last executing test programs: 15m8.867014378s ago: executing program 32 (id=71): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe2$watch_queue(&(0x7f0000000100), 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f0000006800)="10", 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x29, r6, {0x7}}, './file1\x00'}) 13m44.640616898s ago: executing program 33 (id=283): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (fail_nth: 3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m15.210083913s ago: executing program 34 (id=352): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x1800000, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}], 0x2f}) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000400)=""/216, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) socket$alg(0x26, 0x5, 0x0) r3 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) unshare(0x2040400) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 12m24.877973017s ago: executing program 35 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 12m19.992145791s ago: executing program 36 (id=527): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 11m16.334890383s ago: executing program 37 (id=707): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 10m44.570938772s ago: executing program 38 (id=843): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="811e", 0x2}, {&(0x7f00000007c0)="f89eb1", 0x3}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast}}}], 0x20}, 0x4840) 10m44.229299053s ago: executing program 39 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x3e, r2}, 0x5) 10m40.086802406s ago: executing program 40 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000004}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0xa) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0xffff, @local}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x3841, 0x0) 10m38.636762138s ago: executing program 41 (id=862): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xf4ac, 0xc000, 0xa, 0x20002f9}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m26.832382514s ago: executing program 0 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) unshare(0x28000600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 10m26.187812412s ago: executing program 0 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) unshare(0x80) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x6c, 0x0, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2635eb6f2d8ab086368aa4cec5d828e0"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f0900156037ee49a376e22626ae0b26"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x17ef}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "13650b3945fda07ca7336d5d80a14ce4"}]}, 0xfffffffffffffd8f}}, 0x40880) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000040)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000001000), 0x8000, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 10m25.618193398s ago: executing program 0 (id=867): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) r2 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r3, 0x40081271, 0x0) 10m24.026515739s ago: executing program 0 (id=868): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x39b5840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x40000, 0x0) 10m23.851806682s ago: executing program 0 (id=869): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10m23.424603909s ago: executing program 0 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) 10m22.977095328s ago: executing program 42 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) 5m15.952041594s ago: executing program 4 (id=1870): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000340)='ncpfs\x00', 0xae4003, 0x0) r4 = dup(r1) read$eventfd(r4, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="17452a1034a4afda00a9a00700d5b35bb80000", 0x13}], 0x1, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x400c804) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xff7f, 0x3}, 0x6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 5m13.950632833s ago: executing program 4 (id=1877): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) readv(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0x80}, 0x1c) 5m13.724027749s ago: executing program 4 (id=1878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) getgroups(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000002c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m12.588897998s ago: executing program 4 (id=1880): mount(0x0, 0x0, &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000240000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000280), &(0x7f0000000080)=""/82}, 0x20) 5m12.449985372s ago: executing program 4 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 5m12.048365419s ago: executing program 4 (id=1883): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x364) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) dup(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240240000030900020073797a320000"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) 4m56.662746351s ago: executing program 43 (id=1883): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x364) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) dup(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240240000030900020073797a320000"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) 4m44.854046734s ago: executing program 3 (id=1943): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, 0x0) 4m43.760015443s ago: executing program 3 (id=1945): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0x87}, {@in=@empty, 0x4d3, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xd, 0xc1, 0x2, 0xd}, {0xffffffffffffffff, 0x0, 0x1f, 0x78}, {0x2, 0x5}, 0x4070bd2a, 0x4003503, 0x2, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="bd810781935d64d6d6907be75a9072bee61580c4d227c10e81790b13edb3b2ed0b2229fb4bbea6029c7860c1ab1c9618e721686a6d27a7c1bda365735011", 0x3e}], 0x1) 4m42.048262099s ago: executing program 3 (id=1948): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{&(0x7f0000001000)="01", 0x1}], 0x1, 0x18, 0x0) 4m41.797456922s ago: executing program 3 (id=1950): socket$netlink(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000340)='ncpfs\x00', 0xae4003, 0x0) r3 = dup(r0) read$eventfd(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="17452a1034a4afda00a9a00700d5b35bb80000", 0x13}], 0x1, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x400c804) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xff7f, 0x3}, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 4m39.580604147s ago: executing program 3 (id=1954): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7f, 0x10, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfffb, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x24, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x7, 0x9}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 4m37.420084358s ago: executing program 3 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x10000000, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xffffff00, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 4m21.967272668s ago: executing program 44 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x10000000, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xffffff00, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m47.170217716s ago: executing program 1 (id=2201): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x44001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2m46.792114134s ago: executing program 1 (id=2204): r0 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x40) ptrace(0x4207, r0) ptrace$peek(0x3, r0, 0x0) 2m46.017261374s ago: executing program 1 (id=2206): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x17ec, 0x41e3, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x477, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0xfffffffc, 0x2b4}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 2m45.529708448s ago: executing program 1 (id=2209): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000640)}, {0x0}, {&(0x7f0000001400)="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", 0x800}], 0x3, &(0x7f0000002400)=[{0x1010, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x1148}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m44.595943058s ago: executing program 1 (id=2211): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x712c48a0bda4084) shmctl$IPC_RMID(r1, 0x0) 2m44.25645945s ago: executing program 1 (id=2214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000001900)=@caif=@rfm, 0x80, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001800)=""/234, 0xea}, {&(0x7f0000001480)=""/174, 0xae}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000001540)=""/126, 0x7e}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f0000001680)=""/247, 0xf7}], 0x8, &(0x7f00000002c0)=""/62, 0x3e}, 0x11ffe}], 0x1, 0x12001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x110460, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000080)}) r5 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r3) sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x1}, 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x33) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') syz_emit_ethernet(0x6e, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000fe8000200000000000000000000000bbfe8000000000000000000000000000aa08029078000000006000081000002f0000000000000000000000ffff00000000fc0200000000000000000000000000002c0080b964000000091f8de241e062373cd0b22dcb1162e72208877b8114e3000000000000"], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x7}, 0x92}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 2m40.746514528s ago: executing program 2 (id=2230): r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x8, &(0x7f0000000200)=""/92) 2m40.586982708s ago: executing program 2 (id=2231): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x20010, 0xffffffffffffffff, 0x5d2fc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000340)="a8", 0xfe56}) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$TCFLSH(r3, 0xb701, 0x2) 2m37.233964772s ago: executing program 2 (id=2251): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r1, 0x0, 0x0) 2m37.024330829s ago: executing program 2 (id=2253): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f00000006c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, 0x0, 0x0, 0xbfd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) pwrite64(r1, 0x0, 0x0, 0x8000c61) r4 = syz_open_dev$vim2m(0x0, 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) 2m34.83397993s ago: executing program 2 (id=2263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m34.651751166s ago: executing program 2 (id=2264): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) writev(r0, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108", 0x25}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) read(r3, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc040ff0b, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x40}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x1000, [0x0, 0x401, 0x7, 0xc5]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000001c, 0x6a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffeff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) 2m28.956133272s ago: executing program 45 (id=2214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000001900)=@caif=@rfm, 0x80, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001800)=""/234, 0xea}, {&(0x7f0000001480)=""/174, 0xae}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000001540)=""/126, 0x7e}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f0000001680)=""/247, 0xf7}], 0x8, &(0x7f00000002c0)=""/62, 0x3e}, 0x11ffe}], 0x1, 0x12001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x110460, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000080)}) r5 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r3) sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x1}, 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x33) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') syz_emit_ethernet(0x6e, &(0x7f0000001380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000fe8000200000000000000000000000bbfe8000000000000000000000000000aa08029078000000006000081000002f0000000000000000000000ffff00000000fc0200000000000000000000000000002c0080b964000000091f8de241e062373cd0b22dcb1162e72208877b8114e3000000000000"], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x7}, 0x92}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 2m19.304729636s ago: executing program 46 (id=2264): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) writev(r0, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108", 0x25}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) read(r3, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc040ff0b, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x40}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x1000, [0x0, 0x401, 0x7, 0xc5]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000001c, 0x6a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffeff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080) 20.321191264s ago: executing program 8 (id=2609): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x400, 0x3, 0x374}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffe9a) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000017c0)={'vxcan1\x00'}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) write(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'veth1_to_bond\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000580), 0x80) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 14.863183797s ago: executing program 9 (id=2619): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f00000006c0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, 0x0, 0x0, 0xbfd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) pwrite64(r1, 0x0, 0x0, 0x8000c61) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) 14.299788686s ago: executing program 5 (id=2620): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x1800000, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}], 0x2f}) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000400)=""/216, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) socket$alg(0x26, 0x5, 0x0) r3 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) unshare(0x2040400) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 13.045435064s ago: executing program 9 (id=2622): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000380)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) 10.648718399s ago: executing program 6 (id=2625): syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, {[@dstopts={0x0, 0x1, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @padn]}]}}}}}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xf7, 0xa}, {0x5, 0x7, 0x4, 0xa3a, 0x7}}}}, 0x17) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x40000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x808, 0x2) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="a6", 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) r3 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 10.427732787s ago: executing program 9 (id=2626): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x3388}], 0x1, 0x800) 8.895863302s ago: executing program 6 (id=2627): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r1, 0x0, 0x0) 8.104159549s ago: executing program 7 (id=2628): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0xc081) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') 8.019992879s ago: executing program 6 (id=2629): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r2, 0x0, 0x1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 6.826577838s ago: executing program 7 (id=2630): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000240)='./file1\x00', 0x2004018, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$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") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, 0x0, 0x0) 6.678751458s ago: executing program 5 (id=2631): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x40001) 6.408330667s ago: executing program 8 (id=2632): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r1, 0x0, 0x0) 6.307728602s ago: executing program 7 (id=2633): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000019080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a000000090581"], 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b80), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000bbe91e07800f551f96622f50d9b29f532db79088cd082cb530b4acb42bb7a5b06b88c1417f0c9e98a4c9865c8c0a01", @ANYRES16=r5, @ANYBLOB="01002abd7000030000000900000005001300da0000000800140003000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x201, 0x21, 0x0, 0x62, 0x1}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r7 = syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file1\x00', 0x3000010, &(0x7f0000000380)={[{@adinicb}, {@volume={'volume', 0x3d, 0x23}}, {@uid}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@volume={'volume', 0x3d, 0xd}}, {@shortad}, {@uid_forget}, {@nostrict}]}, 0x1, 0xc59, &(0x7f0000001640)="$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") openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES8=r7], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x10) 6.175366591s ago: executing program 9 (id=2634): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) write$P9_RGETATTR(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 5.323516751s ago: executing program 9 (id=2635): shutdown(0xffffffffffffffff, 0x1) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000280), &(0x7f0000000080)=""/82}, 0x20) 5.032424155s ago: executing program 5 (id=2636): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000380)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) 4.272305621s ago: executing program 8 (id=2637): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.171115846s ago: executing program 6 (id=2638): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x40000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) sendto$inet6(r3, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x5}}, 0x14}}, 0x0) r4 = signalfd(r0, &(0x7f0000000300)={[0x80]}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000340)=0xa28, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x58, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 4.066907606s ago: executing program 5 (id=2639): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.420380808s ago: executing program 8 (id=2640): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb57257a03", @ANYRES8, @ANYRES64, @ANYRESDEC]) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.356478239s ago: executing program 5 (id=2641): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x40000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd26, 0xfffffffc, {0x5}}, 0x14}}, 0x0) r3 = signalfd(r0, &(0x7f0000000300)={[0x80]}, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, &(0x7f0000000340)=0xa28, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) 3.351730339s ago: executing program 9 (id=2642): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x400, 0x3, 0x374}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffe9a) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000017c0)={'vxcan1\x00'}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) write(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'veth1_to_bond\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000580), 0x80) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) 2.480619044s ago: executing program 6 (id=2643): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x1800000, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}], 0x2f}) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000400)=""/216, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) socket$alg(0x26, 0x5, 0x0) r3 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) unshare(0x2040400) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 2.024922652s ago: executing program 5 (id=2644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x3388}], 0x1, 0x800) 1.390626573s ago: executing program 7 (id=2645): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) write$P9_RGETATTR(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.01217486s ago: executing program 7 (id=2646): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x40001) 907.375272ms ago: executing program 7 (id=2647): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) dup2(r2, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 377.043971ms ago: executing program 6 (id=2648): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x922bac8576b92dde) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x17c, &(0x7f0000000240)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r5, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000020c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xdf, &(0x7f0000002180)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x8, 0x8, &(0x7f0000002640)}}, 0x10) 306.101267ms ago: executing program 8 (id=2649): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000380)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/fuse\x00'}}, 0x2b) 0s ago: executing program 8 (id=2650): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) copy_file_range(r0, &(0x7f0000000280)=0x1, r1, 0x0, 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f00000002c0)={[{@nouuid}, {@sysvgroups}, {@gqnoenforce}]}, 0x1, 0xb950, &(0x7f000000d2c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) kernel console output (not intermixed with test programs): 61][T14767] veth1_vlan: entered promiscuous mode [ 816.661859][T14767] veth0_macvtap: entered promiscuous mode [ 816.724018][T14767] veth1_macvtap: entered promiscuous mode [ 816.840262][T14767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.935560][T14767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.009996][T11699] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.047973][T11699] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.100976][T11699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.171408][T11699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.555246][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.591453][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.721894][T15088] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2088'. [ 818.743131][T11561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.783609][T15088] netlink: 'syz.2.2088': attribute type 8 has an invalid length. [ 818.807071][T11561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.279381][T15096] loop7: detected capacity change from 0 to 65536 [ 819.308351][T15096] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 819.399179][T15096] XFS (loop7): Ending clean mount [ 819.408582][T15096] XFS (loop7): Quotacheck needed: Please wait. [ 819.718602][T15096] XFS (loop7): Quotacheck: Done. [ 819.751189][T15096] overlayfs: missing 'lowerdir' [ 820.032990][ T9686] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 822.171769][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 822.282398][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 822.371788][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 822.390394][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 822.421409][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 822.421872][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 822.453288][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.934730][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.954930][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 823.008601][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.022465][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 823.221836][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 823.262980][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.279361][ T29] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 823.301773][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.308885][ T29] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 823.325739][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.342303][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 823.391417][ T29] usb 3-1: config 0 descriptor?? [ 823.410747][ T9] usbtmc 10-1:16.0: can't read capabilities [ 823.451828][ T5908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 823.465116][ T29] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 823.629098][ T29] usb 10-1: USB disconnect, device number 3 [ 823.635503][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 823.667840][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.704064][ T5908] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.739664][ T5908] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.795413][ T5908] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 823.829648][ T5908] usb 7-1: config 0 interface 0 has no altsetting 0 [ 823.870632][ T5908] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 823.917169][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.981257][ T5908] usb 7-1: config 0 descriptor?? [ 824.832612][T15179] loop1: detected capacity change from 0 to 65536 [ 824.862231][T15179] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 824.885974][ T5908] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 824.927599][T15179] XFS (loop1): Ending clean mount [ 824.936911][T15179] XFS (loop1): Quotacheck needed: Please wait. [ 824.968795][ T5908] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 825.035921][ T5908] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 825.119530][ T5908] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 825.180114][ T5908] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 825.255547][ T5908] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 825.333455][ T5908] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 825.361304][T15179] XFS (loop1): Quotacheck: Done. [ 825.385017][ C1] hid-thrustmaster 0003:044F:B65D.0004: Unknown packet type 0x0, unable to proceed further with wheel init [ 825.580475][ T9091] usb 3-1: USB disconnect, device number 10 [ 825.870536][ T9091] usb 7-1: USB disconnect, device number 8 [ 825.911912][ T9818] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 827.970959][T15232] loop7: detected capacity change from 0 to 512 [ 828.060344][T15232] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 828.197054][T15232] EXT4-fs (loop7): 1 truncate cleaned up [ 828.225108][T15232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.545945][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 828.545967][ T30] audit: type=1800 audit(1772595919.549:989): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2117" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 828.969896][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.930165][T15268] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2121'. [ 830.216431][T15268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.402083][ T9091] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 830.460825][T15268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.609668][T15268] bond0 (unregistering): Released all slaves [ 830.674407][ T9091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.755538][ T9091] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.027741][ T9091] usb 3-1: config 0 interface 0 has no altsetting 0 [ 831.134862][ T9091] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 831.197181][ T9091] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 831.300474][ T9091] usb 3-1: Product: syz [ 831.765607][ T9091] usb 3-1: Manufacturer: syz [ 831.781741][ T9091] usb 3-1: SerialNumber: syz [ 831.820430][ T9091] usb 3-1: config 0 descriptor?? [ 832.230997][T15272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.566695][T15272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.990519][T15315] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2132'. [ 833.015161][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.026166][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.060870][T15318] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2132'. [ 833.092224][T15299] netlink: 'syz.1.2129': attribute type 4 has an invalid length. [ 833.358147][T15272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.375356][T15272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.415499][ T9091] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 833.638402][T15272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.718714][T15272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.728827][T14051] udevd[14051]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.181969][T15333] loop7: detected capacity change from 0 to 65536 [ 834.200878][ T5942] usb 3-1: USB disconnect, device number 11 [ 834.292194][T15333] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 834.399334][T15333] XFS (loop7): Ending clean mount [ 834.408529][T15333] XFS (loop7): Quotacheck needed: Please wait. [ 834.925243][T15333] XFS (loop7): Quotacheck: Done. [ 834.965218][T15333] overlayfs: missing 'workdir' [ 835.026567][ T9686] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 836.889095][T15371] binder: 15365:15371 ioctl 4048587b 0 returned -22 [ 837.006733][T15374] loop6: detected capacity change from 0 to 16 [ 837.105852][T15374] erofs (device loop6): mounted with root inode @ nid 36. [ 838.826210][T15392] loop9: detected capacity change from 0 to 65536 [ 838.891124][T15392] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 838.996923][T15392] XFS (loop9): Ending clean mount [ 839.003833][T15392] XFS (loop9): Quotacheck needed: Please wait. [ 839.475670][T15392] XFS (loop9): Quotacheck: Done. [ 839.532137][T15392] overlayfs: missing 'workdir' [ 839.603588][T14501] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 841.056849][T15421] loop6: detected capacity change from 0 to 16 [ 841.094167][T15421] erofs (device loop6): mounted with root inode @ nid 36. [ 841.195686][T15423] binder: 15420:15423 ioctl 4048587b 0 returned -22 [ 841.535258][T15428] loop6: detected capacity change from 0 to 512 [ 841.578618][T15428] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 841.640065][T15428] EXT4-fs (loop6): 1 truncate cleaned up [ 841.694387][T15428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.943253][ T30] audit: type=1800 audit(1772595932.959:990): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2155" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 842.116666][T14767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.278779][T15459] loop9: detected capacity change from 0 to 65536 [ 843.345054][T15459] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 843.419536][T15459] XFS (loop9): Ending clean mount [ 843.439801][T15459] XFS (loop9): Quotacheck needed: Please wait. [ 843.851063][T15459] XFS (loop9): Quotacheck: Done. [ 843.867163][T15459] overlayfs: missing 'workdir' [ 844.080444][T14501] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 844.873523][T15486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2166'. [ 844.924094][T15486] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.931350][T15486] bridge0: port 1() entered disabled state [ 845.319265][T15493] loop6: detected capacity change from 0 to 512 [ 845.327562][T15493] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 845.390411][T15493] EXT4-fs (loop6): 1 truncate cleaned up [ 845.458776][T15493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.831747][ T29] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 845.964833][ T30] audit: type=1800 audit(1772595936.809:991): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2168" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 846.119509][T15500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 846.263380][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 846.311421][T14767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.567844][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 846.605416][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 846.648118][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 846.708761][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 846.750927][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.809672][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 846.826782][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 846.838221][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.041974][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 847.077461][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.107063][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.139300][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.174281][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 847.262110][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 847.309201][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 847.379842][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.446304][ T29] usb 2-1: GET_CAPABILITIES returned 0 [ 847.470994][ T9] usb 3-1: config 0 descriptor?? [ 847.484749][ T29] usbtmc 2-1:16.0: can't read capabilities [ 848.033849][ T9] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 848.072025][ T9] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 848.115200][ T9] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 848.162480][ T9] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 848.193626][ T9] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 848.237406][ T9] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 848.262669][ T9] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 848.376984][ C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 848.396610][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 848.408587][ T9] usb 3-1: USB disconnect, device number 12 [ 848.450514][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 848.869315][T15543] fido_id[15543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 849.035546][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 849.291339][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 849.337838][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.473732][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 849.545700][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.629259][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 849.663512][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 849.703521][ T9] usb 8-1: Product: syz [ 849.783661][ T9] usb 8-1: Manufacturer: syz [ 849.815755][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 849.835663][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 849.860870][ T9] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 849.877391][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 850.443985][ T5908] usb 2-1: USB disconnect, device number 21 [ 850.718230][T15567] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2179'. [ 851.756860][T15579] pimreg: entered allmulticast mode [ 853.416069][T15603] netlink: 'syz.9.2188': attribute type 3 has an invalid length. [ 853.737471][T15609] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2190'. [ 855.889405][T15635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 856.508655][ T5942] usb 8-1: USB disconnect, device number 12 [ 857.036627][T15664] netlink: 'syz.1.2201': attribute type 3 has an invalid length. [ 857.107559][T15667] program syz.9.2203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.251476][T15685] loop2: detected capacity change from 0 to 64 [ 858.345248][T15685] syz.2.2207: attempt to access beyond end of