last executing test programs: 12m45.489454349s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[], 0x0, 0x138, &(0x7f0000000200)="$eJzs2r9KAzEcB/DfIAodHZ0KlVOQ3l+tq47iUxxtcg0mntwJ0r6AODkIcfAlBJ/AR7jRTUd9iZPYqO21aCeD8P0s/XK/NkkTyC2/bpGriJerNLFe5KrdS/b7POKpfXZERG0Tqrq+9WnO81e9qslf8AW3Nt8mn53tTB9fcSFZ7HpJAAAAAAAAAAAAAAAAAAAAAACwJK9lQ2uo1SUXkkVT1XI0PkmlZEXpaHnOeW3bw0VcyzuzP8lMfeeVyDswSejDwtTD2d/f2LA11PKlub/BuToLytG4K1SasYydxnHSC3fDcC8OPsYKmiN693ZNVNUP4Xw7mTfVb/a0TL+ZPf+VDaGvL5qzfZ+/q0BOZ0dAQFgUfr1X/ovP999gLek8mvvP7+dyYB/+xXY6/O8A8IP3AAAA//8kwzd9") r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 12m42.206072482s ago: executing program 1 (id=10): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3130025, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 12m38.489075071s ago: executing program 1 (id=16): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() clock_gettime(0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {}, {0x3, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7f, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 12m22.401222682s ago: executing program 32 (id=16): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() clock_gettime(0x0, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {}, {0x3, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7f, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 17.208701793s ago: executing program 4 (id=1567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 13.508014128s ago: executing program 2 (id=1575): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) 12.31840178s ago: executing program 2 (id=1576): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 12.043623386s ago: executing program 2 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbc78c26caa1b33b}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24054081}, 0x80) 10.806637254s ago: executing program 2 (id=1579): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) 10.60849826s ago: executing program 5 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffc, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_io_uring_setup(0x32ba, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r2, r2, 0x0, 0x2000fb) 9.476801464s ago: executing program 0 (id=1582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 9.465570496s ago: executing program 5 (id=1583): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_io_uring_setup(0x4ae2, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbf}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a3", 0x33) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000140)=0xfff) 9.43359861s ago: executing program 4 (id=1584): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.075177596s ago: executing program 5 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002440)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0xfffffffffffffffe}, 0x68) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 8.462246455s ago: executing program 4 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r4, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 8.34255207s ago: executing program 0 (id=1587): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.935581783s ago: executing program 0 (id=1588): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/206) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x800088a) timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) rename(0x0, &(0x7f000001fb40)='./file2\x00') 7.527627915s ago: executing program 5 (id=1589): r0 = socket$inet6(0xa, 0x3, 0x3c) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@tclass={{0x10, 0x29, 0x43, 0xaa8}}], 0x10}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) r6 = dup(r5) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e3, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x7, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x4, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x0, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x9, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b41, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x10, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8000008, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x4, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adeb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x10000, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0x9d, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x2008, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x2, 0x401, 0x1, 0x5, 0x8, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101002000090400000302020000052406000005240000000d24f20000000000ff0f000000042402060905810300020d041009058202ff0300fe0309050302", @ANYRES32=r0, @ANYBLOB="f32a6be58696d601033cc9ec51fb18d17a22626beb7a43870431b952329025301512b996f42aa0", @ANYRESOCT=r0, @ANYRESDEC=r6, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x0) 7.476709641s ago: executing program 2 (id=1590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0xa0000009, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000400)={{0x2c, @broadcast, 0x4e24, 0x1, 'wrr\x00', 0xb, 0x0, 0x20}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x2, 0x8, 0x4, 0x53cc}}, 0x44) poll(0x0, 0x0, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x2) 6.7820488s ago: executing program 0 (id=1591): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) 6.689722552s ago: executing program 3 (id=1592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101142, 0x56633bd1cf1d94b2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000040)='./file1\x00', 0x2) 5.731222856s ago: executing program 3 (id=1593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffc, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_io_uring_setup(0x32ba, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r2, r2, 0x0, 0x2000fb) 5.672901293s ago: executing program 0 (id=1594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 4.645450524s ago: executing program 4 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) 4.392703377s ago: executing program 3 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 3.571967152s ago: executing program 5 (id=1597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.444573779s ago: executing program 4 (id=1598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.912985557s ago: executing program 3 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002440)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0xfffffffffffffffe}, 0x68) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.366751537s ago: executing program 5 (id=1600): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) 1.839206355s ago: executing program 4 (id=1601): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/206) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x800088a) timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) rename(0x0, &(0x7f000001fb40)='./file2\x00') 1.667241837s ago: executing program 0 (id=1602): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/206) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x800088a) timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) rename(0x0, &(0x7f000001fb40)='./file2\x00') 1.666682687s ago: executing program 3 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 400.093269ms ago: executing program 3 (id=1604): openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x121a00, 0x0) unshare(0x20000400) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646d61736b3d30300000303030303030d61500d351432574deb3d110bd44303031303030303030343230352c646973636172072c666d61736b3d30303030303030303030303030303030303030303030362c0008004b76c7"], 0x1, 0x14d4, &(0x7f00000015c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 0s ago: executing program 2 (id=1605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r5, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) kernel console output (not intermixed with test programs): eiserfs_priv - reserved for xattr storage. [ 228.163228][ T5926] loop3: detected capacity change from 0 to 8192 [ 229.021841][ T5926] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 229.032465][ T5926] REISERFS (device loop3): using ordered data mode [ 229.039581][ T5926] reiserfs: using flush barriers [ 229.076723][ T5926] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 229.094901][ T5926] REISERFS (device loop3): checking transaction log (loop3) [ 229.467840][ T5926] REISERFS (device loop3): Using tea hash to sort names [ 229.477507][ T5926] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 230.600448][ T5941] bond1: option mode: unable to set because the bond device is up [ 231.262747][ T5952] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 231.273192][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 231.338543][ T5956] bond1: option mode: unable to set because the bond device has slaves [ 231.359447][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 231.381161][ T5957] loop4: detected capacity change from 0 to 128 [ 231.476264][ T5957] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 231.559350][ T5957] hpfs: filesystem error: improperly stopped [ 231.595421][ T5957] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 231.636166][ T5957] hpfs: You really don't want any checks? You are crazy... [ 231.652507][ T5957] hpfs: hpfs_map_sector(): read error [ 231.660849][ T5957] hpfs: code page support is disabled [ 231.668099][ T5957] hpfs: hpfs_map_4sectors(): unaligned read [ 231.686352][ T4458] usb 42-1: SetAddress Request (14) to port 0 [ 231.693830][ T4458] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 231.716575][ T5957] hpfs: hpfs_map_4sectors(): unaligned read [ 231.749757][ T5957] hpfs: filesystem error: unable to find root dir [ 231.941862][ T5957] hpfs: hpfs_map_4sectors(): unaligned read [ 232.115238][ T5953] vhci_hcd: connection reset by peer [ 233.085510][ T5964] loop3: detected capacity change from 0 to 8192 [ 233.625577][ T5469] vhci_hcd: stop threads [ 233.903685][ T5964] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 233.917037][ T5964] REISERFS (device loop3): using ordered data mode [ 233.925113][ T5964] reiserfs: using flush barriers [ 233.939391][ T5964] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.962745][ T5964] REISERFS (device loop3): checking transaction log (loop3) [ 234.011693][ T5469] vhci_hcd: release socket [ 234.179289][ T5469] vhci_hcd: disconnect device [ 234.703616][ T5964] REISERFS (device loop3): Using tea hash to sort names [ 234.712976][ T5964] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 236.176569][ T1324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 236.729118][ T5982] bond1: option mode: unable to set because the bond device is up [ 236.747816][ T1324] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.768480][ T1324] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.792755][ T1324] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.143379][ T4458] usb 42-1: device descriptor read/8, error -110 [ 237.171585][ T1324] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 237.218031][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.250847][ T1324] usb 3-1: Product: syz [ 237.263654][ T5988] bond1: option mode: unable to set because the bond device has slaves [ 237.290509][ T1324] usb 3-1: Manufacturer: syz [ 237.303203][ T1324] usb 3-1: SerialNumber: syz [ 237.388190][ T1324] usblp0: Disabling reads from problematic bidirectional printer [ 237.434178][ T5992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 237.441401][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 237.452235][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 237.466334][ T5992] loop3: detected capacity change from 0 to 128 [ 237.617558][ T4458] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 237.687496][ T5992] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 237.736040][ T5996] loop4: detected capacity change from 0 to 32768 [ 237.750545][ T1324] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 237.776562][ T5992] hpfs: filesystem error: improperly stopped [ 237.783141][ T5992] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 237.886564][ T4458] usb usb42-port1: attempt power cycle [ 237.923123][ T5992] hpfs: You really don't want any checks? You are crazy... [ 237.946941][ T4457] usb 40-1: SetAddress Request (18) to port 0 [ 238.070865][ T4457] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 238.174629][ T5996] (syz.4.373,5996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.193267][ T5996] (syz.4.373,5996,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 238.216719][ T5992] hpfs: hpfs_map_sector(): read error [ 238.251237][ T5992] hpfs: code page support is disabled [ 238.257197][ T4458] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 238.277032][ T5996] JBD2: Ignoring recovery information on journal [ 238.394874][ T5992] hpfs: hpfs_map_4sectors(): unaligned read [ 238.401505][ T5992] hpfs: hpfs_map_4sectors(): unaligned read [ 238.407808][ T5992] hpfs: filesystem error: unable to find root dir [ 238.430739][ T5996] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 238.455144][ T4397] ocfs2: Finishing quota recovery on device (7,4) for slot 0 [ 238.519485][ T6004] loop5: detected capacity change from 0 to 8192 [ 238.660278][ T6004] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 238.670875][ T4458] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 238.681830][ T5992] hpfs: hpfs_map_4sectors(): unaligned read [ 238.688345][ T6004] REISERFS (device loop5): using ordered data mode [ 238.692628][ T4458] usb usb42-port1: unable to enumerate USB device [ 238.729777][ T6004] reiserfs: using flush barriers [ 238.736139][ T6004] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.754396][ T6004] REISERFS (device loop5): checking transaction log (loop5) [ 240.012421][ T6017] syz.4.373 (6017) used greatest stack depth: 18808 bytes left [ 240.021912][ T5993] vhci_hcd: connection reset by peer [ 240.044512][ T4458] usb 3-1: USB disconnect, device number 3 [ 240.202520][ T154] vhci_hcd: stop threads [ 240.207431][ T154] vhci_hcd: release socket [ 240.245538][ T154] vhci_hcd: disconnect device [ 240.340085][ T4458] usblp0: removed [ 240.516106][ T6004] REISERFS (device loop5): Using tea hash to sort names [ 240.554342][ T6004] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 240.841366][ T6027] bond1: option mode: unable to set because the bond device has slaves [ 