last executing test programs: 7m40.814906356s ago: executing program 0 (id=1775): r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x4, 0x7f}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_setup(0xa, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 7m36.461433644s ago: executing program 0 (id=1788): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d0001"], 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 7m33.171756896s ago: executing program 0 (id=1800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = eventfd2(0x0, 0x0) readv(r3, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/211, 0xd3}], 0x1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x81, 0x1}}]}, 0x28}}, 0x20000000) fcntl$getown(r2, 0x9) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c5}, 0x4) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mlock2(&(0x7f00003f3000/0x3000)=nil, 0x3000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 7m28.798160784s ago: executing program 0 (id=1808): syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x2000048, &(0x7f0000000040), 0x1, 0xb9fa, &(0x7f000002ffc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) 7m25.802244948s ago: executing program 0 (id=1819): r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x4, 0x7f}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_setup(0xa, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 7m23.240578762s ago: executing program 0 (id=1828): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r3, 0x137}, 0x0, &(0x7f00000008c0)="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", 0x0) 7m22.923930539s ago: executing program 32 (id=1828): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8Pban0ZFbtH9qX9g9taem/xOePW8muCa3/y//UjqOreWLA7U/M9be+eNSfNbvyFXY0V7h4+kXTa26ucBJRhJM2iKtGItLKlL/yp0mWpnSWy3Q1v6trn0iXLfPEcrXRuaJnYvTUqI19eaI7Ippdz6U1q9XiCpF4yiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCh/RMAAP//3Wzjzw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r3, 0x137}, 0x0, &(0x7f00000008c0)="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", 0x0) 11.952023084s ago: executing program 4 (id=2843): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 10.288228465s ago: executing program 4 (id=2853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000200), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x9, 0x7fffffff, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x4, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @noop, @noop, @rr={0x7, 0x1b, 0x85, [@local, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @multicast1]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0xe}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r3, 0x141601) 9.451607656s ago: executing program 4 (id=2854): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f22000000050f22000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.950792473s ago: executing program 5 (id=2862): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 7.788600447s ago: executing program 5 (id=2863): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 7.69624815s ago: executing program 5 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000200), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x9, 0x7fffffff, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x4, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @noop, @noop, @rr={0x7, 0x1b, 0x85, [@local, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @multicast1]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0xe}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r3, 0x141601) 6.86669902s ago: executing program 5 (id=2866): creat(&(0x7f0000000000)='./file0\x00', 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000040)="3a7f15fed9a49615cf0d431527c9cd159663bd4f45", 0x15}, {&(0x7f0000000500)="96a75d1a666543478d33dc54de8f2d222e9f29808d159fa5ef870901954664a6455355c6790ff89774ff9d01ae7359bf4562cdaf3ecfd3d722bf22f8294165697cc6fc310ab5554e887d05b2bbf8", 0x4e}], 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/dev0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/dev0/zoned\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/dev0/power\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1\n\x00', 0x2) 6.417390071s ago: executing program 1 (id=2869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1], 0xe4}}, 0x0) 6.271625545s ago: executing program 1 (id=2870): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000780)={0xdd8, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xd98, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c756a48acf9b2945cc32efb3277a3166c68eb2ac3112795bead06cd1821c10c4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e22f5a32021056eab3214c555aefc7eb7b8447f2c680ff2e9f9eb750d7f915ca"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc845}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x31c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x8}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe, @remote, 0x3f35}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "71eb651b8ea0f1a0793faa5b4f7a2a807ee25d38d89c1d5a29e5deede2fd382e"}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x300, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c912f38a286d238054e5d4674c96a731e9dc14abeb9bcee5361280bfdaec56fb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x2fc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9886ba422ab3bf0466d9a5d5c978449d3a9cee445480c865d732230c7d1458bd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @empty, 0x130}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffc0}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xdd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) 5.968642912s ago: executing program 2 (id=2872): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x2) 5.379791487s ago: executing program 2 (id=2873): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 5.24291241s ago: executing program 2 (id=2874): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 5.201084701s ago: executing program 1 (id=2875): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x7}, 0x4) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000100)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, {[0x80, 0x1, 0x98, 0xcf56, 0x8, 0x5, 0x1000200000000, 0x7fff]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x4, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x8001, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x4, 0x5, 0x27, 0x4, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x9, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x9, 0x7, 0xfffffffd, 0x2, 0x20000005, 0x6, 0x23, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x2, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x10401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa8, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe46, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7fe, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a9, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="5953fdfffffffddbdf", @ANYRES32=0x0, @ANYBLOB="0400"], 0x20}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) sendmsg$nl_xfrm(r0, 0x0, 0xc004004) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb0000000000000000000007"], 