device [ 858.345248][T15685] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 858.409943][T15687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 858.424645][T15685] Buffer I/O error on dev loop2, logical block 512, async page read [ 858.452185][T15685] syz.2.2207: attempt to access beyond end of device [ 858.452185][T15685] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 858.561201][T15685] Buffer I/O error on dev loop2, logical block 56576, async page read [ 860.281833][ T5908] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 860.472723][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 860.503250][ T5908] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 860.533159][ T5908] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 860.571910][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.609504][ T5908] usb 2-1: Product: syz [ 860.629387][ T5908] usb 2-1: Manufacturer: syz [ 860.649343][ T5908] usb 2-1: SerialNumber: syz [ 860.712497][ T5908] usb 2-1: config 0 descriptor?? [ 860.778330][ T5908] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 860.856958][ T5908] usb 2-1: setting power ON [ 860.883184][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 861.022386][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 861.090660][ T5908] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 861.100014][T15723] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2214'. [ 861.115704][ T5908] usb 2-1: media controller created [ 861.257831][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.514905][ T5908] usb 2-1: selecting invalid altsetting 6 [ 861.551905][ T5908] usb 2-1: digital interface selection failed (-22) [ 861.609935][ T5908] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 861.665619][ T5908] usb 2-1: setting power OFF [ 861.689513][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 861.718457][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 861.754993][ T5908] (NULL device *): no alternate interface [ 862.099170][T15751] loop9: detected capacity change from 0 to 64 [ 862.123473][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 862.330054][T15751] syz.9.2222: attempt to access beyond end of device [ 862.330054][T15751] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 862.386302][T15751] Buffer I/O error on dev loop9, logical block 512, async page read [ 862.419695][T15751] syz.9.2222: attempt to access beyond end of device [ 862.419695][T15751] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 862.438926][T15751] Buffer I/O error on dev loop9, logical block 56576, async page read [ 864.647832][T15808] loop9: detected capacity change from 0 to 64 [ 864.873768][T15808] syz.9.2239: attempt to access beyond end of device [ 864.873768][T15808] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 864.893130][T15808] Buffer I/O error on dev loop9, logical block 512, async page read [ 864.903731][T15808] syz.9.2239: attempt to access beyond end of device [ 864.903731][T15808] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 864.921204][T15808] Buffer I/O error on dev loop9, logical block 56576, async page read [ 865.791525][T15829] binder: 15827:15829 ioctl 4018620d 0 returned -22 [ 866.364547][T15833] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2247'. [ 866.970592][T15850] loop2: detected capacity change from 0 to 64 [ 867.118314][T15850] syz.2.2253: attempt to access beyond end of device [ 867.118314][T15850] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 867.428327][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 867.604798][T15856] loop9: detected capacity change from 0 to 65536 [ 867.620663][T15850] Buffer I/O error on dev loop2, logical block 512, async page read [ 867.640361][T15850] syz.2.2253: attempt to access beyond end of device [ 867.640361][T15850] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 867.692673][T15856] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 867.830526][T15850] Buffer I/O error on dev loop2, logical block 56576, async page read [ 868.094294][T15856] XFS (loop9): Ending clean mount [ 868.105105][T15856] XFS (loop9): Quotacheck needed: Please wait. [ 868.401209][T15876] syz.2.2253: attempt to access beyond end of device [ 868.401209][T15876] loop2: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 868.415092][T15876] Buffer I/O error on dev loop2, logical block 512, async page read [ 868.423239][T15876] syz.2.2253: attempt to access beyond end of device [ 868.423239][T15876] loop2: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 868.437089][T15876] Buffer I/O error on dev loop2, logical block 56576, async page read [ 868.755093][T15856] XFS (loop9): Quotacheck: Done. [ 868.770129][T15884] binder: 15883:15884 ioctl 4018620d 0 returned -22 [ 868.923574][T14501] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 869.652057][T15700] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 869.837619][T15700] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 869.874842][T15700] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 869.902019][T15700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 869.922287][T15700] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 869.943288][T15700] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 869.969117][T15700] usb 3-1: Product: syz [ 869.984723][T15700] usb 3-1: Manufacturer: syz [ 869.998748][T15700] usb 3-1: SerialNumber: syz [ 870.031096][T15700] usb 3-1: config 0 descriptor?? [ 870.083840][T15700] usb 3-1: selecting invalid altsetting 0 [ 870.239916][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.252531][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.098663][T15926] loop7: detected capacity change from 0 to 2048 [ 871.199660][T15926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.078168][T15940] loop7: detected capacity change from 0 to 64 [ 872.261128][T15940] syz.7.2273: attempt to access beyond end of device [ 872.261128][T15940] loop7: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 872.372044][T15940] Buffer I/O error on dev loop7, logical block 512, async page read [ 872.423042][T15940] syz.7.2273: attempt to access beyond end of device [ 872.423042][T15940] loop7: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 872.484657][T15940] Buffer I/O error on dev loop7, logical block 56576, async page read [ 872.610156][T15946] syz.7.2273: attempt to access beyond end of device [ 872.610156][T15946] loop7: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 872.624868][T15946] Buffer I/O error on dev loop7, logical block 512, async page read [ 872.634095][T15946] syz.7.2273: attempt to access beyond end of device [ 872.634095][T15946] loop7: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 872.648729][T15946] Buffer I/O error on dev loop7, logical block 56576, async page read [ 873.826095][T15956] loop9: detected capacity change from 0 to 736 [ 873.971905][T15962] binder: 15960:15962 ioctl 4018620d 0 returned -22 [ 874.881779][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 875.062776][ T29] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 875.106911][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.158515][ T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 875.206199][T15986] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2282'. [ 875.207558][ T29] usb 10-1: config 1 has no interface number 0 [ 875.264631][T15986] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2282'. [ 875.292512][ T29] usb 10-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 875.325976][ T29] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 875.356461][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.394956][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.411836][ T29] usb 10-1: Product: syz [ 875.416522][ T29] usb 10-1: Manufacturer: syz [ 875.422389][ T29] usb 10-1: SerialNumber: syz [ 875.780278][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.854797][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.883699][T15992] loop7: detected capacity change from 0 to 16 [ 875.910416][T15992] erofs (device loop7): mounted with root inode @ nid 36. [ 876.144315][T15994] netlink: 'syz.7.2284': attribute type 10 has an invalid length. [ 877.094156][T15980] loop9: detected capacity change from 0 to 2048 [ 877.157319][T15980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.214682][ T9092] usb 10-1: USB disconnect, device number 4 [ 877.294722][T16001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.313690][T16001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.326362][T16001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.350817][T16001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.359887][T16001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.601534][T16007] loop6: detected capacity change from 0 to 64 [ 877.718133][T16007] syz.6.2287: attempt to access beyond end of device [ 877.718133][T16007] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 877.761311][T16007] Buffer I/O error on dev loop6, logical block 512, async page read [ 877.801966][T16007] syz.6.2287: attempt to access beyond end of device [ 877.801966][T16007] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 877.860576][T16007] Buffer I/O error on dev loop6, logical block 56576, async page read [ 878.063273][T16013] syz.6.2287: attempt to access beyond end of device [ 878.063273][T16013] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 878.079712][T16013] Buffer I/O error on dev loop6, logical block 512, async page read [ 878.088628][T16013] syz.6.2287: attempt to access beyond end of device [ 878.088628][T16013] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 878.109092][T16013] Buffer I/O error on dev loop6, logical block 56576, async page read [ 879.325616][T16023] loop7: detected capacity change from 0 to 65536 [ 879.347477][T16023] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 879.422098][ T51] Bluetooth: hci3: command tx timeout [ 879.445586][T16023] XFS (loop7): Ending clean mount [ 879.455688][T16023] XFS (loop7): Quotacheck needed: Please wait. [ 879.468707][T15993] chnl_net:caif_netlink_parms(): no params data found [ 879.591787][T15697] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 879.722621][T16023] XFS (loop7): Quotacheck: Done. [ 879.770494][T15697] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.810587][T15697] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 879.860164][T15697] usb 7-1: config 0 interface 0 has no altsetting 0 [ 879.883390][T15697] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 879.915902][T15697] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 879.931978][T15993] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.946192][T15697] usb 7-1: Product: syz [ 879.956924][T15993] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.967344][T15697] usb 7-1: Manufacturer: syz [ 879.981967][T15697] usb 7-1: SerialNumber: syz [ 879.989811][T15993] bridge_slave_0: entered allmulticast mode [ 880.035164][T15993] bridge_slave_0: entered promiscuous mode [ 880.041605][T15697] usb 7-1: config 0 descriptor?? [ 880.080939][T15993] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.105146][T15993] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.134058][T15993] bridge_slave_1: entered allmulticast mode [ 880.174750][T15993] bridge_slave_1: entered promiscuous mode [ 880.300063][T16025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.637548][T16025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.706202][T15697] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 880.990827][T15993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.066771][T15993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.121073][T15697] usb 7-1: USB disconnect, device number 9 [ 881.136577][T15931] udevd[15931]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 881.344668][T15993] team0: Port device team_slave_0 added [ 881.501924][ T51] Bluetooth: hci3: command tx timeout [ 881.552385][T15993] team0: Port device team_slave_1 added [ 881.685968][ T9686] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 881.847181][T15993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.870933][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.983949][T15993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.565338][T16064] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2293'. [ 882.574669][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2293'. [ 882.721205][T16070] binder: BINDER_SET_CONTEXT_MGR already set [ 882.729585][T16070] binder: 16069:16070 ioctl 4018620d 2000000002c0 returned -16 [ 882.822741][T15993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.831345][T15993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.881901][T15993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.022196][ T9092] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 883.062442][T16072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 883.096443][T15993] hsr_slave_0: entered promiscuous mode [ 883.102791][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 883.125357][T15993] hsr_slave_1: entered promiscuous mode [ 883.136462][T15993] debugfs: 'hsr0' already exists in 'hsr' [ 883.143140][T15993] Cannot create hsr debugfs directory [ 883.195835][ T9092] usb 10-1: Using ep0 maxpacket: 16 [ 883.203802][ T9092] usb 10-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 883.214611][ T9092] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 883.229770][ T9092] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 883.240065][ T9092] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 883.250799][ T9092] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.265963][ T9092] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 883.275746][ T9092] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 883.284283][ T9092] usb 10-1: Manufacturer: syz [ 883.295474][ T9092] usb 10-1: config 0 descriptor?? [ 883.581754][ T51] Bluetooth: hci3: command tx timeout [ 883.601771][ T9092] rc_core: IR keymap rc-hauppauge not found [ 883.608929][ T9092] Registered IR keymap rc-empty [ 883.614706][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.654544][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.713378][ T9092] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 883.729278][ T9092] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input15 [ 883.754560][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.793544][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.842083][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.882032][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.920564][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 883.976500][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 884.041771][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 884.092061][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 884.122273][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 884.158903][ T9092] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 884.195709][ T9092] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 884.216952][ T9092] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 884.240965][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 884.255524][ T9092] usb 10-1: USB disconnect, device number 5 [ 884.308602][T16086] loop6: detected capacity change from 0 to 32768 [ 885.019137][T16001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 885.054992][T16001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 885.069758][T16001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 885.085814][T16001] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 885.094694][T16001] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 885.349443][T16102] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2305'. [ 885.674029][T16001] Bluetooth: hci3: command tx timeout [ 886.256742][T16102] geneve1: entered allmulticast mode [ 886.806350][ T9] usb 3-1: USB disconnect, device number 13 [ 887.140327][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2304'. [ 887.194662][T16103] Bluetooth: hci5: command tx timeout [ 887.288154][T16123] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2308'. [ 887.335209][T16123] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2308'. [ 887.686995][T16131] binder: BINDER_SET_CONTEXT_MGR already set [ 887.699427][T16131] binder: 16130:16131 ioctl 4018620d 2000000002c0 returned -16 [ 887.741899][T16103] Bluetooth: hci6: command 0x0406 tx timeout [ 887.944772][T16135] loop7: detected capacity change from 0 to 2048 [ 887.959853][T16135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 888.128529][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 888.393030][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 888.552440][T16104] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 888.572074][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 888.616904][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.655044][ T9] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.699979][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 888.726836][ T9] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 888.736187][T16104] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 888.751785][T16104] usb 7-1: config 1 has no interface number 0 [ 888.759591][T16104] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 888.765459][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.778581][T16104] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 888.799065][T16104] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.818508][ T9] usb 8-1: config 0 descriptor?? [ 888.848384][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 888.857262][T16104] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 888.857296][T16104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.857318][T16104] usb 7-1: Product: syz [ 888.857334][T16104] usb 7-1: Manufacturer: syz [ 888.857351][T16104] usb 7-1: SerialNumber: syz [ 888.971238][T16141] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 889.032041][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.075610][ T9] usb 8-1: USB disconnect, device number 13 [ 889.258598][T16141] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 889.269212][ T51] Bluetooth: hci5: command tx timeout [ 889.447587][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.648557][T15697] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 889.695758][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.788769][T15697] usb 10-1: device descriptor read/64, error -71 [ 890.000827][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.062548][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 890.071925][T15697] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 890.169590][T16104] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 890.214444][T15697] usb 10-1: device descriptor read/64, error -71 [ 890.234742][T16104] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 890.241460][T16104] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 890.253100][T16104] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 890.255583][ T9] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 890.260001][T16104] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 890.290341][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.306916][T16104] usb 7-1: USB disconnect, device number 10 [ 890.316087][T16104] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 890.332333][T15697] usb usb10-port1: attempt power cycle [ 890.338788][ T9] usb 8-1: config 0 descriptor?? [ 890.362870][T16097] chnl_net:caif_netlink_parms(): no params data found [ 890.391607][ T9] cp210x 8-1:0.0: cp210x converter detected [ 890.537430][T16104] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 890.599523][ T9] usb 8-1: cp210x converter now attached to ttyUSB0 [ 890.677812][T15697] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 890.736923][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 890.749380][T15697] usb 10-1: device descriptor read/8, error -71 [ 890.972092][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 890.983867][T15993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 890.998063][T15993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 891.006097][T15697] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 891.033512][T15697] usb 10-1: device descriptor read/8, error -71 [ 891.042924][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 891.078554][T15993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 891.097518][T15993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 891.143728][T15697] usb usb10-port1: unable to enumerate USB device [ 891.204515][T16192] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 891.214627][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.231980][ T9] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 891.246671][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 891.249848][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.261196][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 891.275364][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.284169][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 891.290429][T16097] bridge_slave_0: entered allmulticast mode [ 891.293744][ T9] usb 7-1: Product: syz [ 891.303273][ T9] usb 7-1: Manufacturer: syz [ 891.308022][ T9] usb 7-1: SerialNumber: syz [ 891.320234][T16097] bridge_slave_0: entered promiscuous mode [ 891.320450][ T9] usb 7-1: config 0 descriptor?? [ 891.343066][ T51] Bluetooth: hci5: command tx timeout [ 891.358156][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.368843][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.376564][T16097] bridge_slave_1: entered allmulticast mode [ 891.386178][T16097] bridge_slave_1: entered promiscuous mode [ 891.484593][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.535593][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.558653][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 891.596481][T16180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.615732][T16180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.660756][ T9] usb 7-1: USB disconnect, device number 11 [ 891.682649][T15931] udevd[15931]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.757279][ T48] bridge_slave_1: left allmulticast mode [ 891.763998][ T48] bridge_slave_1: left promiscuous mode [ 891.770025][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.784778][ T48] : left allmulticast mode [ 891.789542][ T48] : left promiscuous mode [ 891.794716][ T48] bridge0: port 1() entered disabled state [ 891.810120][ T48] pimreg: left allmulticast mode [ 891.858103][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 892.277786][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.295352][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.316421][ T48] bond0 (unregistering): Released all slaves [ 892.698820][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 893.425828][ T51] Bluetooth: hci5: command tx timeout [ 893.498098][T16223] netlink: 'syz.9.2318': attribute type 10 has an invalid length. [ 893.656960][ T9071] usb 8-1: USB disconnect, device number 14 [ 893.779720][ T9071] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 893.795128][T16097] team0: Port device team_slave_0 added [ 893.834767][T16231] loop7: detected capacity change from 0 to 2048 [ 893.882947][ T9071] cp210x 8-1:0.0: device disconnected [ 893.894730][T16231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.908213][T16097] team0: Port device team_slave_1 added [ 893.993928][T16223] team0: Port device dummy0 added [ 894.331145][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.429083][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.480707][T16235] binder: BINDER_SET_CONTEXT_MGR already set [ 894.493534][T16235] binder: 16234:16235 ioctl 4018620d 2000000002c0 returned -16 [ 894.503107][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.577044][T16238] loop7: detected capacity change from 0 to 512 [ 894.743675][T16238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.765565][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.781200][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.813865][T16238] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 894.964500][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.069700][T16249] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2325'. [ 895.152369][T15697] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 895.174105][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 895.965163][T15697] usb 7-1: device descriptor read/64, error -32 [ 895.977602][ T30] audit: type=1800 audit(1772595986.889:992): pid=16251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2322" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 896.022239][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.234146][T15697] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 896.397749][T16097] hsr_slave_0: entered promiscuous mode [ 896.403783][T15697] usb 7-1: Using ep0 maxpacket: 16 [ 896.411583][T15697] usb 7-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 896.424725][T16097] hsr_slave_1: entered promiscuous mode [ 896.431040][T15697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 896.443960][T16097] debugfs: 'hsr0' already exists in 'hsr' [ 896.449738][T16097] Cannot create hsr debugfs directory [ 896.452735][T15700] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 896.455677][T15697] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 896.490950][T15697] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 896.501153][T15697] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.522041][T15697] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 896.525127][T15701] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 896.531528][T15697] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 896.565148][T15697] usb 7-1: Manufacturer: syz [ 896.591771][T15697] usb 7-1: config 0 descriptor?? [ 896.634009][T15700] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 896.651847][T15700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.670906][T15700] usb 10-1: config 0 descriptor?? [ 896.683288][T15700] cp210x 10-1:0.0: cp210x converter detected [ 896.722699][T15701] usb 8-1: Using ep0 maxpacket: 8 [ 896.730519][T15701] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 896.749655][ T48] hsr_slave_0: left promiscuous mode [ 896.749985][T15701] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 896.767690][ T48] hsr_slave_1: left promiscuous mode [ 896.767726][T15701] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.780668][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.784233][T15701] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.793464][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.804313][T15701] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 896.826351][T15701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.836729][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.845013][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.857514][ T48] veth1_macvtap: left promiscuous mode [ 896.863456][ T48] veth0_macvtap: left promiscuous mode [ 896.869212][ T48] veth1_vlan: left promiscuous mode [ 896.880739][ T48] veth0_vlan: left promiscuous mode [ 896.935114][T15700] usb 10-1: cp210x converter now attached to ttyUSB0 [ 896.984307][T15697] rc_core: IR keymap rc-hauppauge not found [ 897.003542][T15697] Registered IR keymap rc-empty [ 897.014671][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.052850][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.073921][T15701] usb 8-1: usb_control_msg returned -71 [ 897.080589][T15701] usbtmc 8-1:16.0: can't read capabilities [ 897.091952][T15697] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 897.120674][T15701] usb 8-1: USB disconnect, device number 15 [ 897.131272][T15697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 897.194345][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.221970][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.247124][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.272030][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.304708][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.331825][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.362070][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.395732][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.440249][ T48] team0 (unregistering): Port device team_slave_1 removed [ 897.447669][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.472189][T15697] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 897.484190][ T48] team0 (unregistering): Port device team_slave_0 removed [ 897.497764][T15697] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 897.519335][T15697] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 897.567558][T15697] usb 7-1: USB disconnect, device number 13 [ 897.886859][ T48] team0 (unregistering): Port device dummy0 removed [ 897.960297][T16266] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 897.962355][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 898.387544][T16281] binder: 16280:16281 ioctl c0306201 0 returned -14 [ 898.596303][T15993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.663187][T15993] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.708919][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.716226][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.747735][T11699] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.755081][T11699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.216696][T16104] usb 10-1: USB disconnect, device number 10 [ 899.238138][T16104] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 899.268879][T16104] cp210x 10-1:0.0: device disconnected [ 899.924584][T16291] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2335'. [ 900.241732][T15701] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 900.332164][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 900.350745][T15993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.401878][T15701] usb 8-1: device descriptor read/64, error -71 [ 900.691797][T15701] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 900.830112][T16324] loop9: detected capacity change from 0 to 1024 [ 900.843333][T15701] usb 8-1: device descriptor read/64, error -71 [ 900.963100][T15701] usb usb8-port1: attempt power cycle [ 901.711765][T15701] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 901.752645][T15701] usb 8-1: device descriptor read/8, error -71 [ 901.795653][T11699] hfsplus: b-tree write err: -5, ino 25 [ 901.801582][T11699] hfsplus: b-tree write err: -5, ino 4 [ 901.814738][T11699] hfsplus: b-tree write err: -5, ino 2 [ 901.879611][T16333] binder: 16332:16333 ioctl c0306201 0 returned -14 [ 902.031864][T15701] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 902.081770][T16097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 902.093162][T15701] usb 8-1: device descriptor read/8, error -71 [ 902.109142][T16097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 902.179169][T16097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 902.202288][T15701] usb usb8-port1: unable to enumerate USB device [ 902.215391][T16097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 902.299576][T15993] veth0_vlan: entered promiscuous mode [ 902.416901][T15993] veth1_vlan: entered promiscuous mode [ 902.622950][T15993] veth0_macvtap: entered promiscuous mode [ 902.638759][T16322] loop6: detected capacity change from 0 to 65536 [ 902.673389][T16322] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 902.754196][T15993] veth1_macvtap: entered promiscuous mode [ 902.760507][T16322] XFS (loop6): Ending clean mount [ 902.799635][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.860481][T16322] XFS (loop6): Quotacheck needed: Please wait. [ 903.004099][T15993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.043606][T16366] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2346'. [ 903.082755][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.148481][T16322] XFS (loop6): Quotacheck: Done. [ 903.195413][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.203083][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.248963][T15993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.639511][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.646817][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.022486][ T55] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.063507][ T55] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.101197][ T55] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.138956][ T55] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.719728][T14767] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 905.095211][T16253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.129752][T16253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.152987][T16395] loop9: detected capacity change from 0 to 1024 [ 905.197783][T16397] binder: 16396:16397 ioctl c0306201 0 returned -14 [ 906.315939][T16253] hfsplus: b-tree write err: -5, ino 25 [ 906.327567][ T6507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.361549][T16253] hfsplus: b-tree write err: -5, ino 4 [ 906.371570][ T6507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.394863][T16253] hfsplus: b-tree write err: -5, ino 2 [ 906.705662][T16413] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2356'. [ 906.900768][T16097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.102498][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 907.782176][ T9] usb 7-1: device descriptor read/64, error -71 [ 908.068534][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 908.224549][T16097] veth0_vlan: entered promiscuous mode [ 908.238132][ T9] usb 7-1: device descriptor read/64, error -71 [ 908.313611][T16097] veth1_vlan: entered promiscuous mode [ 908.365209][ T9] usb usb7-port1: attempt power cycle [ 908.542133][T16097] veth0_macvtap: entered promiscuous mode [ 908.569841][T16097] veth1_macvtap: entered promiscuous mode [ 908.641733][ T7084] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 908.649071][T16097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.674146][T16097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.699078][T11699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.727858][T11699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.737148][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 908.758049][T11699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.772436][ T9] usb 7-1: device descriptor read/8, error -71 [ 908.814178][ T7084] usb 9-1: config 1 interface 0 has no altsetting 0 [ 908.864404][ T7084] usb 9-1: string descriptor 0 read error: -22 [ 908.891945][ T7084] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 908.902936][ T7084] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.037140][T11699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.048053][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 909.098212][ T9] usb 7-1: device descriptor read/8, error -71 [ 909.233705][ T9] usb usb7-port1: unable to enumerate USB device [ 909.460176][T16434] loop9: detected capacity change from 0 to 65536 [ 909.649628][T16434] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 909.674210][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 909.739987][T16434] XFS (loop9): Ending clean mount [ 909.815517][T16434] XFS (loop9): Quotacheck needed: Please wait. [ 910.743236][T16434] XFS (loop9): Quotacheck: Done. [ 911.052167][T14501] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 911.235101][T16479] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2368'. [ 