last executing test programs: 10m27.549462628s ago: executing program 0 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x55, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3d, 0x47, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, "180f8f", 0x1, "fffb45"}, "9ff8916bec2274ffac64cbef3fd72ab09dc7e84ed556a5e7502bf433d67a96a211f558"}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 10m25.728109236s ago: executing program 3 (id=2705): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x80000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x16, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18}}, 0x1400, 0x7}, &(0x7f0000000140)=0x90) 10m25.551281851s ago: executing program 3 (id=2706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000900)}], 0x3) 10m24.357688076s ago: executing program 3 (id=2707): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10m22.263417409s ago: executing program 0 (id=2713): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, 0x0, 0x78) keyctl$setperm(0x5, r0, 0x12310127) 10m21.705187161s ago: executing program 3 (id=2714): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) 10m21.660257862s ago: executing program 3 (id=2715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000900)}], 0x3) 10m21.576884784s ago: executing program 0 (id=2716): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 10m20.31795841s ago: executing program 3 (id=2718): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 10m20.028142466s ago: executing program 0 (id=2720): mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) 10m19.050770357s ago: executing program 0 (id=2722): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10m18.787968763s ago: executing program 0 (id=2724): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) timer_delete(0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000f900)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f000000fa00)={{[0x7, 0x6, 0x5, 0x3]}, 0x0, 0x3, 0x8, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000100)=0xd) write$dsp(r6, 0x0, 0xfffffe59) syz_clone3(&(0x7f0000000400)={0x80001000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x2f}, &(0x7f00000001c0)=""/128, 0x80, &(0x7f00000002c0)=""/112, &(0x7f00000003c0)=[r2, r2, r2, r2, 0x0], 0x5, {r0}}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) 10m5.1396467s ago: executing program 32 (id=2718): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 10m1.509190256s ago: executing program 33 (id=2724): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) timer_delete(0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000f900)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f000000fa00)={{[0x7, 0x6, 0x5, 0x3]}, 0x0, 0x3, 0x8, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000100)=0xd) write$dsp(r6, 0x0, 0xfffffe59) syz_clone3(&(0x7f0000000400)={0x80001000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x2f}, &(0x7f00000001c0)=""/128, 0x80, &(0x7f00000002c0)=""/112, &(0x7f00000003c0)=[r2, r2, r2, r2, 0x0], 0x5, {r0}}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) 8m15.97928605s ago: executing program 5 (id=2945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0xb, 0x0, "5cffe993aae99297099bf1c5333ea934941af0a50f9989e75c770b8ce74fb8be99b4244f0dcfd392b3fd0e15b43904a1852cfaad90eed14162089f56c3c05b13b5fd11e335d3ed65d88565b4b9d08e39"}, 0xd8) 8m15.639924896s ago: executing program 5 (id=2947): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005140)={0x9c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 8m15.414130262s ago: executing program 5 (id=2948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe0000060000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xf, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="cbb2945152756987ee248a32494c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') pread64(r5, &(0x7f0000000500)=""/15, 0xf, 0x40100000087) 8m6.730163494s ago: executing program 5 (id=2957): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x11) 8m3.718585167s ago: executing program 5 (id=2966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0xb, 0x0, "5cffe993aae99297099bf1c5333ea934941af0a50f9989e75c770b8ce74fb8be99b4244f0dcfd392b3fd0e15b43904a1852cfaad90eed14162089f56c3c05b13b5fd11e335d3ed65d88565b4b9d08e39"}, 0xd8) 8m2.402835635s ago: executing program 5 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206012b000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080012"], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x40c0) creat(&(0x7f00000000c0)='./file0\x00', 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8m1.455191175s ago: executing program 34 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206012b000000000000000005000005050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080012"], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x40c0) creat(&(0x7f00000000c0)='./file0\x00', 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 14.133442152s ago: executing program 6 (id=4039): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@minixdf}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010002000000000004000000050000001000"], 0x24, 0x0) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) 13.533169645s ago: executing program 6 (id=4041): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f00000003c0)=0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, 0x0) unshare(0x2040400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) shutdown(r4, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9c9e97e9ed5d17cf, 0xfffffffffffffffd, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r9, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3ff, @loopback={0xff00000000000000}, 0x5}, 0x80, 0x0}, 0x4c810) bind$802154_raw(r8, &(0x7f0000000280)={0x24, @short={0x2, 0x1}}, 0x14) 9.709376916s ago: executing program 2 (id=4043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {0xa, 0xfff1}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0xc040) 9.354960553s ago: executing program 4 (id=4045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xf, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') pread64(r3, &(0x7f0000000500)=""/15, 0xf, 0x40100000087) 9.354108073s ago: executing program 6 (id=4046): syz_usb_connect(0x0, 0x17e, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16c, 0x2, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0xeb, 0x4, 0x1, 0xfc, 0x6c, 0x65, 0x4, [@hid_hid={0x9, 0x21, 0x8001, 0x5, 0x1, {0x22, 0x8ef}}], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x3, 0xdd, 0x2, [@generic={0x26, 0x6, "3cfc640c7d30a390b573096d193b4254fe9424b842b3abdfdd277cedfc7e8642fe775dde"}, @generic={0x3f, 0xd, "d708d7273217710d41ade854406fe3d137bfae17a0bc000c5229aa61da507c303ca90e449dfc79196498903d02bfdba50e8c70350524877696a676ceb4"}]}}]}}, {{0x9, 0x4, 0x61, 0x9, 0x6, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x3c}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0xf, '\"M'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x0, "eae6099b"}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x4, "20c7c6"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x400, 0x4, 0x2, 0x8}]}], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x2, 0xe}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0xc0, 0x1, [@generic={0x66, 0x8, "3ec9c76dcac64795073d968e151e2037aac80b009ffb29661b0b1044da69e944a37b341ab27e4624e91b9c1e18cdce8cfa91ddd6473e3394db7bcb6c5f55328371fec688e66d4f156119897fb7d77673db56eb5f5b6dc7d86133cfea62cdbc64498626aa"}, @generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x4, 0x3e, 0xfd}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x1, 0x10}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x4, 0x8, 0x2}}, {{0x9, 0x5, 0xe, 0x8, 0x7e7, 0xe, 0x0, 0x1}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x5, 0xf, 0x2, 0x0, 0xcd}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2001}}, {0x2, &(0x7f00000008c0)=@string={0x2}}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002183b9220b1134200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x0) 9.279968485s ago: executing program 1 (id=4047): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c68, &(0x7f0000000040)={0x0, 0x9e73, 0xd000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.949593301s ago: executing program 2 (id=4048): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.297758575s ago: executing program 4 (id=4049): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@minixdf}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010002000000000004000000050000001000"], 0x24, 0x0) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) 7.902362443s ago: executing program 1 (id=4050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 7.442496723s ago: executing program 4 (id=4051): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x6}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x2, 0xd, 0x8, 0x0, 0xffff, 0x8000}) 6.67168574s ago: executing program 4 (id=4052): r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fremovexattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='btr']) 6.621934411s ago: executing program 1 (id=4053): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, 0x0) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) shutdown(r3, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9c9e97e9ed5d17cf, 0xfffffffffffffffd, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r8, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3ff, @loopback={0xff00000000000000}, 0x5}, 0x80, 0x0}, 0x4c810) bind$802154_raw(r7, &(0x7f0000000280)={0x24, @short={0x2, 0x1}}, 0x14) 2.752741972s ago: executing program 1 (id=4054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdaf2, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffff}, {0x1, 0xfff1}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 2.691470563s ago: executing program 6 (id=4055): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000100), 0x84000) socket(0x1, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x109001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 2.435933849s ago: executing program 4 (id=4056): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)="f2316480fe4bc5323949b305c3f0ca35a940199af2212c7c99f7846286c4fd1b724f77d01db2", 0x26}], 0x1}, 0x40810) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 2.413018049s ago: executing program 2 (id=4057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {0xa, 0xfff1}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0xc040) 2.290077361s ago: executing program 6 (id=4058): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c68, &(0x7f0000000040)={0x0, 0x9e73, 0xd000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.071965126s ago: executing program 1 (id=4059): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@minixdf}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010002000000000004000000050000001000"], 0x24, 0x0) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) 1.971817159s ago: executing program 2 (id=4060): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d384"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.345992972s ago: executing program 4 (id=4061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.317115382s ago: executing program 6 (id=4062): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000440)=@file={0x1}, 0x6e) 1.203528014s ago: executing program 1 (id=4063): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, 0x0) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) shutdown(r3, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9c9e97e9ed5d17cf, 0xfffffffffffffffd, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r8, 0x0, 0x4c810) bind$802154_raw(r7, &(0x7f0000000280)={0x24, @short={0x2, 0x1}}, 0x14) 1.125314056s ago: executing program 2 (id=4064): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x700, @in={0x1b, 0x0, @local}, @ib={0x1b, 0xffff, 0x0, {"00000000009de402e395c51a00000009"}, 0x80000, 0x0, 0x3ff}}}, 0x118) 0s ago: executing program 2 (id=4065): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): red promiscuous mode [ 1622.515869][T17014] wg1: entered allmulticast mode [ 1622.959132][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 1625.914473][T17037] loop4: detected capacity change from 0 to 512 [ 1626.066302][T17037] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.3067: inode has both inline data and extents flags [ 1626.162266][T17037] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.3067: couldn't read orphan inode 15 (err -117) [ 1626.175844][T17040] loop2: detected capacity change from 0 to 512 [ 1626.225549][T17044] x_tables: duplicate underflow at hook 2 [ 1626.241480][T17037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.296895][T17040] EXT4-fs: Ignoring removed bh option [ 1626.400709][T17040] EXT4-fs: Ignoring removed mblk_io_submit option [ 1626.503626][T17040] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1626.616067][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.713772][T17040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.802736][T17040] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1626.973016][T17040] EXT4-fs error (device loop2): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.2.3069: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1627.210276][T17040] EXT4-fs error (device loop2): ext4_get_first_dir_block:3595: inode #12: comm syz.2.3069: directory missing '.' [ 1627.437941][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.163532][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 1629.177647][T17082] loop6: detected capacity change from 0 to 512 [ 1629.253019][T17082] EXT4-fs: Ignoring removed bh option [ 1629.258582][T17082] EXT4-fs: Ignoring removed mblk_io_submit option [ 1629.345639][T17082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1629.534064][T17082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.559887][T17082] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.604146][T17082] EXT4-fs error (device loop6): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.6.3083: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1629.709502][T17082] EXT4-fs error (device loop6): ext4_get_first_dir_block:3595: inode #12: comm syz.6.3083: directory missing '.' [ 1629.914144][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.951051][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3086'. [ 1630.076291][T17099] loop1: detected capacity change from 0 to 128 [ 1630.921342][T17105] siw: device registration error -23 [ 1632.874507][T17102] can: request_module (can-proto-3) failed. [ 1636.749862][T17149] syz_tun: left allmulticast mode [ 1636.811993][T17149] syz_tun: left promiscuous mode [ 1636.846013][T17149] bridge0: port 3(syz_tun) entered disabled state [ 1637.097125][T17149] bridge_slave_0: left allmulticast mode [ 1637.179035][T17149] bridge_slave_0: left promiscuous mode [ 1637.230439][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.390490][T17149] bridge_slave_1: left allmulticast mode [ 1637.436135][T17149] bridge_slave_1: left promiscuous mode [ 1637.472215][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.587603][T17168] loop6: detected capacity change from 0 to 512 [ 1637.705944][T17149] bond0: (slave bond_slave_0): Releasing backup interface [ 1638.087266][T17149] bond0: (slave bond_slave_1): Releasing backup interface [ 1638.496615][T17149] team0: Port device team_slave_0 removed [ 1638.539118][ T1138] bio_check_eod: 21 callbacks suppressed [ 1638.539280][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1638.539280][ T1138] loop6: rw=1, sector=560, nr_sectors = 64 limit=512 [ 1638.564038][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1638.564038][ T1138] loop6: rw=1, sector=752, nr_sectors = 32 limit=512 [ 1638.606318][T17149] team0: Port device team_slave_1 removed [ 