] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 253.090034][ T7439] ? memset+0x1e/0x40 [ 253.094074][ T7439] ? fifo_init+0x3f6/0x6d0 [ 253.098622][ T7439] ? qdisc_peek_head+0x40/0x40 [ 253.103467][ T7439] ? rcu_is_watching+0x11/0xa0 [ 253.108355][ T7439] ? taprio_peek+0x590/0x590 [ 253.113009][ T7439] qdisc_create+0x7ef/0x10c0 [ 253.117667][ T7439] ? qdisc_notify+0x370/0x370 [ 253.122593][ T7439] ? lockdep_rtnl_is_held+0x22/0x30 [ 253.127853][ T7439] ? qdisc_lookup+0x35d/0x6b0 [ 253.132636][ T7439] tc_modify_qdisc+0xb43/0x1de0 [ 253.137562][ T7439] ? qdisc_offload_query_caps+0x150/0x150 [ 253.139391][ T129] usb 5-1: config 0 descriptor?? [ 253.143579][ T7439] ? qdisc_offload_query_caps+0x150/0x150 [ 253.154124][ T7439] rtnetlink_rcv_msg+0x863/0xfb0 [ 253.159179][ T7439] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 253.164368][ T7439] ? rtnetlink_bind+0x80/0x80 [ 253.169161][ T7439] ? __local_bh_enable_ip+0x136/0x1c0 [ 253.174596][ T7439] ? lockdep_hardirqs_on+0x94/0x140 [ 253.179936][ T7439] ? __local_bh_enable_ip+0x136/0x1c0 [ 253.185370][ T7439] ? _local_bh_enable+0xa0/0xa0 [ 253.190344][ T7439] ? __dev_queue_xmit+0x281/0x3810 [ 253.195529][ T7439] ? __dev_queue_xmit+0x281/0x3810 [ 253.200784][ T7439] ? __dev_queue_xmit+0x1d84/0x3810 [ 253.206065][ T7439] ? __dev_queue_xmit+0x281/0x3810 [ 253.211338][ T7439] ? ref_tracker_free+0x682/0x830 [ 253.216440][ T7439] ? refcount_inc+0x70/0x70 [ 253.221076][ T7439] ? memcpy+0x3c/0x60 [ 253.225114][ T7439] ? __copy_skb_header+0x3ba/0x4f0 [ 253.230357][ T7439] ? __skb_clone+0x446/0x6c0 [ 253.235020][ T7439] netlink_rcv_skb+0x1ef/0x440 [ 253.239889][ T7439] ? rtnetlink_bind+0x80/0x80 [ 253.244631][ T7439] ? netlink_ack+0x1160/0x1160 [ 253.249507][ T7439] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.254767][ T7439] netlink_unicast+0x7ad/0x920 [ 253.259643][ T7439] netlink_sendmsg+0x8ad/0xbd0 [ 253.264488][ T7439] ? netlink_getsockopt+0x550/0x550 [ 253.269797][ T7439] ? aa_sock_msg_perm+0x94/0x150 [ 253.274801][ T7439] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.280197][ T7439] ? security_socket_sendmsg+0x7c/0xa0 [ 253.285733][ T7439] ? netlink_getsockopt+0x550/0x550 [ 253.291049][ T7439] ____sys_sendmsg+0x5ed/0x9a0 [ 253.295878][ T7439] ? __sys_sendmsg_sock+0x30/0x30 [ 253.301000][ T7439] ? __import_iovec+0x306/0x510 [ 253.305917][ T7439] ? import_iovec+0x6f/0xa0 [ 253.310551][ T7439] ___sys_sendmsg+0x2a2/0x360 [ 253.315298][ T7439] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.320207][ T7439] __se_sys_sendmsg+0x1c3/0x2b0 [ 253.325131][ T7439] ? __x64_sys_sendmsg+0x80/0x80 [ 253.330181][ T7439] ? lockdep_hardirqs_on+0x94/0x140 [ 253.335432][ T7439] do_syscall_64+0x4c/0xa0 [ 253.339931][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 253.344657][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 253.349425][ T7439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.355400][ T7439] RIP: 0033:0x7f449f79ce59 [ 253.359916][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.379630][ T7439] RSP: 