911.267983][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.313922][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.469982][ T6506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.479488][ T6506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.066824][ T7084] usbhid 9-1:1.0: can't add hid device: -71 [ 912.128749][ T7084] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 912.151833][T16493] loop5: detected capacity change from 0 to 8 [ 912.211605][ T7084] usb 9-1: USB disconnect, device number 2 [ 913.261792][T16103] Bluetooth: hci1: command 0x0406 tx timeout [ 913.745602][T16536] loop9: detected capacity change from 0 to 32768 [ 913.785318][T16536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 913.793615][T16536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 913.882179][T16536] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 913.899249][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 913.949770][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 914.397159][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 447ms [ 914.438827][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 914.458936][T16536] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 916.052161][ T9071] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 916.147164][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 916.253621][ T9071] usb 6-1: config 1 interface 0 has no altsetting 0 [ 916.287248][ T9071] usb 6-1: string descriptor 0 read error: -22 [ 916.305483][ T9071] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 916.330991][ T9071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.408112][T16560] loop6: detected capacity change from 0 to 32768 [ 916.420788][T16560] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2377 (16560) [ 916.453785][T16560] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 916.484770][T16560] BTRFS info (device loop6): using sha256 checksum algorithm [ 916.659459][T16584] fuse: Bad value for 'group_id' [ 916.673873][T16560] BTRFS info (device loop6): rebuilding free space tree [ 916.687884][T16584] fuse: Bad value for 'group_id' [ 916.794308][T16562] loop5: detected capacity change from 0 to 512 [ 916.814703][T16562] ext4: Unknown parameter 'smackfsdef' [ 916.856573][ T9071] usbhid 6-1:1.0: can't add hid device: -71 [ 916.885771][ T9071] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 916.917683][T16560] BTRFS info (device loop6): disabling free space tree [ 916.945976][T16560] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 916.976711][ T9071] usb 6-1: USB disconnect, device number 18 [ 916.998273][T16560] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 917.134170][T16560] BTRFS info (device loop6): setting nodatasum [ 917.150811][T16560] BTRFS info (device loop6): setting nodatacow [ 917.162787][T16560] BTRFS info (device loop6): turning off barriers [ 917.183775][T16560] BTRFS info (device loop6): force clearing of disk cache [ 917.263381][ T7084] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 917.307736][T16555] loop8: detected capacity change from 0 to 65536 [ 917.353376][T16555] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 917.407111][T16555] XFS (loop8): Ending clean mount [ 917.455482][ T7084] usb 10-1: config 1 interface 0 has no altsetting 0 [ 917.488526][T16555] XFS (loop8): Quotacheck needed: Please wait. [ 917.534634][ T7084] usb 10-1: string descriptor 0 read error: -22 [ 917.558820][ T7084] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 917.608504][ T7084] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.019173][T16555] XFS (loop8): Quotacheck: Done. [ 918.392505][T14767] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 918.720867][T15993] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 919.867878][T16626] loop7: detected capacity change from 0 to 32768 [ 919.889575][T16626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2385 (16626) [ 919.958026][T16626] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 920.047178][ T7084] usbhid 10-1:1.0: can't add hid device: -71 [ 920.053370][ T7084] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 920.061383][T16626] BTRFS info (device loop7): using sha256 checksum algorithm [ 920.075787][ T7084] usb 10-1: USB disconnect, device number 11 [ 920.349035][T16626] BTRFS info (device loop7): rebuilding free space tree [ 920.566280][T16665] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2388'. [ 921.272165][T16664] loop6: detected capacity change from 0 to 8 [ 921.653426][T16626] BTRFS info (device loop7): disabling free space tree [ 921.785318][T16626] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 921.965302][T16626] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 922.172882][T16626] BTRFS info (device loop7): setting nodatasum [ 922.288219][T16626] BTRFS info (device loop7): setting nodatacow [ 922.867623][T16626] BTRFS info (device loop7): turning off barriers [ 922.895478][T16626] BTRFS info (device loop7): force clearing of disk cache [ 923.323759][T16714] fuse: Bad value for 'group_id' [ 923.346718][T16714] fuse: Bad value for 'group_id' [ 926.317099][ T9686] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 926.781727][T15700] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 927.464806][T15700] usb 10-1: config 1 interface 0 has no altsetting 0 [ 927.534993][T15700] usb 10-1: string descriptor 0 read error: -22 [ 927.570613][T15700] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 927.611757][T15700] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.070940][T16750] loop9: detected capacity change from 0 to 512 [ 928.125235][T16750] ext4: Unknown parameter 'smackfsdef' [ 928.772035][T16779] fuse: Bad value for 'group_id' [ 928.787729][T16779] fuse: Bad value for 'group_id' [ 929.271761][T16104] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 929.460819][T16104] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.555461][T16104] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.601486][T16104] usb 8-1: config 0 interface 0 has no altsetting 0 [ 929.629051][T16104] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 929.647162][T16104] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 929.667052][T16104] usb 8-1: Product: syz [ 929.676294][T16104] usb 8-1: Manufacturer: syz [ 929.699185][T16104] usb 8-1: SerialNumber: syz [ 929.762192][T16104] usb 8-1: config 0 descriptor?? [ 930.010601][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.073645][T15700] usbhid 10-1:1.0: can't add hid device: -71 [ 930.097539][T15700] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 930.105958][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.131170][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 930.193942][T15700] usb 10-1: USB disconnect, device number 12 [ 930.469157][T16104] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 930.682618][T16807] loop8: detected capacity change from 0 to 8 [ 930.770461][T16104] usb 8-1: USB disconnect, device number 20 [ 931.198154][T16795] udevd[16795]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.689884][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.698762][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.638379][T16885] loop9: detected capacity change from 0 to 512 [ 935.700492][T16885] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 935.762655][T16885] EXT4-fs (loop9): 1 truncate cleaned up [ 935.773923][T16885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.949483][T16911] loop6: detected capacity change from 0 to 128 [ 937.215877][T16916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2429'. [ 937.238955][T16916] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2429'. [ 937.675104][T16916] geneve1: entered allmulticast mode [ 938.202408][ T30] audit: type=1800 audit(1772596029.219:993): pid=16921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2421" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 941.172275][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 941.352679][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 941.387814][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.545285][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.688953][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 941.794991][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 941.948846][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.066076][T16970] fuse: Bad value for 'rootmode' [ 942.076257][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 942.135280][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 942.166375][ T24] usb 6-1: Manufacturer: syz [ 942.195627][ T24] usb 6-1: config 0 descriptor?? [ 942.941751][ T24] rc_core: IR keymap rc-hauppauge not found [ 942.952073][ T24] Registered IR keymap rc-empty [ 942.966283][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.024852][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.099680][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 943.164741][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 943.257903][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.281937][T16804] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 943.737840][T16986] loop6: detected capacity change from 0 to 65536 [ 943.746257][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.802117][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.814168][T16986] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 943.861490][T16804] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 943.874400][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.889245][T16804] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.895942][T16986] XFS (loop6): Ending clean mount [ 943.905764][T16804] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 943.909954][T16986] XFS (loop6): Quotacheck needed: Please wait. [ 943.922547][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.950136][T16804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.961423][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 943.973083][T16804] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 943.982448][T16804] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 944.005409][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 944.016805][T16804] usb 8-1: Product: syz [ 944.022888][T16804] usb 8-1: Manufacturer: syz [ 944.037792][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 944.100771][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 944.151803][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 944.169964][T16804] cdc_wdm 8-1:1.0: skipping garbage [ 944.187409][T16804] cdc_wdm 8-1:1.0: skipping garbage [ 944.233978][ T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 944.255057][T16804] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 944.262835][T16986] XFS (loop6): Quotacheck: Done. [ 944.273337][T16986] overlayfs: failed to resolve './bus': -2 [ 944.279509][T16804] cdc_wdm 8-1:1.0: Unknown control protocol [ 944.289245][ T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.776083][ T24] usb 6-1: USB disconnect, device number 19 [ 945.216824][T14767] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 945.228044][T14501] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.481012][ T29] usb 8-1: USB disconnect, device number 21 [ 946.604633][T17024] fuse: Unknown parameter 'use00000000000000000000' [ 947.625447][T17035] netlink: 'syz.5.2457': attribute type 10 has an invalid length. [ 948.133047][T17035] team0: Port device dummy0 added [ 948.173906][T17046] loop7: detected capacity change from 0 to 128 [ 948.559961][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 949.006131][T16804] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 949.231760][T16804] usb 9-1: Using ep0 maxpacket: 16 [ 949.261768][T16804] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.309662][T16804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.341700][T16804] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 949.399837][T16804] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 949.431399][T16804] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.447630][T16804] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 949.457270][T16804] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 949.533161][T16804] usb 9-1: Manufacturer: syz [ 949.542891][T16804] usb 9-1: config 0 descriptor?? [ 950.144306][ T9071] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 950.199030][T17077] netlink: 'syz.7.2466': attribute type 10 has an invalid length. [ 950.558487][T17078] loop6: detected capacity change from 0 to 64 [ 950.644855][T16804] rc_core: IR keymap rc-hauppauge not found [ 950.688901][T17078] syz.6.2467: attempt to access beyond end of device [ 950.688901][T17078] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 950.726226][T16804] Registered IR keymap rc-empty [ 950.748561][ T9071] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 950.757603][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 950.788076][T17078] Buffer I/O error on dev loop6, logical block 512, async page read [ 950.789408][ T9071] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.813593][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 950.855762][T16804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 950.877668][ T9071] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 950.918501][ T9071] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.934749][T16804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input18 [ 950.974683][ T9071] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 951.022996][ T9071] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 951.048600][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.062979][ T9071] usb 10-1: Product: syz [ 951.091030][ T9071] usb 10-1: Manufacturer: syz [ 951.114318][T17078] syz.6.2467: attempt to access beyond end of device [ 951.114318][T17078] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 951.131801][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.187281][ T9071] cdc_wdm 10-1:1.0: skipping garbage [ 951.195070][T17078] Buffer I/O error on dev loop6, logical block 56576, async page read [ 951.221867][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.240650][ T9071] cdc_wdm 10-1:1.0: skipping garbage [ 951.262332][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.288558][ T9071] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 951.310936][ T9071] cdc_wdm 10-1:1.0: Unknown control protocol [ 951.320152][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.373327][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.404558][T17082] syz.6.2467: attempt to access beyond end of device [ 951.404558][T17082] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 951.427866][T17082] Buffer I/O error on dev loop6, logical block 512, async page read [ 951.439243][T17082] syz.6.2467: attempt to access beyond end of device [ 951.439243][T17082] loop6: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 951.463929][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 951.481843][T17082] Buffer I/O error on dev loop6, logical block 56576, async page read [ 951.786325][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 952.000113][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 952.261761][T16804] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 952.602277][T16804] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 952.658513][T16804] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 952.735089][T16804] usb 9-1: USB disconnect, device number 3 [ 953.183731][T17105] loop5: detected capacity change from 0 to 1024 [ 953.196245][T17105] EXT4-fs: inline encryption not supported [ 953.679192][T17105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.708239][ T30] audit: type=1800 audit(1772596044.709:994): pid=17104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2473" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 953.740184][T17104] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.2473: Allocating blocks 497-513 which overlap fs metadata [ 953.769775][T17104] EXT4-fs (loop5): Remounting filesystem read-only [ 954.210198][T16097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.449457][T15701] usb 10-1: USB disconnect, device number 13 [ 954.547408][T17118] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2475'. [ 955.037577][T17118] geneve1: entered allmulticast mode [ 955.357719][T17124] loop9: detected capacity change from 0 to 2048 [ 955.446187][T17124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 955.962072][T17132] fuse: Unknown parameter 'grou00000000000000000000' [ 956.207940][T17137] fuse: Bad value for 'fd' [ 957.881230][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 958.322071][T15701] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 958.852409][T15701] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 958.862129][T15701] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.872412][T15701] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 958.886841][T15701] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.923538][T15701] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 958.941935][T15701] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 958.959942][T15701] usb 9-1: Product: syz [ 958.971669][T15701] usb 9-1: Manufacturer: syz [ 959.002528][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2490'. [ 959.011749][T15701] cdc_wdm 9-1:1.0: skipping garbage [ 959.030907][T15701] cdc_wdm 9-1:1.0: skipping garbage [ 959.374060][T17181] fuse: Bad value for 'fd' [ 960.167776][T15701] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 960.173985][T15701] cdc_wdm 9-1:1.0: Unknown control protocol [ 960.621843][T16804] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 960.803954][T16804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.846255][T16804] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.915846][T16804] usb 6-1: New USB device