1638.621561][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1638.621561][ T1138] loop6: rw=1, sector=816, nr_sectors = 32 limit=512 [ 1641.247021][T17149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.258630][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.258630][ T1138] loop6: rw=1, sector=880, nr_sectors = 32 limit=512 [ 1641.327104][T17149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.336845][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.336845][ T1138] loop6: rw=1, sector=944, nr_sectors = 32 limit=512 [ 1641.356145][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.356145][ T1138] loop6: rw=1, sector=1008, nr_sectors = 32 limit=512 [ 1641.377730][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.377730][ T1138] loop6: rw=1, sector=1104, nr_sectors = 96 limit=512 [ 1641.413827][T17149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.432815][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.432815][ T1138] loop6: rw=1, sector=1232, nr_sectors = 32 limit=512 [ 1641.473579][T17149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.497732][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.497732][ T1138] loop6: rw=1, sector=1328, nr_sectors = 32 limit=512 [ 1641.538037][ T1138] kworker/u4:6: attempt to access beyond end of device [ 1641.538037][ T1138] loop6: rw=1, sector=1424, nr_sectors = 32 limit=512 [ 1642.218053][T17192] loop1: detected capacity change from 0 to 164 [ 1642.387641][T17192] Unable to read rock-ridge attributes [ 1643.030279][T17198] can: request_module (can-proto-3) failed. [ 1646.745974][T17198] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1649.293901][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.403216][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.455201][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.514642][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.580329][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.642820][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.720956][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.776506][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.816490][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.887711][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1649.937453][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1650.041826][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1650.050325][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1650.145074][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1650.175811][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1650.210993][T14321] hid-generic 0000:0000:000E.0016: unknown main item tag 0x0 [ 1650.292567][T14321] hid-generic 0000:0000:000E.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1650.856257][T17263] siw: device registration error -23 [ 1652.631535][T17267] loop2: detected capacity change from 0 to 512 [ 1652.641041][T17267] EXT4-fs: Ignoring removed bh option [ 1652.648111][T17267] EXT4-fs: Ignoring removed mblk_io_submit option [ 1652.711921][T17267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1652.723345][T17256] can: request_module (can-proto-3) failed. [ 1652.749854][T17261] fido_id[17261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1654.639494][T17267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.806298][T17267] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1655.133696][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.666679][T17305] loop2: detected capacity change from 0 to 512 [ 1656.846353][T17305] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.3138: inode has both inline data and extents flags [ 1656.950907][T17305] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3138: couldn't read orphan inode 15 (err -117) [ 1657.466774][T17305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.496227][T17314] siw: device registration error -23 [ 1657.778505][T17311] can: request_module (can-proto-3) failed. [ 1658.217730][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.823154][T17337] siw: device registration error -23 [ 1659.935521][T17333] can: request_module (can-proto-3) failed. [ 1664.020242][T17381] loop1: detected capacity change from 0 to 512 [ 1664.181570][T17381] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.3153: inode has both inline data and extents flags [ 1664.332255][T17381] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3153: couldn't read orphan inode 15 (err -117) [ 1664.431205][T17381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.825148][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.934462][T17416] siw: device registration error -23 [ 1667.119049][T17412] can: request_module (can-proto-3) failed. [ 1668.147298][T17435] loop1: detected capacity change from 0 to 512 [ 1668.253706][T17435] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.3166: inode has both inline data and extents flags [ 1668.368399][T17435] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3166: couldn't read orphan inode 15 (err -117) [ 1668.432056][T17435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1669.298830][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.363942][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.377768][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.382871][T17460] siw: device registration error -23 [ 1670.713704][T17453] can: request_module (can-proto-3) failed. [ 1671.289431][T17477] loop1: detected capacity change from 0 to 128 [ 1671.340164][T17477] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1671.909335][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1676.521389][ T8] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1676.688896][T17505] can: request_module (can-proto-3) failed. [ 1676.716034][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1676.723427][ T172] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1676.781837][ T8] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 1676.807850][T17508] siw: device registration error -23 [ 1677.425871][ T8] usb 3-1: config 139 has no interface number 0 [ 1677.444031][ T8] usb 3-1: config 139 interface 49 has no altsetting 0 [ 1677.470893][ T172] usb 2-1: Using ep0 maxpacket: 8 [ 1677.477050][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1677.504851][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.510191][ T172] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1677.533787][ T8] usb 3-1: Product: syz [ 1677.539041][ T8] usb 3-1: Manufacturer: syz [ 1677.545303][ T8] usb 3-1: SerialNumber: syz [ 1677.551557][ T172] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1677.564361][ T172] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1677.577483][ T172] usb 2-1: config 250 has no interface number 0 [ 1677.586335][ T172] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1677.602622][ T172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1677.616716][ T172] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1677.631565][ T172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1677.732785][ T172] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1677.811007][ T172] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1677.830409][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.861804][ T172] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1677.874426][ T172] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1677.883708][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.897161][ T172] usb 2-1: Product: syz [ 1677.897356][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.897760][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.903226][ T172] usb 2-1: SerialNumber: syz [ 1677.993158][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.034867][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.093903][ T172] hub 2-1:250.228: bad descriptor, ignoring hub [ 1678.102971][ T172] hub: probe of 2-1:250.228 failed with error -5 [ 1678.322464][T17497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.359644][T17497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.373949][ T172] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 62 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1678.420277][ T8] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1678.555331][ T8] radio-usb-si4713: probe of 3-1:139.49 failed with error -71 [ 1678.592023][ T8] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 1678.673523][ T8] usb 3-1: USB disconnect, device number 64 [ 1679.082083][ T172] usb 2-1: USB disconnect, device number 62 [ 1679.126062][ T172] usblp0: removed [ 1680.008758][ T172] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1683.439303][T17555] siw: device registration error -23 [ 1683.790631][T17551] can: request_module (can-proto-3) failed. [ 1688.009282][T17565] can: request_module (can-proto-3) failed. [ 1688.169886][T17579] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1691.700934][T13364] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1692.070986][ T172] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1692.140950][T13364] usb 3-1: device not accepting address 65, error -71 [ 1692.330851][ T172] usb 2-1: Using ep0 maxpacket: 8 [ 1692.380494][T17641] can: request_module (can-proto-3) failed. [ 1692.398516][ T172] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1692.957133][ T172] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1693.144012][T17647] siw: device registration error -23 [ 1693.575577][ T172] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1694.620814][ T172] usb 2-1: config 250 has no interface number 0 [ 1695.213700][ T172] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1695.711174][ T172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1695.796333][ T172] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1695.891005][ T172] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1695.960997][ T172] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1696.034662][ T172] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1696.092335][ T172] usb 2-1: string descriptor 0 read error: -71 [ 1696.943314][ T172] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1696.962519][ T172] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1696.988110][ T172] usb 2-1: can't set config #250, error -71 [ 1696.999576][ T172] usb 2-1: USB disconnect, device number 64 [ 1698.824021][T17685] kvm: kvm [17683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1698.892871][T17685] kvm: kvm [17683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1701.017255][T17710] siw: device registration error -23 [ 1701.494761][T17704] can: request_module (can-proto-3) failed. [ 1701.630821][ T172] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1702.497921][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 1703.648829][T17704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1710.705462][T17757] loop1: detected capacity change from 0 to 512 [ 1710.930943][T10030] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1711.016006][T17757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1711.063271][T17757] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1711.151117][T10030] usb 7-1: Using ep0 maxpacket: 8 [ 1711.183472][T10030] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1711.238570][T10030] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1711.314964][T10030] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1711.350832][T10030] usb 7-1: config 250 has no interface number 0 [ 1711.385609][T10030] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1711.409310][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.439050][T10030] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1711.476111][T10030] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1711.537326][T10030] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1711.611612][T10030] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1711.656571][T10030] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1711.661206][ T8] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1711.677706][T10030] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1711.720171][T10030] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1711.746506][T10030] usb 7-1: Product: syz [ 1711.767852][T10030] usb 7-1: SerialNumber: syz [ 1711.865515][T10030] hub 7-1:250.228: bad descriptor, ignoring hub [ 1711.912834][T10030] hub: probe of 7-1:250.228 failed with error -5 [ 1712.114971][T10030] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1713.140270][T17781] siw: device registration error -23 [ 1713.281573][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1713.494190][T10030] usb 7-1: USB disconnect, device number 5 [ 1714.201725][T10030] usblp0: removed [ 1714.351292][T17778] can: request_module (can-proto-3) failed. [ 1714.660631][T10030] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1715.750155][T17787] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1715.969441][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1716.120308][ T8] usb 3-1: can't read configurations, error -71 [ 1717.890668][T10030] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1718.114653][T10030] usb 7-1: config 255 has an invalid interface number: 235 but max is 1 [ 1718.148729][T10030] usb 7-1: config 255 has an invalid interface number: 97 but max is 1 [ 1718.228026][T10030] usb 7-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1718.318533][T10030] usb 7-1: config 255 has no interface number 0 [ 1718.388112][T10030] usb 7-1: config 255 has no interface number 1 [ 1718.457591][T10030] usb 7-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1718.550630][T10030] usb 7-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1718.621918][T10030] usb 7-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1718.680207][T10030] usb 7-1: config 255 interface 235 has no altsetting 0 [ 1718.732349][T10030] usb 7-1: config 255 interface 97 has no altsetting 0 [ 1718.784400][T10030] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1718.795961][T14321] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1718.873372][T10030] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.901837][T10030] usb 7-1: SerialNumber: syz [ 1718.935387][T17813] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1719.040758][T14321] usb 3-1: Using ep0 maxpacket: 8 [ 1719.070720][T14321] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1719.126178][T14321] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1719.183060][T14321] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1719.216899][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.246516][T14321] usb 3-1: config 250 has no interface number 0 [ 1719.261932][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.291627][T14321] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1719.336775][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.360953][T14321] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1719.398706][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.438366][T14321] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1719.461620][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.482674][T14321] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1719.512122][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.551474][T14321] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1719.575203][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.618731][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.639614][T14321] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1719.674911][T14321] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1719.705133][T14321] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1719.735384][T14321] usb 3-1: Product: syz [ 1719.757721][T14321] usb 3-1: SerialNumber: syz [ 1719.812531][T14321] hub 3-1:250.228: bad descriptor, ignoring