241.061767][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 241.429974][ T6036] bond1: option mode: unable to set because the bond device has slaves [ 242.593351][ T6046] process 'syz.3.383' launched './file0' with NULL argv: empty string added [ 243.623605][ T4457] usb 40-1: device descriptor read/8, error -110 [ 244.286969][ T4457] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 244.306276][ T4458] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 244.318267][ T4457] usb usb40-port1: attempt power cycle [ 244.384119][ T6060] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 244.390841][ T6060] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 244.401641][ T6060] vhci_hcd vhci_hcd.0: Device attached [ 244.417965][ T6060] loop0: detected capacity change from 0 to 128 [ 244.443438][ T6060] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 244.506687][ T6060] hpfs: filesystem error: improperly stopped [ 244.558509][ T6060] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 244.716431][ T4457] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 244.836508][ T6066] loop4: detected capacity change from 0 to 8192 [ 244.996390][ T4458] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.026072][ T6066] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 245.036609][ T6066] REISERFS (device loop4): using ordered data mode [ 245.043457][ T6066] reiserfs: using flush barriers [ 245.065190][ T6066] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.083760][ T6066] REISERFS (device loop4): checking transaction log (loop4) [ 245.115554][ T6060] hpfs: You really don't want any checks? You are crazy... [ 245.274413][ T6060] hpfs: hpfs_map_sector(): read error [ 245.285017][ T6068] bond1: option mode: unable to set because the bond device is up [ 245.359728][ T6060] hpfs: code page support is disabled [ 245.441817][ T6060] hpfs: hpfs_map_4sectors(): unaligned read [ 245.541335][ T6060] hpfs: hpfs_map_4sectors(): unaligned read [ 245.576270][ T6060] hpfs: filesystem error: unable to find root dir [ 245.695828][ T6072] bond1: option mode: unable to set because the bond device is up [ 245.965873][ T6066] REISERFS (device loop4): Using tea hash to sort names [ 245.975081][ T6066] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 246.051157][ T6074] hpfs: hpfs_map_4sectors(): unaligned read [ 246.326529][ T4458] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.340516][ T6061] vhci_hcd: connection closed [ 246.368275][ T9] vhci_hcd: stop threads [ 246.388967][ T4458] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.650657][ T4457] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 246.886553][ T4457] usb usb40-port1: unable to enumerate USB device [ 246.895479][ T9] vhci_hcd: release socket [ 246.930699][ T9] vhci_hcd: disconnect device [ 247.366605][ T4458] usb 6-1: string descriptor 0 read error: -71 [ 247.374259][ T4458] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 247.394760][ T4458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.019170][ T6091] loop4: detected capacity change from 0 to 8192 [ 251.426306][ T4458] usb 6-1: can't set config #4, error -71 [ 251.442517][ T4458] usb 6-1: USB disconnect, device number 2 [ 251.511737][ T6109] bond1: option mode: unable to set because the bond device is up [ 252.648687][ T6120] loop4: detected capacity change from 0 to 8192 [ 252.715092][ T6120] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 252.725142][ T6120] REISERFS (device loop4): using ordered data mode [ 252.732024][ T6120] reiserfs: using flush barriers [ 252.743222][ T6120] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.761780][ T6120] REISERFS (device loop4): checking transaction log (loop4) [ 253.157479][ T6120] REISERFS (device loop4): Using tea hash to sort names [ 253.166755][ T6120] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 253.416493][ T6124] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 253.423092][ T6124] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 253.541182][ T6127] loop2: detected capacity change from 0 to 128 [ 253.571504][ T6124] vhci_hcd vhci_hcd.0: Device attached [ 253.715903][ T6125] loop3: detected capacity change from 0 to 8192 [ 253.928097][ T6125] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 253.937733][ T6125] REISERFS (device loop3): using ordered data mode [ 253.944261][ T6125] reiserfs: using flush barriers [ 253.957357][ T6125] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.973886][ T6125] REISERFS (device loop3): checking transaction log (loop3) [ 253.993468][ T6127] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 254.046339][ T6127] hpfs: filesystem error: improperly stopped [ 254.053099][ T6127] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 254.061046][ T6127] hpfs: You really don't want any checks? You are crazy... [ 254.070102][ T6127] hpfs: hpfs_map_sector(): read error [ 254.075623][ T6127] hpfs: code page support is disabled [ 254.086512][ T4234] usb 38-1: SetAddress Request (10) to port 0 [ 254.092767][ T4234] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 254.096851][ T6127] hpfs: hpfs_map_4sectors(): unaligned read [ 254.218560][ T6127] hpfs: hpfs_map_4sectors(): unaligned read [ 254.305730][ T6125] REISERFS (device loop3): Using tea hash to sort names [ 254.313873][ T6125] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 254.376315][ T6127] hpfs: filesystem error: unable to find root dir [ 254.471770][ T6124] syz.2.407 (6124): drop_caches: 2 [ 254.482051][ T6124] syz.2.407 (6124): drop_caches: 2 [ 254.556725][ T6126] vhci_hcd: connection reset by peer [ 254.566264][ T4312] vhci_hcd: stop threads [ 254.572305][ T4312] vhci_hcd: release socket [ 254.612572][ T4312] vhci_hcd: disconnect device [ 255.629287][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.635746][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.427545][ T6156] bond1: option mode: unable to set because the bond device has slaves [ 257.959342][ T6167] loop0: detected capacity change from 0 to 8192 [ 258.626403][ T6167] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 258.636330][ T6167] REISERFS (device loop0): using ordered data mode [ 258.643061][ T6167] reiserfs: using flush barriers [ 258.658529][ T6167] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 258.677529][ T6167] REISERFS (device loop0): checking transaction log (loop0) [ 259.387517][ T4234] usb 38-1: device descriptor read/8, error -110 [ 260.184198][ T6167] REISERFS (device loop0): Using tea hash to sort names [ 260.199219][ T6167] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 260.236667][ T4234] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 260.270872][ T4234] usb usb38-port1: attempt power cycle [ 261.366353][ T4234] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 261.686513][ T4234] usb usb38-port1: Cannot enable. Maybe the USB cable is bad? [ 261.807436][ T6186] loop2: detected capacity change from 0 to 8192 [ 262.202514][ T6186] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 262.213542][ T6186] REISERFS (device loop2): using ordered data mode [ 262.220304][ T6186] reiserfs: using flush barriers [ 262.231523][ T6186] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.250079][ T6186] REISERFS (device loop2): checking transaction log (loop2) [ 263.824333][ T4234] usb usb38-port1: unable to enumerate USB device [ 263.954839][ T6186] REISERFS (device loop2): Using tea hash to sort names [ 263.964104][ T6186] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 265.430833][ T6204] bond1: option mode: unable to set because the bond device is up [ 265.724422][ T6205] loop4: detected capacity change from 0 to 8192 [ 265.820004][ T6205] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 265.829827][ T6205] REISERFS (device loop4): using ordered data mode [ 265.836783][ T6205] reiserfs: using flush barriers [ 265.849560][ T6205] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 265.867225][ T6205] REISERFS (device loop4): checking transaction log (loop4) [ 266.256132][ T6205] REISERFS (device loop4): Using tea hash to sort names [ 266.265490][ T6205] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 268.653241][ T6224] device syzkaller0 entered promiscuous mode [ 270.808741][ T6246] bond1: option mode: unable to set because the bond device is up [ 272.835798][ T6265] batman_adv: batadv0: Adding interface: gretap1 [ 272.842633][ T6265] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.869081][ T6265] batman_adv: batadv0: Interface activated: gretap1 [ 273.559180][ T6272] device syzkaller0 entered promiscuous mode [ 274.065437][ T6287] bond1: option mode: unable to set because the bond device has slaves [ 276.121864][ T6303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.902053][ T6316] device syzkaller0 entered promiscuous mode [ 278.431955][ T6324] bond1: option mode: unable to set because the bond device is up [ 280.421416][ T6344] bond1: option mode: unable to set because the bond device is up [ 280.992502][ T6353] netlink: 34 bytes leftover after parsing attributes in process `syz.0.471'. [ 281.076342][ T4458] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 281.446942][ T4458] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.509925][ T4458] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.016329][ T4458] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.070889][ T6357] bond1: option mode: unable to set because the bond device is up [ 283.526439][ T4458] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 283.544309][ T4458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.712000][ T4458] usb 4-1: Product: syz [ 283.844944][ T4458] usb 4-1: Manufacturer: syz [ 283.950862][ T4458] usb 4-1: SerialNumber: syz [ 284.077508][ T6375] bond1: option mode: unable to set because the bond device is up [ 284.126394][ T4458] usb 4-1: can't set config #4, error -71 [ 284.146454][ T4458] usb 4-1: USB disconnect, device number 5 [ 285.204633][ T6394] bond1: option mode: unable to set because the bond device is up [ 288.466861][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 288.466879][ T26] audit: type=1326 audit(1768651674.671:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a57582cb9 code=0x7ffc0000 [ 288.832118][ T26] audit: type=1326 audit(1768651674.671:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a57582cb9 code=0x7ffc0000 [ 289.116313][ T26] audit: type=1326 audit(1768651674.671:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6a57582cb9 code=0x7ffc0000 [ 289.222234][ T26] audit: type=1326 audit(1768651674.671:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a57582cb9 code=0x7ffc0000 [ 289.323023][ T26] audit: type=1326 audit(1768651674.671:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a57582cb9 code=0x7ffc0000 [ 289.346708][ T26] audit: type=1326 audit(1768651674.671:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a5754358e code=0x7ffc0000 [ 289.376247][ T26] audit: type=1326 audit(1768651674.671:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6a57583fd7 code=0x7ffc0000 [ 289.476238][ T4463] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 289.492786][ T26] audit: type=1326 audit(1768651674.671:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a57582cb9 code=0x7ffc0000 [ 289.565938][ T26] audit: type=1326 audit(1768651674.671:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6a57583fd7 code=0x7ffc0000 [ 289.668898][ T26] audit: type=1326 audit(1768651674.671:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a5754358e code=0x7ffc0000 [ 289.842423][ T4463] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.865154][ T4463] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.884552][ T6423] bond1: option mode: unable to set because the bond device is up [ 289.913881][ T4463] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.256331][ T4463] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 290.265460][ T4463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.277611][ T6428] netlink: 34 bytes leftover after parsing attributes in process `syz.2.495'. [ 290.296471][ T4463] usb 4-1: Product: syz [ 290.300714][ T4463] usb 4-1: Manufacturer: syz [ 290.305380][ T4463] usb 4-1: SerialNumber: syz [ 290.368363][ T4463] usblp0: Disabling reads from problematic bidirectional printer [ 290.597714][ T4463] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 292.577231][ T4457] usb 4-1: USB disconnect, device number 6 [ 292.588689][ T4457] usblp0: removed [ 292.623559][ T6458] bond1: option mode: unable to set because the bond device is up [ 294.110230][ T6475] netlink: 34 bytes leftover after parsing attributes in process `syz.3.508'. [ 295.496384][ T4291] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 295.946430][ T4291] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.150310][ T4291] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 296.196505][ T4291] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.526321][ T4291] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 296.535579][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.575812][ T4291] usb 4-1: Product: syz [ 296.584901][ T4291] usb 4-1: Manufacturer: syz [ 296.603949][ T4291] usb 4-1: SerialNumber: syz [ 296.667518][ T4291] usblp0: Disabling reads from problematic bidirectional printer [ 296.877626][ T4291] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 297.065033][ T4291] usb 4-1: USB disconnect, device number 7 [ 297.093242][ T4291] usblp0: removed [ 297.946525][ T6515] bond1: option mode: unable to set because the bond device is up [ 300.706308][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 300.950931][ T6542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.608799][ T1107] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.639043][ T1107] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.663805][ T1107] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.906537][ T1107] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 301.926546][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.943828][ T1107] usb 3-1: Product: syz [ 301.991856][ T1107] usb 3-1: Manufacturer: syz [ 301.998274][ T1107] usb 3-1: SerialNumber: syz [ 302.073292][ T1107] usblp0: Disabling reads from problematic bidirectional printer [ 302.458622][ T1107] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 302.473554][ T1107] usb 3-1: USB disconnect, device number 4 [ 302.494820][ T1107] usblp0: removed [ 304.566313][ T4462] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 305.246820][ T4462] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 305.371607][ T4462] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 305.382986][ T4462] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.586480][ T4462] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 305.598880][ T4462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.614515][ T4462] usb 3-1: Product: syz [ 305.623250][ T4462] usb 3-1: Manufacturer: syz [ 305.628404][ T4462] usb 3-1: SerialNumber: syz [ 305.668112][ T4462] usblp0: Disabling reads from problematic bidirectional printer [ 305.889585][ T4462] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 306.144788][ T4462] usb 3-1: USB disconnect, device number 5 [ 306.183084][ T4462] usblp0: removed [ 306.496222][ T4463] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 306.507032][ T6616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.066728][ T4463] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.087100][ T4463] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.123346][ T4463] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.367119][ T4463] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 307.432295][ T4463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.541293][ T4463] usb 6-1: Product: syz [ 307.937115][ T4463] usb 6-1: Manufacturer: syz [ 307.941858][ T4463] usb 6-1: SerialNumber: syz [ 308.237572][ T4463] usblp0: Disabling reads from problematic bidirectional printer [ 308.494492][ T4463] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 308.680975][ T4458] usb 6-1: USB disconnect, device number 3 [ 308.835774][ T4458] usblp0: removed [ 313.966268][ T4463] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.335615][ T4463] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.355773][ T4463] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.381543][ T4463] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.399252][ T6695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.585029][ T4463] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 314.615267][ T4463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.635509][ T4463] usb 6-1: Product: syz [ 314.645610][ T4463] usb 6-1: Manufacturer: syz [ 314.656243][ T4463] usb 6-1: SerialNumber: syz [ 314.707420][ T4463] usblp0: Disabling reads from problematic bidirectional printer [ 314.949405][ T4463] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 315.076768][ T4463] usb 6-1: USB disconnect, device number 4 [ 315.237528][ T4463] usblp0: removed [ 317.101017][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.107536][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.563711][ T6746] loop4: detected capacity change from 0 to 2048 [ 321.777801][ T6746] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.136129][ T6759] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 322.151851][ T6759] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 322.164171][ T6759] EXT4-fs (loop4): This should not happen!! Data will be lost [ 322.164171][ T6759] [ 322.173950][ T6759] EXT4-fs (loop4): Total free blocks count 0 [ 322.180106][ T6759] EXT4-fs (loop4): Free/Dirty block details [ 322.188877][ T6759] EXT4-fs (loop4): free_blocks=2415919504 [ 322.194831][ T6759] EXT4-fs (loop4): dirty_blocks=16 [ 322.200073][ T6759] EXT4-fs (loop4): Block reservation details [ 322.206122][ T6759] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 322.239629][ T6759] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 322.252133][ T6759] EXT4-fs (loop4): This should not happen!! Data will be lost [ 322.252133][ T6759] [ 324.380460][ T6779] netlink: 34 bytes leftover after parsing attributes in process `syz.5.586'. [ 327.524073][ T6807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.944058][ T6809] loop4: detected capacity change from 0 to 2048 [ 328.893757][ T6809] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 329.777016][ T6823] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 329.792537][ T6823] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 329.804855][ T6823] EXT4-fs (loop4): This should not happen!! Data will be lost [ 329.804855][ T6823] [ 329.814664][ T6823] EXT4-fs (loop4): Total free blocks count 0 [ 329.820762][ T6823] EXT4-fs (loop4): Free/Dirty block details [ 329.826776][ T6823] EXT4-fs (loop4): free_blocks=2415919504 [ 329.832758][ T6823] EXT4-fs (loop4): dirty_blocks=16 [ 329.838010][ T6823] EXT4-fs (loop4): Block reservation details [ 329.844091][ T6823] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 330.216269][ T6823] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 330.366187][ T6823] EXT4-fs (loop4): This should not happen!! Data will be lost [ 330.366187][ T6823] [ 334.276267][ T4234] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 334.696981][ T4234] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 334.761730][ T4234] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 334.846343][ T4234] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.116491][ T4234] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 335.153373][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.337728][ T4234] usb 6-1: Product: syz [ 335.342200][ T4234] usb 6-1: Manufacturer: syz [ 335.347277][ T4234] usb 6-1: SerialNumber: syz [ 335.407623][ T4234] usblp0: Disabling reads from problematic bidirectional printer [ 335.717629][ T4234] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 341.013491][ T6897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.409345][ T4456] usb 6-1: USB disconnect, device number 5 [ 342.428218][ T4456] usblp0: removed [ 347.004526][ T6947] batman_adv: batadv0: Adding interface: gretap1 [ 347.754851][ T6947] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.911761][ T6947] batman_adv: batadv0: Interface activated: gretap1 [ 349.116459][ T6970] device syzkaller0 entered promiscuous mode [ 349.596240][ T4234] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 350.006492][ T4234] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.424106][ T4234] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.442994][ T4234] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.961061][ T4234] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 351.147065][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.155184][ T4234] usb 4-1: Product: syz [ 351.166090][ T4234] usb 4-1: Manufacturer: syz [ 351.172022][ T4234] usb 4-1: SerialNumber: syz [ 351.396414][ T4234] usblp0: Disabling reads from problematic bidirectional printer [ 353.371405][ T4234] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 353.466541][ T4234] usb 4-1: USB disconnect, device number 8 [ 353.474459][ T4234] usblp0: removed [ 353.558813][ T4457] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 353.888235][ T7010] device syzkaller0 entered promiscuous mode [ 353.996583][ T4457] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 354.015193][ T4457] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 354.025373][ T4457] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.217212][ T4457] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 354.234564][ T4457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.254779][ T4457] usb 6-1: Product: syz [ 354.265103][ T4457] usb 6-1: Manufacturer: syz [ 354.278463][ T4457] usb 6-1: SerialNumber: syz [ 354.357885][ T4457] usblp0: Disabling reads from problematic bidirectional printer [ 354.852222][ T4457] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 357.245465][ T1107] usb 6-1: USB disconnect, device number 6 [ 357.268843][ T1107] usblp0: removed [ 360.560484][ T7068] device syzkaller0 entered promiscuous mode [ 362.703138][ T7083] loop0: detected capacity change from 0 to 2048 [ 363.056315][ T4233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 363.317372][ T7083] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.562917][ T4233] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.614435][ T4233] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.649640][ T4233] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.940131][ T7099] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 363.955601][ T7099] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 363.968160][ T7099] EXT4-fs (loop0): This should not happen!! Data will be lost [ 363.968160][ T7099] [ 363.978554][ T7099] EXT4-fs (loop0): Total free blocks count 0 [ 363.984649][ T7099] EXT4-fs (loop0): Free/Dirty block details [ 363.990903][ T7099] EXT4-fs (loop0): free_blocks=2415919504 [ 363.996776][ T7099] EXT4-fs (loop0): dirty_blocks=16 [ 364.002066][ T7099] EXT4-fs (loop0): Block reservation details [ 364.008170][ T7099] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 364.041549][ T7099] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 364.054589][ T7099] EXT4-fs (loop0): This should not happen!! Data will be lost [ 364.054589][ T7099] [ 364.706458][ T4233] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 364.734932][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.781780][ T4233] usb 4-1: Product: syz [ 364.786016][ T4233] usb 4-1: Manufacturer: syz [ 364.846562][ T4233] usb 4-1: SerialNumber: syz [ 364.922996][ T4233] usblp0: Disabling reads from problematic bidirectional printer [ 365.727405][ T4233] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 366.163957][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 366.163973][ T26] audit: type=1326 audit(1768651752.471:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 366.246000][ T26] audit: type=1326 audit(1768651752.471:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 366.838161][ T26] audit: type=1326 audit(1768651752.511:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 367.012850][ T26] audit: type=1326 audit(1768651752.511:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 367.777063][ T26] audit: type=1326 audit(1768651752.511:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 367.904715][ T26] audit: type=1326 audit(1768651752.511:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60bb31258e code=0x7ffc0000 [ 368.061215][ T7130] device syzkaller0 entered promiscuous mode [ 368.073201][ T26] audit: type=1326 audit(1768651752.511:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60bb352fd7 code=0x7ffc0000 [ 368.196251][ T26] audit: type=1326 audit(1768651752.511:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 368.286216][ T26] audit: type=1326 audit(1768651752.511:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60bb352fd7 code=0x7ffc0000 [ 368.370670][ T26] audit: type=1326 audit(1768651752.511:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60bb31258e code=0x7ffc0000 [ 370.947943][ T7151] loop4: detected capacity change from 0 to 2048 [ 371.087329][ T7151] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.408703][ T7160] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 371.425178][ T7160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 371.437800][ T7160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 371.437800][ T7160] [ 371.447753][ T7160] EXT4-fs (loop4): Total free blocks count 0 [ 371.454309][ T7160] EXT4-fs (loop4): Free/Dirty block details [ 371.466220][ T7160] EXT4-fs (loop4): free_blocks=2415919504 [ 371.486184][ T7160] EXT4-fs (loop4): dirty_blocks=16 [ 371.498165][ T7160] EXT4-fs (loop4): Block reservation details [ 371.506202][ T7160] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 372.091887][ T4457] usb 4-1: USB disconnect, device number 9 [ 372.105128][ T4457] usblp0: removed [ 372.755249][ T7178] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.508579][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514947][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.891514][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 380.891531][ T26] audit: type=1326 audit(1768651767.131:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 380.983165][ T26] audit: type=1326 audit(1768651767.131:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 381.383785][ T26] audit: type=1326 audit(1768651767.131:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 382.631337][ T26] audit: type=1326 audit(1768651767.131:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 382.737141][ T26] audit: type=1326 audit(1768651767.131:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 382.933269][ T26] audit: type=1326 audit(1768651767.131:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60bb31258e code=0x7ffc0000 [ 383.660568][ T26] audit: type=1326 audit(1768651767.131:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60bb352fd7 code=0x7ffc0000 [ 383.700795][ T26] audit: type=1326 audit(1768651767.131:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60bb351cb9 code=0x7ffc0000 [ 384.196473][ T26] audit: type=1326 audit(1768651767.131:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60bb352fd7 code=0x7ffc0000 [ 384.256252][ T26] audit: type=1326 audit(1768651767.131:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60bb31258e code=0x7ffc0000 [ 384.466673][ T7267] device syzkaller0 entered promiscuous mode [ 384.528085][ T7267] tipc: Started in network mode [ 384.533334][ T7267] tipc: Node identity b24f57c00a34, cluster identity 4711 [ 384.572249][ T7267] tipc: Enabled bearer , priority 0 [ 384.615723][ T7267] tipc: Resetting bearer [ 384.686592][ T7266] tipc: Resetting bearer [ 384.725659][ T7266] tipc: Disabling bearer [ 384.933039][ T7273] loop0: detected capacity change from 0 to 512 [ 384.950982][ T7272] device syzkaller0 entered promiscuous mode [ 384.982409][ T7273] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 385.046675][ T7273] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 385.142421][ T7273] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.708: corrupted in-inode xattr [ 385.275969][ T7273] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 385.343268][ T7273] EXT4-fs (loop0): 1 orphan inode deleted [ 385.388632][ T7273] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 393.839243][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 394.317820][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 403.349682][ T7399] loop3: detected capacity change from 0 to 8192 [ 404.264855][ T7399] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 404.274885][ T7399] REISERFS (device loop3): using ordered data mode [ 404.281704][ T7399] reiserfs: using flush barriers [ 404.293560][ T7399] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 404.311743][ T7399] REISERFS (device loop3): checking transaction log (loop3) [ 404.850184][ T7399] REISERFS (device loop3): Using tea hash to sort names [ 404.859952][ T7399] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 405.240815][ T7415] loop4: detected capacity change from 0 to 2048 [ 405.322989][ T7415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.472866][ T7411] loop5: detected capacity change from 0 to 4096 [ 405.522977][ T7411] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 406.056797][ T7424] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 406.072500][ T7424] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 406.084802][ T7424] EXT4-fs (loop4): This should not happen!! Data will be lost [ 406.084802][ T7424] [ 406.094527][ T7424] EXT4-fs (loop4): Total free blocks count 0 [ 406.100612][ T7424] EXT4-fs (loop4): Free/Dirty block details [ 406.106595][ T7424] EXT4-fs (loop4): free_blocks=2415919504 [ 406.112364][ T7424] EXT4-fs (loop4): dirty_blocks=16 [ 406.117637][ T7424] EXT4-fs (loop4): Block reservation details [ 406.123664][ T7424] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 406.328243][ T7424] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 406.340713][ T7424] EXT4-fs (loop4): This should not happen!! Data will be lost [ 406.340713][ T7424] [ 411.142987][ T7462] loop0: detected capacity change from 0 to 8192 [ 411.217049][ T7462] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 411.226877][ T7462] REISERFS (device loop0): using ordered data mode [ 411.233489][ T7462] reiserfs: using flush barriers [ 411.244304][ T7462] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 411.262520][ T7462] REISERFS (device loop0): checking transaction log (loop0) [ 411.662660][ T7462] REISERFS (device loop0): Using tea hash to sort names [ 411.671819][ T7462] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 412.514252][ T7472] loop0: detected capacity change from 0 to 2048 [ 412.633346][ T7472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.997929][ T7477] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 413.013344][ T7477] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 413.026083][ T7477] EXT4-fs (loop0): This should not happen!! Data will be lost [ 413.026083][ T7477] [ 413.036044][ T7477] EXT4-fs (loop0): Total free blocks count 0 [ 413.042237][ T7477] EXT4-fs (loop0): Free/Dirty block details [ 413.048266][ T7477] EXT4-fs (loop0): free_blocks=2415919504 [ 413.054206][ T7477] EXT4-fs (loop0): dirty_blocks=16 [ 413.059415][ T7477] EXT4-fs (loop0): Block reservation details [ 413.065571][ T7477] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 413.097442][ T7477] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 413.109944][ T7477] EXT4-fs (loop0): This should not happen!! Data will be lost [ 413.109944][ T7477] [ 413.573921][ T7479] loop4: detected capacity change from 0 to 1024 [ 413.704623][ T7479] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.716333][ T1324] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 416.920222][ T7501] loop0: detected capacity change from 0 to 8192 [ 418.363839][ T7501] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 418.373615][ T7501] REISERFS (device loop0): using ordered data mode [ 418.380407][ T7501] reiserfs: using flush barriers [ 418.392096][ T7501] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 418.410742][ T7501] REISERFS (device loop0): checking transaction log (loop0) [ 418.426738][ T1324] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.505871][ T1324] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 418.677192][ T1324] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.842294][ T7501] REISERFS (device loop0): Using tea hash to sort names [ 418.851088][ T7501] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 419.216501][ T1324] usb 5-1: string descriptor 0 read error: -71 [ 419.238831][ T1324] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 420.189899][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.384051][ T1324] usb 5-1: can't set config #4, error -71 [ 420.392990][ T7512] loop3: detected capacity change from 0 to 8192 [ 420.470461][ T7512] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 420.481433][ T7512] REISERFS (device loop3): using ordered data mode [ 420.488287][ T7512] reiserfs: using flush barriers [ 420.500257][ T7512] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 420.519775][ T7512] REISERFS (device loop3): checking transaction log (loop3) [ 420.598203][ T1324] usb 5-1: USB disconnect, device number 6 [ 420.949069][ T7512] REISERFS (device loop3): Using tea hash to sort names [ 420.958137][ T7512] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 421.178201][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.771'. [ 421.295020][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.771'. [ 421.481312][ T7521] device syzkaller0 entered promiscuous mode [ 422.322940][ T7529] device syzkaller0 entered promiscuous mode [ 424.336291][ T4457] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 424.786710][ T4457] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.819663][ T4457] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 424.906933][ T4457] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.586830][ T4457] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 425.659897][ T4457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.836196][ T4457] usb 6-1: Product: syz [ 425.979178][ T4457] usb 6-1: Manufacturer: syz [ 425.994223][ T4457] usb 6-1: SerialNumber: syz [ 426.134260][ T4457] usblp0: Disabling reads from problematic bidirectional printer [ 426.645969][ T4457] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 427.650316][ T7584] loop4: detected capacity change from 0 to 8192 [ 427.702131][ T7584] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 427.717249][ T7584] REISERFS (device loop4): using ordered data mode [ 427.724021][ T7584] reiserfs: using flush barriers [ 427.736378][ T7584] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.755259][ T7584] REISERFS (device loop4): checking transaction log (loop4) [ 428.129865][ T7584] REISERFS (device loop4): Using tea hash to sort names [ 428.138870][ T7584] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 432.526322][ T7608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 433.216050][ T4463] usb 6-1: USB disconnect, device number 7 [ 433.256747][ T4463] usblp0: removed [ 438.391144][ T7659] loop2: detected capacity change from 0 to 4096 [ 438.470935][ T7659] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 439.550559][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.559685][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.581696][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.591814][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.602638][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.612661][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.622697][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.632984][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.643274][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 439.653417][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 440.329569][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.335961][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.688076][ T4458] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 441.408829][ T7679] batman_adv: batadv0: Adding interface: gretap1 [ 441.415424][ T7679] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.441523][ T7679] batman_adv: batadv0: Interface activated: gretap1 [ 441.627146][ T4458] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.682001][ T4458] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.784780][ T4458] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.667858][ T4458] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 443.095256][ T7701] loop4: detected capacity change from 0 to 8192 [ 444.680191][ T4458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.050441][ T7701] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 445.060265][ T7701] REISERFS (device loop4): using ordered data mode [ 445.067253][ T7701] reiserfs: using flush barriers [ 445.079825][ T7701] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 445.098142][ T7701] REISERFS (device loop4): checking transaction log (loop4) [ 445.423605][ T4458] usb 6-1: can't set config #4, error -71 [ 446.923094][ T4458] usb 6-1: USB disconnect, device number 8 [ 447.170376][ T7701] REISERFS (device loop4): Using tea hash to sort names [ 447.970773][ T7701] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 450.997761][ T4461] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 451.124359][ T7767] batman_adv: batadv0: Adding interface: gretap1 [ 451.131260][ T7767] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.157331][ T7767] batman_adv: batadv0: Interface activated: gretap1 [ 451.416744][ T4461] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.486512][ T4461] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 451.615787][ T4461] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.257577][ T4461] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 452.669543][ T4461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.752467][ T4461] usb 1-1: Product: syz [ 452.758038][ T4461] usb 1-1: Manufacturer: syz [ 452.764265][ T4461] usb 1-1: SerialNumber: syz [ 452.989773][ T4461] usb 1-1: can't set config #4, error -71 [ 453.070054][ T4461] usb 1-1: USB disconnect, device number 3 [ 454.302452][ T7781] loop5: detected capacity change from 0 to 8192 [ 454.450491][ T7781] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 454.477555][ T7802] loop3: detected capacity change from 0 to 2048 [ 454.508887][ T7781] REISERFS (device loop5): using ordered data mode [ 454.586224][ T7781] reiserfs: using flush barriers [ 454.607461][ T7802] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 454.636307][ T7781] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 454.806046][ T7781] REISERFS (device loop5): checking transaction log (loop5) [ 454.909032][ T7808] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 454.924421][ T7808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 454.937125][ T7808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 454.937125][ T7808] [ 454.947098][ T7808] EXT4-fs (loop3): Total free blocks count 0 [ 454.953628][ T7808] EXT4-fs (loop3): Free/Dirty block details [ 454.959851][ T7808] EXT4-fs (loop3): free_blocks=2415919504 [ 454.965780][ T7808] EXT4-fs (loop3): dirty_blocks=16 [ 454.971195][ T7808] EXT4-fs (loop3): Block reservation details [ 454.977441][ T7808] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 454.989009][ T7808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 455.002113][ T7808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 455.002113][ T7808] [ 458.313658][ T7781] REISERFS (device loop5): Using tea hash to sort names [ 458.336572][ T7781] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 459.766302][ T4234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 460.336641][ T4234] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.566303][ T4234] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 460.627180][ T4234] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.056336][ T4234] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 463.071636][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.080374][ T4234] usb 4-1: Product: syz [ 463.084753][ T4234] usb 4-1: Manufacturer: syz [ 463.121819][ T4234] usb 4-1: can't set config #4, error -71 [ 463.998694][ T4234] usb 4-1: USB disconnect, device number 10 [ 472.653924][ T4463] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 477.377030][ T4463] usb 6-1: device descriptor read/all, error -71 [ 487.736193][ T4233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 489.236326][ T4233] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 489.245378][ T4233] usb 5-1: can't read configurations, error -71 [ 495.786160][ T4456] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 497.736447][ T4456] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 497.874040][ T4456] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 499.250285][ T4456] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.276225][ T4456] usb 4-1: string descriptor 0 read error: -71 [ 500.462507][ T4456] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 502.243748][ T4456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.291361][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.300939][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.686228][ T4456] usb 4-1: can't set config #4, error -71 [ 502.695443][ T4456] usb 4-1: USB disconnect, device number 11 [ 511.844928][ T8168] loop5: detected capacity change from 0 to 8192 [ 513.074092][ T8168] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 513.084426][ T8168] REISERFS (device loop5): using ordered data mode [ 513.091109][ T8168] reiserfs: using flush barriers [ 513.102698][ T8168] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 513.121294][ T8168] REISERFS (device loop5): checking transaction log (loop5) [ 513.614168][ T8168] REISERFS (device loop5): Using tea hash to sort names [ 513.623228][ T8168] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 518.641956][ T8211] loop5: detected capacity change from 0 to 2048 [ 521.123210][ T8211] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.763083][ T8241] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 521.791808][ T8239] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 521.810056][ T8239] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 521.822779][ T8239] EXT4-fs (loop5): This should not happen!! Data will be lost [ 521.822779][ T8239] [ 521.833173][ T8239] EXT4-fs (loop5): Total free blocks count 0 [ 521.839630][ T8239] EXT4-fs (loop5): Free/Dirty block details [ 521.845755][ T8239] EXT4-fs (loop5): free_blocks=2415919504 [ 521.851843][ T8239] EXT4-fs (loop5): dirty_blocks=64 [ 521.857270][ T8239] EXT4-fs (loop5): Block reservation details [ 521.863477][ T8239] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 522.051276][ T8207] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 522.063979][ T8207] EXT4-fs (loop5): This should not happen!! Data will be lost [ 522.063979][ T8207] [ 524.948187][ T8276] loop3: detected capacity change from 0 to 8 [ 525.009963][ T8276] attempt to access beyond end of device [ 525.009963][ T8276] loop3: rw=2048, want=36028797018963976, limit=8 [ 525.022953][ T8276] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 525.030592][ T8276] unable to read xattr id index table [ 526.014722][ T8283] loop4: detected capacity change from 0 to 2048 [ 526.521336][ T8283] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 527.421939][ T8305] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 527.436893][ T8305] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 527.449457][ T8305] EXT4-fs (loop4): This should not happen!! Data will be lost [ 527.449457][ T8305] [ 527.459176][ T8305] EXT4-fs (loop4): Total free blocks count 0 [ 527.465289][ T8305] EXT4-fs (loop4): Free/Dirty block details [ 527.471496][ T8305] EXT4-fs (loop4): free_blocks=2415919504 [ 527.477353][ T8305] EXT4-fs (loop4): dirty_blocks=64 [ 527.482509][ T8305] EXT4-fs (loop4): Block reservation details [ 527.488572][ T8305] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 527.602416][ T8282] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 527.615457][ T8282] EXT4-fs (loop4): This should not happen!! Data will be lost [ 527.615457][ T8282] [ 534.752736][ T8367] loop2: detected capacity change from 0 to 2048 [ 536.420522][ T8367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 537.138237][ T8389] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 537.153435][ T8389] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 537.165845][ T8389] EXT4-fs (loop2): This should not happen!! Data will be lost [ 537.165845][ T8389] [ 537.175853][ T8389] EXT4-fs (loop2): Total free blocks count 0 [ 537.181905][ T8389] EXT4-fs (loop2): Free/Dirty block details [ 537.187948][ T8389] EXT4-fs (loop2): free_blocks=2415919504 [ 537.193752][ T8389] EXT4-fs (loop2): dirty_blocks=64 [ 537.199065][ T8389] EXT4-fs (loop2): Block reservation details [ 537.205121][ T8389] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 537.395127][ T8364] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 537.407430][ T8364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 537.407430][ T8364] [ 542.954802][ T8440] loop2: detected capacity change from 0 to 2048 [ 543.378654][ T8440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.914732][ T8449] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 543.930063][ T8449] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 543.942518][ T8449] EXT4-fs (loop2): This should not happen!! Data will be lost [ 543.942518][ T8449] [ 543.952293][ T8449] EXT4-fs (loop2): Total free blocks count 0 [ 543.958410][ T8449] EXT4-fs (loop2): Free/Dirty block details [ 543.964384][ T8449] EXT4-fs (loop2): free_blocks=2415919504 [ 543.970226][ T8449] EXT4-fs (loop2): dirty_blocks=64 [ 543.975429][ T8449] EXT4-fs (loop2): Block reservation details [ 543.981515][ T8449] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 544.196629][ T8439] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 544.209403][ T8439] EXT4-fs (loop2): This should not happen!! Data will be lost [ 544.209403][ T8439] [ 548.335900][ T8482] __nla_validate_parse: 29 callbacks suppressed [ 548.335914][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 548.393858][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1011'. [ 551.625211][ T8510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.840352][ T8518] loop2: detected capacity change from 0 to 256 [ 554.676564][ T8539] loop4: detected capacity change from 0 to 8192 [ 554.779499][ T8539] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 554.779592][ T8539] REISERFS (device loop4): using ordered data mode [ 554.779601][ T8539] reiserfs: using flush barriers [ 554.780496][ T8539] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 554.780750][ T8539] REISERFS (device loop4): checking transaction log (loop4) [ 555.563275][ T8539] REISERFS (device loop4): Using tea hash to sort names [ 555.571234][ T8539] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 556.660229][ T8547] loop3: detected capacity change from 0 to 2048 [ 557.172933][ T8547] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 557.904524][ T8566] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 557.919541][ T8566] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 557.932504][ T8566] EXT4-fs (loop3): This should not happen!! Data will be lost [ 557.932504][ T8566] [ 557.942252][ T8566] EXT4-fs (loop3): Total free blocks count 0 [ 557.948358][ T8566] EXT4-fs (loop3): Free/Dirty block details [ 557.954629][ T8566] EXT4-fs (loop3): free_blocks=2415919504 [ 557.960510][ T8566] EXT4-fs (loop3): dirty_blocks=64 [ 557.965684][ T8566] EXT4-fs (loop3): Block reservation details [ 557.971802][ T8566] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 558.293891][ T8546] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 558.306266][ T8546] EXT4-fs (loop3): This should not happen!! Data will be lost [ 558.306266][ T8546] [ 559.073381][ T8574] loop0: detected capacity change from 0 to 8192 [ 559.400377][ T8574] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 559.410372][ T8574] REISERFS (device loop0): using ordered data mode [ 559.417206][ T8574] reiserfs: using flush barriers [ 559.430250][ T8574] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 559.448752][ T8574] REISERFS (device loop0): checking transaction log (loop0) [ 561.696707][ T8574] REISERFS (device loop0): Using tea hash to sort names [ 561.705789][ T8574] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 562.953789][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.960245][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.256985][ T8603] device syzkaller0 entered promiscuous mode [ 564.560867][ T8613] loop2: detected capacity change from 0 to 512 [ 564.798822][ T8613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 565.290309][ T8613] EXT4-fs (loop2): 1 truncate cleaned up [ 565.297795][ T8613] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 571.508656][ T8670] device syzkaller0 entered promiscuous mode [ 577.174452][ T8719] device syzkaller0 entered promiscuous mode [ 584.734501][ T8790] device syzkaller0 entered promiscuous mode [ 588.474419][ T8825] device syzkaller0 entered promiscuous mode [ 589.503997][ T8833] device syzkaller0 entered promiscuous mode [ 594.824595][ T8875] loop2: detected capacity change from 0 to 2048 [ 595.270045][ T8875] EXT4-fs (loop2): Ignoring removed bh option [ 595.322688][ T8880] loop0: detected capacity change from 0 to 8192 [ 596.227718][ T8880] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 596.236983][ T8880] REISERFS (device loop0): using ordered data mode [ 596.243497][ T8880] reiserfs: using flush barriers [ 596.250116][ T8880] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 596.266717][ T8880] REISERFS (device loop0): checking transaction log (loop0) [ 596.391889][ T8889] device syzkaller0 entered promiscuous mode [ 596.429891][ T8880] REISERFS (device loop0): Using tea hash to sort names [ 596.437134][ T8880] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 596.473066][ T8875] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 600.397033][ T8932] device syzkaller0 entered promiscuous mode [ 603.014144][ T8960] device syzkaller0 entered promiscuous mode [ 605.144767][ T8980] loop3: detected capacity change from 0 to 1024 [ 607.077640][ T8989] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 607.077762][ T8989] hfsplus: xattr search failed [ 607.190213][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 608.738774][ T9010] device syzkaller0 entered promiscuous mode [ 609.866273][ T4248] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 610.206169][ T8483] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 610.586881][ T8483] usb 6-1: config 0 has no interfaces? [ 610.826558][ T8483] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 610.826598][ T8483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.826624][ T8483] usb 6-1: Product: syz [ 610.826644][ T8483] usb 6-1: Manufacturer: syz [ 610.826664][ T8483] usb 6-1: SerialNumber: syz [ 610.876374][ T4248] usb 1-1: config 0 has no interfaces? [ 611.003401][ T8483] usb 6-1: config 0 descriptor?? [ 611.056487][ T4248] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 611.075880][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.102597][ T4248] usb 1-1: Product: syz [ 611.112431][ T4248] usb 1-1: Manufacturer: syz [ 611.125616][ T4248] usb 1-1: SerialNumber: syz [ 611.204152][ T4248] usb 1-1: config 0 descriptor?? [ 613.208613][ T7408] usb 6-1: USB disconnect, device number 11 [ 613.233397][ T8483] usb 1-1: USB disconnect, device number 4 [ 614.913971][ T9045] loop5: detected capacity change from 0 to 8192 [ 615.866076][ T9062] device syzkaller0 entered promiscuous mode [ 616.623662][ T9072] loop4: detected capacity change from 0 to 128 [ 616.676210][ T9072] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 616.693725][ T9072] hpfs: filesystem error: improperly stopped [ 616.704222][ T9072] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 616.736729][ T9072] hpfs: You really don't want any checks? You are crazy... [ 616.744253][ T9072] hpfs: hpfs_map_sector(): read error [ 616.798442][ T9072] hpfs: code page support is disabled [ 616.862895][ T9072] hpfs: hpfs_map_4sectors(): unaligned read [ 616.869331][ T9072] hpfs: hpfs_map_4sectors(): unaligned read [ 616.875327][ T9072] hpfs: filesystem error: unable to find root dir [ 616.920631][ T4234] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 617.315832][ T9083] hpfs: hpfs_map_4sectors(): unaligned read [ 617.324781][ T9083] hpfs: hpfs_map_sector(): read error [ 617.769322][ T4463] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 617.885938][ T9086] loop0: detected capacity change from 0 to 256 [ 618.026935][ T9086] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 256) [ 618.297034][ T4234] usb 4-1: config 0 has no interfaces? [ 618.683935][ T4234] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 618.701230][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.726069][ T4234] usb 4-1: Product: syz [ 618.730570][ T4234] usb 4-1: Manufacturer: syz [ 618.735197][ T4234] usb 4-1: SerialNumber: syz [ 618.759480][ T4234] usb 4-1: config 0 descriptor?? [ 618.836232][ T4463] usb 6-1: config 0 has no interfaces? [ 619.238633][ T4463] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 619.266207][ T4463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.274693][ T4463] usb 6-1: Product: syz [ 619.283910][ T4463] usb 6-1: Manufacturer: syz [ 619.289141][ T4463] usb 6-1: SerialNumber: syz [ 619.297336][ T4463] usb 6-1: config 0 descriptor?? [ 620.560002][ T4234] usb 4-1: USB disconnect, device number 12 [ 621.233023][ T4248] usb 6-1: USB disconnect, device number 12 [ 623.600703][ T9121] loop4: detected capacity change from 0 to 8192 [ 624.386299][ T9132] device syzkaller0 entered promiscuous mode [ 624.435970][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.485569][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.559840][ T9121] REISERFS warning (device loop4): reiserfs_fill_super: Cannot allocate commit workqueue [ 625.336162][ T4234] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 625.806197][ T1107] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 625.866493][ T4234] usb 4-1: config 0 has no interfaces? [ 626.046520][ T4234] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 626.080289][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.149753][ T4234] usb 4-1: Product: syz [ 626.185866][ T4234] usb 4-1: Manufacturer: syz [ 626.216231][ T1107] usb 1-1: config 0 has no interfaces? [ 626.228348][ T4234] usb 4-1: SerialNumber: syz [ 626.357373][ T4234] usb 4-1: config 0 descriptor?? [ 626.926251][ T1107] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 626.938588][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.072355][ T1107] usb 1-1: Product: syz [ 627.077014][ T1107] usb 1-1: Manufacturer: syz [ 627.081650][ T1107] usb 1-1: SerialNumber: syz [ 627.088632][ T1107] usb 1-1: config 0 descriptor?? [ 628.366793][ T1324] usb 4-1: USB disconnect, device number 13 [ 628.811406][ T1107] usb 1-1: USB disconnect, device number 5 [ 629.365290][ T9199] loop3: detected capacity change from 0 to 8192 [ 629.432018][ T9199] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 629.470242][ T9199] REISERFS (device loop3): using ordered data mode [ 629.502355][ T9199] reiserfs: using flush barriers [ 629.528451][ T9199] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 629.592441][ T9199] REISERFS (device loop3): checking transaction log (loop3) [ 629.915570][ T9199] REISERFS (device loop3): Using tea hash to sort names [ 629.962541][ T9199] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 633.076219][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 633.902797][ T1107] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 634.066363][ T1107] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 634.080868][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.107978][ T1107] usb 3-1: Product: syz [ 634.121246][ T1107] usb 3-1: Manufacturer: syz [ 634.140401][ T1107] usb 3-1: SerialNumber: syz [ 634.296114][ T4248] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 634.818541][ T4248] usb 6-1: device descriptor read/64, error -71 [ 635.236508][ T4248] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 635.426125][ T4248] usb 6-1: device descriptor read/64, error -71 [ 635.616797][ T7408] usb 3-1: USB disconnect, device number 6 [ 636.227992][ T4248] usb usb6-port1: attempt power cycle [ 637.872083][ T4248] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 638.432483][ T4248] usb 6-1: device not accepting address 15, error -71 [ 640.286088][ T7408] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 640.686313][ T7408] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 641.265262][ T9329] loop4: detected capacity change from 0 to 8192 [ 641.314474][ T9329] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 641.323792][ T9329] REISERFS (device loop4): using ordered data mode [ 641.330356][ T9329] reiserfs: using flush barriers [ 641.336409][ T7408] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 641.337132][ T9329] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 641.362141][ T9329] REISERFS (device loop4): checking transaction log (loop4) [ 641.373508][ T7408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.386157][ T7408] usb 4-1: Product: syz [ 641.390361][ T7408] usb 4-1: Manufacturer: syz [ 641.395068][ T7408] usb 4-1: SerialNumber: syz [ 641.739016][ T9329] REISERFS (device loop4): Using tea hash to sort names [ 641.746367][ T9329] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 644.252781][ T8483] usb 4-1: USB disconnect, device number 14 [ 645.475532][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 649.045993][ T4234] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 649.458722][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1249'. [ 649.976332][ T4234] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 650.156798][ T4234] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 650.165908][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.231619][ T9409] loop3: detected capacity change from 0 to 8192 [ 650.238351][ T4234] usb 3-1: Product: syz [ 650.242548][ T4234] usb 3-1: Manufacturer: syz [ 650.292916][ T4234] usb 3-1: SerialNumber: syz [ 650.351706][ T9409] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 650.442760][ T9409] REISERFS (device loop3): using ordered data mode [ 650.481802][ T9409] reiserfs: using flush barriers [ 650.546310][ T9409] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 650.654485][ T9409] REISERFS (device loop3): checking transaction log (loop3) [ 651.092094][ T9409] REISERFS (device loop3): Using tea hash to sort names [ 651.120018][ T9409] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 651.776943][ T4457] usb 3-1: USB disconnect, device number 7 [ 652.956177][ T9422] loop2: detected capacity change from 0 to 128 [ 653.379006][ T9422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 653.415075][ T9422] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 657.636392][ T8483] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 658.748109][ T9474] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 659.206322][ T8483] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 659.269484][ T8483] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 659.596175][ T8483] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 659.919127][ T8483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.936149][ T8483] usb 1-1: Product: syz [ 659.936171][ T8483] usb 1-1: Manufacturer: syz [ 659.936190][ T8483] usb 1-1: SerialNumber: syz [ 660.152964][ T4458] usb 1-1: USB disconnect, device number 6 [ 660.169271][ T9484] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1269'. [ 661.398039][ T9500] loop2: detected capacity change from 0 to 256 [ 661.438283][ T4458] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 661.523993][ T9500] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 662.078433][ T9502] tipc: Started in network mode [ 662.084211][ T9502] tipc: Node identity aa4bb7fed63, cluster identity 4711 [ 662.128537][ T9502] tipc: Enabled bearer , priority 0 [ 662.570154][ T9501] tipc: Disabling bearer [ 663.027036][ T4458] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 663.054852][ T4458] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.296307][ T4458] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 663.309799][ T4458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.371866][ T4458] usb 1-1: Product: syz [ 663.376350][ T4458] usb 1-1: Manufacturer: syz [ 663.381155][ T4458] usb 1-1: SerialNumber: syz [ 664.954852][ T7408] usb 1-1: USB disconnect, device number 7 [ 669.528448][ T4458] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 671.266928][ T4458] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 672.334775][ T4458] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 672.386451][ T4458] usb 3-1: string descriptor 0 read error: -71 [ 672.387401][ T4458] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 672.387497][ T4458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.526803][ T4458] usb 3-1: can't set config #4, error -71 [ 672.620611][ T4458] usb 3-1: USB disconnect, device number 8 [ 672.916153][ T9593] loop2: detected capacity change from 0 to 256 [ 673.139202][ T9593] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 673.389784][ T9599] loop3: detected capacity change from 0 to 256 [ 673.458290][ T9602] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1304'. [ 673.909572][ T9603] loop4: detected capacity change from 0 to 8192 [ 674.869135][ T9603] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 674.879183][ T9603] REISERFS (device loop4): using ordered data mode [ 674.885848][ T9603] reiserfs: using flush barriers [ 674.896911][ T9603] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 674.915026][ T9603] REISERFS (device loop4): checking transaction log (loop4) [ 675.111624][ T9599] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 256) [ 675.878112][ T9603] REISERFS (device loop4): Using tea hash to sort names [ 675.887645][ T9603] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 678.286165][ T9605] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 678.332359][ T9627] loop4: detected capacity change from 0 to 8192 [ 678.785629][ T9627] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 678.795389][ T9627] REISERFS (device loop4): using ordered data mode [ 678.802128][ T9627] reiserfs: using flush barriers [ 678.811161][ T9627] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 678.827766][ T9627] REISERFS (device loop4): checking transaction log (loop4) [ 678.842105][ T9628] loop2: detected capacity change from 0 to 8192 [ 679.276152][ T9605] usb 4-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 679.361482][ T9605] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.393422][ T9628] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 679.425891][ T9627] REISERFS (device loop4): Using tea hash to sort names [ 679.433256][ T9627] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 680.011044][ T9628] REISERFS (device loop2): using ordered data mode [ 680.046938][ T9628] reiserfs: using flush barriers [ 680.156191][ T9605] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 680.173596][ T9628] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 680.198868][ T9605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.343059][ T9605] usb 4-1: Product: syz [ 680.440559][ T9605] usb 4-1: Manufacturer: syz [ 680.512252][ T9628] REISERFS (device loop2): checking transaction log (loop2) [ 680.552445][ T9605] usb 4-1: SerialNumber: syz [ 680.798606][ T9648] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1316'. [ 682.233631][ T4463] usb 4-1: USB disconnect, device number 15 [ 683.795745][ T9628] REISERFS (device loop2): Using tea hash to sort names [ 683.803156][ T9628] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 685.709088][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.715500][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.521852][ T9695] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1327'. [ 686.736173][ T4456] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 687.116770][ T4456] usb 6-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 687.157252][ T4456] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.396218][ T4456] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 687.426532][ T4456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.441465][ T4456] usb 6-1: Product: syz [ 687.459265][ T4456] usb 6-1: Manufacturer: syz [ 687.463953][ T4456] usb 6-1: SerialNumber: syz [ 688.051151][ T9700] loop3: detected capacity change from 0 to 8192 [ 688.926618][ T8483] usb 6-1: USB disconnect, device number 17 [ 689.050711][ T9700] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 689.269514][ T9700] REISERFS (device loop3): using ordered data mode [ 689.296322][ T9700] reiserfs: using flush barriers [ 689.334714][ T9700] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 689.369989][ T9700] REISERFS (device loop3): checking transaction log (loop3) [ 689.966125][ T9700] REISERFS (device loop3): Using tea hash to sort names [ 689.986339][ T9700] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 692.082627][ T9742] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1340'. [ 697.686177][ T4249] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 698.165815][ T9783] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1351'. [ 698.950481][ T4249] usb 4-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 698.961620][ T4249] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 699.176520][ T4249] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 699.212403][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.282620][ T4249] usb 4-1: Product: syz [ 699.319324][ T4249] usb 4-1: Manufacturer: syz [ 699.348060][ T4249] usb 4-1: SerialNumber: syz [ 699.585642][ T9790] loop5: detected capacity change from 0 to 2048 [ 699.756810][ T9790] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 701.605295][ T4456] usb 4-1: USB disconnect, device number 16 [ 704.923097][ T9832] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1362'. [ 706.501754][ T9842] loop2: detected capacity change from 0 to 2048 [ 706.757024][ T9842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 707.068793][ T9853] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 707.085308][ T9853] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 707.097994][ T9853] EXT4-fs (loop2): This should not happen!! Data will be lost [ 707.097994][ T9853] [ 707.107834][ T9853] EXT4-fs (loop2): Total free blocks count 0 [ 707.113933][ T9853] EXT4-fs (loop2): Free/Dirty block details [ 707.120581][ T9853] EXT4-fs (loop2): free_blocks=2415919504 [ 707.126434][ T9853] EXT4-fs (loop2): dirty_blocks=64 [ 707.131652][ T9853] EXT4-fs (loop2): Block reservation details [ 707.137832][ T9853] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 707.255032][ T9841] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 707.267959][ T9841] EXT4-fs (loop2): This should not happen!! Data will be lost [ 707.267959][ T9841] [ 707.586099][ T8483] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 709.086256][ T8483] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 709.198051][ T8483] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.166148][ T8483] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 710.187259][ T8483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.216286][ T8483] usb 4-1: Product: syz [ 711.056147][ T8483] usb 4-1: can't set config #4, error -71 [ 711.066558][ T8483] usb 4-1: USB disconnect, device number 17 [ 711.401817][ T9883] loop3: detected capacity change from 0 to 8192 [ 711.527789][ T9883] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 711.537127][ T9883] REISERFS (device loop3): using ordered data mode [ 711.543663][ T9883] reiserfs: using flush barriers [ 711.550989][ T9883] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 711.567792][ T9883] REISERFS (device loop3): checking transaction log (loop3) [ 711.848788][ T9883] REISERFS (device loop3): Using tea hash to sort names [ 711.856134][ T9883] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 712.584352][ T9896] loop4: detected capacity change from 0 to 8192 [ 713.434291][ T9896] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 713.444272][ T9896] REISERFS (device loop4): using ordered data mode [ 713.451142][ T9896] reiserfs: using flush barriers [ 713.463433][ T9896] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 713.482530][ T9896] REISERFS (device loop4): checking transaction log (loop4) [ 713.887200][ T9896] REISERFS (device loop4): Using tea hash to sort names [ 713.895887][ T9896] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 717.166194][ T7408] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 717.576718][ T7408] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.787660][ T7408] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.526858][ T7408] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 718.565519][ T7408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.649528][ T7408] usb 6-1: Product: syz [ 718.700337][ T7408] usb 6-1: Manufacturer: syz [ 718.736965][ T7408] usb 6-1: SerialNumber: syz [ 720.222498][ T4463] usb 6-1: USB disconnect, device number 18 [ 723.440487][ T9975] device syzkaller0 entered promiscuous mode [ 724.996510][ T7408] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 726.197096][ T7408] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 726.276681][ T7408] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.706213][ T7408] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 726.731092][ T7408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.790961][ T7408] usb 3-1: Product: syz [ 726.810384][ T7408] usb 3-1: Manufacturer: syz [ 726.815048][ T7408] usb 3-1: SerialNumber: syz [ 728.995008][ T4463] usb 3-1: USB disconnect, device number 9 [ 729.088767][T10024] device syzkaller0 entered promiscuous mode [ 732.407607][T10059] loop4: detected capacity change from 0 to 8192 [ 732.659669][T10059] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 732.669688][T10059] REISERFS (device loop4): using ordered data mode [ 732.676457][T10059] reiserfs: using flush barriers [ 732.687879][T10059] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 732.706372][T10059] REISERFS (device loop4): checking transaction log (loop4) [ 733.109736][T10059] REISERFS (device loop4): Using tea hash to sort names [ 733.118659][T10059] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 735.236249][ T4249] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 735.582830][T10081] device syzkaller0 entered promiscuous mode [ 735.636380][ T4249] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 735.661606][ T4249] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 735.709574][ T4249] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.634154][ T4249] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 736.739100][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.747646][ T4249] usb 5-1: Product: syz [ 736.751853][ T4249] usb 5-1: Manufacturer: syz [ 736.756842][ T4249] usb 5-1: SerialNumber: syz [ 736.827098][ T4249] usblp0: Disabling reads from problematic bidirectional printer [ 739.644666][ T4249] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 740.244017][ T4249] usb 5-1: USB disconnect, device number 9 [ 740.255904][ T4249] usblp0: removed [ 740.762661][T10110] loop0: detected capacity change from 0 to 8192 [ 740.820680][T10110] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 