0x0) 5.060542765s ago: executing program 4 (id=2876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000200), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x9, 0x7fffffff, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x4, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @noop, @noop, @rr={0x7, 0x1b, 0x85, [@local, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @multicast1]}, @rr={0x7, 0x3, 0x97}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0xe}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r3, 0x141601) 5.030970835s ago: executing program 3 (id=2877): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) 4.991667156s ago: executing program 2 (id=2878): syz_usb_connect$cdc_ecm(0x6, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0xf7, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x2, 0x67, 0xff}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xa, 0xc}, @obex={0x5, 0x24, 0x15, 0x282}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x5, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xfe, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x5, 0x5, 0xff, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x38, &(0x7f0000000200)=@string={0x38, 0x3, "718bc3442d3217adc06b2dcb6de1f28c3be81053c6165326ca61230cdacbee1702dbcdc72d16c27d089d68573328b77ac31bc3e0f008"}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "354dba739d906eb1dcd44a03648ebb9e5dd258a3a03ec0c2b69cc049ad08a340626d124064df03fd542a06ba8f04c46c6576a4b5fb6c50915576654becfb8ac5c8bbefbe735278e3112cba566ccad13190c4c94a1aa08ef6633319f86b646b9393ed6b3a6e37aa5414508c43733330721e44d991f6f4fcf3133c51ca4c51ec2413bb"}}, {0xae, &(0x7f00000004c0)=@string={0xae, 0x3, "9fdbd0f03df0691f4670a11c99364b2b45753e575fa9b90adee6a1d30308660dc751777285ef7eaff606d0cdef050090cd2e526934eadc0df4aca29bab8e8179b39bd51b02ce4b8bc87b4f21875980559596dd59d0e078701b837500c03d19acedb529a35cde9d7c63f14954c2dae35601515f68b709a58498b60f0a7d72c5630f2d406f060d24a97fcbd9ccd7aca3bb5ce919f5c2b505e69c6bbdb7e5ccf2489c0cdcefc44277b0df84b16f"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='psmouse\x00', 0x8) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) connect$inet(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000600)='sessname=s. device_path=/d', 0x1a) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x40, 0xd, 0xda, {0xda, 0xd, "99dad61be41d9cd0cf0b707abcbc35ff5f3b5cc82b2c5657d45bed65cb75f87e6df9bb9ae0ea1ee6e95e56ea437dff109bb441c8f82234111296136dbfbff326f5c2f7798c91826459b53d245961bfba54ff6d175c69a497fbe3658260888a406628699dded0fc70f45b7e668de084c70bce2255e837a056dd8c6e8548c1fea2222c64e1e58ca6a60109018683a2551e616e06a9a81adbbce3842969fa32b1c0a625680c28233771f279a99c466682182925806639673030834ab9f0c6b2796ae872ac96fd5f1e5d1ac523387a0190d239a5b9b466af91ac"}}, &(0x7f0000000680)={0x0, 0x3, 0x41, @string={0x41, 0x3, "f9d9e6b858e5b0e4ac81061a3ac8717aff8c02082f3125fc89b304f76cb4afc41e87625e276f4fd659997bd36af5aeb8515dc5abfe26c3176ee3648bbfc9e4"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000740)={0x40, 0x14, 0x2b, "9ea508055a6b5cb186f227ff4c7db1d45599c422edd2146027f8b5fb28955256eb280961bbb20762468d43"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000840)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "cda9cdff7ec5881356e8aee211c85e86cd9aa8d63e7e5312d4972ea627ab7b7385d85a5ef58c614fbef28052499cce"}}) 4.230597565s ago: executing program 4 (id=2879): removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r0, 0xb9, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000100)="03000000000000000100000002000000000000000100000000000000ffffffff") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [], {0xffffffffffffffd8, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$MEMGETREGIONINFO(0xffffffffffffffff, 0xc0104d08, &(0x7f0000000080)={0x4, 0x81, 0x1, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) write$cgroup_freezer_state(r5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000340)={r4, &(0x7f0000000180)='\x00', 0x2106c0, 0x0, 0x9, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpriority(0x0, 0x0, 0x3) r8 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r8, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) mq_timedreceive(r8, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.096408129s ago: executing program 3 (id=2880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB], 0xe4}}, 0x0) 3.959604222s ago: executing program 3 (id=2881): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044565d, &(0x7f0000000280)=@mmap={0x8, 0x1, 0x4, 0x1, 0x8d47, {}, {0x2, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) 3.407397805s ago: executing program 3 (id=2882): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0xfd) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) write(r0, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 3.222013s ago: executing program 3 (id=2883): r0 = syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x2) 2.876566089s ago: executing program 2 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 2.857874529s ago: executing program 4 (id=2885): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x4) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 2.81758399s ago: executing program 5 (id=2886): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x40040) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) 2.690916883s ago: executing program 2 (id=2887): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000150005015f"], 0x10}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x3) ioctl$TIOCSETD(r4, 0x5423, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x3, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r8, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c0001"], 0x84}}, 0x200088c2) close_range(r1, 0xffffffffffffffff, 0x0) 2.578233286s ago: executing program 3 (id=2888): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 1.891280733s ago: executing program 1 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000200), 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x9, 0x7fffffff, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x4, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @noop, @noop, @rr={0x7, 0x1b, 0x85, [@local, @rand_addr=0x64010101, @private=0xa010102, @loopback, @multicast1, @multicast1]}, @rr={0x7, 0x3, 0x97}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000100)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0xe}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r3, 0x141601) 1.063792684s ago: executing program 1 (id=2890): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) 421.54385ms ago: executing program 1 (id=2891): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB], 0xe4}}, 0x0) 0s ago: executing program 5 (id=2892): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x2, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110062", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff0000bfa200000000000007020000b8ffffffb703000008000000b7040000000000008500000082000000d266fcff01000000186600001000000000000000240e00009f902000020000009500000000000000b7080000f076541999610bc500000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200e307000000182300000000d0a62d0eddb76c34766c16701948627060b53b65f192f618beced6ceaaed34725027ff5f0f", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200a6d365bba1000000000007020000f8ffffffb702000008000000b704000000000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000080)={0x0, 