hub [ 1719.839387][T14321] hub: probe of 3-1:250.228 failed with error -5 [ 1719.889796][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.923856][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.038019][T14321] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 70 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1720.056513][T10030] usb 7-1: bad CDC descriptors [ 1720.085507][T10030] usb 7-1: bad CDC descriptors [ 1720.156483][T10030] usb 7-1: USB disconnect, device number 7 [ 1720.720854][ T5849] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1721.051406][T17827] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 1721.091398][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 1721.219076][ T5849] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1721.237649][ T5849] usb 5-1: config 0 has no interface number 0 [ 1721.244446][ T5849] usb 5-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1721.263033][ T5849] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1721.273257][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.283634][ T5849] usb 5-1: Product: syz [ 1721.288234][ T5849] usb 5-1: Manufacturer: syz [ 1721.304126][ T5849] usb 5-1: SerialNumber: syz [ 1721.390186][ T5849] usb 5-1: config 0 descriptor?? [ 1723.492755][T17871] FAT-fs (nullb0): bogus number of reserved sectors [ 1723.499767][T17871] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1725.064043][ T9057] usb 5-1: USB disconnect, device number 9 [ 1725.803275][ T9057] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1726.023364][ T9057] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1726.051003][ T9057] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1726.079999][ T9057] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1726.093698][ T9057] usb 2-1: config 255 has no interface number 0 [ 1726.117751][ T9057] usb 2-1: config 255 has no interface number 1 [ 1726.128302][ T9057] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1726.197794][ T9057] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1726.215298][ T9057] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1726.229321][ T9057] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1726.289841][ T9057] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1726.331711][ T9057] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1726.375279][ T9057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.444779][ T9057] usb 2-1: SerialNumber: syz [ 1726.476392][T17827] usb 3-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1726.486476][T14321] usb 3-1: USB disconnect, device number 70 [ 1726.519963][T17894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1726.563387][T14321] usblp0: removed [ 1726.841824][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.911722][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.996737][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.054081][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.114123][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.279449][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.334450][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.164046][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.459383][T17894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.485723][T17894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.934948][ T9057] usb 2-1: bad CDC descriptors [ 1729.032255][ T9057] usb 2-1: bad CDC descriptors [ 1729.207073][ T9057] usb 2-1: USB disconnect, device number 65 [ 1730.804501][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.820652][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.161060][ T5830] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1731.720777][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 1732.321397][ T5830] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1732.343256][ T5830] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1732.357180][ T5830] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1732.368671][ T5830] usb 2-1: config 250 has no interface number 0 [ 1732.376756][ T5830] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1732.531090][ T5830] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1732.570769][ T5830] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1732.653906][ T5830] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1732.713447][ T5830] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1732.735075][ T5830] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1732.784230][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1732.812673][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1732.848194][ T5830] usb 2-1: Product: syz [ 1732.869299][ T5830] usb 2-1: SerialNumber: syz [ 1732.887418][T14321] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1732.951838][ T5830] hub 2-1:250.228: bad descriptor, ignoring hub [ 1732.975045][ T5830] hub: probe of 2-1:250.228 failed with error -5 [ 1733.109033][T14321] usb 7-1: config 255 has an invalid interface number: 235 but max is 1 [ 1733.140178][T14321] usb 7-1: config 255 has an invalid interface number: 97 but max is 1 [ 1733.184972][T14321] usb 7-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1733.224314][ T5830] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 66 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1733.225994][T14321] usb 7-1: config 255 has no interface number 0 [ 1733.315193][T14321] usb 7-1: config 255 has no interface number 1 [ 1733.345475][T14321] usb 7-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1733.405644][T14321] usb 7-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1733.481878][T14321] usb 7-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1733.525232][ T9057] usb 2-1: USB disconnect, device number 66 [ 1733.562362][ T9057] usblp0: removed [ 1733.575889][T14321] usb 7-1: config 255 interface 235 has no altsetting 0 [ 1733.623968][T14321] usb 7-1: config 255 interface 97 has no altsetting 0 [ 1733.669927][T14321] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1733.716220][T14321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.750979][T14321] usb 7-1: SerialNumber: syz [ 1733.772336][T17968] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1733.881025][ T9057] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1734.075988][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.086694][T17985] loop4: detected capacity change from 0 to 512 [ 1734.112462][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.130895][ T9057] usb 2-1: Using ep0 maxpacket: 8 [ 1734.165503][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.189590][ T9057] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1734.224806][ T9057] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1734.226949][T17985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1734.250518][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.254336][ T9057] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1734.288912][ T9057] usb 2-1: config 250 has no interface number 0 [ 1734.307357][ T9057] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1734.350635][ T9057] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1734.360284][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.374300][ T9057] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1734.402213][T17985] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.424027][ T9057] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1734.427330][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.470671][ T9057] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1734.552599][ T9057] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1734.566602][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.628837][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.784344][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.859638][ T9057] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1734.938200][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.947273][ T9057] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1734.947309][ T9057] usb 2-1: Product: syz [ 1734.960777][ T9057] usb 2-1: can't set config #250, error -71 [ 1735.093952][ T9057] usb 2-1: USB disconnect, device number 67 [ 1735.161329][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.389580][T14321] usb 7-1: bad CDC descriptors [ 1735.462899][T18000] siw: device registration error -23 [ 1735.980405][T14321] usb 7-1: bad CDC descriptors [ 1736.001138][T14321] usb 7-1: USB disconnect, device number 8 [ 1736.050181][T17996] can: request_module (can-proto-3) failed. [ 1738.832038][T17996] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1740.715634][T18032] loop4: detected capacity change from 0 to 512 [ 1740.957463][T18032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1741.064460][T18032] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.381087][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.949344][T14321] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1742.153043][T14321] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1742.186591][T14321] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1742.216264][T14321] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1742.254292][T14321] usb 2-1: config 255 has no interface number 0 [ 1742.270395][T14321] usb 2-1: config 255 has no interface number 1 [ 1742.293993][T14321] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1742.328853][T14321] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1742.367410][T14321] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1742.410761][T14321] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1742.433852][T14321] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1742.467406][T14321] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1742.509711][T14321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.529527][T14321] usb 2-1: SerialNumber: syz [ 1742.547218][T18049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1742.806733][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.855026][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.897253][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.939236][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.984783][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.024900][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.082456][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.115067][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.365957][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.406882][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.498118][T14321] usb 2-1: bad CDC descriptors [ 1743.522264][T14321] usb 2-1: bad CDC descriptors [ 1743.586304][T14321] usb 2-1: USB disconnect, device number 68 [ 1743.840912][ T172] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1744.292827][ T172] usb 7-1: device not accepting address 9, error -71 [ 1747.236086][T14321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1747.450659][T14321] usb 5-1: Using ep0 maxpacket: 8 [ 1747.483583][T14321] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1747.505902][T14321] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1747.541630][T14321] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1747.580140][T14321] usb 5-1: config 250 has no interface number 0 [ 1747.607499][T14321] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1747.650625][T14321] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1747.705475][T14321] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1747.755672][T14321] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1747.795200][T14321] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1747.854211][T14321] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1747.903591][T14321] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1747.933624][T14321] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1747.970721][T14321] usb 5-1: Product: syz [ 1748.006444][T14321] usb 5-1: SerialNumber: syz [ 1748.048649][T14321] hub 5-1:250.228: bad descriptor, ignoring hub [ 1748.081501][T14321] hub: probe of 5-1:250.228 failed with error -5 [ 1748.271061][T14321] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1749.261653][T18109] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 1749.766714][T18109] usb 5-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1749.814105][T14319] usb 5-1: USB disconnect, device number 10 [ 1749.857124][T14319] usblp0: removed [ 1751.150678][T14319] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1753.780670][ T5849] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1753.961268][T14319] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1754.016408][ T5849] usb 3-1: config 255 has an invalid interface number: 235 but max is 1 [ 1754.036127][ T5849] usb 3-1: config 255 has an invalid interface number: 97 but max is 1 [ 1754.067690][ T5849] usb 3-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1754.097414][ T5849] usb 3-1: config 255 has no interface number 0 [ 1754.114577][ T5849] usb 3-1: config 255 has no interface number 1 [ 1754.135027][ T5849] usb 3-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1754.155830][T14319] usb 7-1: Using ep0 maxpacket: 8 [ 1754.180210][ T5849] usb 3-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1754.194699][T14319] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1754.236810][T14319] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1754.254812][ T5849] usb 3-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1754.285007][T14319] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1754.300614][ T5849] usb 3-1: config 255 interface 235 has no altsetting 0 [ 1754.307976][T14319] usb 7-1: config 250 has no interface number 0 [ 1754.339298][ T5849] usb 3-1: config 255 interface 97 has no altsetting 0 [ 1754.352912][T14319] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1754.422569][ T5849] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1754.448525][T14319] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1754.478626][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.503898][T14319] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1754.524969][ T5849] usb 3-1: SerialNumber: syz [ 1754.550180][T14319] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1754.573760][T18194] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1754.603694][T14319] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1754.670556][T14319] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1754.698320][T14319] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1754.722108][T14319] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1754.755691][T14319] usb 7-1: Product: syz [ 1754.760000][T14319] usb 7-1: SerialNumber: syz [ 1754.798853][T14319] hub 7-1:250.228: bad descriptor, ignoring hub [ 1754.850764][T14319] hub: probe of 7-1:250.228 failed with error -5 [ 1754.868876][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.919617][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.972401][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.020471][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.047005][T14319] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1755.092041][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.151787][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.222508][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.275509][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.411312][T14319] usb 7-1: USB disconnect, device number 11 [ 1755.439505][T14319] usblp0: removed [ 1755.543605][T18194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.591216][T18194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.702351][ T5849] usb 3-1: bad CDC descriptors [ 1755.724863][ T5849] usb 3-1: bad CDC descriptors [ 1755.770741][T14319] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1755.830985][ T5849] usb 3-1: USB disconnect, device number 72 [ 1756.030683][T14319] usb 7-1: Using ep0 maxpacket: 8 [ 1756.041710][T14319] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1756.066179][T14319] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1756.093938][T14319] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1756.126968][T14319] usb 7-1: config 250 has no interface number 0 [ 1756.147619][T14319] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1756.187424][T14319] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1756.270666][T14319] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1756.336225][T14319] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1756.412670][T14319] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1756.494145][T14319] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1756.561407][T14319] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1756.593063][T14319] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1756.612753][T14319] usb 7-1: Product: syz [ 1756.622911][T14319] usb 7-1: SerialNumber: syz [ 1756.879912][T14319] usb 7-1: can't set config #250, error -71 [ 1756.905616][T14319] usb 7-1: USB disconnect, device number 12 [ 1760.301709][ T5849] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1760.520937][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 1760.548214][ T5849] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1760.588103][ T5849] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1760.630716][ T5849] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1760.660797][ T5849] usb 3-1: config 250 has no interface number 0 [ 1760.682669][ T5849] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1760.743494][ T5849] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1760.778869][ T5849] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1760.848490][ T5849] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1760.909031][ T5849] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1760.984636][ T5849] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1761.062607][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1761.114591][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1761.163518][ T5849] usb 3-1: Product: syz [ 1761.188479][ T5849] usb 3-1: SerialNumber: syz [ 1761.232038][ T5849] hub 3-1:250.228: bad descriptor, ignoring hub [ 1761.258173][ T5849] hub: probe of 3-1:250.228 failed with error -5 [ 1761.567522][ T5849] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 73 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1761.933421][ T5849] usb 3-1: USB disconnect, device number 73 [ 1762.152290][ T5849] usblp0: removed [ 1762.580632][ T5849] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1762.780784][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 1762.802688][ T5849] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1762.837663][ T5849] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1762.865046][ T5849] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1762.898671][ T5849] usb 3-1: config 250 has no interface number 0 [ 1762.925713][ T5849] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1762.979589][ T5849] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1763.010753][ T5849] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1763.041706][ T5849] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1763.078283][ T5849] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1763.120553][ T5849] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1763.222659][ T5849] usb 3-1: string descriptor 0 read error: -71 [ 1763.277193][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1763.334451][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1763.394570][ T5849] usb 3-1: can't set config #250, error -71 [ 1763.444598][ T5849] usb 3-1: USB disconnect, device number 74 [ 1772.490738][ T6386] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1772.710887][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 1772.719902][ T6386] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1772.737424][ T6386] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1772.781340][ T6386] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1772.817285][ T6386] usb 5-1: config 250 has no interface number 0 [ 1772.828474][ T6386] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1772.883307][ T6386] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1772.934624][ T6386] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1772.968676][ T6386] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1773.033699][ T6386] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1773.072490][ T6386] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1773.243780][ T6386] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1773.261246][ T6386] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1773.286735][ T6386] usb 5-1: Product: syz [ 1773.296986][ T6386] usb 5-1: SerialNumber: syz [ 1773.363037][ T6386] hub 5-1:250.228: bad descriptor, ignoring hub [ 1773.402097][ T6386] hub: probe of 5-1:250.228 failed with error -5 [ 1773.609203][ T6386] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1774.626099][T18373] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 1775.099924][T18373] usb 5-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1775.138206][ T6386] usb 5-1: USB disconnect, device number 12 [ 1775.164479][ T6386] usblp0: removed [ 1775.700732][ T6386] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1775.920679][ T6386] usb 5-1: Using ep0 maxpacket: 32 [ 1775.939653][ T6386] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 1775.974617][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1775.993195][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.016501][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.043026][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.070010][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.089758][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.107628][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.126357][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.148183][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.167260][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.188123][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.209455][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.232780][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.260676][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.279033][ T6386] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1776.306626][ T6386] usb 5-1: config 0 has no interface number 0 [ 1776.423575][ T6386] usb 5-1: string descriptor 0 read error: -71 [ 1776.471309][ T6386] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1776.549224][ T6386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.608528][ T6386] usb 5-1: config 0 descriptor?? [ 1776.682350][ T6386] usb 5-1: can't set config #0, error -71 [ 1776.724747][ T6386] usb 5-1: USB disconnect, device number 13 [ 1777.061450][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1777.347329][ T9] usb 7-1: config 255 has an invalid interface number: 235 but max is 1 [ 1777.378884][ T9] usb 7-1: config 255 has an invalid interface number: 97 but max is 1 [ 1777.431313][ T9] usb 7-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1777.486725][ T9] usb 7-1: config 255 has no interface number 0 [ 1777.521432][ T9] usb 7-1: config 255 has no interface number 1 [ 1777.533292][ T9] usb 7-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1777.601715][ T9] usb 7-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1777.616965][ T9] usb 7-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1779.067767][ T9] usb 7-1: config 255 interface 235 has no altsetting 0 [ 1779.076588][ T9] usb 7-1: config 255 interface 97 has no altsetting 0 [ 1779.118495][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1779.129677][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.139640][ T9] usb 7-1: SerialNumber: syz [ 1779.163263][T18412] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1779.407250][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.457267][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.472171][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.489837][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.500693][ T6386] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1779.523111][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.546079][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.566600][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.583302][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.702660][ T6386] usb 3-1: Using ep0 maxpacket: 8 [ 1779.719743][ T6386] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1779.740609][ T6386] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1779.749403][ T6386] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1779.769630][ T6386] usb 3-1: config 250 has no interface number 0 [ 1779.781168][ T6386] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1779.795146][ T6386] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1779.816500][ T6386] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1779.825256][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.836801][ T6386] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1779.836848][ T6386] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1779.836880][ T6386] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1779.839045][ T6386] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1779.850826][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.869348][ T6386] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1779.903924][ T6386] usb 3-1: Product: syz [ 1779.908435][ T6386] usb 3-1: SerialNumber: syz [ 1779.974887][ T6386] hub 3-1:250.228: bad descriptor, ignoring hub [ 1779.986318][ T6386] hub: probe of 3-1:250.228 failed with error -5 [ 1780.196731][ T6386] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 75 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1780.851430][T18436] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 1781.275214][T18436] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1781.295310][ T9] usb 7-1: bad CDC descriptors [ 1781.310142][ T9] usb 7-1: bad CDC descriptors [ 1781.326021][ T6386] usb 3-1: USB disconnect, device number 75 [ 1781.367373][ T6386] usblp0: removed [ 1781.401543][ T9] usb 7-1: USB disconnect, device number 13 [ 1781.910948][ T6386] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1782.130787][ T6386] usb 3-1: device descriptor read/64, error -71 [ 1782.441021][ T6386] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1783.124368][ T8] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1783.343857][ T8] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1783.380816][ T8] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1783.430632][ T8] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1783.444196][ T8] usb 2-1: config 255 has no interface number 0 [ 1783.471326][ T8] usb 2-1: config 255 has no interface number 1 [ 1783.481651][ T8] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1783.528512][ T8] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1783.570877][ T8] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1783.598245][ T8] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1783.607559][ T8] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1783.677902][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1783.700711][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.711459][ T8] usb 2-1: SerialNumber: syz [ 1783.751126][T18462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1783.850882][ T6386] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1784.025536][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.050881][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 1784.067355][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.113814][ T6386] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1784.136013][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.157548][ T6386] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1784.192217][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.221005][ T6386] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1784.245774][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.258939][ T6386] usb 5-1: config 250 has no interface number 0 [ 1784.280360][ T6386] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1784.301432][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.336880][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.355220][ T6386] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1784.381053][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.405469][ T6386] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1784.445503][ T6386] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1784.480120][ T6386] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1784.523995][ T6386] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1784.565988][ T6386] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1784.592323][ T6386] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1784.623312][ T6386] usb 5-1: Product: syz [ 1784.640371][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.669532][ T6386] usb 5-1: SerialNumber: syz [ 1784.687310][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.728334][ T6386] hub 5-1:250.228: bad descriptor, ignoring hub [ 1784.775436][ T6386] hub: probe of 5-1:250.228 failed with error -5 [ 1784.951325][ T6386] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1785.663508][ T8] usb 2-1: bad CDC descriptors [ 1785.701455][ T8] usb 2-1: bad CDC descriptors [ 1785.756338][ T8] usb 2-1: USB disconnect, device number 69 [ 1785.911761][T18475] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 1786.413038][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.479337][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.501438][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.512977][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.290712][T14321] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1789.508709][T14321] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1789.533885][T14321] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1789.566101][T14321] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1789.597080][T14321] usb 2-1: config 255 has no interface number 0 [ 1789.609540][T14321] usb 2-1: config 255 has no interface number 1 [ 1789.619076][T14321] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1789.645815][T14321] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1789.669452][T14321] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1789.733948][T14321] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1789.760876][T14321] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1789.900779][T14321] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1789.923331][T14321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.945927][T14321] usb 2-1: SerialNumber: syz [ 1789.973717][T18518] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1790.248670][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.288086][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.338469][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.407053][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.459507][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.527307][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.566139][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.616421][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.858450][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.882759][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.957554][T14321] usb 