740.829965][T10110] REISERFS (device loop0): using ordered data mode [ 740.836538][T10110] reiserfs: using flush barriers [ 740.846290][T10110] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 740.862685][T10110] REISERFS (device loop0): checking transaction log (loop0) [ 741.227010][T10110] REISERFS (device loop0): Using tea hash to sort names [ 741.234224][T10110] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 745.583238][ T4249] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 746.207602][ T4249] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 746.237963][ T4249] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 746.270357][ T4249] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 747.148840][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.155228][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.276391][ T4249] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 747.295842][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.328418][ T4249] usb 6-1: Product: syz [ 747.345115][ T4249] usb 6-1: Manufacturer: syz [ 747.359642][ T4249] usb 6-1: SerialNumber: syz [ 747.422981][ T4249] usblp0: Disabling reads from problematic bidirectional printer [ 747.800420][ T4249] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 750.136672][ T4463] usb 6-1: USB disconnect, device number 19 [ 750.321274][ T4463] usblp0: removed [ 752.534075][T10199] loop5: detected capacity change from 0 to 8192 [ 752.588102][T10199] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 752.598060][T10199] REISERFS (device loop5): using ordered data mode [ 752.604671][T10199] reiserfs: using flush barriers [ 752.615555][T10199] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 752.633798][T10199] REISERFS (device loop5): checking transaction log (loop5) [ 753.027909][T10199] REISERFS (device loop5): Using tea hash to sort names [ 753.036827][T10199] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 754.380000][T10211] loop0: detected capacity change from 0 to 8192 [ 754.481441][T10210] loop4: detected capacity change from 0 to 8192 [ 754.490870][T10211] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 754.500343][T10211] REISERFS (device loop0): using ordered data mode [ 754.506870][T10211] reiserfs: using flush barriers [ 754.513118][T10211] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 754.530208][T10211] REISERFS (device loop0): checking transaction log (loop0) [ 754.777108][T10210] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 754.799416][T10210] REISERFS (device loop4): using ordered data mode [ 754.846061][T10210] reiserfs: using flush barriers [ 755.071056][T10210] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 755.826644][T10210] REISERFS (device loop4): checking transaction log (loop4) [ 755.917045][T10222] loop2: detected capacity change from 0 to 256 [ 755.926685][T10211] REISERFS (device loop0): Using tea hash to sort names [ 755.933946][T10211] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 756.072463][T10222] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 756.242592][T10210] REISERFS (device loop4): Using tea hash to sort names [ 756.266466][ T4249] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 756.293790][T10210] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 757.886180][ T4249] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 757.917952][ T4249] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 757.960868][ T4249] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.176296][ T4249] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 758.205796][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.267006][ T4249] usb 6-1: Product: syz [ 758.297927][ T4249] usb 6-1: Manufacturer: syz [ 758.335165][ T4249] usb 6-1: SerialNumber: syz [ 758.472718][ T4249] usblp0: Disabling reads from problematic bidirectional printer [ 758.482515][T10238] loop0: detected capacity change from 0 to 8192 [ 759.132038][ T4249] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 760.706563][T10245] loop3: detected capacity change from 0 to 8192 [ 761.117211][ T4249] usb 6-1: USB disconnect, device number 20 [ 761.125270][ T4249] usblp0: removed [ 761.212296][T10245] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 761.221867][T10245] REISERFS (device loop3): using ordered data mode [ 761.228557][T10245] reiserfs: using flush barriers [ 761.246057][T10245] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 761.262765][T10245] REISERFS (device loop3): checking transaction log (loop3) [ 761.695818][T10245] REISERFS (device loop3): Using tea hash to sort names [ 761.703428][T10245] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 762.644981][T10254] loop4: detected capacity change from 0 to 2048 [ 762.946888][T10254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 763.846620][T10268] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 763.861566][T10268] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 763.873899][T10268] EXT4-fs (loop4): This should not happen!! Data will be lost [ 763.873899][T10268] [ 763.883600][T10268] EXT4-fs (loop4): Total free blocks count 0 [ 763.889746][T10268] EXT4-fs (loop4): Free/Dirty block details [ 763.895683][T10268] EXT4-fs (loop4): free_blocks=2415919504 [ 763.901501][T10268] EXT4-fs (loop4): dirty_blocks=16 [ 763.906693][T10268] EXT4-fs (loop4): Block reservation details [ 763.912704][T10268] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 767.196604][ T7408] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 767.826359][ T7408] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 768.172071][ T7408] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.998943][T10309] loop4: detected capacity change from 0 to 256 [ 769.146170][T10309] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 256) [ 769.659395][ T7408] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 769.689298][ T7408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.763507][ T7408] usb 1-1: Product: syz [ 771.366942][ T7408] usb 1-1: Manufacturer: syz [ 771.371611][ T7408] usb 1-1: SerialNumber: syz [ 771.496319][ T7408] usb 1-1: can't set config #4, error -71 [ 771.511785][ T7408] usb 1-1: USB disconnect, device number 8 [ 774.160195][T10354] loop4: detected capacity change from 0 to 256 [ 774.281143][T10354] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 256) [ 776.806079][ T9605] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 777.299532][ T9605] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 777.299566][ T9605] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 777.299594][ T9605] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.456680][ T9605] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 777.494752][ T9605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.526926][ T9605] usb 4-1: Product: syz [ 777.542046][ T9605] usb 4-1: Manufacturer: syz [ 777.556854][ T9605] usb 4-1: SerialNumber: syz [ 777.617317][ T9605] usblp0: Disabling reads from problematic bidirectional printer [ 777.999982][ T9605] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 780.014248][ T4456] usb 4-1: USB disconnect, device number 18 [ 780.048996][ T4456] usblp0: removed [ 780.121328][T10396] loop3: detected capacity change from 0 to 256 [ 780.247306][T10396] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 256) [ 783.497784][T10424] loop5: detected capacity change from 0 to 8192 [ 783.601080][T10424] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 783.611886][T10424] REISERFS (device loop5): using ordered data mode [ 783.618601][T10424] reiserfs: using flush barriers [ 783.629730][T10424] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 783.648291][T10424] REISERFS (device loop5): checking transaction log (loop5) [ 784.052766][T10424] REISERFS (device loop5): Using tea hash to sort names [ 784.062370][T10424] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 784.879602][ T4248] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 786.096870][ T4248] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 786.116063][ T4248] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 786.139445][ T4248] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.536269][ T4248] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 786.555924][ T4248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.593824][ T4248] usb 6-1: Product: syz [ 786.611506][ T4248] usb 6-1: Manufacturer: syz [ 786.654673][ T4248] usb 6-1: SerialNumber: syz [ 786.739017][ T4248] usblp0: Disabling reads from problematic bidirectional printer [ 787.127939][ T4248] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 789.354164][T10462] loop4: detected capacity change from 0 to 8192 [ 790.163701][T10462] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 790.173862][T10462] REISERFS (device loop4): using ordered data mode [ 790.180701][T10462] reiserfs: using flush barriers [ 790.191577][T10462] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 790.209964][T10462] REISERFS (device loop4): checking transaction log (loop4) [ 790.608273][ T7408] usb 6-1: USB disconnect, device number 21 [ 791.218923][ T7408] usblp0: removed [ 791.782788][T10462] REISERFS (device loop4): Using tea hash to sort names [ 791.791647][T10462] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 792.769759][ T4458] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 793.426268][ T4458] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 793.456482][ T4458] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 793.545062][ T4458] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.676528][ T4458] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 794.710308][ T4458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.739182][ T4458] usb 6-1: Product: syz [ 794.750288][ T4458] usb 6-1: Manufacturer: syz [ 795.580319][ T4458] usb 6-1: SerialNumber: syz [ 795.606116][ T4458] usb 6-1: can't set config #4, error -71 [ 795.617717][ T4458] usb 6-1: USB disconnect, device number 22 [ 797.096103][ T4458] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 797.946271][ T4458] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 798.298036][T10518] loop2: detected capacity change from 0 to 8192 [ 798.786418][T10518] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 798.796606][T10518] REISERFS (device loop2): using ordered data mode [ 798.803363][T10518] reiserfs: using flush barriers [ 798.815072][T10518] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 798.834284][T10518] REISERFS (device loop2): checking transaction log (loop2) [ 799.103750][ T4458] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 799.235215][T10514] loop4: detected capacity change from 0 to 8192 [ 799.522086][T10514] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 799.568202][T10518] REISERFS (device loop2): Using tea hash to sort names [ 799.577038][T10518] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 799.669241][T10514] REISERFS (device loop4): using ordered data mode [ 799.675870][T10514] reiserfs: using flush barriers [ 799.912836][ T4458] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.966091][ T4458] usb 6-1: string descriptor 0 read error: -71 [ 799.972529][ T4458] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 799.987302][T10514] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 800.002193][ T4458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.099721][T10514] REISERFS (device loop4): checking transaction log (loop4) [ 800.116208][ T4458] usb 6-1: can't set config #4, error -71 [ 800.304274][ T4458] usb 6-1: USB disconnect, device number 23 [ 800.504863][T10528] loop0: detected capacity change from 0 to 256 [ 805.237835][T10535] loop5: detected capacity change from 0 to 8192 [ 805.282723][ T4248] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 806.250733][T10535] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 806.260650][T10535] REISERFS (device loop5): using ordered data mode [ 806.267520][T10535] reiserfs: using flush barriers [ 806.278156][T10535] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 806.296779][T10535] REISERFS (device loop5): checking transaction log (loop5) [ 806.506392][ T4248] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 806.580887][T10514] REISERFS (device loop4): Using tea hash to sort names [ 806.593977][ T4248] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 806.707532][T10514] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 806.766770][ T4248] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.839875][T10535] REISERFS (device loop5): Using tea hash to sort names [ 806.848627][T10535] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 807.136284][ T4248] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 807.186593][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.256215][ T4248] usb 1-1: Product: syz [ 807.299280][ T4248] usb 1-1: Manufacturer: syz [ 807.303944][ T4248] usb 1-1: SerialNumber: syz [ 807.387167][ T4248] usblp0: Disabling reads from problematic bidirectional printer [ 808.265573][ T4248] usblp 1-1:4.