0x1, 0x3ff, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc044565d, &(0x7f0000000280)=@mmap={0x8, 0x1, 0x4, 0x1, 0x8d47, {}, {0x2, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) fcntl$setown(r4, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000001c0)=0x7f) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x3, 0x0) getdents64(r6, &(0x7f0000003440)=""/92, 0x5c) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r5) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f00000000c0)=""/1, 0x2d000, 0x1000, 0xe, 0x3}, 0x1c) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): he device must be registered before sending interrupts [ 704.801618][T12747] misc userio: The device must be registered before sending interrupts [ 704.841327][T12747] misc userio: The device must be registered before sending interrupts [ 704.870583][T12747] misc userio: The device must be registered before sending interrupts [ 704.899684][T12747] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 704.930481][T12747] rnbd_client L1255: Session s. not found, and path parameter not given [ 704.931725][ T4287] asix: probe of 6-1:127.57 failed with error -22 [ 704.949152][ T6803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.989977][ T6803] usb 5-1: config 0 has no interfaces? [ 704.995827][ T6805] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 705.014853][ T6803] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 705.054492][ T6803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.083056][ T6803] usb 5-1: Product: syz [ 705.087305][ T6803] usb 5-1: Manufacturer: syz [ 705.108544][ T6803] usb 5-1: SerialNumber: syz [ 705.128525][ T6803] usb 5-1: config 0 descriptor?? [ 705.150517][ T4287] usb 6-1: USB disconnect, device number 12 [ 705.210537][ T6805] usb 3-1: Using ep0 maxpacket: 16 [ 705.840508][T12768] loop3: detected capacity change from 0 to 131072 [ 705.847756][T12768] XFS: ikeep mount option is deprecated. [ 705.864397][ T6805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.905825][ T6805] usb 3-1: config 0 has no interfaces? [ 705.931068][T12768] XFS (loop3): Mounting V5 Filesystem [ 705.942668][ T6803] usb 5-1: USB disconnect, device number 65 [ 705.951839][ T6805] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 706.011669][T12768] XFS (loop3): Starting recovery (logdev: internal) [ 706.022071][ T6805] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 706.056042][ T6805] usb 3-1: Product: syz [ 706.060243][ T6805] usb 3-1: Manufacturer: syz [ 706.080073][ T6805] usb 3-1: SerialNumber: syz [ 706.106346][ T6805] usb 3-1: config 0 descriptor?? [ 706.135657][T12768] XFS (loop3): Ending recovery (logdev: internal) [ 706.334350][T12763] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2103'. [ 706.495843][ T6805] usb 3-1: USB disconnect, device number 49 [ 706.612008][ T4273] XFS (loop3): Unmounting Filesystem [ 710.700388][ T6811] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 710.880446][ T6811] usb 6-1: device descriptor read/64, error -71 [ 711.170485][ T6811] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 711.350360][ T6811] usb 6-1: device descriptor read/64, error -71 [ 711.470348][ T6805] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 711.480997][ T6811] usb usb6-port1: attempt power cycle [ 711.681940][ T6805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 711.722928][ T6805] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 711.760354][ T6805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.805565][ T6805] usb 4-1: config 0 descriptor?? [ 711.825130][T12814] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 711.910407][ T6811] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 711.970780][ T6811] usb 6-1: device descriptor read/8, error -71 [ 712.240359][ T6811] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 712.260750][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.290416][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.300948][ T6811] usb 6-1: device descriptor read/8, error -71 [ 712.330810][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.369527][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.381856][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.416469][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.423946][ T6811] usb usb6-port1: unable to enumerate USB device [ 712.453942][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.490606][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.520431][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.545851][T12799] loop4: detected capacity change from 0 to 131072 [ 712.560375][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.579302][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.595566][T12799] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 712.622587][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.642093][T12799] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 712.664153][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.677987][T12799] F2FS-fs (loop4): invalid crc value [ 712.692638][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.713085][T12799] F2FS-fs (loop4): Found nat_bits in checkpoint [ 712.720395][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.727370][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.780571][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.810380][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.841555][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.860959][T12799] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 712.879414][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.887501][T12799] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 712.900573][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.917566][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.934025][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.955456][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.970187][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 712.997835][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 713.018399][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 713.054953][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 713.077387][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.003718][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.030391][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.062795][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.108140][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.139749][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.174621][ T6805] saitek 0003:06A3:0621.0012: unknown main item tag 0x0 [ 714.219168][ T6805] saitek 0003:06A3:0621.0012: hidraw0: USB HID v0.81 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 714.288065][ T6805] usb 4-1: USB disconnect, device number 82 [ 714.538672][T12832] fido_id[12832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 