found, idVendor=048b, idProduct=2002, bcdDevice= 0.40 [ 960.958730][T16804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.988448][T16804] usb 6-1: Product: syz [ 961.020117][ T29] usb 9-1: USB disconnect, device number 4 [ 961.029825][T16804] usb 6-1: Manufacturer: syz [ 961.063368][T16804] usb 6-1: SerialNumber: syz [ 961.277817][T17203] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 961.330397][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 961.635597][T17193] netlink: 'syz.5.2497': attribute type 30 has an invalid length. [ 962.394384][T17217] loop8: detected capacity change from 0 to 16 [ 962.805117][T17217] erofs (device loop8): mounted with root inode @ nid 36. [ 963.027768][T17218] loop9: detected capacity change from 0 to 512 [ 963.084924][T17218] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 963.128206][T17218] EXT4-fs (loop9): 1 truncate cleaned up [ 963.156442][T17218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.172773][T16804] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 963.370647][T16804] usb 6-1: unit 5 not found! [ 963.812777][ T30] audit: type=1800 audit(1772596054.529:995): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2502" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 964.019244][T14501] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.270326][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2504'. [ 964.345358][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.353110][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.377781][T16804] usb 6-1: USB disconnect, device number 20 [ 965.236346][T15701] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 965.530742][T15701] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.622946][T15701] usb 10-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 965.919222][T15701] usb 10-1: New USB device found, idVendor=048b, idProduct=2002, bcdDevice= 0.40 [ 965.933898][T15701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.951190][T15701] usb 10-1: Product: syz [ 965.967170][T15701] usb 10-1: Manufacturer: syz [ 965.972958][T15701] usb 10-1: SerialNumber: syz [ 966.094772][T17246] loop8: detected capacity change from 0 to 64 [ 966.173707][T15519] udevd[15519]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.242529][T17228] netlink: 'syz.9.2505': attribute type 30 has an invalid length. [ 966.293339][T17246] syz.8.2510: attempt to access beyond end of device [ 966.293339][T17246] loop8: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 966.419590][T17246] Buffer I/O error on dev loop8, logical block 512, async page read [ 966.493331][T17246] syz.8.2510: attempt to access beyond end of device [ 966.493331][T17246] loop8: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 966.622553][T17246] Buffer I/O error on dev loop8, logical block 56576, async page read [ 966.694612][T17253] loop6: detected capacity change from 0 to 2048 [ 966.709215][T15701] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 966.731926][T15701] usb 10-1: unit 5 not found! [ 966.842015][T17253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.951071][T17261] syz.8.2510: attempt to access beyond end of device [ 966.951071][T17261] loop8: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 966.965428][T17261] Buffer I/O error on dev loop8, logical block 512, async page read [ 966.975664][T17261] syz.8.2510: attempt to access beyond end of device [ 966.975664][T17261] loop8: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 966.996032][T17261] Buffer I/O error on dev loop8, logical block 56576, async page read [ 968.075000][T17262] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2513'. [ 968.614382][T15701] usb 10-1: USB disconnect, device number 14 [ 968.904289][T17269] loop5: detected capacity change from 0 to 16 [ 969.063650][T17269] erofs (device loop5): mounted with root inode @ nid 36. [ 969.414398][T17221] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 969.723653][T14767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.811097][T15931] udevd[15931]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 970.565336][T17282] loop8: detected capacity change from 0 to 64 [ 970.799741][T17282] syz.8.2518: attempt to access beyond end of device [ 970.799741][T17282] loop8: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 970.829520][T17287] loop6: detected capacity change from 0 to 512 [ 970.836696][T17282] Buffer I/O error on dev loop8, logical block 512, async page read [ 970.847628][T17287] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 970.857501][T17282] syz.8.2518: attempt to access beyond end of device [ 970.857501][T17282] loop8: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 970.880748][T17287] EXT4-fs (loop6): 1 truncate cleaned up [ 970.892673][T17282] Buffer I/O error on dev loop8, logical block 56576, async page read [ 971.033379][T17292] syz.8.2518: attempt to access beyond end of device [ 971.033379][T17292] loop8: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 971.048177][T17292] Buffer I/O error on dev loop8, logical block 512, async page read [ 971.061012][T17292] syz.8.2518: attempt to access beyond end of device [ 971.061012][T17292] loop8: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 971.076864][T17292] Buffer I/O error on dev loop8, logical block 56576, async page read [ 971.443694][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2520'. [ 971.462798][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.470466][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.915521][T17287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.544424][ T30] audit: type=1800 audit(1772596063.429:996): pid=17300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2515" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 972.825742][T14767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.830728][ T9071] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 974.022122][ T9071] usb 7-1: device descriptor read/64, error -71 [ 974.172605][ T24] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 974.231403][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 974.447029][ T9071] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 974.512865][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.554833][ T24] usb 10-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 974.581689][ T9071] usb 7-1: device descriptor read/64, error -71 [ 974.601383][ T24] usb 10-1: New USB device found, idVendor=048b, idProduct=2002, bcdDevice= 0.40 [ 974.622362][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.631389][ T24] usb 10-1: Product: syz [ 974.638758][ T24] usb 10-1: Manufacturer: syz [ 974.653436][ T24] usb 10-1: SerialNumber: syz [ 974.721059][ T9071] usb usb7-port1: attempt power cycle [ 974.791373][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 974.806101][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 975.389242][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 975.401992][T17334] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2529'. [ 975.473587][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 975.683416][T17330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 975.957614][T17318] netlink: 'syz.9.2527': attribute type 30 has an invalid length. [ 976.001793][ T9071] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 976.053443][ T9071] usb 7-1: device descriptor read/8, error -71 [ 976.110374][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 976.132136][ T24] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 976.142294][ T24] usb 10-1: unit 5 not found! [ 976.260722][ T24] usb 10-1: USB disconnect, device number 15 [ 976.302775][ T9071] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 976.319153][T17343] loop8: detected capacity change from 0 to 512 [ 976.333716][ T9071] usb 7-1: device descriptor read/8, error -71 [ 976.342984][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 976.370131][T17343] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 976.427112][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 976.450995][T16795] udevd[16795]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.482113][ T9071] usb usb7-port1: unable to enumerate USB device [ 976.496878][T17343] EXT4-fs (loop8): 1 truncate cleaned up [ 976.517159][T17343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.992329][ T30] audit: type=1800 audit(1772596067.889:997): pid=17352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2533" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 977.429079][T17351] netlink: 'syz.5.2534': attribute type 10 has an invalid length. [ 977.816768][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 977.824830][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 977.832978][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 977.847432][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 978.205651][T17357] fuse: Unknown parameter 'group_id00000000000000000000' [ 978.395217][T17359] loop6: detected capacity change from 0 to 16 [ 978.508856][T17359] erofs (device loop6): mounted with root inode @ nid 36. [ 979.342446][T17371] binder: 17370:17371 ioctl c0306201 0 returned -14 [ 979.512152][T15697] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 979.701681][T15697] usb 6-1: Using ep0 maxpacket: 16 [ 979.724632][T15697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.735331][T15697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 979.762152][T15697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 979.781687][T15697] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 979.802696][T15697] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.830405][T15697] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 979.841182][T15697] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 979.861693][T15697] usb 6-1: Manufacturer: syz [ 979.874304][T15697] usb 6-1: config 0 descriptor?? [ 980.171715][T15697] rc_core: IR keymap rc-hauppauge not found [ 980.185125][T15697] Registered IR keymap rc-empty [ 980.205089][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.242529][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.272882][T15697] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 980.288059][T15697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 980.309602][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.333379][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.363441][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.391826][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.421761][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.470488][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.491756][ T9071] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 980.502008][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.609871][T15993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.696691][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.729032][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.756081][ T9071] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 980.776744][ T9071] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.787261][T15697] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 980.822082][ T9071] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 980.845745][T15697] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 980.875788][ T9071] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.899577][T15697] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 980.935634][ T9071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.086071][ T9071] usb 10-1: Product: syz [ 981.169247][ T9071] usb 10-1: Manufacturer: syz [ 981.238291][ T9071] usb 10-1: SerialNumber: syz [ 981.258925][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 981.280408][T15697] usb 6-1: USB disconnect, device number 21 [ 981.696985][T17416] fuse: Unknown parameter 'group_id00000000000000000000' [ 981.743040][ T9071] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 981.805327][T17394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.842479][T17394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.067867][T17418] loop5: detected capacity change from 0 to 32768 [ 982.093191][T17418] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2551 (17418) [ 982.108254][ T9071] usb 9-1: config 1 interface 0 has no altsetting 0 [ 982.119809][T17418] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 982.129999][T17418] BTRFS info (device loop5): using sha256 checksum algorithm [ 982.146818][ T9071] usb 9-1: string descriptor 0 read error: -22 [ 982.153281][ T9071] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 982.170169][ T9071] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.277237][T17418] BTRFS info (device loop5): enabling ssd optimizations [ 982.284448][T17418] BTRFS info (device loop5): turning on async discard [ 982.291253][T17418] BTRFS info (device loop5): enabling free space tree [ 982.902573][T17431] loop9: detected capacity change from 0 to 2048 [ 983.030518][T17431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.075077][ T9071] usbhid 9-1:1.0: can't add hid device: -71 [ 983.107958][ T9071] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 983.180266][ T9071] usb 9-1: USB disconnect, device number 5 [ 983.437073][T16097] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 983.510220][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2555'. [ 983.678747][T17452] binder: 17451:17452 ioctl c0306201 0 returned -14 [ 985.001688][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 985.016424][T15700] usb 10-1: USB disconnect, device number 16 [ 985.254367][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 985.321750][T16104] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 985.562815][T16104] usb 6-1: Using ep0 maxpacket: 16 [ 985.586901][T16104] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.619295][T16104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.637772][T17479] loop8: detected capacity change from 0 to 128 [ 985.683767][T16104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 985.693889][ T9071] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 985.715600][T17478] loop7: detected capacity change from 0 to 2048 [ 985.739545][T16104] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 985.754371][T17481] fuse: Unknown parameter 'group_id00000000000000000000' [ 985.767120][T16104] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.783277][T17478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 985.822986][T16104] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 985.841678][T16104] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 985.880737][T16104] usb 6-1: Manufacturer: syz [ 985.895037][ T9071] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 985.926949][ T9071] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.948492][T16104] usb 6-1: config 0 descriptor?? [ 985.986985][ T9071] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 986.087800][ T9071] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.122866][ T9071] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 986.133621][ T9071] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 986.141767][ T9071] usb 7-1: Product: syz [ 986.146278][ T9071] usb 7-1: Manufacturer: syz [ 986.507004][ T9071] cdc_wdm 7-1:1.0: skipping garbage [ 986.634030][ T9071] cdc_wdm 7-1:1.0: skipping garbage [ 987.041403][ T9071] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 987.145749][ T9071] cdc_wdm 7-1:1.0: Unknown control protocol [ 987.522102][T16104] rc_core: IR keymap rc-hauppauge not found [ 987.549584][T16104] Registered IR keymap rc-empty [ 987.570494][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.623401][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.693497][T16104] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 987.747158][T16104] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 987.775153][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.811914][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.865015][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.911918][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 987.914182][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 987.929432][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 987.992547][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 988.031799][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 988.072083][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 988.121809][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 988.163199][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 988.181689][T15701] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 988.217121][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 988.222088][T16104] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 988.277512][T16104] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 988.303615][T16104] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 988.319529][T16104] usb 6-1: USB disconnect, device number 22 [ 988.383398][T15701] usb 10-1: config 1 interface 0 has no altsetting 0 [ 988.432779][T15701] usb 10-1: string descriptor 0 read error: -22 [ 988.446838][T15701] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 988.458281][T15701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.554366][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 988.741956][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 988.803272][ T9092] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 988.829660][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 988.902535][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 988.930335][T15701] usbhid 10-1:1.0: can't add hid device: -71 [ 988.939910][T15701] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 988.968972][T15701] usb 10-1: USB disconnect, device number 17 [ 988.995494][ T9092] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 989.014782][ T9092] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.040121][ T9092] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 989.063912][ T9092] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 989.077016][ T9092] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.097047][ T9092] usb 9-1: Product: syz [ 989.144546][ T9092] usb 9-1: Manufacturer: syz [ 989.162024][ T9092] usb 9-1: SerialNumber: syz [ 989.508166][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 989.602333][ T5901] usb 7-1: USB disconnect, device number 22 [ 989.915277][T17519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.934693][T17519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.654119][T17546] loop8: detected capacity change from 0 to 2048 [ 990.676634][T17539] loop9: detected capacity change from 0 to 2048 [ 990.759677][T17539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 990.807827][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 991.044193][T17546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 992.101763][T15697] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 992.281967][T15697] usb 10-1: Using ep0 maxpacket: 16 [ 992.299688][T15697] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.333502][T15697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.367841][T15697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.380813][T15697] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.446950][T15697] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.474533][T15697] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.486061][T15697] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.494638][ T9071] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 992.506708][T15697] usb 10-1: Manufacturer: syz [ 992.524049][T15697] usb 10-1: config 0 descriptor?? [ 992.557667][ T9092] usb 9-1: USB disconnect, device number 6 [ 992.641816][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 992.664591][ T9071] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 992.697855][ T9071] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.753156][ T9071] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 992.784712][ T9071] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.824058][ T9071] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 992.841093][ T9071] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 992.866736][ T9071] usb 8-1: Product: syz [ 992.871054][ T9071] usb 8-1: Manufacturer: syz [ 992.904459][T15697] rc_core: IR keymap rc-hauppauge not found [ 992.912882][ T9071] cdc_wdm 8-1:1.0: skipping garbage [ 992.925673][T15697] Registered IR keymap rc-empty [ 992.944873][ T9071] cdc_wdm 8-1:1.0: skipping garbage [ 992.957646][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 992.985922][ T9071] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 993.003328][ T9071] cdc_wdm 8-1:1.0: Unknown control protocol [ 993.022241][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.052015][ T9092] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 993.064551][T15697] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 993.108200][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.115381][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.130162][T15697] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input21 [ 993.155068][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.182119][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.211843][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.252479][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.305139][ T9092] usb 9-1: config 1 interface 0 has no altsetting 0 [ 993.308089][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.467164][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.698681][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.903610][ T9092] usb 9-1: string descriptor 0 read error: -22 [ 993.916086][ T9092] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 993.919875][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 993.941709][ T9092] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.004254][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 994.046386][T15697] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 994.268128][T15697] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 994.293473][T15697] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 994.313648][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 994.330181][T15697] usb 10-1: USB disconnect, device number 18 [ 995.241688][T17609] loop9: detected capacity change from 0 to 2048 [ 995.338914][T17609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 995.412395][ T9092] usbhid 9-1:1.0: can't add hid device: -71 [ 995.419060][ T9092] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 995.614862][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 995.629102][ T9092] usb 9-1: USB disconnect, device number 7 [ 995.862097][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 995.871894][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 995.986052][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 995.993130][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.000811][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.007472][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.013870][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.020516][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.026893][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.033526][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.039968][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.046613][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.052972][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.059610][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.067440][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.074097][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.081306][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.087956][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.094435][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.101069][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.107391][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 996.114022][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 996.277916][T17624] loop6: detected capacity change from 0 to 16 [ 996.311553][T17624] erofs (device loop6): mounted with root inode @ nid 36. [ 996.788494][T17616] loop5: detected capacity change from 0 to 4096 [ 997.049560][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 997.099044][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 997.227588][T17616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.372045][T15697] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 997.375483][ T9092] usb 8-1: USB disconnect, device number 22 [ 998.059512][T17639] overlayfs: missing 'lowerdir' [ 998.314317][T15697] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 998.324627][T15697] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.339063][T15697] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 998.770352][T15697] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 998.824874][T15697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.877046][T15697] usb 10-1: Product: syz [ 998.951543][T15697] usb 10-1: Manufacturer: syz [ 999.416787][T15697] usb 10-1: SerialNumber: syz [ 999.794328][T17630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.844746][T17630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.471208][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1001.447616][T15697] usb 10-1: USB disconnect, device number 19 [ 1002.509318][T17662] loop7: detected capacity change from 0 to 2048 [ 1002.690706][T17662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1003.225420][T17672] netlink: 'syz.9.2607': attribute type 10 has an invalid length. [ 1003.858373][T16097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.934237][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1008.140042][ T24] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1008.180790][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.200678][ T24] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1008.431161][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.535331][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.544586][ T24] usb 8-1: Product: syz [ 1008.548855][ T24] usb 8-1: Manufacturer: syz [ 1008.554952][ T24] usb 8-1: SerialNumber: syz [ 1008.780204][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.839948][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.124167][T17711] loop5: detected capacity change from 0 to 2048 [ 1009.185948][T17711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.292345][T17714] loop9: detected capacity change from 0 to 64 [ 1009.463635][T17717] loop7: detected capacity change from 0 to 2048 [ 1009.552846][T17717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.577223][T17714] syz.9.2619: attempt to access beyond end of device [ 1009.577223][T17714] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1009.636679][T17714] Buffer I/O error on dev loop9, logical block 512, async page read [ 1009.665037][T17714] syz.9.2619: attempt to access beyond end of device [ 1009.665037][T17714] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1009.717688][T17714] Buffer I/O error on dev loop9, logical block 56576, async page read [ 1009.849008][T17722] syz.9.2619: attempt to access beyond end of device [ 1009.849008][T17722] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1009.863014][T17722] Buffer I/O error on dev loop9, logical block 512, async page read [ 1009.871793][T17722] syz.9.2619: attempt to access beyond end of device [ 1009.871793][T17722] loop9: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 1009.886144][T17722] Buffer I/O error on dev loop9, logical block 56576, async page read [ 1010.318409][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1010.423926][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1010.581953][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1010.621884][T16103] Bluetooth: hci5: command 0x0406 tx timeout [ 1010.674238][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1010.685191][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.700214][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1010.724214][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.765338][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1010.797090][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1010.831050][ T24] usb 9-1: Product: syz [ 1010.845208][ T24] usb 9-1: Manufacturer: syz [ 1010.907359][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 1010.928893][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 1010.965902][T15700] usb 8-1: USB disconnect, device number 23 [ 1010.968220][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1011.009092][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 1013.394958][T17749] fuse: Unknown parameter '00000000000000000000003' [ 1013.521051][T17747] loop5: detected capacity change from 0 to 4096 [ 1013.551890][T17754] 9p: Bad value for 'rfdno' [ 1014.218864][T17747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.302658][T17747] overlayfs: missing 'lowerdir' [ 1014.354113][T17761] overlayfs: failed to resolve 'dont_appraise': -2 [ 1017.283260][T17782] loop7: detected capacity change from 0 to 2048 [ 1017.307757][T17782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1017.386566][ C1] wdm_int_callback: 4687 callbacks suppressed [ 1017.386598][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.399365][ C1] wdm_int_callback: 4687 callbacks suppressed [ 1017.399388][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.417306][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.424071][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.430351][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.436951][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.443212][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.449820][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.456076][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.462667][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.469489][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.476098][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.483103][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1017.489706][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1017.495787][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1017.504851][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1017.512716][T15697] usb 9-1: USB disconnect, device number 8 [ 1017.608255][T16097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.675219][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1017.731974][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.753366][ T24] usb 7-1: config 0 descriptor?? [ 1017.764535][ T24] cp210x 7-1:0.0: cp210x converter detected [ 1018.709649][T17779] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1018.786669][ T7084] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1018.909557][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1019.567488][ T7084] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1019.593603][ T7084] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.646607][ T7084] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1019.688812][ T7084] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.705261][T17806] fuse: Unknown parameter '01777777777777777777777' [ 1019.712233][ T7084] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.738649][ T7084] usb 8-1: Product: syz [ 1019.755456][ T24] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1019.771823][ T7084] usb 8-1: Manufacturer: syz [ 1019.790207][ T7084] usb 8-1: SerialNumber: syz [ 1019.795015][ T24] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1019.874805][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1019.905952][ T24] usb 7-1: USB disconnect, device number 23 [ 1020.452992][T17791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.474329][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1020.484534][T17791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.536757][ T24] cp210x 7-1:0.0: device disconnected [ 1021.366688][T17792] loop7: detected capacity change from 0 to 2048 [ 1021.422843][T17792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1021.551715][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1021.582221][ T5901] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1021.662231][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1021.704134][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1021.719945][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.746951][T17834] loop6: detected capacity change from 0 to 4096 [ 1021.753517][ T5901] usb 9-1: Using ep0 maxpacket: 16 [ 1021.763339][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1021.774441][ T5901] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.827862][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1021.840671][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.855000][T17834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.894537][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1021.924458][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1021.959931][T17834] overlayfs: missing 'lowerdir' [ 1021.969573][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1021.983210][ T5901] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1022.010416][T17838] overlayfs: failed to resolve 'dont_appraise': -2 [ 1022.023758][ T9] usb 10-1: Product: syz [ 1022.029817][ T5901] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.049889][ T9] usb 10-1: Manufacturer: syz [ 1022.084689][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 1022.090240][ T5901] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1022.108289][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 1022.115405][ T5901] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1022.129257][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1022.140022][ T5901] usb 9-1: Manufacturer: syz [ 1022.148842][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 1022.162801][ T5901] usb 9-1: config 0 descriptor?? [ 1022.502295][ T5901] rc_core: IR keymap rc-hauppauge not found [ 1022.514572][ T5901] Registered IR keymap rc-empty [ 1022.525778][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.531013][T16104] usb 8-1: USB disconnect, device number 24 [ 1022.571720][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.616937][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1022.678085][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input22 [ 1022.734968][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1022.780817][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.825916][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.872305][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.911775][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.941859][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1022.972405][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1023.011846][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1023.033662][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1023.043787][ C0] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1023.081712][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1023.112757][ T5901] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1023.171041][ T5901] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1023.194776][ T5901] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1023.225111][ T5901] usb 9-1: USB disconnect, device number 9 [ 1023.276898][ C1] workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 1023.431847][ T7084] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1023.568098][T14767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.644576][ T7084] usb 8-1: Using ep0 maxpacket: 8 [ 1023.666250][ T7084] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.704555][ T7084] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.728360][ T7084] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1023.738795][ T7084] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.765761][T17858] fuse: Unknown parameter '00000000000000000000003' [ 1023.791241][ T7084] usbtmc 8-1:16.0: bulk endpoints not found [ 1024.566199][T17862] loop8: detected capacity change from 0 to 65536 [ 1024.613882][T17864] loop6: detected capacity change from 0 to 16 [ 1024.948891][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1024.955659][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1024.962973][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1024.969727][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1024.976148][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1024.982989][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1024.989439][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1024.996173][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.002843][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1025.009583][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.018141][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1025.024883][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.031746][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1025.038539][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.046049][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1025.052785][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.059138][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1025.065866][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.072247][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1025.078948][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1025.102066][ T31] INFO: task kworker/1:3:5908 blocked for more than 143 seconds. [ 1025.110044][ T31] Tainted: G L syzkaller #0 [ 1025.120626][T17864] erofs (device loop6): mounted with root inode @ nid 36. [ 1025.176741][T17862] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1025.203202][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1025.203208][ T9092] usb 10-1: USB disconnect, device number 20 [ 1025.347170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1025.357154][ T31] task:kworker/1:3 state:D stack:21968 pid:5908 tgid:5908 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1025.369352][ T31] Workqueue: usb_hub_wq hub_event [ 1025.374540][ T31] Call Trace: [ 1025.377877][ T31] [ 1025.380902][ T31] __schedule+0x1665/0x5590 [ 1025.385529][ T31] ? kasan_save_stack+0x3e/0x60 [ 1025.390434][ T31] ? kasan_record_aux_stack+0xbd/0xd0 [ 1025.530333][T17862] XFS (loop8): Ending clean mount [ 1025.538979][T17862] XFS (loop8): Quotacheck needed: Please wait. [ 1025.574823][ T31] ? call_rcu+0xee/0x890 [ 1025.606378][ T31] ? device_initial_probe+0xa1/0xd0 [ 1025.640915][ T31] ? __device_attach_driver+0x2d4/0x4c0 [ 1025.678862][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 1025.727283][T17862] XFS (loop8): Quotacheck: Done. [ 1025.742445][ T31] ? hub_event+0x2a1c/0x4f30 [ 1025.761863][ T31] ? process_one_work+0x963/0x1720 [ 1025.767948][ T31] ? worker_thread+0xb46/0x1140 [ 1025.781656][ T31] ? kthread+0x388/0x470 [ 1025.786017][ T31] ? ret_from_fork+0x51e/0xb90 [ 1025.798482][ T31] ? __pfx___schedule+0x10/0x10 [ 1025.803501][ T31] ? schedule+0x90/0x360 [ 1025.807918][ T31] schedule+0x164/0x360 [ 1025.813293][ T31] schedule_timeout+0xc3/0x2c0 [ 1025.818390][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1025.823774][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1025.840846][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1025.847116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1025.861793][ T31] ? wait_for_completion+0x274/0x5e0 [ 1025.879300][ T31] wait_for_completion+0x2cc/0x5e0 [ 1025.899663][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1025.934587][ T31] i2c_del_adapter+0x5c0/0x790 [ 1025.947252][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1025.961686][ T31] ? kfree+0x4d/0x630 [ 1025.974877][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1025.982322][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 1025.987785][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1025.997509][ T31] cxusb_probe+0x60f/0x710 [ 1026.003425][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1026.009409][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 1026.014723][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1026.021113][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1026.027733][ T31] usb_probe_interface+0x668/0xc90 [ 1026.033430][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1026.039215][ T31] really_probe+0x267/0xaf0 [ 1026.053524][ T31] __driver_probe_device+0x18c/0x320 [ 1026.064039][ T31] driver_probe_device+0x4f/0x240 [ 1026.070811][ T31] __device_attach_driver+0x2d4/0x4c0 [ 1026.076350][ T31] bus_for_each_drv+0x258/0x2f0 [ 1026.083518][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1026.101674][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1026.107147][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1026.121635][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1026.131784][ T31] __device_attach+0x2c5/0x450 [ 1026.139962][ T31] ? __pfx___device_attach+0x10/0x10 [ 1026.151653][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1026.162059][ T31] device_initial_probe+0xa1/0xd0 [ 1026.169111][ T31] bus_probe_device+0x12a/0x220 [ 1026.175822][ T31] ? device_add+0x726/0xb70 [ 1026.180510][ T31] device_add+0x7b6/0xb70 [ 1026.185030][ T31] usb_set_configuration+0x1a87/0x2110 [ 1026.190619][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1026.196254][ T31] usb_probe_device+0x1c4/0x3b0 [ 1026.201198][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1026.206952][ T31] really_probe+0x267/0xaf0 [ 1026.211611][ T31] __driver_probe_device+0x18c/0x320 [ 1026.216999][ T31] driver_probe_device+0x4f/0x240 [ 1026.227775][ T31] __device_attach_driver+0x2d4/0x4c0 [ 1026.233292][ T31] bus_for_each_drv+0x258/0x2f0 [ 1026.238195][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1026.244738][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1026.250226][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1026.255617][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1026.261546][ T31] __device_attach+0x2c5/0x450 [ 1026.266530][ T31] ? __pfx___device_attach+0x10/0x10 [ 1026.271950][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1026.278560][ T31] device_initial_probe+0xa1/0xd0 [ 1026.283777][ T31] bus_probe_device+0x12a/0x220 [ 1026.288714][ T31] ? device_add+0x726/0xb70 [ 1026.293335][ T31] device_add+0x7b6/0xb70 [ 1026.297717][ T31] usb_new_device+0xa08/0x16f0 [ 1026.302831][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1026.308185][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1026.313607][ T31] hub_event+0x2a1c/0x4f30 [ 1026.318154][ T31] ? __pfx_hub_event+0x10/0x10 [ 1026.323109][ T31] ? process_one_work+0x870/0x1720 [ 1026.328300][ T31] process_one_work+0x963/0x1720 [ 1026.333366][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1026.339767][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1026.345014][ T31] worker_thread+0xb46/0x1140 [ 1026.349775][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1026.355713][ T31] kthread+0x388/0x470 [ 1026.359823][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1026.365090][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.369750][ T31] ret_from_fork+0x51e/0xb90 [ 1026.374529][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.381212][ T31] ? __switch_to+0xc7d/0x1450 [ 1026.386115][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.390798][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.395706][ T31] [ 1026.399007][ T31] [ 1026.399007][ T31] Showing all locks held in the system: [ 1026.408349][ T31] 1 lock held by khungtaskd/31: [ 1026.413990][ T31] #0: ffffffff8e760560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1026.424127][ T31] 2 locks held by getty/5584: [ 1026.429029][ T31] #0: ffff888032c640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1026.451696][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1026.474281][ T31] 5 locks held by kworker/1:3/5908: [ 1026.481284][ T31] #0: ffff888021eced48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x849/0x1720 [ 1026.493674][ T31] #1: ffffc90004b97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x870/0x1720 [ 1026.514517][ T31] #2: ffff88802a459198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1026.523779][ T31] #3: ffff88805519d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1026.544492][ T31] #4: ffff888055fec160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1026.555294][ T31] 2 locks held by kworker/u8:14/6506: [ 1026.560767][ T31] #0: ffff88801db07148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x849/0x1720 [ 1026.571667][ T31] #1: ffffc90003707c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1720 [ 1026.587776][ T31] 3 locks held by kworker/u8:5/11561: [ 1026.593776][ T31] #0: ffff88801b09c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x849/0x1720 [ 1026.606332][ T31] #1: ffffc9000e207c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x870/0x1720 [ 1026.618158][ T31] #2: ffffffff8fbd5008 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1026.634445][ T31] 4 locks held by udevd/14051: [ 1026.639471][ T31] #0: ffff88807998fd58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1026.650339][ T31] #1: ffff88807ea1c088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1026.660007][ T31] #2: ffff8880354e3a58 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1026.670626][ T31] #3: ffff88805519d198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1026.680053][ T31] 1 lock held by syz.1.2214/15730: [ 1026.687514][ T31] 3 locks held by kworker/u8:19/16531: [ 1026.694002][ T31] #0: ffff88801b09c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x849/0x1720 [ 1026.705636][ T31] #1: ffffc900053bfc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1720 [ 1026.716953][ T31] #2: ffffffff8e7667f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1026.729459][ T31] 2 locks held by syz.9.2642/17825: [ 1026.735679][ T31] #0: ffffffff8fbd5008 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1026.745602][ T31] #1: ffffffff8e7667f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1026.758205][ T31] 1 lock held by syz.7.2647/17855: [ 1026.764173][ T31] 1 lock held by dhcpcd/17873: [ 1026.768994][ T31] #0: ffff888029ff4260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.779472][ T31] 1 lock held by dhcpcd/17874: [ 1026.784397][ T31] #0: ffff888029ff2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.796787][ T31] 1 lock held by dhcpcd/17875: [ 1026.803651][ T31] #0: ffff8880446aa260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.813470][ T31] 1 lock held by dhcpcd/17876: [ 1026.818279][ T31] #0: ffff88806bbf0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.828171][ T31] 1 lock held by dhcpcd/17878: [ 1026.835108][ T31] #0: ffff888046386260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.846148][ T31] 1 lock held by dhcpcd/17879: [ 1026.850988][ T31] #0: ffff888046380260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.862072][ T31] 1 lock held by dhcpcd/17880: [ 1026.866922][ T31] #0: ffff888031c8a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 1026.873002][ T7084] usb 8-1: USB disconnect, device number 25 [ 1026.918608][ T31] [ 1026.922060][ T31] ============================================= [ 1026.922060][ T31] [ 1026.932565][ T31] NMI backtrace for cpu 0 [ 1026.932588][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.932639][ T31] Tainted: [L]=SOFTLOCKUP [ 1026.932653][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1026.932675][ T31] Call Trace: [ 1026.932690][ T31] [ 1026.932706][ T31] dump_stack_lvl+0xe8/0x150 [ 1026.932765][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1026.932816][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.932872][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1026.932916][ T31] sys_info+0x135/0x170 [ 1026.932941][ T31] watchdog+0xfd9/0x1030 [ 1026.932970][ T31] ? watchdog+0x21a/0x1030 [ 1026.932999][ T31] kthread+0x388/0x470 [ 1026.933023][ T31] ? __pfx_watchdog+0x10/0x10 [ 1026.933044][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.933066][ T31] ret_from_fork+0x51e/0xb90 [ 1026.933099][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.933127][ T31] ? __switch_to+0xc7d/0x1450 [ 1026.933157][ T31] ? __pfx_kthread+0x10/0x10 [ 1026.933179][ T31] ret_from_fork_asm+0x1a/0x30 [ 1026.933217][ T31] [ 1026.933227][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1027.057410][ C1] NMI backtrace for cpu 1 [ 1027.057431][ C1] CPU: 1 UID: 0 PID: 5194 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.057456][ C1] Tainted: [L]=SOFTLOCKUP [ 1027.057463][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1027.057475][ C1] RIP: 0010:__lock_acquire+0x524/0x2cf0 [ 1027.057506][ C1] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 3c 89 83 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 d0 52 c6 93 eb 32 83 3d 03 19 [ 1027.057522][ C1] RSP: 0018:ffffc9000495f4e8 EFLAGS: 00000003 [ 1027.057539][ C1] RAX: 000000000000061a RBX: ffff88807f228b78 RCX: 00000000ffffffff [ 1027.057552][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.057563][ C1] RBP: ffff88807f228b80 R08: ffffffff8a4f0bf3 R09: ffffffff8e760560 [ 1027.057576][ C1] R10: dffffc0000000000 R11: ffffffff8a4f0bd0 R12: ffffffffffffff05 [ 1027.057590][ C1] R13: ffff88807f228b80 R14: ffff88807f228000 R15: 0000000000000000 [ 1027.057603][ C1] FS: 00007f43e99ee880(0000) GS:ffff888125548000(0000) knlGS:0000000000000000 [ 1027.057619][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.057631][ C1] CR2: 00007fffe24d0920 CR3: 000000007ead4000 CR4: 00000000003526f0 [ 1027.057648][ C1] Call Trace: [ 1027.057655][ C1] [ 1027.057667][ C1] ? process_measurement+0x195e/0x1c80 [ 1027.057690][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.057716][ C1] lock_acquire+0xf0/0x2e0 [ 1027.057741][ C1] ? unix_write_space+0x23/0x470 [ 1027.057768][ C1] ? unix_write_space+0x23/0x470 [ 1027.057791][ C1] unix_write_space+0x40/0x470 [ 1027.057813][ C1] ? unix_write_space+0x23/0x470 [ 1027.057837][ C1] sock_wfree+0x1d9/0x750 [ 1027.057858][ C1] unix_destruct_scm+0x15f/0x1b0 [ 1027.057882][ C1] ? __pfx_unix_destruct_scm+0x10/0x10 [ 1027.057907][ C1] ? __pfx_scm_recv_unix+0x10/0x10 [ 1027.057930][ C1] ? __pfx_unix_destruct_scm+0x10/0x10 [ 1027.057952][ C1] skb_release_head_state+0x358/0x360 [ 1027.057970][ C1] __kfree_skb+0x24/0x210 [ 1027.057987][ C1] __unix_dgram_recvmsg+0x9d0/0xd50 [ 1027.058010][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1027.058036][ C1] ? unix_dgram_recvmsg+0xae/0xd0 [ 1027.058058][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1027.058081][ C1] sock_recvmsg_nosec+0x186/0x1c0 [ 1027.058106][ C1] ____sys_recvmsg+0x245/0x510 [ 1027.058127][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1027.058153][ C1] ? import_iovec+0x73/0xa0 [ 1027.058172][ C1] ___sys_recvmsg+0x215/0x590 [ 1027.058193][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1027.058210][ C1] ? do_epoll_wait+0x1ba/0xf60 [ 1027.058245][ C1] ? __pfx_do_epoll_wait+0x10/0x10 [ 1027.058268][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1027.058294][ C1] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1027.058314][ C1] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1027.058344][ C1] do_syscall_64+0x14d/0xf80 [ 1027.058362][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.058386][ C1] ? clear_bhb_loop+0x40/0x90 [ 1027.058407][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.058424][ C1] RIP: 0033:0x7f43e92a7407 [ 1027.058439][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1027.058455][ C1] RSP: 002b:00007fffb8416bb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1027.058472][ C1] RAX: ffffffffffffffda RBX: 00007f43e99ee880 RCX: 00007f43e92a7407 [ 1027.058485][ C1] RDX: 0000000000000040 RSI: 00007fffb8416cd0 RDI: 0000000000000009 [ 1027.058496][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1027.058507][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1027.058518][ C1] R13: 00005555f8159100 R14: 0000000000000000 R15: 0000000000000000 [ 1027.058537][ C1] [ 1027.462754][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1027.469673][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.480381][ T31] Tainted: [L]=SOFTLOCKUP [ 1027.484715][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1027.494776][ T31] Call Trace: [ 1027.498078][ T31] [ 1027.501037][ T31] vpanic+0x56c/0xa60 [ 1027.505050][ T31] ? __pfx___schedule+0x10/0x10 [ 1027.509949][ T31] ? __pfx_vpanic+0x10/0x10 [ 1027.514482][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1027.519691][ T31] panic+0xc5/0xd0 [ 1027.523437][ T31] ? __pfx_panic+0x10/0x10 [ 1027.527908][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1027.533321][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1027.539502][ T31] watchdog+0x1023/0x1030 [ 1027.543848][ T31] ? watchdog+0x21a/0x1030 [ 1027.548304][ T31] kthread+0x388/0x470 [ 1027.552427][ T31] ? __pfx_watchdog+0x10/0x10 [ 1027.557119][ T31] ? __pfx_kthread+0x10/0x10 [ 1027.561735][ T31] ret_from_fork+0x51e/0xb90 [ 1027.566374][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.571520][ T31] ? __switch_to+0xc7d/0x1450 [ 1027.576243][ T31] ? __pfx_kthread+0x10/0x10 [ 1027.580876][ T31] ret_from_fork_asm+0x1a/0x30 [ 1027.585667][ T31] [ 1027.589745][ T31] Kernel Offset: disabled [ 1027.594083][ T31] Rebooting in 86400 seconds..