2-1: bad CDC descriptors [ 1790.970317][T14321] usb 2-1: bad CDC descriptors [ 1791.016733][T14321] usb 2-1: USB disconnect, device number 70 [ 1791.070678][ T9057] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1791.271598][T18475] usb 5-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1791.286644][ T9057] usb 3-1: Using ep0 maxpacket: 32 [ 1791.306611][ T6386] usb 5-1: USB disconnect, device number 14 [ 1791.327142][ T9057] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1791.348798][ T6386] usblp0: removed [ 1791.353782][ T9057] usb 3-1: config 0 has no interface number 0 [ 1791.359970][ T9057] usb 3-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1791.457850][ T9057] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1791.480979][ T9057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.530925][ T9057] usb 3-1: Product: syz [ 1791.535171][ T9057] usb 3-1: Manufacturer: syz [ 1791.539808][ T9057] usb 3-1: SerialNumber: syz [ 1791.646588][ T9057] usb 3-1: config 0 descriptor?? [ 1792.243590][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.255014][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.554858][T18567] FAT-fs (nullb0): bogus number of reserved sectors [ 1793.562311][T18567] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1794.751008][ T6386] usb 3-1: USB disconnect, device number 78 [ 1796.566109][T18612] binder: 18611:18612 ioctl c0306201 0 returned -14 [ 1798.320881][T18613] binder: 18611:18613 ioctl c0306201 0 returned -14 [ 1802.080701][T18650] binder: 18649:18650 ioctl c0306201 0 returned -14 [ 1803.660892][T18652] binder: 18649:18652 ioctl c0306201 0 returned -14 [ 1806.758558][T18674] binder: 18673:18674 ioctl c0306201 0 returned -14 [ 1808.400827][T18677] binder: 18673:18677 ioctl c0306201 0 returned -14 [ 1813.620612][T18709] binder: 18708:18709 ioctl c0306201 0 returned -14 [ 1815.041226][T18709] binder: 18708:18709 ioctl c0306201 0 returned -14 [ 1816.520579][ T9057] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1816.852193][ T9057] usb 2-1: device descriptor read/all, error -71 [ 1817.877736][T18732] binder: 18731:18732 ioctl c0306201 0 returned -14 [ 1819.290845][T18732] binder: 18731:18732 ioctl c0306201 0 returned -14 [ 1821.711064][ T172] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1821.972100][ T172] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1822.015062][ T172] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1822.050912][ T172] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1822.110907][ T172] usb 2-1: config 255 has no interface number 0 [ 1822.119644][ T172] usb 2-1: config 255 has no interface number 1 [ 1822.180933][ T172] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1822.220819][ T172] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1822.257356][ T172] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1822.300737][ T172] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1822.350744][ T172] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1822.408351][ T172] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1822.428245][ T172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.471498][ T172] usb 2-1: SerialNumber: syz [ 1822.530887][T18743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1822.803208][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.882036][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.935988][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.005459][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.066585][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.118528][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.157369][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.199107][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.289995][T18765] syzkaller0: entered promiscuous mode [ 1823.298221][T18765] syzkaller0: entered allmulticast mode [ 1823.441444][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.473296][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.961338][ T172] usb 2-1: bad CDC descriptors [ 1824.003777][ T172] usb 2-1: bad CDC descriptors [ 1824.149467][ T172] usb 2-1: USB disconnect, device number 73 [ 1825.716534][T18791] loop6: detected capacity change from 0 to 8192 [ 1826.278241][T18800] can: request_module (can-proto-3) failed. [ 1826.662661][T18817] syzkaller0: entered promiscuous mode [ 1826.668214][T18817] syzkaller0: entered allmulticast mode [ 1826.862929][T18824] (null): rxe_set_mtu: Set mtu to 1024 [ 1827.531742][T18833] loop2: detected capacity change from 0 to 7 [ 1827.558325][T18833] Dev loop2: unable to read RDB block 7 [ 1827.586544][T18833] loop2: AHDI p1 p2 p3 [ 1827.599316][T18833] loop2: partition table partially beyond EOD, truncated [ 1827.626130][T18833] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1827.658206][T18833] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1827.671087][T18836] loop1: detected capacity change from 0 to 512 [ 1827.808041][T18836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.913378][T18836] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1828.179518][T18824] infiniband syz2: set active [ 1828.207746][T18824] infiniband syz2: added bridge_slave_0 [ 1828.236921][T18824] syz2: rxe_create_cq: returned err = -12 [ 1828.245859][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.261861][T18824] infiniband syz2: Couldn't create ib_mad CQ [ 1828.278510][T18824] infiniband syz2: Couldn't open port 1 [ 1828.365794][T18824] RDS/IB: syz2: added [ 1828.384921][T18824] smc: adding ib device syz2 with port count 1 [ 1828.398791][T18824] smc: ib device syz2 port 1 has pnetid [ 1829.634243][T18847] loop6: detected capacity change from 0 to 8192 [ 1830.864379][T18849] can: request_module (can-proto-3) failed. [ 1830.983883][T18860] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 1830.983883][T18860] program syz.4.3525 not setting count and/or reply_len properly [ 1831.545955][T18868] autofs4:pid:18868:autofs_fill_super: called with bogus options [ 1831.956696][T18852] siw: device registration error -23 [ 1834.172925][T18900] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1834.293459][T18902] syz_tun: entered allmulticast mode [ 1835.596298][T18918] syzkaller0: entered promiscuous mode [ 1835.604150][T18918] syzkaller0: entered allmulticast mode [ 1836.170387][T18929] netlink: 'syz.2.3550': attribute type 83 has an invalid length. [ 1836.570754][T18940] loop4: detected capacity change from 0 to 512 [ 1836.632744][T18940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.653286][T18940] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1837.012346][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.197405][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3564'. [ 1838.297017][T18965] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1838.309028][T18965] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1838.321228][T18965] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1838.334726][T18965] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1838.659514][T18974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1838.700999][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1839.597687][T18987] loop2: detected capacity change from 0 to 512 [ 1839.628354][T18987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1839.706215][T18987] EXT4-fs (loop2): 1 truncate cleaned up [ 1839.719785][T18987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1840.346229][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.389199][T18998] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1840.419164][ T9057] IPVS: starting estimator thread 0... [ 1840.520827][T19002] IPVS: using max 17 ests per chain, 40800 per kthread [ 1841.343773][T19014] loop2: detected capacity change from 0 to 7 [ 1841.380749][T19014] Dev loop2: unable to read RDB block 7 [ 1841.397118][T19014] loop2: AHDI p1 p2 p3 [ 1841.409593][T19014] loop2: partition table partially beyond EOD, truncated [ 1841.453613][T19014] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1841.509520][T19014] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1843.987311][T19042] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1844.127187][T19040] syzkaller0: entered promiscuous mode [ 1844.141099][T19040] syzkaller0: entered allmulticast mode [ 1844.801366][T19051] loop4: detected capacity change from 0 to 512 [ 1844.831937][T19053] loop6: detected capacity change from 0 to 1024 [ 1845.139569][T19051] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1845.202771][T19051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1845.232687][T19051] System zones: 0-1, 15-15, 18-18, 34-34 [ 1845.239410][T19051] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1845.330779][T19051] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1845.385415][T19051] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1845.464150][T19051] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1845.519067][T19051] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.3597: bg 0: block 40: padding at end of block bitmap is not set [ 1845.606582][T19051] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1845.658759][T19051] EXT4-fs (loop4): 1 truncate cleaned up [ 1845.692288][T19051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1845.952905][T19060] can: request_module (can-proto-3) failed. [ 1849.128939][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.213408][T19161] autofs4:pid:19161:autofs_fill_super: called with bogus options [ 1853.091797][T19177] loop6: detected capacity change from 0 to 1024 [ 1853.235698][T19177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1853.293781][T19177] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1853.555672][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1853.690128][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1855.576973][T19213] siw: device registration error -23 [ 1855.622475][T19207] can: request_module (can-proto-3) failed. [ 1858.190907][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1858.430970][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1858.457185][ T9] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1858.471510][ T9] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1858.482907][ T9] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1858.495108][ T9] usb 7-1: config 250 has no interface number 0 [ 1858.505881][ T9] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1858.541666][ T9] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1858.551325][T19246] syzkaller0: entered promiscuous mode [ 1858.559996][T19246] syzkaller0: entered allmulticast mode [ 1858.607175][ T9] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1858.619752][ T9] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1858.633062][ T9] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1858.649566][ T9] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1858.670414][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1858.685095][ T9] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1858.695739][ T9] usb 7-1: Product: syz [ 1858.700569][ T9] usb 7-1: SerialNumber: syz [ 1858.742308][ T9] hub 7-1:250.228: bad descriptor, ignoring hub [ 1858.754011][ T9] hub: probe of 7-1:250.228 failed with error -5 [ 1858.763107][T14321] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1858.993834][T14321] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1860.910840][T14321] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1860.919184][T14321] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1861.774744][T14321] usb 2-1: config 255 has no interface number 0 [ 1861.781334][T14321] usb 2-1: config 255 has no interface number 1 [ 1861.788066][T14321] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1861.799042][T14321] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1861.810300][T14321] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1861.824221][T14321] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1861.895632][T14321] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1861.961374][T14321] usb 2-1: string descriptor 0 read error: -71 [ 1861.967848][T14321] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1862.054922][ T9] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1862.057595][T19254] loop2: detected capacity change from 0 to 512 [ 1862.114017][T14321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.156467][ T9] usb 7-1: USB disconnect, device number 14 [ 1862.196217][T14321] usb 2-1: can't set config #255, error -71 [ 1862.216898][T19254] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 1862.236092][T19254] System zones: 1-12 [ 1862.263232][T14321] usb 2-1: USB disconnect, device number 74 [ 1862.276707][T19254] EXT4-fs (loop2): 1 truncate cleaned up [ 1862.354334][ T9] usblp0: removed [ 1862.361547][T19254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1862.430198][T19260] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1862.783108][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1863.369212][T19266] loop6: detected capacity change from 0 to 512 [ 1863.627249][T19266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1863.757625][T19265] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.3648: Unimplemented hash flags: 0x0001 [ 1863.813538][T19273] syzkaller0: entered promiscuous mode [ 1863.823332][T19265] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3648: Corrupt directory, running e2fsck is recommended [ 1863.867937][T19273] syzkaller0: entered allmulticast mode [ 1864.213691][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.900621][T14321] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1864.970259][T19290] loop6: detected capacity change from 0 to 2048 [ 1865.005508][T19290] loop6: p1 < > p4 [ 1865.063777][T19290] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1865.230742][T14321] usb 2-1: Using ep0 maxpacket: 8 [ 1865.288026][T14321] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1865.479078][T14321] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1865.540574][T14321] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1865.615815][T14321] usb 2-1: config 250 has no interface number 0 [ 1865.657779][T14321] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1865.728379][T14321] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1865.791082][T14321] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1865.850927][T14321] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1865.885627][T14321] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1865.931870][T14321] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1865.954237][T14321] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1865.968827][T14321] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1865.979744][T14321] usb 2-1: Product: syz [ 1865.989266][T14321] usb 2-1: SerialNumber: syz [ 1866.013607][T14321] hub 2-1:250.228: bad descriptor, ignoring hub [ 1866.033032][T14321] hub: probe of 2-1:250.228 failed with error -5 [ 1866.239620][T14321] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 75 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1866.301886][T14321] usb 2-1: USB disconnect, device number 75 [ 1866.325908][T14321] usblp0: removed [ 1866.805658][T14321] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1867.005342][T14321] usb 2-1: Using ep0 maxpacket: 8 [ 1867.014275][T14321] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1867.023778][T14321] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1867.047716][T14321] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1867.058627][T14321] usb 2-1: config 250 has no interface number 0 [ 