717.010430][ T6811] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 717.070501][ T6805] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 717.220421][ T6811] usb 4-1: Using ep0 maxpacket: 16 [ 717.232154][ T6811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.267662][ T6811] usb 4-1: config 0 has no interfaces? [ 717.273619][ T6805] usb 5-1: Using ep0 maxpacket: 8 [ 717.287900][ T6805] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 717.304073][ T6811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 717.326251][ T6805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.340333][ T6811] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 717.361187][ T6805] usb 5-1: Product: syz [ 717.365397][ T6805] usb 5-1: Manufacturer: syz [ 717.375573][ T6811] usb 4-1: Product: syz [ 717.379881][ T6811] usb 4-1: Manufacturer: syz [ 717.404902][ T6805] usb 5-1: SerialNumber: syz [ 717.410253][ T6811] usb 4-1: SerialNumber: syz [ 717.431255][ T6805] usb 5-1: config 0 descriptor?? [ 717.439267][ T6811] usb 4-1: config 0 descriptor?? [ 717.458111][ T6805] gspca_main: se401-2.14.0 probing 047d:5003 [ 717.673450][T12850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2129'. [ 717.738944][ T6811] usb 4-1: USB disconnect, device number 83 [ 717.800449][ T6805] usb 5-1: reset high-speed USB device number 66 using dummy_hcd [ 718.332010][T12861] loop2: detected capacity change from 0 to 32768 [ 718.376834][T12861] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 718.651785][ T6805] gspca_se401: read req failed req 0x06 error -19 [ 718.692029][ T6805] usb 5-1: USB disconnect, device number 66 [ 718.720451][ T6811] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 718.787169][ T4265] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 719.717259][ T6811] usb 4-1: device descriptor read/64, error -71 [ 720.000439][ T6811] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 720.200451][ T6811] usb 4-1: device descriptor read/64, error -71 [ 720.330528][ T6811] usb usb4-port1: attempt power cycle [ 720.750473][ T6811] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 720.800849][ T6811] usb 4-1: device descriptor read/8, error -71 [ 720.989092][T12888] loop5: detected capacity change from 0 to 512 [ 721.073474][T12888] ext4: Unknown parameter 'appraise_type' [ 721.100380][ T6811] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 721.151639][ T6811] usb 4-1: device descriptor read/8, error -71 [ 721.270794][ T6811] usb usb4-port1: unable to enumerate USB device [ 721.900371][ T6811] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 722.110380][ T6811] usb 4-1: Using ep0 maxpacket: 16 [ 722.127265][ T6811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.174768][ T6811] usb 4-1: config 0 has no interfaces? [ 722.212081][ T6811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 722.261714][ T6811] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 722.302094][ T6811] usb 4-1: Product: syz [ 722.326911][ T6811] usb 4-1: Manufacturer: syz [ 722.352639][ T6811] usb 4-1: SerialNumber: syz [ 722.388189][ T6811] usb 4-1: config 0 descriptor?? [ 722.623084][T12896] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2148'. [ 722.700125][ T6811] usb 4-1: USB disconnect, device number 88 [ 722.940489][ T6805] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 723.140480][ T6805] usb 3-1: Using ep0 maxpacket: 8 [ 723.158515][ T6805] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 723.188140][ T6805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.228541][ T6805] usb 3-1: Product: syz [ 723.239188][ T6805] usb 3-1: Manufacturer: syz [ 723.260499][ T6805] usb 3-1: SerialNumber: syz [ 723.295254][ T6805] usb 3-1: config 0 descriptor?? [ 723.344003][ T6805] gspca_main: se401-2.14.0 probing 047d:5003 [ 724.460602][ T6805] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 725.064790][T12925] loop4: detected capacity change from 0 to 512 [ 725.119680][T12925] ext4: Unknown parameter 'appraise_type' [ 725.326796][ T6805] gspca_se401: read req failed req 0x06 error -19 [ 725.381682][ T6805] usb 3-1: USB disconnect, device number 50 [ 725.648535][T12929] loop2: detected capacity change from 0 to 32768 [ 725.660601][T12929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2159 (12929) [ 725.677810][T12929] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 725.688092][T12929] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 725.696783][T12929] BTRFS info (device loop2): turning on sync discard [ 725.703517][T12929] BTRFS info (device loop2): using free space tree [ 725.837091][T12929] BTRFS info (device loop2): enabling ssd optimizations [ 725.860426][ T6803] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 727.840389][ T6803] usb 5-1: device descriptor read/64, error -71 [ 727.878125][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 728.110470][ T6803] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 728.290649][ T6803] usb 5-1: device descriptor read/64, error -71 [ 728.430528][ T6803] usb usb5-port1: attempt power cycle [ 730.310403][ T6811] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 730.530353][ T6811] usb 6-1: Using ep0 maxpacket: 16 [ 730.582042][ T6811] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.629351][ T6811] usb 6-1: config 0 has no interfaces? [ 730.688712][ T6811] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 730.750530][ T6811] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 730.767246][T12982] loop4: detected capacity change from 0 to 512 [ 730.803261][ T6811] usb 6-1: Product: syz [ 730.807471][ T6811] usb 6-1: Manufacturer: syz [ 730.841161][T12982] ext4: Unknown parameter 'appraise_type' [ 730.858778][ T6811] usb 6-1: SerialNumber: syz [ 730.901139][ T6811] usb 6-1: config 0 descriptor?? [ 731.189803][T12974] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2165'. [ 731.311256][ T6811] usb 6-1: USB disconnect, device number 17 [ 731.430491][ T6803] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 731.713875][T12986] loop2: detected capacity change from 0 to 32768 [ 731.731963][T12986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2170 (12986) [ 731.746517][T12986] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.756733][T12986] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 731.765437][T12986] BTRFS info (device loop2): turning on sync discard [ 731.772181][T12986] BTRFS info (device loop2): using free space tree [ 731.779432][ T6803] usb 5-1: Using ep0 maxpacket: 8 [ 731.793867][ T6803] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 731.842307][ T6803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.872936][ T6803] usb 5-1: Product: syz [ 731.903384][ T6803] usb 5-1: Manufacturer: syz [ 731.908044][ T6803] usb 5-1: SerialNumber: syz [ 731.920434][T12986] BTRFS info (device loop2): enabling ssd optimizations [ 731.967064][ T6803] usb 5-1: config 0 descriptor?? [ 731.994903][ T27] audit: type=1800 audit(1787690966.135:60): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2170" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 732.957350][ T6803] gspca_main: se401-2.14.0 probing 047d:5003 [ 734.243031][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 