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 808.589084][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.595546][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.750397][T10548] loop5: detected capacity change from 0 to 8192 [ 810.922413][T10547] loop4: detected capacity change from 0 to 8192 [ 810.936441][ T4458] usb 1-1: USB disconnect, device number 9 [ 810.955076][ T4458] usblp0: removed [ 810.972303][T10547] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 810.991936][T10547] REISERFS (device loop4): using ordered data mode [ 811.001779][T10547] reiserfs: using flush barriers [ 811.014737][T10547] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 811.048902][T10547] REISERFS (device loop4): checking transaction log (loop4) [ 811.175167][T10548] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 812.124284][T10547] REISERFS (device loop4): Using tea hash to sort names [ 812.135665][T10547] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 812.256137][T10548] REISERFS (device loop5): using ordered data mode [ 812.278320][T10548] reiserfs: using flush barriers [ 812.297599][T10548] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 812.349210][T10548] REISERFS (device loop5): checking transaction log (loop5) [ 813.092332][ T4458] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 813.250042][T10548] REISERFS (device loop5): Using tea hash to sort names [ 813.292272][T10548] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 813.352549][T10571] loop3: detected capacity change from 0 to 8192 [ 813.417567][T10571] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 813.427165][T10571] REISERFS (device loop3): using ordered data mode [ 813.433780][T10571] reiserfs: using flush barriers [ 813.446148][T10571] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 813.462751][T10571] REISERFS (device loop3): checking transaction log (loop3) [ 813.516435][ T4458] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 813.570788][ T4458] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 813.616277][ T4458] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.700241][T10571] REISERFS (device loop3): Using tea hash to sort names [ 813.707714][T10571] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 813.816269][ T4458] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 813.837215][ T4458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.845272][ T4458] usb 5-1: Product: syz [ 813.892115][ T4458] usb 5-1: Manufacturer: syz [ 813.992038][ T4458] usb 5-1: SerialNumber: syz [ 814.258946][ T4458] usblp0: Disabling reads from problematic bidirectional printer [ 815.597374][ T4458] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 815.949806][T10597] loop0: detected capacity change from 0 to 8192 [ 816.020747][T10597] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 816.030070][T10597] REISERFS (device loop0): using ordered data mode [ 816.036615][T10597] reiserfs: using flush barriers [ 816.045807][T10597] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 816.062313][T10597] REISERFS (device loop0): checking transaction log (loop0) [ 816.816435][ T4458] usb 5-1: USB disconnect, device number 10 [ 816.829258][ T4458] usblp0: removed [ 816.887505][T10597] REISERFS (device loop0): Using tea hash to sort names [ 816.895226][T10597] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 817.415013][T10609] loop3: detected capacity change from 0 to 8192 [ 817.520602][T10609] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 817.530359][T10609] REISERFS (device loop3): using ordered data mode [ 817.537244][T10609] reiserfs: using flush barriers [ 817.548345][T10609] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 817.566634][T10609] REISERFS (device loop3): checking transaction log (loop3) [ 818.001687][T10609] REISERFS (device loop3): Using tea hash to sort names [ 818.010747][T10609] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 820.146469][T10633] loop0: detected capacity change from 0 to 8192 [ 820.488925][T10633] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 820.498267][T10633] REISERFS (device loop0): using ordered data mode [ 820.504810][T10633] reiserfs: using flush barriers [ 820.521916][T10633] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 820.538501][T10633] REISERFS (device loop0): checking transaction log (loop0) [ 820.848304][T10633] REISERFS (device loop0): Using tea hash to sort names [ 820.855552][T10633] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 823.566177][ T7408] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 823.957981][ T7408] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 823.999074][ T7408] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 824.092425][ T7408] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.387133][ T7408] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 824.428308][ T7408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.467524][ T7408] usb 3-1: Product: syz [ 824.487765][ T7408] usb 3-1: Manufacturer: syz [ 824.492421][ T7408] usb 3-1: SerialNumber: syz [ 824.597886][ T7408] usblp0: Disabling reads from problematic bidirectional printer [ 824.897830][ T7408] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 826.372425][ T9605] usb 3-1: USB disconnect, device number 10 [ 826.382338][ T9605] usblp0: removed [ 826.495419][T10682] loop0: detected capacity change from 0 to 8192 [ 826.581823][T10682] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 826.591124][T10682] REISERFS (device loop0): using ordered data mode [ 826.597911][T10682] reiserfs: using flush barriers [ 826.604419][T10682] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 826.621148][T10682] REISERFS (device loop0): checking transaction log (loop0) [ 826.933890][T10687] input: syz1 as /devices/virtual/input/input5 [ 827.071384][T10682] REISERFS (device loop0): Using tea hash to sort names [ 827.079248][T10682] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 827.256438][ T9605] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 827.676301][ T9605] usb 6-1: Using ep0 maxpacket: 32 [ 827.807274][ T9605] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 827.883602][ T9605] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 3 [ 828.159825][ T9605] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.332250][ T9605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 828.343007][ T9605] usb 6-1: SerialNumber: syz [ 828.376384][T10687] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 828.384383][T10687] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 828.407585][ T9605] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 828.757392][ T9605] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 829.379242][ T9605] usb 6-1: USB disconnect, device number 24 [ 832.348272][T10728] loop4: detected capacity change from 0 to 8192 [ 832.376041][ T4248] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 832.521754][T10731] loop0: detected capacity change from 0 to 8192 [ 832.582915][T10736] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1603'. [ 832.791965][T10728] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 832.801312][T10728] REISERFS (device loop4): using ordered data mode [ 832.807895][T10728] reiserfs: using flush barriers [ 832.814766][ T4248] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 832.831365][T10728] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 832.847912][T10728] REISERFS (device loop4): checking transaction log (loop4) [ 833.057447][ T4248] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 833.318656][T10731] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 833.327920][T10731] REISERFS (device loop0): using ordered data mode [ 833.334475][T10731] reiserfs: using flush barriers [ 833.340933][T10731] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 833.357411][T10731] REISERFS (device loop0): checking transaction log (loop0) [ 833.496937][ T4248] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.742961][T10728] REISERFS (device loop4): Using tea hash to sort names [ 833.750316][T10728] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 833.856231][ T4248] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 833.869454][ T4248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.892843][ T4248] usb 6-1: Product: syz [ 833.904841][T10731] REISERFS (device loop0): Using tea hash to sort names [ 833.912389][T10731] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 833.926076][ T4248] usb 6-1: Manufacturer: syz [ 833.931492][ T4248] usb 6-1: SerialNumber: syz [ 833.974996][T10742] loop3: detected capacity change from 0 to 256 [ 833.987465][ T4248] usblp0: Disabling reads from problematic bidirectional printer [ 938.965923][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 938.972982][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P154/1:b..l [ 938.981398][ C1] (detected by 1, t=10502 jiffies, g=48333, q=194) [ 938.988029][ C1] task:kworker/u4:2 state:R running task stack:22640 pid: 154 ppid: 2 flags:0x00004000 [ 938.999952][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 939.007851][ C1] Call Trace: [ 939.011159][ C1] [ 939.014121][ C1] __schedule+0x11ef/0x43c0 [ 939.018673][ C1] ? verify_lock_unused+0x140/0x140 [ 939.023927][ C1] ? release_firmware_map_entry+0x190/0x190 [ 939.029853][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 939.035873][ C1] ? lock_chain_count+0x20/0x20 [ 939.040793][ C1] preempt_schedule_notrace+0xd9/0x120 [ 939.046292][ C1] ? preempt_schedule_common+0xd0/0xd0 [ 939.051785][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 939.057991][ C1] preempt_schedule_notrace_thunk+0x16/0x18 [ 939.063941][ C1] rcu_is_watching+0x72/0xa0 [ 939.068567][ C1] batadv_iv_ogm_schedule+0x44d/0xec0 [ 939.074012][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 939.081251][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 939.086837][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 939.093930][ C1] process_one_work+0x85f/0x1010 [ 939.098925][ C1] ? worker_detach_from_pool+0x240/0x240 [ 939.104612][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 939.109937][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 939.115013][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 939.120605][ C1] ? wq_worker_running+0x97/0x170 [ 939.125671][ C1] worker_thread+0xaa6/0x1290 [ 939.130413][ C1] kthread+0x436/0x520 [ 939.134517][ C1] ? rcu_lock_release+0x20/0x20 [ 939.139416][ C1] ? kthread_blkcg+0xd0/0xd0 [ 939.144044][ C1] ret_from_fork+0x1f/0x30 [ 939.148512][ C1] [ 939.151674][ C1] rcu: rcu_preempt kthread starved for 10507 jiffies! g48333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 939.163089][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 939.173097][ C1] rcu: RCU grace-period kthread stack dump: [ 939.179027][ C1] task:rcu_preempt state:R running task stack:27536 pid: 15 ppid: 2 flags:0x00004000 [ 939.189864][ C1] Call Trace: [ 939.193186][ C1] [ 939.196161][ C1] __schedule+0x11ef/0x43c0 [ 939.200842][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 939.206360][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 939.211602][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 939.217622][ C1] ? _raw_spin_unlock+0x40/0x40 [ 939.222508][ C1] ? rcu_is_watching+0x11/0xa0 [ 939.227309][ C1] ? release_firmware_map_entry+0x190/0x190 [ 939.233259][ C1] schedule+0x11b/0x1e0 [ 939.237708][ C1] schedule_timeout+0x184/0x2d0 [ 939.242689][ C1] ? console_conditional_schedule+0x40/0x40 [ 939.248620][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 939.254676][ C1] ? update_process_times+0x200/0x200 [ 939.260218][ C1] ? prepare_to_swait_event+0x331/0x350 [ 939.265811][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 939.270706][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 939.275959][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 939.282161][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 939.287089][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 939.292325][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 939.297559][ C1] rcu_gp_kthread+0x9b/0x370 [ 939.302193][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 939.308127][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 939.313276][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 939.319206][ C1] ? __kthread_parkme+0x157/0x1b0 [ 939.324268][ C1] kthread+0x436/0x520 [ 939.328372][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 939.333517][ C1] ? kthread_blkcg+0xd0/0xd0 [ 939.338140][ C1] ret_from_fork+0x1f/0x30 [ 939.342602][ C1] [ 939.345651][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 939.352012][ C1] NMI backtrace for cpu 1 [ 939.356369][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 939.363416][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 939.373491][ C1] Call Trace: [ 939.376797][ C1] [ 939.379669][ C1] dump_stack_lvl+0x188/0x250 [ 939.384383][ C1] ? show_regs_print_info+0x20/0x20 [ 939.389640][ C1] ? load_image+0x400/0x400 [ 939.394181][ C1] ? irq_work_queue+0xbf/0x140 [ 939.398997][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 939.403978][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 939.410171][ C1] ? _printk+0xda/0x130 [ 939.414355][ C1] ? cpu_online+0x1d/0x30 [ 939.418718][ C1] ? load_image+0x400/0x400 [ 939.423265][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 939.429372][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 939.435389][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 939.441579][ C1] print_other_cpu_stall+0x1110/0x1270 [ 939.447079][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 939.452050][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 939.457398][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 939.462629][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 939.467516][ C1] ? account_process_tick+0x22a/0x3a0 [ 939.472926][ C1] update_process_times+0x193/0x200 [ 939.478173][ C1] tick_sched_timer+0x37d/0x560 [ 939.483404][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 939.488987][ C1] __hrtimer_run_queues+0x4ad/0xb70 [ 939.494239][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 939.499389][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 939.505495][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 939.510487][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 939.516534][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 939.522217][ C1] [ 939.525171][ C1] [ 939.528124][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 939.534157][ C1] RIP: 0010:default_idle+0xb/0x10 [ 939.539224][ C1] Code: b7 48 89 df e8 c6 9c fa f7 eb ad e8 4f b1 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 67 4c 62 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 939.558875][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 939.564982][ C1] RAX: b8695351be58b100 RBX: ffff88813fe68000 RCX: b8695351be58b100 [ 939.572992][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b1c00 RDI: ffffffff8a79e740 [ 939.580997][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 939.589013][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff11027fcd000 [ 939.597035][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920001acfb4 [ 939.605074][ C1] default_idle_call+0x81/0xc0 [ 939.609880][ C1] do_idle+0x21f/0x580 [ 939.613992][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 939.619229][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 939.624461][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 939.630131][ C1] ? schedule_idle+0x57/0x90 [ 939.634761][ C1] cpu_startup_entry+0x14/0x20 [ 939.639556][ C1] start_secondary+0x330/0x430 [ 939.644354][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 939.649770][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 939.655707][ C1]