1867.072863][T14321] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1867.088716][T14321] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1867.101073][T14321] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1867.117227][T14321] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1867.129290][T14321] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1867.155969][T14321] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1867.168811][T14321] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1867.185485][T14321] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1867.194565][T14321] usb 2-1: Product: syz [ 1867.199127][T14321] usb 2-1: SerialNumber: syz [ 1867.226419][T14321] hub 2-1:250.228: bad descriptor, ignoring hub [ 1867.244091][T14321] hub: probe of 2-1:250.228 failed with error -5 [ 1867.443735][T14321] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 76 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1867.492683][T14321] usb 2-1: USB disconnect, device number 76 [ 1867.522856][T14321] usblp0: removed [ 1868.043073][T14321] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1868.200601][T14321] usb 2-1: device descriptor read/64, error -71 [ 1868.470969][T14321] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1868.631179][T14321] usb 2-1: device descriptor read/64, error -71 [ 1868.755559][T14321] usb usb2-port1: attempt power cycle [ 1868.915227][ T9057] IPVS: starting estimator thread 0... [ 1868.922533][T19301] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1869.044229][T19303] IPVS: using max 17 ests per chain, 40800 per kthread [ 1870.318805][T19311] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1870.679822][T19317] loop2: detected capacity change from 0 to 512 [ 1870.801857][T19317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1870.901296][T19317] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.3665: Unimplemented hash flags: 0x0001 [ 1870.990949][T19317] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3665: Corrupt directory, running e2fsck is recommended [ 1871.182745][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.420285][T19327] loop2: detected capacity change from 0 to 512 [ 1871.477929][T19327] EXT4-fs error (device loop2): __ext4_iget:5078: inode #11: block 1: comm syz.2.3669: invalid block [ 1871.531173][T19327] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3669: couldn't read orphan inode 11 (err -117) [ 1871.549768][T19327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1871.638981][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.359436][T19344] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1873.375242][ T6386] IPVS: starting estimator thread 0... [ 1873.481687][T19347] IPVS: using max 17 ests per chain, 40800 per kthread [ 1875.511477][ T9] IPVS: starting estimator thread 0... [ 1875.600709][T19374] IPVS: using max 19 ests per chain, 45600 per kthread [ 1876.807983][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3697'. [ 1876.851997][T19399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3697'. [ 1878.279371][T19419] loop4: detected capacity change from 0 to 1024 [ 1878.331605][T19419] EXT4-fs: Ignoring removed orlov option [ 1878.533641][T19419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1879.289475][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1880.029861][T19442] loop1: detected capacity change from 0 to 512 [ 1880.274637][T19442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1880.472045][T19442] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.3713: Unimplemented hash flags: 0x0001 [ 1880.525412][T19446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1880.577451][T19442] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3713: Corrupt directory, running e2fsck is recommended [ 1881.243048][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.413304][T19457] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3718'. [ 1881.567942][T19463] loop4: detected capacity change from 0 to 512 [ 1881.586969][T19460] veth0_to_team: entered promiscuous mode [ 1888.549345][T19522] loop4: detected capacity change from 0 to 1024 [ 1888.565835][T19522] EXT4-fs: Ignoring removed orlov option [ 1888.680261][T19522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1888.796306][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.176767][T19533] loop4: detected capacity change from 0 to 512 [ 1889.235496][T19537] loop2: detected capacity change from 0 to 128 [ 1889.253613][T19533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1889.323693][T19533] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1889.334555][T19533] EXT4-fs (loop4): group descriptors corrupted! [ 1890.264951][ T28] audit: type=1326 audit(1784192050.941:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1890.351146][ T28] audit: type=1326 audit(1784192050.941:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1890.379413][ T28] audit: type=1326 audit(1784192050.951:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1890.428547][ T28] audit: type=1326 audit(1784192051.081:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1890.535116][ T28] audit: type=1326 audit(1784192051.081:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1890.696619][ T28] audit: type=1326 audit(1784192051.081:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f799015e68e code=0x7ffc0000 [ 1890.846419][ T28] audit: type=1326 audit(1784192051.131:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1890.958620][ T28] audit: type=1326 audit(1784192051.131:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1891.003464][ T28] audit: type=1326 audit(1784192051.131:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19547 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1891.041656][ T28] audit: type=1326 audit(1784192051.131:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19554 comm="syz.2.3752" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f799019de59 code=0x7ffc0000 [ 1891.368719][T19571] loop1: detected capacity change from 0 to 128 [ 1895.400786][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3766'. [ 1895.840573][T19591] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3769'. [ 1896.010034][T19593] loop2: detected capacity change from 0 to 7 [ 1896.031092][T19593] Dev loop2: unable to read RDB block 7 [ 1896.045866][T19593] loop2: unable to read partition table [ 1896.074176][T19593] loop2: partition table beyond EOD, truncated [ 1896.110682][T19593] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1896.729788][T19601] syzkaller0: entered promiscuous mode [ 1896.753666][T19601] syzkaller0: entered allmulticast mode [ 1896.963071][T19607] loop2: detected capacity change from 0 to 512 [ 1897.039494][T19607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1897.106515][T19607] ext4 filesystem being mounted at /299/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 1897.331906][T19607] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1897.408532][T19607] EXT4-fs (loop2): Remounting filesystem read-only [ 1897.577176][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1897.598101][T19111] __quota_error: 4 callbacks suppressed [ 1897.598123][T19111] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1897.663941][T19111] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 1897.720247][T19619] loop6: detected capacity change from 0 to 1024 [ 1897.779349][T19619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1897.864110][T19623] loop2: detected capacity change from 0 to 7 [ 1897.898822][T19623] Dev loop2: unable to read RDB block 7 [ 1897.919894][T19623] loop2: unable to read partition table [ 1897.962643][T19623] loop2: partition table beyond EOD, truncated [ 1898.005883][T19623] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1898.222873][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1898.619107][T19630] syzkaller0: entered promiscuous mode [ 1898.656555][T19630] syzkaller0: entered allmulticast mode [ 1899.809824][T19652] loop2: detected capacity change from 0 to 7 [ 1899.830063][T19652] Dev loop2: unable to read RDB block 7 [ 1899.869489][T19652] loop2: unable to read partition table [ 1899.876661][T19652] loop2: partition table beyond EOD, truncated [ 1899.885958][T19652] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1899.912596][ T5141] Dev loop2: unable to read RDB block 7 [ 1899.936876][ T5141] loop2: unable to read partition table [ 1899.978002][ T5141] loop2: partition table beyond EOD, truncated [ 1905.257864][T19679] syzkaller0: entered promiscuous mode [ 1905.292963][T19679] syzkaller0: entered allmulticast mode [ 1906.198047][T19694] syzkaller0: entered promiscuous mode [ 1906.218323][T19694] syzkaller0: entered allmulticast mode [ 1911.463472][T19737] syzkaller0: entered promiscuous mode [ 1911.497070][T19737] syzkaller0: entered allmulticast mode [ 1911.564567][ T28] audit: type=1326 audit(1784192072.231:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1911.815920][ T28] audit: type=1326 audit(1784192072.231:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1911.854841][ T28] audit: type=1326 audit(1784192072.241:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1912.552525][ T28] audit: type=1326 audit(1784192072.241:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1912.609078][ T28] audit: type=1326 audit(1784192072.241:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1912.726256][T19753] siw: device registration error -23 [ 1913.220580][ T28] audit: type=1326 audit(1784192072.241:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1913.245707][ T28] audit: type=1326 audit(1784192072.241:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1913.271214][ T28] audit: type=1326 audit(1784192072.241:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1913.296288][ T28] audit: type=1326 audit(1784192072.271:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1913.360365][ T28] audit: type=1326 audit(1784192072.491:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19739 comm="syz.6.3815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f45d9de59 code=0x7ffc0000 [ 1913.628296][T19745] can: request_module (can-proto-3) failed. [ 1914.130854][T19771] syzkaller0: entered promiscuous mode [ 1914.150334][T19771] syzkaller0: entered allmulticast mode [ 1914.696110][T19786] loop2: detected capacity change from 0 to 1024 [ 1914.705904][T19786] EXT4-fs: Ignoring removed orlov option [ 1914.828561][T19786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1915.126501][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.162457][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1919.538767][T19809] syzkaller0: entered promiscuous mode [ 1919.561550][T19809] syzkaller0: entered allmulticast mode [ 1919.622432][T19814] loop4: detected capacity change from 0 to 164 [ 1920.366751][T19820] siw: device registration error -23 [ 1921.688031][T19817] can: request_module (can-proto-3) failed. [ 1923.364229][T19827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3832'. [ 1924.108904][ T8] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1924.338738][T19839] syzkaller0: entered promiscuous mode [ 1924.345396][T19839] syzkaller0: entered allmulticast mode [ 1924.360960][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1924.380788][ T8] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1924.410186][ T8] usb 2-1: config 0 has no interface number 0 [ 1924.427974][ T8] usb 2-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1924.475125][ T8] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1924.520776][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.574546][ T8] usb 2-1: Product: syz [ 1924.601453][ T8] usb 2-1: Manufacturer: syz [ 1924.620387][ T8] usb 2-1: SerialNumber: syz [ 1924.658047][ T8] usb 2-1: config 0 descriptor?? [ 1929.292434][ T9] usb 2-1: USB disconnect, device number 80 [ 1929.890872][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1930.150916][ T9] usb 2-1: config 255 has an invalid interface number: 235 but max is 1 [ 1930.161119][ T9] usb 2-1: config 255 has an invalid interface number: 97 but max is 1 [ 1930.172795][ T9] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1930.184821][ T9] usb 2-1: config 255 has no interface number 0 [ 1930.192604][ T9] usb 2-1: config 255 has no interface number 1 [ 1930.200707][ T9] usb 2-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1930.213362][ T9] usb 2-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1930.227111][ T9] usb 2-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1930.227525][T19858] syzkaller0: entered promiscuous mode [ 1930.252903][T19858] syzkaller0: entered allmulticast mode [ 1930.289001][ T9] usb 2-1: config 255 interface 235 has no altsetting 0 [ 1930.299370][ T9] usb 2-1: config 255 interface 97 has no altsetting 0 [ 1930.359422][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1930.379212][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.417000][ T9] usb 2-1: SerialNumber: syz [ 1930.437497][T19880] loop2: detected capacity change from 0 to 7 [ 1930.448143][T19880] Dev loop2: unable to read RDB block 7 [ 1930.458276][T19880] loop2: unable to read partition table [ 1930.477134][T19880] loop2: partition table beyond EOD, truncated [ 1930.503514][T19878] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1930.531079][T19880] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1930.762908][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.803842][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.900765][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.989457][T19887] loop2: detected capacity change from 0 to 1024 [ 1931.001888][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.073639][T19887] EXT4-fs: Ignoring removed orlov option [ 1931.134403][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.182652][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.402980][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.473321][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.501309][T19887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1931.686692][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1931.718154][T19878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.729148][T19878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.019226][T19899] loop4: detected capacity change from 0 to 512 [ 1932.027035][ T9] usb 2-1: bad CDC descriptors [ 1932.037059][ T9] usb 2-1: bad CDC descriptors [ 1932.085466][T19899] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.3850: corrupted in-inode xattr: invalid ea_ino [ 1932.191015][T19899] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.3850: couldn't read orphan inode 15 (err -117) [ 1932.292560][T19899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1932.303800][ T9] usb 2-1: USB disconnect, device number 81 [ 1932.580038][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1932.700601][ T5849] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1932.940561][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 1932.944039][T19909] syzkaller0: entered promiscuous mode [ 1932.963382][ T5849] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1932.974651][T19909] syzkaller0: entered allmulticast mode [ 1932.981257][ T5849] usb 3-1: config 0 has no interface number 0 [ 1932.981317][ T5849] usb 3-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1933.023898][ T5849] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1933.064677][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.101448][ T5849] usb 3-1: Product: syz [ 1933.105716][ T5849] usb 3-1: Manufacturer: syz [ 1933.137830][ T5849] usb 3-1: SerialNumber: syz [ 1933.174671][ T5849] usb 3-1: config 0 descriptor?? [ 1937.935875][T15705] usb 3-1: USB disconnect, device number 79 [ 1939.659775][T19913] syzkaller0: entered promiscuous mode [ 1939.665466][T19913] syzkaller0: entered allmulticast mode [ 1940.901248][ T6386] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1941.122626][ T6386] usb 3-1: config 255 has an invalid interface