734.704945][ T6803] gspca_se401: read req failed req 0x06 error -19 [ 734.741128][ T6803] usb 5-1: USB disconnect, device number 70 [ 735.301317][T13011] loop5: detected capacity change from 0 to 32768 [ 735.370073][T13011] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 735.421842][T13011] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 735.491185][T13011] BTRFS info (device loop5): using free space tree [ 735.550387][ T6811] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 735.637499][T13011] BTRFS info (device loop5): enabling ssd optimizations [ 735.730368][ T6811] usb 3-1: device descriptor read/64, error -71 [ 735.994744][T11427] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 736.010482][ T6811] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 736.251845][ T6811] usb 3-1: device descriptor read/64, error -71 [ 736.370490][ T6811] usb usb3-port1: attempt power cycle [ 736.800428][ T6811] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 736.860841][ T6811] usb 3-1: device descriptor read/8, error -71 [ 736.983844][T13057] loop5: detected capacity change from 0 to 512 [ 737.023268][T13057] ext4: Unknown parameter 'appraise_type' [ 737.140408][ T6811] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 737.200906][ T6811] usb 3-1: device descriptor read/8, error -71 [ 737.320468][ T6811] usb usb3-port1: unable to enumerate USB device [ 737.478961][T13061] loop5: detected capacity change from 0 to 32768 [ 737.493965][T13061] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2182 (13061) [ 737.519206][T13061] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 737.529664][T13061] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 737.538358][T13061] BTRFS info (device loop5): turning on sync discard [ 737.545084][T13061] BTRFS info (device loop5): using free space tree [ 737.649043][T13061] BTRFS info (device loop5): enabling ssd optimizations [ 737.661611][ T6811] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 737.669295][ T27] audit: type=1800 audit(1787690971.805:61): pid=13061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2182" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 739.760487][ T6811] usb 2-1: Using ep0 maxpacket: 16 [ 739.787691][ T6811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.839595][T11427] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 739.868090][ T6811] usb 2-1: config 0 has no interfaces? [ 739.911931][ T6811] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 739.974943][ T6811] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 740.033639][ T6811] usb 2-1: Product: syz [ 740.037868][ T6811] usb 2-1: Manufacturer: syz [ 740.086021][ T6811] usb 2-1: SerialNumber: syz [ 740.121211][ T6811] usb 2-1: config 0 descriptor?? [ 740.825671][ T3599] usb 2-1: USB disconnect, device number 55 [ 741.420370][ T957] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 741.620348][ T957] usb 6-1: Using ep0 maxpacket: 8 [ 741.639068][ T957] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 741.683237][ T957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.717339][ T957] usb 6-1: Product: syz [ 741.741847][ T957] usb 6-1: Manufacturer: syz [ 741.756143][ T957] usb 6-1: SerialNumber: syz [ 741.789386][ T957] usb 6-1: config 0 descriptor?? [ 741.840685][ T957] gspca_main: se401-2.14.0 probing 047d:5003 [ 742.160431][ T957] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 743.658144][ T957] gspca_se401: read req failed req 0x06 error -19 [ 743.697666][ T957] usb 6-1: USB disconnect, device number 18 [ 743.870117][T13118] loop5: detected capacity change from 0 to 512 [ 743.912536][T13118] ext4: Unknown parameter 'appraise_type' [ 745.560548][ T957] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 745.568275][ T3599] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 745.770525][ T3599] usb 6-1: Using ep0 maxpacket: 16 [ 745.780634][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 745.791488][ T3599] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.810451][ T957] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 745.858972][ T3599] usb 6-1: config 0 has no interfaces? [ 745.865431][ T957] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 745.891616][ T957] usb 2-1: can't read configurations, error -61 [ 745.898536][ T3599] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 745.951365][ T3599] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 746.000196][ T3599] usb 6-1: Product: syz [ 746.020651][ T3599] usb 6-1: Manufacturer: syz [ 746.025305][ T3599] usb 6-1: SerialNumber: syz [ 746.077186][ T3599] usb 6-1: config 0 descriptor?? [ 746.090356][ T957] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 746.312539][T13127] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2195'. [ 746.321688][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 746.340558][ T957] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 746.382489][ T957] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 746.390103][ T957] usb 2-1: can't read configurations, error -61 [ 746.450934][ T957] usb usb2-port1: attempt power cycle [ 746.470789][ T3599] usb 6-1: USB disconnect, device number 19 [ 746.880365][ T957] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 746.941892][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 746.960399][ T957] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 747.001268][ T957] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 747.008868][ T957] usb 2-1: can't read configurations, error -61 [ 747.082289][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.088648][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.347419][ T957] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 747.410733][ T957] usb 2-1: device descriptor read/8, error -71 [ 747.550696][ T957] usb usb2-port1: unable to enumerate USB device [ 749.989461][T13160] loop2: detected capacity change from 0 to 512 [ 750.027018][T13160] ext4: Unknown parameter 'appraise_type' [ 750.080377][ T957] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 750.340483][ T957] usb 2-1: Using ep0 maxpacket: 8 [ 750.365577][ T957] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 750.408084][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.459274][ T957] usb 2-1: Product: syz [ 750.474696][ T957] usb 2-1: Manufacturer: syz [ 750.502366][ T957] usb 2-1: SerialNumber: syz [ 750.536365][ T957] usb 2-1: config 0 descriptor?? [ 750.575249][ T957] gspca_main: se401-2.14.0 probing 047d:5003 [ 750.722085][T13152] loop5: detected capacity change from 0 to 32768 [ 750.820405][T13152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2203 (13152) [ 750.930369][ T957] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 751.060382][T13152] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 751.169188][T13152] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 751.248956][T13152] BTRFS info (device loop5): using free space tree [ 751.791013][ T957] gspca_se401: read req failed req 0x06 error -19 [ 751.828483][ T957] usb 2-1: USB disconnect, device number 60 [ 751.909012][T13152] BTRFS info (device loop5): enabling ssd optimizations [ 752.030550][ T3599] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 