002b:00007f44a0577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.388145][ T7439] RAX: ffffffffffffffda RBX: 00007f449fa16090 RCX: 00007f449f79ce59 [ 253.396168][ T7439] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 253.404231][ T7439] RBP: 00007f449f832e6f R08: 0000000000000000 R09: 0000000000000000 [ 253.412299][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.420375][ T7439] R13: 00007f449fa16128 R14: 00007f449fa16090 R15: 00007ffd4340b598 [ 253.428508][ T7439] [ 253.431594][ T7439] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 253.438919][ T7439] CPU: 0 PID: 7439 Comm: syz.1.1045 Not tainted syzkaller #0 [ 253.446332][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.456509][ T7439] Call Trace: [ 253.459824][ T7439] [ 253.462796][ T7439] dump_stack_lvl+0x188/0x24e [ 253.467522][ T7439] ? memcpy+0x3c/0x60 [ 253.471548][ T7439] ? show_regs_print_info+0x12/0x12 [ 253.476795][ T7439] ? load_image+0x410/0x410 [ 253.481539][ T7439] panic+0x2d3/0x710 [ 253.485498][ T7439] ? bpf_jit_dump+0xd0/0xd0 [ 253.490069][ T7439] __warn+0x2f8/0x4f0 [ 253.494111][ T7439] ? taprio_get_start_time+0x139/0x160 [ 253.499630][ T7439] ? taprio_get_start_time+0x139/0x160 [ 253.505148][ T7439] report_bug+0x2ba/0x4f0 [ 253.509545][ T7439] ? taprio_get_start_time+0x139/0x160 [ 253.515084][ T7439] handle_bug+0x3a/0x70 [ 253.519287][ T7439] exc_invalid_op+0x16/0x40 [ 253.523843][ T7439] asm_exc_invalid_op+0x16/0x20 [ 253.528757][ T7439] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 253.534877][ T7439] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9c 21 72 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 f9 20 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 253.554535][ T7439] RSP: 0018:ffffc90003c06d68 EFLAGS: 00010283 [ 253.560658][ T7439] RAX: ffffffff886127c9 RBX: ffffc90003c06e78 RCX: 0000000000080000 [ 253.568764][ T7439] RDX: ffffc9000fba6000 RSI: 0000000000007100 RDI: 0000000000007101 [ 253.576776][ T7439] RBP: 0000000000000002 R08: ffffffff90af23af R09: 1ffffffff215e475 [ 253.584790][ T7439] R10: dffffc0000000000 R11: fffffbfff215e476 R12: 18bc57745224cfca [ 253.589925][ T129] usb 5-1: USB disconnect, device number 10 [ 253.598725][ T7439] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.606754][ T7439] ? taprio_get_start_time+0x139/0x160 [ 253.612301][ T7439] ? taprio_get_start_time+0x139/0x160 [ 253.617827][ T7439] taprio_change+0x3f99/0x5390 [ 253.622682][ T7439] ? taprio_destroy+0x4b0/0x4b0 [ 253.627596][ T7439] ? lockdep_init_map_type+0x98/0x8d0 [ 253.633025][ T7439] ? rtnetlink_rcv_msg+0x863/0xfb0 [ 253.638190][ T7439] ? memset+0x1e/0x40 [ 253.642226][ T7439] ? fifo_init+0x3f6/0x6d0 [ 253.646705][ T7439] ? qdisc_peek_head+0x40/0x40 [ 253.651539][ T7439] ? rcu_is_watching+0x11/0xa0 [ 253.656373][ T7439] ? taprio_peek+0x590/0x590 [ 253.661020][ T7439] qdisc_create+0x7ef/0x10c0 [ 253.665668][ T7439] ? qdisc_notify+0x370/0x370 [ 253.670392][ T7439] ? lockdep_rtnl_is_held+0x22/0x30 [ 253.675654][ T7439] ? qdisc_lookup+0x35d/0x6b0 [ 253.680384][ T7439] tc_modify_qdisc+0xb43/0x1de0 [ 253.685294][ T7439] ? qdisc_offload_query_caps+0x150/0x150 [ 253.691082][ T7439] ? qdisc_offload_query_caps+0x150/0x150 [ 253.696846][ T7439] rtnetlink_rcv_msg+0x863/0xfb0 [ 253.701834][ T7439] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 253.707008][ T7439] ? rtnetlink_bind+0x80/0x80 [ 253.711737][ T7439] ? __local_bh_enable_ip+0x136/0x1c0 [ 253.717174][ T7439] ? lockdep_hardirqs_on+0x94/0x140 [ 253.722465][ T7439] ? __local_bh_enable_ip+0x136/0x1c0 [ 253.727890][ T7439] ? _local_bh_enable+0xa0/0xa0 [ 253.732809][ T7439] ? __dev_queue_xmit+0x281/0x3810 [ 253.738020][ T7439] ? __dev_queue_xmit+0x281/0x3810 [ 253.743376][ T7439] ? __dev_queue_xmit+0x1d84/0x3810 [ 253.748640][ T7439] ? __dev_queue_xmit+0x281/0x3810 [ 253.753828][ T7439] ? ref_tracker_free+0x682/0x830 [ 253.758916][ T7439] ? refcount_inc+0x70/0x70 [ 253.763471][ T7439] ? memcpy+0x3c/0x60 [ 253.767502][ T7439] ? __copy_skb_header+0x3ba/0x4f0 [ 253.772668][ T7439] ? __skb_clone+0x446/0x6c0 [ 253.777336][ T7439] netlink_rcv_skb+0x1ef/0x440 [ 253.782150][ T7439] ? rtnetlink_bind+0x80/0x80 [ 253.786881][ T7439] ? netlink_ack+0x1160/0x1160 [ 253.790450][ T129] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 253.799293][ T7439] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.804559][ T7439] netlink_unicast+0x7ad/0x920 [ 253.809386][ T7439] netlink_sendmsg+0x8ad/0xbd0 [ 253.814214][ T7439] ? netlink_getsockopt+0x550/0x550 [ 253.819470][ T7439] ? aa_sock_msg_perm+0x94/0x150 [ 253.824452][ T7439] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.829812][ T7439] ? security_socket_sendmsg+0x7c/0xa0 [ 253.835328][ T7439] ? netlink_getsockopt+0x550/0x550 [ 253.840585][ T7439] ____sys_sendmsg+0x5ed/0x9a0 [ 253.845413][ T7439] ? __sys_sendmsg_sock+0x30/0x30 [ 253.850490][ T7439] ? __import_iovec+0x306/0x510 [ 253.855398][ T7439] ? import_iovec+0x6f/0xa0 [ 253.859957][ T7439] ___sys_sendmsg+0x2a2/0x360 [ 253.864690][ T7439] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.869567][ T7439] __se_sys_sendmsg+0x1c3/0x2b0 [ 253.874469][ T7439] ? __x64_sys_sendmsg+0x80/0x80 [ 253.879508][ T7439] ? lockdep_hardirqs_on+0x94/0x140 [ 253.884766][ T7439] do_syscall_64+0x4c/0xa0 [ 253.889231][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 253.893950][ T7439] ? clear_bhb_loop+0x60/0xb0 [ 253.898674][ T7439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.904630][ T7439] RIP: 0033:0x7f449f79ce59 [ 253.909091][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.928751][ T7439] RSP: 002b:00007f44a0577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.937213][ T7439] RAX: ffffffffffffffda RBX: 00007f449fa16090 RCX: 00007f449f79ce59 [ 253.945228][ T7439] RDX: 0000000000008010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 253.953247][ T7439] RBP: 00007f449f832e6f R08: 0000000000000000 R09: 0000000000000000 [ 253.961279][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.969301][ T7439] R13: 00007f449fa16128 R14: 00007f449fa16090 R15: 00007ffd4340b598 [ 253.977346][ T7439] [ 253.981000][ T7439] Kernel Offset: disabled [ 253.985429][ T7439] Rebooting in 86400 seconds..