number: 235 but max is 1 [ 1941.132241][ T6386] usb 3-1: config 255 has an invalid interface number: 97 but max is 1 [ 1941.143838][ T6386] usb 3-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1941.160229][ T6386] usb 3-1: config 255 has no interface number 0 [ 1941.182100][ T6386] usb 3-1: config 255 has no interface number 1 [ 1941.190979][T15705] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1941.226345][ T6386] usb 3-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 1941.293304][ T6386] usb 3-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1941.353658][ T6386] usb 3-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1941.369637][T19966] syzkaller0: entered promiscuous mode [ 1941.382780][T19966] syzkaller0: entered allmulticast mode [ 1941.403405][ T6386] usb 3-1: config 255 interface 235 has no altsetting 0 [ 1941.444561][ T6386] usb 3-1: config 255 interface 97 has no altsetting 0 [ 1941.462015][T15705] usb 7-1: Using ep0 maxpacket: 32 [ 1941.468243][ T6386] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1941.468280][ T6386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.468304][ T6386] usb 3-1: SerialNumber: syz [ 1941.476019][T19953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1941.486719][T15705] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1941.600821][T15705] usb 7-1: config 0 has no interface number 0 [ 1941.619961][T15705] usb 7-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1941.659764][T15705] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1941.674925][T15705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.687612][T15705] usb 7-1: Product: syz [ 1941.694902][T15705] usb 7-1: Manufacturer: syz [ 1941.701475][T15705] usb 7-1: SerialNumber: syz [ 1941.743008][T15705] usb 7-1: config 0 descriptor?? [ 1941.785238][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.822073][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.875759][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1941.922060][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1941.974666][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.017336][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.085461][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.140113][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.386909][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.424785][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.534299][ T6386] usb 3-1: bad CDC descriptors [ 1942.552449][ T6386] usb 3-1: bad CDC descriptors [ 1942.610568][ T6386] usb 3-1: USB disconnect, device number 80 [ 1945.239178][ T6386] usb 7-1: USB disconnect, device number 15 [ 1949.972210][T20031] syzkaller0: entered promiscuous mode [ 1950.010806][T20031] syzkaller0: entered allmulticast mode [ 1950.239760][T20041] syzkaller0: entered promiscuous mode [ 1950.263833][T20041] syzkaller0: entered allmulticast mode [ 1960.851706][T20048] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3882'. [ 1962.230554][T14321] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1962.420622][T14321] usb 3-1: Using ep0 maxpacket: 32 [ 1962.455139][T14321] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1962.511749][T14321] usb 3-1: config 0 has no interface number 0 [ 1962.540677][T14321] usb 3-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1964.440773][T14321] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1964.495487][T14321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.560600][T14321] usb 3-1: Product: syz [ 1964.565856][T14321] usb 3-1: Manufacturer: syz [ 1964.605825][T14321] usb 3-1: SerialNumber: syz [ 1964.665951][T14321] usb 3-1: config 0 descriptor?? [ 1964.883016][T20110] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3894'. [ 1964.900770][T14321] usb 3-1: can't set config #0, error -71 [ 1964.947964][T14321] usb 3-1: USB disconnect, device number 81 [ 1965.229549][T20112] syzkaller0: entered promiscuous mode [ 1965.253493][T20112] syzkaller0: entered allmulticast mode [ 1971.050581][T14321] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1971.267447][T14321] usb 5-1: Using ep0 maxpacket: 32 [ 1971.302533][T14321] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1971.340750][T14321] usb 5-1: config 0 has no interface number 0 [ 1971.366277][T14321] usb 5-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1971.419970][T14321] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1971.451221][T14321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.479667][T14321] usb 5-1: Product: syz [ 1971.501236][T14321] usb 5-1: Manufacturer: syz [ 1971.522940][T14321] usb 5-1: SerialNumber: syz [ 1971.543133][T20160] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3910'. [ 1971.561769][T14321] usb 5-1: config 0 descriptor?? [ 1972.193991][T20166] syzkaller0: entered promiscuous mode [ 1972.203985][T20166] syzkaller0: entered allmulticast mode [ 1976.195233][T13364] usb 5-1: USB disconnect, device number 16 [ 1976.571100][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1979.934576][T20197] loop2: detected capacity change from 0 to 1024 [ 1979.991360][T20197] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1980.036676][T20197] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1980.049995][T20197] jbd2_journal_init_inode: Cannot locate journal superblock [ 1980.059641][T20197] EXT4-fs (loop2): Could not load journal inode [ 1980.615590][T20214] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1981.300743][T20060] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1981.510889][T20060] usb 3-1: Using ep0 maxpacket: 32 [ 1981.530088][T20060] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1981.574263][T20060] usb 3-1: config 0 has no interface number 0 [ 1981.610705][T20060] usb 3-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1981.695083][T20060] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1981.725001][T20060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.754721][T20060] usb 3-1: Product: syz [ 1981.762739][T20060] usb 3-1: Manufacturer: syz [ 1981.768818][T20060] usb 3-1: SerialNumber: syz [ 1981.791098][T20060] usb 3-1: config 0 descriptor?? [ 1981.846209][T20223] syzkaller0: entered promiscuous mode [ 1981.867347][T20223] syzkaller0: entered allmulticast mode [ 1982.193350][T20225] syzkaller0: entered promiscuous mode [ 1982.214758][T20225] syzkaller0: entered allmulticast mode [ 1986.331468][T20060] usb 3-1: USB disconnect, device number 82 [ 1988.196507][T20248] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1988.286133][T20255] loop6: detected capacity change from 0 to 1024 [ 1988.344712][T20255] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1988.430551][T20255] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1988.510501][T20255] jbd2_journal_init_inode: Cannot locate journal superblock [ 1988.540179][T20255] EXT4-fs (loop6): Could not load journal inode [ 1988.627266][T20238] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1989.290737][T14321] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1989.640748][T14321] usb 5-1: Using ep0 maxpacket: 32 [ 1989.706843][T14321] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1989.751287][T14321] usb 5-1: config 0 has no interface number 0 [ 1989.757543][T14321] usb 5-1: config 0 interface 132 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1989.842867][T14321] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1989.870092][T14321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.903787][T14321] usb 5-1: Product: syz [ 1989.908155][T14321] usb 5-1: Manufacturer: syz [ 1989.968763][T14321] usb 5-1: SerialNumber: syz [ 1990.004422][T14321] usb 5-1: config 0 descriptor?? [ 1990.525371][T20282] syzkaller0: entered promiscuous mode [ 1990.532461][T20282] syzkaller0: entered allmulticast mode [ 1993.659746][T14321] usb 5-1: USB disconnect, device number 17 [ 1995.828254][T20291] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1996.189918][T20311] loop1: detected capacity change from 0 to 1024 [ 1996.198871][T20314] loop4: detected capacity change from 0 to 1024 [ 1996.228497][T20311] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1996.245924][T20314] EXT4-fs: Ignoring removed orlov option [ 1996.260279][T20311] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1996.514592][T20311] jbd2_journal_init_inode: Cannot locate journal superblock [ 1996.571381][T20311] EXT4-fs (loop1): Could not load journal inode [ 2000.051873][T20314] EXT4-fs: error -4 creating inode table initialization thread [ 2000.072905][T20314] EXT4-fs (loop4): mount failed [ 2000.480523][T20327] loop1: detected capacity change from 0 to 512 [ 2000.679235][T20327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2000.766374][T20327] ext4 filesystem being mounted at /430/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2001.898860][T20344] syzkaller0: entered promiscuous mode [ 2001.939983][T20344] syzkaller0: entered allmulticast mode [ 2002.588594][T20354] loop4: detected capacity change from 0 to 1024 [ 2002.623804][T20354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2002.691977][T20354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2002.806745][T20354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2007.619147][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2007.884147][T20362] loop1: detected capacity change from 0 to 1024 [ 2007.909096][T20362] EXT4-fs: Ignoring removed orlov option [ 2007.988087][T20362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2008.108259][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.547553][T20371] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3963'. [ 2008.815182][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.191273][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.419906][T20386] loop1: detected capacity change from 0 to 1024 [ 2009.462504][T20386] EXT4-fs: Ignoring removed orlov option [ 2009.521800][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.582340][T20386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2009.605193][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.667551][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.679317][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.695629][T20396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.715718][T20396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.726372][T20396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.736894][T20396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.759129][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.888243][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.849889][T20413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2011.296583][T20422] loop6: detected capacity change from 0 to 1024 [ 2011.333360][T20426] loop4: detected capacity change from 0 to 512 [ 2011.334994][T20422] EXT4-fs: Ignoring removed orlov option [ 2011.493004][T20422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2011.810333][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2012.459858][T20444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2012.848382][T20449] loop2: detected capacity change from 0 to 512 [ 2012.856157][T20451] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 2012.924557][T20449] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.3993: corrupted in-inode xattr: invalid ea_ino [ 2013.038820][T20449] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3993: couldn't read orphan inode 15 (err -117) [ 2013.068271][T20451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2013.081636][T20449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2013.110946][T20456] bond1: entered promiscuous mode [ 2013.123394][T20456] bond1: entered allmulticast mode [ 2013.134407][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3994'. [ 2013.173502][T20459] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 2013.189948][T20459] bond1: left promiscuous mode [ 2013.209331][T20459] bond1: left allmulticast mode [ 2013.224117][T20459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2013.435355][T14430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2013.451397][T20462] loop4: detected capacity change from 0 to 1024 [ 2013.519049][T20462] EXT4-fs: Ignoring removed orlov option [ 2013.648815][T20462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2013.748170][T20464] syzkaller0: entered promiscuous mode [ 2013.755365][T20464] syzkaller0: entered allmulticast mode [ 2013.896989][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2020.116217][T20515] loop6: detected capacity change from 0 to 1024 [ 2020.156191][T20515] EXT4-fs: Ignoring removed orlov option [ 2020.222719][T20515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2020.691749][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2021.021383][T20527] syzkaller0: entered promiscuous mode [ 2021.047384][T20527] syzkaller0: entered allmulticast mode [ 2021.413793][T20529] syzkaller0: entered promiscuous mode [ 2021.442547][T20529] syzkaller0: entered allmulticast mode [ 2023.151159][T20554] loop2: detected capacity change from 0 to 1024 [ 2023.163616][T20554] EXT4-fs: Ignoring removed mblk_io_submit option [ 2023.184648][T20554] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2023.198578][T20554] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 2023.212405][T20554] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2023.249731][T20554] EXT4-fs (loop2): journal inode is deleted [ 2023.341361][T20520] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2026.868115][T20571] loop4: detected capacity change from 0 to 1024 [ 2026.876685][T20571] EXT4-fs: Ignoring removed orlov option [ 2026.902090][T20571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2027.019604][T20560] syzkaller0: entered promiscuous mode [ 2027.039579][T20560] syzkaller0: entered allmulticast mode [ 2027.170130][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2032.371265][T14319] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2032.590604][T14319] usb 7-1: Using ep0 maxpacket: 8 [ 2032.598277][T14319] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 2032.627327][T14319] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 2032.667371][T14319] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2032.680124][T14319] usb 7-1: config 250 has no interface number 0 [ 2032.695076][T14319] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2032.716542][T14319] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2032.774246][T14319] usb 7-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2032.835998][T14319] usb 7-1: config 250 interface 228 has no altsetting 0 [ 2032.880654][T14319] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2032.908109][T14319] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2032.938508][T14319] usb 7-1: Product: syz [ 2032.954527][T14319] usb 7-1: SerialNumber: syz [ 2033.002420][T14319] hub 7-1:250.228: bad descriptor, ignoring hub [ 2033.009025][T14319] hub: probe of 7-1:250.228 failed with error -5 [ 2033.057297][T20602] syzkaller0: entered promiscuous mode [ 2033.083705][T20602] syzkaller0: entered allmulticast mode [ 2033.609385][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4027'. [ 2033.841881][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.867293][T20607] syzkaller0: entered promiscuous mode [ 2033.885522][T20607] syzkaller0: entered allmulticast mode [ 2033.899814][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.147614][T20620] loop4: detected capacity change from 0 to 1024 [ 2034.148432][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.161909][T20620] EXT4-fs: Ignoring removed orlov option [ 2034.181118][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.204635][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.267829][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.341608][T20620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2034.556343][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2035.501753][ T5849] usb 7-1: USB disconnect, device number 16 [ 2038.009075][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.911519][T20659] loop4: detected capacity change from 0 to 2048 [ 2040.004149][T20659] loop4: p1 < > p4 [ 2040.010247][T20659] loop4: p4 size 8388608 extends beyond EOD, truncated [ 2040.906099][T20668] syzkaller0: entered promiscuous mode [ 2040.928323][T20668] syzkaller0: entered allmulticast mode [ 2041.468502][T20672] loop6: detected capacity change from 0 to 1024 [ 2041.545142][T20672] EXT4-fs: Ignoring removed orlov option [ 2041.624278][T20672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2041.889565][T16620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2042.447289][T20686] syzkaller0: entered promiscuous mode [ 2042.488219][T20686] syzkaller0: entered allmulticast mode [ 2046.519304][T20704] loop4: detected capacity change from 0 to 2048 [ 2046.556908][T20704] loop4: p1 < > p4 [ 2046.563159][T20704] loop4: p4 size 8388608 extends beyond EOD, truncated [ 2046.689845][ T5141] loop4: p1 < > p4 [ 2046.700847][ T5141] loop4: p4 size 8388608 extends beyond EOD, truncated [ 2046.760642][ T5849] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2047.101696][ T5849] usb 7-1: config 255 has an invalid interface number: 235 but max is 1 [ 2047.112047][ T5849] usb 7-1: config 255 has an invalid interface number: 97 but max is 1 [ 2047.120495][ T5849] usb 7-1: config 255 has an invalid interface descriptor of length 2, skipping [ 2047.129746][ T5849] usb 7-1: config 255 has no interface number 0 [ 2047.136958][ T5849] usb 7-1: config 255 has no interface number 1 [ 2047.143574][ T5849] usb 7-1: config 255 interface 235 altsetting 4 bulk endpoint 0xA has invalid maxpacket 16 [ 2047.180775][ T5849] usb 7-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2047.248281][ T5849] usb 7-1: config 255 interface 97 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2047.322505][ T5849] usb 7-1: config 255 interface 235 has no altsetting 0 [ 2047.329992][ T5849] usb 7-1: config 255 interface 97 has no altsetting 0 [ 2047.364184][T20709] udevd[20709]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 2047.382801][T20696] udevd[20696]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 2047.398487][T20713] loop4: detected capacity change from 0 to 1024 [ 2047.428739][ T5849] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 2047.442083][T20713] EXT4-fs: Ignoring removed orlov option [ 2047.456453][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.475959][ T5849] usb 7-1: SerialNumber: syz [ 2047.517224][T20708] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2047.550849][T20713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2047.732976][T20718] syzkaller0: entered promiscuous mode [ 2047.739595][T20718] syzkaller0: entered allmulticast mode [ 2047.835626][T20708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.908302][T20708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.973531][T15537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2047.994613][T20708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.058259][T20708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.108114][T20709] udevd[20709]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 2048.143407][T20708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.193619][T20708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.247274][T20708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.296881][T20708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.553481][T20708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.591215][T20708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.699092][ T5849] usb 7-1: bad CDC descriptors [ 2048.741406][ T5849] usb 7-1: bad CDC descriptors [ 2048.819727][ T5849] usb 7-1: USB disconnect, device number 17 [ 2053.217307][T20741] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4057'. [ 2053.555607][T20749] loop1: detected capacity change from 0 to 1024 [ 2053.595908][T20749] EXT4-fs: Ignoring removed orlov option [ 2053.817038][T20749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2054.268689][T13765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2054.360211][T20760] syzkaller0: entered promiscuous mode [ 2054.419618][T20760] syzkaller0: entered allmulticast mode [ 2161.910311][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2161.917532][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20768/1:b..l P14430/1:b..l [ 2161.927719][ C1] rcu: (detected by 1, t=10503 jiffies, g=173421, q=103 ncpus=2) [ 2161.936493][ C1] task:syz-executor state:R running task stack:21800 pid:14430 ppid:14423 flags:0x00004002 [ 2161.949190][ C1] Call Trace: [ 2161.952632][ C1] [ 2161.955749][ C1] __schedule+0x15ae/0x4660 [ 2161.960453][ C1] ? verify_lock_unused+0x140/0x140 [ 2161.965865][ C1] ? mark_lock+0x94/0x320 [ 2161.970362][ C1] ? asan.module_dtor+0x20/0x20 [ 2161.975288][ C1] ? preempt_schedule+0xc0/0xd0 [ 2161.980298][ C1] preempt_schedule_common+0x82/0xc0 [ 2161.985645][ C1] preempt_schedule+0xc0/0xd0 [ 2161.990357][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 2161.996021][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2162.001093][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2162.006412][ C1] _raw_spin_unlock+0x3a/0x40 [ 2162.011247][ C1] ? copy_page_range+0x2bb4/0x3700 [ 2162.016439][ C1] copy_page_range+0x2be5/0x3700 [ 2162.021455][ C1] ? pfn_valid+0x450/0x450 [ 2162.026386][ C1] ? copy_mm+0x1705/0x1e30 [ 2162.030876][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2162.036021][ C1] ? down_write+0x16e/0x200 [ 2162.040586][ C1] ? up_write+0x1be/0x410 [ 2162.044948][ C1] copy_mm+0x1751/0x1e30 [ 2162.049236][ C1] ? copy_signal+0x640/0x640 [ 2162.053948][ C1] ? lockdep_init_map_type+0x9c/0x8e0 [ 2162.059367][ C1] ? __init_rwsem+0x122/0x160 [ 2162.064093][ C1] ? copy_signal+0x51f/0x640 [ 2162.068720][ C1] copy_process+0x171d/0x3df0 [ 2162.073476][ C1] ? copy_process+0x98e/0x3df0 [ 2162.078322][ C1] ? __pidfd_prepare+0x140/0x140 [ 2162.083410][ C1] kernel_clone+0x24b/0x8a0 [ 2162.087986][ C1] ? create_io_thread+0x190/0x190 [ 2162.093164][ C1] ? __might_fault+0xaa/0x120 [ 2162.097912][ C1] __x64_sys_clone+0x1b7/0x230 [ 2162.102825][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 2162.107906][ C1] ? lock_chain_count+0x20/0x20 [ 2162.112799][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2162.118124][ C1] do_syscall_64+0x55/0xb0 [ 2162.122594][ C1] ? clear_bhb_loop+0x40/0x90 [ 2162.127441][ C1] ? clear_bhb_loop+0x40/0x90 [ 2162.132233][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.138912][ C1] RIP: 0033:0x7f79901c68d2 [ 2162.143583][ C1] RSP: 002b:00007fff28ea8730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2162.152333][ C1] RAX: ffffffffffffffda RBX: 00007fff28ea8730 RCX: 00007f79901c68d2 [ 2162.160343][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2162.168407][ C1] RBP: 00007fff28ea88bc R08: 0000000000000000 R09: 0000000000000001 [ 2162.176426][ C1] R10: 000055555f7487d0 R11: 0000000000000246 R12: 0000000000000001 [ 2162.184455][ C1] R13: 00000000000927c0 R14: 00000000001f5ab3 R15: 00007fff28ea8910 [ 2162.192576][ C1] [ 2162.195772][ C1] task:sed state:R running task stack:24360 pid:20768 ppid:20767 flags:0x00004000 [ 2162.206896][ C1] Call Trace: [ 2162.210219][ C1] [ 2162.213362][ C1] __schedule+0x15ae/0x4660 [ 2162.218031][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2162.224312][ C1] ? asan.module_dtor+0x20/0x20 [ 2162.229314][ C1] ? mark_lock+0x94/0x320 [ 2162.233717][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2162.239776][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 2162.245624][ C1] preempt_schedule_irq+0xbf/0x150 [ 2162.250863][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 2162.256612][ C1] ? __lock_acquire+0x1336/0x7d80 [ 2162.261692][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2162.267531][ C1] irqentry_exit+0x67/0x70 [ 2162.271988][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2162.278008][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 2162.283786][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 2162.303590][ C1] RSP: 0018:ffffc9000469f7b8 EFLAGS: 00000206 [ 2162.309731][ C1] RAX: d8bbc19c2cc81e00 RBX: ffff88802bcd5a00 RCX: d8bbc19c2cc81e00 [ 2162.317934][ C1] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 2162.325972][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 2162.334279][ C1] R10: dffffc0000000000 R11: fffffbfff2ee10b4 R12: 0000000000000000 [ 2162.342310][ C1] R13: 0000000000000246 R14: ffff88807b01e0a0 R15: ffff88802bcd64e0 [ 2162.350610][ C1] mt_validate+0x7f1/0x4410 [ 2162.355475][ C1] ? mt_validate+0x114/0x4410 [ 2162.360387][ C1] ? mt_cache_shrink+0x20/0x20 [ 2162.365220][ C1] ? mas_wr_walk+0x595/0x5d0 [ 2162.369866][ C1] ? perf_event_namespaces_output+0x650/0x650 [ 2162.376148][ C1] validate_mm+0xc6/0x450 [ 2162.380598][ C1] ? mas_nomem+0x1e0/0x1e0 [ 2162.385170][ C1] ? down_write+0x16e/0x200 [ 2162.389713][ C1] ? vm_stat_account+0x120/0x120 [ 2162.394735][ C1] mmap_region+0x192c/0x2090 [ 2162.399596][ C1] ? file_mmap_ok+0x170/0x170 [ 2162.404539][ C1] ? cap_mmap_addr+0x157/0x2b0 [ 2162.409527][ C1] do_mmap+0x98f/0x10a0 [ 2162.414197][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 2162.420354][ C1] ? mlock_future_ok+0xf0/0xf0 [ 2162.425165][ C1] ? down_write+0x200/0x200 [ 2162.430691][ C1] vm_mmap_pgoff+0x1c4/0x3f0 [ 2162.435546][ C1] ? account_locked_vm+0x200/0x200 [ 2162.440998][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2162.447033][ C1] ? ksys_mmap_pgoff+0xf3/0x720 [ 2162.452025][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 2162.456857][ C1] do_syscall_64+0x55/0xb0 [ 2162.461343][ C1] ? clear_bhb_loop+0x40/0x90 [ 2162.466138][ C1] ? clear_bhb_loop+0x40/0x90 [ 2162.471134][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.477200][ C1] RIP: 0033:0x7fbd0c575242 [ 2162.481759][ C1] RSP: 002b:00007ffc78fea9a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2162.490476][ C1] RAX: ffffffffffffffda RBX: 00007fbd0c482000 RCX: 00007fbd0c575242 [ 2162.498575][ C1] RDX: 0000000000000003 RSI: 000000000000ce98 RDI: 00007fbd0c482000 [ 2162.506847][ C1] RBP: 0000000000000032 R08: 00000000ffffffff R09: 0000000000000000 [ 2162.514854][ C1] R10: 0000000000000032 R11: 0000000000000206 R12: 00007ffc78feaa68 [ 2162.522878][ C1] R13: 00007fbd0c5515f0 R14: 00007ffc78feb1e0 R15: 00007fbd0c482000 [ 2162.530915][ C1] [ 2162.533993][ C1] rcu: rcu_preempt kthread starved for 10564 jiffies! g173421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2162.545456][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2162.556176][ C1] rcu: RCU grace-period kthread stack dump: [ 2162.562294][ C1] task:rcu_preempt state:R running task stack:25960 pid:17 ppid:2 flags:0x00004000 [ 2162.573219][ C1] Call Trace: [ 2162.576620][ C1] [ 2162.579584][ C1] __schedule+0x15ae/0x4660 [ 2162.584129][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2162.589186][ C1] ? lock_chain_count+0x20/0x20 [ 2162.594084][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2162.599553][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2162.605687][ C1] ? asan.module_dtor+0x20/0x20 [ 2162.610590][ C1] ? rcu_is_watching+0x15/0xb0 [ 2162.615781][ C1] schedule+0xbd/0x170 [ 2162.619888][ C1] schedule_timeout+0x188/0x2d0 [ 2162.624778][ C1] ? console_conditional_schedule+0x40/0x40 [ 2162.630883][ C1] ? update_process_times+0x1b0/0x1b0 [ 2162.636377][ C1] ? prepare_to_swait_event+0x344/0x360 [ 2162.642166][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 2162.647062][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 2162.651943][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2162.658076][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2162.663154][ C1] ? rcu_gp_init+0x1530/0x1530 [ 2162.667976][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 2162.672886][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2162.678492][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2162.683741][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 2162.688384][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2162.693540][ C1] ? __kthread_parkme+0x71/0x1c0 [ 2162.698510][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 2162.703661][ C1] kthread+0x2fa/0x390 [ 2162.707770][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2162.712922][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2162.717860][ C1] ret_from_fork+0x48/0x80 [ 2162.722340][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2162.726990][ C1] ret_from_fork_asm+0x11/0x20 [ 2162.731813][ C1] [ 2162.734858][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2162.741204][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2162.746454][ C0] NMI backtrace for cpu 0 [ 2162.746468][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 2162.746483][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2162.746491][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 2162.746511][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 cb 2a 2b 03 66 2e 0f 1f 84 00 00 00 00 00 [ 2162.746524][ C0] RSP: 0018:ffffc90000007e80 EFLAGS: 00000046 [ 2162.746539][ C0] RAX: 0000000000000359 RBX: ffff8880b8e282c0 RCX: 0000000000000838 [ 2162.746550][ C0] RDX: 0000000000000000 RSI: 0000000000000359 RDI: 0000000000000838 [ 2162.746560][ C0] RBP: 0000000000000000 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 2162.746570][ C0] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: dffffc0000000000 [ 2162.746581][ C0] R13: 0000000010001ad7 R14: 0000000000000359 R15: 0000000000000020 [ 2162.746591][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2162.746604][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2162.746615][ C0] CR2: 00007f5fb2c65d9f CR3: 000000007cacc000 CR4: 00000000003506f0 [ 2162.746631][ C0] Call Trace: [ 2162.746639][ C0] [ 2162.746644][ C0] lapic_next_event+0x11/0x20 [ 2162.746662][ C0] clockevents_program_event+0x1c0/0x310 [ 2162.746683][ C0] hrtimer_interrupt+0x565/0x980 [ 2162.746711][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 2162.746730][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2162.746749][ C0] [ 2162.746754][ C0] [ 2162.746767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2162.746789][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2162.746805][ C0] Code: 4c 1d 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 77 3c 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 2162.746817][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 2162.746829][ C0] RAX: 3e6dc3d10f0d7c00 RBX: ffffffff81628c14 RCX: 3e6dc3d10f0d7c00 [ 2162.746840][ C0] RDX: 0000000000000001 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 2162.746850][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 2162.746861][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 2162.746871][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 2162.746884][ C0] ? do_idle+0x334/0x5c0 [ 2162.746905][ C0] default_idle+0x13/0x20 [ 2162.746922][ C0] default_idle_call+0x6c/0xa0 [ 2162.746940][ C0] do_idle+0x334/0x5c0 [ 2162.746955][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2162.746976][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2162.746993][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2162.747014][ C0] ? do_idle+0x58e/0x5c0 [ 2162.747033][ C0] cpu_startup_entry+0x43/0x60 [ 2162.747050][ C0] rest_init+0x2e2/0x300 [ 2162.747067][ C0] ? time_init+0x40/0x40 [ 2162.747166][ C0] arch_call_rest_init+0xe/0x10 [ 2162.747234][ C0] start_kernel+0x461/0x4e0 [ 2162.747255][ C0] x86_64_start_reservations+0x2a/0x30 [ 2162.747275][ C0] x86_64_start_kernel+0x60/0x60 [ 2162.747293][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 2162.747319][ C0]