752.196763][T11427] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 752.250453][ T3599] usb 3-1: Using ep0 maxpacket: 16 [ 752.269064][ T3599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.330452][ T957] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 752.338911][ T3599] usb 3-1: config 0 has no interfaces? [ 752.362199][ T3599] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 752.413374][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 752.470473][ T3599] usb 3-1: Product: syz [ 752.490345][ T3599] usb 3-1: Manufacturer: syz [ 752.515363][ T3599] usb 3-1: SerialNumber: syz [ 752.530359][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 752.546232][ T957] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 752.560876][ T3599] usb 3-1: config 0 descriptor?? [ 752.614330][ T957] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 752.653586][ T957] usb 2-1: can't read configurations, error -61 [ 752.770023][T13183] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2209'. [ 753.478749][ T957] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 753.690496][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 753.710959][ T957] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 753.761480][ T957] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 753.769079][ T957] usb 2-1: can't read configurations, error -61 [ 753.840739][ T957] usb usb2-port1: attempt power cycle [ 754.122137][ T4320] usb 3-1: USB disconnect, device number 55 [ 754.938272][ T957] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 755.010529][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 755.017694][ T957] usb 2-1: device descriptor read/8, error -32 [ 755.160174][T13210] loop1: detected capacity change from 0 to 512 [ 755.207703][T13210] ext4: Unknown parameter 'appraise_type' [ 756.030505][ T957] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 756.090773][ T957] usb 2-1: Using ep0 maxpacket: 8 [ 756.109061][ T957] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 756.158699][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.199138][ T957] usb 2-1: Product: syz [ 756.220458][ T957] usb 2-1: Manufacturer: syz [ 756.225084][ T957] usb 2-1: SerialNumber: syz [ 756.277525][ T957] usb 2-1: config 0 descriptor?? [ 756.311446][ T957] gspca_main: se401-2.14.0 probing 047d:5003 [ 756.650362][ T957] usb 2-1: reset high-speed USB device number 64 using dummy_hcd [ 757.432856][ T4286] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 757.521017][ T957] gspca_se401: read req failed req 0x06 error -19 [ 757.599581][ T957] usb 2-1: USB disconnect, device number 64 [ 759.250332][ T4320] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 759.451693][ T4320] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 759.459990][ T4320] usb 4-1: config 127 has no interface number 0 [ 759.523118][ T4320] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 759.572711][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.612600][ T4320] usb 4-1: Product: syz [ 759.631297][ T4320] usb 4-1: Manufacturer: syz [ 759.657285][ T4320] usb 4-1: SerialNumber: syz [ 759.911961][T13249] misc userio: Invalid payload size [ 759.954678][ T4320] asix: probe of 4-1:127.57 failed with error -22 [ 760.585096][ T957] usb 4-1: USB disconnect, device number 89 [ 760.914774][T13265] loop1: detected capacity change from 0 to 512 [ 760.960413][ T4320] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 761.034281][T13265] ext4: Unknown parameter 'appraise_type' [ 761.160534][ T4320] usb 6-1: Using ep0 maxpacket: 16 [ 761.176823][ T4320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.237902][ T4320] usb 6-1: config 0 has no interfaces? [ 761.272061][ T4320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 761.302984][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 761.337285][ T4320] usb 6-1: Product: syz [ 761.372190][ T4320] usb 6-1: Manufacturer: syz [ 761.387557][ T4320] usb 6-1: SerialNumber: syz [ 761.414165][ T4320] usb 6-1: config 0 descriptor?? [ 762.622826][T13261] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2229'. [ 762.737915][ T6811] usb 6-1: USB disconnect, device number 20 [ 762.800362][ T4320] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 763.000350][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 763.006894][T13280] device syzkaller0 entered promiscuous mode [ 763.019061][ T4320] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 763.048811][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.078218][ T4320] usb 4-1: Product: syz [ 763.082810][ T4320] usb 4-1: Manufacturer: syz [ 763.087443][ T4320] usb 4-1: SerialNumber: syz [ 763.119478][ T4320] usb 4-1: config 0 descriptor?? [ 763.148530][ T4320] gspca_main: se401-2.14.0 probing 047d:5003 [ 764.090801][ T4320] usb 4-1: reset high-speed USB device number 90 using dummy_hcd [ 765.381251][ T4320] gspca_se401: read req failed req 0x06 error -19 [ 765.416013][ T4320] usb 4-1: USB disconnect, device number 90 [ 765.710636][T11428] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 765.940395][ T4320] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 766.227640][ T4320] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 766.270392][ T4320] usb 3-1: config 127 has no interface number 0 [ 766.341971][ T4320] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 766.399277][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.450441][ T4320] usb 3-1: Product: syz [ 766.454709][ T4320] usb 3-1: Manufacturer: syz [ 766.489933][T13306] loop4: detected capacity change from 0 to 512 [ 766.500351][ T4320] usb 3-1: SerialNumber: syz [ 766.557873][T13306] ext4: Unknown parameter 'appraise_type' [ 766.797501][T13299] misc userio: Invalid payload size [ 766.918328][ T4320] asix: probe of 3-1:127.57 failed with error -22 [ 767.553081][ T4320] usb 3-1: USB disconnect, device number 56 [ 768.592374][T13325] device syzkaller0 entered promiscuous mode [ 769.180550][ T7497] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 769.410487][ T7497] usb 2-1: Using ep0 maxpacket: 8 [ 769.437199][ T7497] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 769.500347][ T7497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.530807][ T7497] usb 2-1: Product: syz [ 769.557982][ T7497] usb 2-1: Manufacturer: syz [ 769.587809][ T7497] usb 2-1: SerialNumber: syz [ 769.661648][ T7497] usb 2-1: config 0 descriptor?? [ 769.691962][ T7497] gspca_main: se401-2.14.0 probing 047d:5003 [ 770.910350][ T7497] usb 2-1: reset high-speed USB device number 65 using dummy_hcd [ 771.787139][T13339] loop3: detected capacity change from 0 to 512 [ 771.899977][T13339] ext4: Unknown parameter 'appraise_type' [ 771.940404][ T7497] usb 2-1: device descriptor read/64, error -32 [ 773.571907][ T7497] gspca_se401: read req failed req 0x06 error -19 [ 773.625950][ T7497] usb 2-1: USB disconnect, device number 65 [ 773.960369][ T4320] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 774.052184][T13361] device syzkaller0 entered promiscuous mode [ 774.181522][ T4320] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 774.231307][ T4320] usb 6-1: config 127 has no interface number 0 [ 774.272548][ T4320] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 774.312153][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.320179][ T4320] usb 6-1: Product: syz [ 774.375192][ T4320] usb 6-1: Manufacturer: syz [ 774.379823][ T4320] usb 6-1: SerialNumber: syz [ 774.711322][T13357] misc userio: Invalid payload size [ 774.814695][ T4320] asix: probe of 6-1:127.57 failed with error -22 [ 775.395904][ T6811] usb 6-1: USB disconnect, device number 21 [ 776.800359][ T4320] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 779.376069][ T4320] usb 6-1: Using ep0 maxpacket: 32 [ 779.475506][ T4320] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 779.542825][ T4320] usb 6-1: config 0 has no interface number 1 [ 779.787626][ T4320] usb 6-1: string descriptor 0 read error: -71 [ 779.829464][ T4320] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 779.879254][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.936537][ T4320] usb 6-1: config 0 descriptor?? [ 779.962514][ T4320] usb 6-1: can't set config #0, error -71 [ 779.995571][ T4320] usb 6-1: USB disconnect, device number 22 [ 780.057824][T13393] device syzkaller0 entered promiscuous mode [ 780.230433][ T6811] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 780.440446][ T6811] usb 3-1: Using ep0 maxpacket: 8 [ 780.458905][ T6811] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 780.502353][ T6811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.547084][ T6811] usb 3-1: Product: syz [ 780.571872][ T6811] usb 3-1: Manufacturer: syz [ 780.591217][ T6811] usb 3-1: SerialNumber: syz [ 780.626771][ T6811] usb 3-1: config 0 descriptor?? [ 780.668387][ T6811] gspca_main: se401-2.14.0 probing 047d:5003 [ 780.810581][ T4320] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 781.010364][ T6811] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 781.041866][ T4320] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 781.072917][ T4320] usb 6-1: config 127 has no interface number 0 [ 781.101770][ T4320] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 781.136908][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.172482][ T4320] usb 6-1: Product: syz [ 781.190644][ T4320] usb 6-1: Manufacturer: syz [ 781.197129][ T4320] usb 6-1: SerialNumber: syz [ 781.440623][T13402] misc userio: Invalid payload size [ 781.474620][ T4320] asix: probe of 6-1:127.57 failed with error -22 [ 781.860950][ T6811] gspca_se401: read req failed req 0x06 error -19 [ 781.893306][ T6811] usb 3-1: USB disconnect, device number 57 [ 782.105145][ T4323] usb 6-1: USB disconnect, device number 23 [ 783.660357][ T4323] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 783.860349][ T4323] usb 6-1: Using ep0 maxpacket: 32 [ 783.882760][ T4323] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 783.930403][ T4323] usb 6-1: config 0 has no interface number 1 [ 783.974122][ T4323] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 784.023872][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.063788][ T4323] usb 6-1: Product: syz [ 784.087821][ T4323] usb 6-1: Manufacturer: syz [ 784.114332][ T4323] usb 6-1: SerialNumber: syz [ 784.151025][ T4323] usb 6-1: config 0 descriptor?? [ 784.313022][ T4323] viperboard 6-1:0.61: version 0.00 found at bus 006 address 024 [ 786.140788][ T4323] viperboard 6-1:0.0: version 0.00 found at bus 006 address 024 [ 786.211480][ T4323] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 786.265883][ T4323] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 786.354035][ T4323] usb 6-1: USB disconnect, device number 24 [ 786.731081][T13445] device syzkaller0 entered promiscuous mode [ 787.870435][ T6811] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 788.770435][ T6811] usb 2-1: Using ep0 maxpacket: 8 [ 788.788871][ T6811] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 788.840363][ T6811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.848403][ T6811] usb 2-1: Product: syz [ 788.903239][ T6811] usb 2-1: Manufacturer: syz [ 788.907896][ T6811] usb 2-1: SerialNumber: syz [ 788.957945][ T6811] usb 2-1: config 0 descriptor?? [ 788.995396][ T6811] gspca_main: se401-2.14.0 probing 047d:5003 [ 789.340486][ T6811] usb 2-1: reset high-speed USB device number 66 using dummy_hcd [ 790.210905][ T6811] gspca_se401: read req failed req 0x06 error -19 [ 791.185359][ T6811] usb 2-1: USB disconnect, device number 66 [ 794.203634][T13497] device syzkaller0 entered promiscuous mode [ 795.300444][ T6811] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 797.320366][ T6811] usb 6-1: Using ep0 maxpacket: 8 [ 797.369028][ T6811] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 797.410571][ T6811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.495707][ T6811] usb 6-1: Product: syz [ 797.515121][ T6811] usb 6-1: Manufacturer: syz [ 797.550352][ T6811] usb 6-1: SerialNumber: syz [ 798.281758][ T6811] usb 6-1: config 0 descriptor?? [ 798.493088][ T6811] usb 6-1: can't set config #0, error -71 [ 798.518852][ T6811] usb 6-1: USB disconnect, device number 25 [ 799.440396][ T4323] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 799.651798][ T4323] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 799.691368][ T4323] usb 5-1: config 127 has no interface number 0 [ 799.718717][ T4323] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 799.781639][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.840360][ T4323] usb 5-1: Product: syz [ 799.844566][ T4323] usb 5-1: Manufacturer: syz [ 799.849165][ T4323] usb 5-1: SerialNumber: syz [ 800.238627][T13535] misc userio: Invalid payload size [ 800.275665][ T4323] asix: probe of 5-1:127.57 failed with error -22 [ 801.025804][ T6811] usb 5-1: USB disconnect, device number 71 [ 804.762675][ T6811] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 804.980410][ T6811] usb 5-1: Using ep0 maxpacket: 8 [ 804.998016][ T6811] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 805.044439][ T6811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.093164][ T6811] usb 5-1: Product: syz [ 805.097402][ T6811] usb 5-1: Manufacturer: syz [ 805.135733][ T6811] usb 5-1: SerialNumber: syz [ 805.174475][ T6811] usb 5-1: config 0 descriptor?? [ 805.223021][ T6811] gspca_main: se401-2.14.0 probing 047d:5003 [ 805.489335][T13573] loop1: detected capacity change from 0 to 32768 [ 805.509716][T13573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2325 (13573) [ 805.525251][T13573] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 805.535504][T13573] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 805.544241][T13573] BTRFS info (device loop1): turning on sync discard [ 805.550962][T13573] BTRFS info (device loop1): using free space tree [ 805.670437][ T6811] usb 5-1: reset high-speed USB device number 72 using dummy_hcd [ 805.742838][T13573] BTRFS info (device loop1): enabling ssd optimizations [ 805.789588][ T27] audit: type=1800 audit(1787691039.925:62): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2325" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 806.277164][ T4282] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 807.187606][ T6811] gspca_se401: read req failed req 0x06 error -19 [ 807.256027][ T6811] usb 5-1: USB disconnect, device number 72 [ 808.529702][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.536194][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.000452][ T4287] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 809.212148][ T4287] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 809.250548][ T4287] usb 2-1: config 127 has no interface number 0 [ 809.272225][ T4287] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 809.320397][ T4287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.369277][ T4287] usb 2-1: Product: syz [ 809.390637][ T4287] usb 2-1: Manufacturer: syz [ 809.395304][ T4287] usb 2-1: SerialNumber: syz [ 809.733229][T13612] misc userio: Invalid payload size [ 809.775666][ T4287] asix: probe of 2-1:127.57 failed with error -22 [ 811.114333][T13626] loop3: detected capacity change from 0 to 131072 [ 811.121595][T13626] XFS: ikeep mount option is deprecated. [ 811.182815][T13626] XFS (loop3): Mounting V5 Filesystem [ 811.251291][T13626] XFS (loop3): Starting recovery (logdev: internal) [ 811.275432][T13626] XFS (loop3): Ending recovery (logdev: internal) [ 811.674165][ T6805] usb 2-1: USB disconnect, device number 67 [ 811.751501][ T4273] XFS (loop3): Unmounting Filesystem [ 814.660305][ T4287] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 814.970447][ T4287] usb 2-1: Using ep0 maxpacket: 8 [ 814.992946][ T4287] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 815.042556][ T4287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.080986][ T4287] usb 2-1: Product: syz [ 815.102227][ T4287] usb 2-1: Manufacturer: syz [ 815.130358][ T4287] usb 2-1: SerialNumber: syz [ 815.169863][ T4287] usb 2-1: config 0 descriptor?? [ 815.211453][ T4287] gspca_main: se401-2.14.0 probing 047d:5003 [ 815.560479][ T4287] usb 2-1: reset high-speed USB device number 68 using dummy_hcd [ 816.931747][ T4287] gspca_se401: read req failed req 0x06 error -19 [ 816.956136][ T4287] usb 2-1: USB disconnect, device number 68 [ 818.970396][ T4287] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 819.901960][ T4287] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 819.940349][ T4287] usb 6-1: config 127 has no interface number 0 [ 819.972317][ T4287] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 820.022019][ T4287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.030051][ T4287] usb 6-1: Product: syz [ 820.080586][ T4287] usb 6-1: Manufacturer: syz [ 820.100329][ T4287] usb 6-1: SerialNumber: syz [ 820.349968][T13688] misc userio: Invalid payload size [ 820.411493][ T4287] asix: probe of 6-1:127.57 failed with error -22 [ 821.642923][ T6805] usb 6-1: USB disconnect, device number 26 [ 822.180429][ T6805] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 822.603439][ T6805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 822.655790][ T6805] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 822.696149][ T6805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.761153][ T6805] usb 6-1: config 0 descriptor?? [ 822.771243][T13702] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 823.226729][ T6805] usbhid 6-1:0.0: can't add hid device: -71 [ 823.254429][ T6805] usbhid: probe of 6-1:0.0 failed with error -71 [ 823.311058][ T6805] usb 6-1: USB disconnect, device number 27 [ 827.804430][T13751] loop3: detected capacity change from 0 to 131072 [ 827.818976][T13751] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 827.827190][T13751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 827.836620][T13751] F2FS-fs (loop3): invalid crc value [ 827.874472][T13751] F2FS-fs (loop3): Found nat_bits in checkpoint [ 827.930578][T13751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 827.937797][T13751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 827.990353][ T6805] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 828.210525][ T6805] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 828.218822][ T6805] usb 2-1: config 127 has no interface number 0 [ 828.289451][ T6805] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 828.344503][ T6805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.391760][ T6805] usb 2-1: Product: syz [ 828.417387][ T6805] usb 2-1: Manufacturer: syz [ 828.438701][ T6805] usb 2-1: SerialNumber: syz [ 828.700366][T13749] misc userio: Invalid payload size [ 828.767346][ T6805] asix: probe of 2-1:127.57 failed with error -22 [ 829.160187][T13771] loop4: detected capacity change from 0 to 512 [ 829.244009][T13771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 829.308354][T13771] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.392648][ T4287] usb 2-1: USB disconnect, device number 69 [ 830.294708][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 833.534476][T13811] loop2: detected capacity change from 0 to 512 [ 834.632626][T13811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 834.739030][T13811] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.175784][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 837.817526][ T4320] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 838.071793][ T4320] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 838.101935][ T4320] usb 5-1: config 127 has no interface number 0 [ 838.135333][ T4320] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 838.310306][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.476988][ T4320] usb 5-1: Product: syz [ 838.500302][ T4320] usb 5-1: Manufacturer: syz [ 838.822536][ T4320] usb 5-1: SerialNumber: syz [ 839.070621][T13836] misc userio: Invalid payload size [ 839.119313][T13836] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 839.169655][T13836] rnbd_client L1255: Session s. not found, and path parameter not given [ 839.174571][ T4320] asix: probe of 5-1:127.57 failed with error -22 [ 840.249370][ T4287] usb 5-1: USB disconnect, device number 73 [ 840.847943][T13856] loop1: detected capacity change from 0 to 32768 [ 840.870430][T13856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2410 (13856) [ 840.884789][T13856] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 840.894989][T13856] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 840.903839][T13856] BTRFS info (device loop1): turning on sync discard [ 840.910575][T13856] BTRFS info (device loop1): using free space tree [ 841.084879][T13856] BTRFS info (device loop1): enabling ssd optimizations [ 841.111096][ T27] audit: type=1800 audit(1787691075.245:63): pid=13856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2410" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 841.333674][T13875] loop4: detected capacity change from 0 to 512 [ 841.509330][T13875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 841.570448][T13875] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.761009][ T4282] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 841.963589][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 842.550152][T13885] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 845.440448][ T4287] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 845.661822][ T4287] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 845.670137][ T4287] usb 3-1: config 127 has no interface number 0 [ 845.761872][ T4287] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 845.830904][ T4287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.839075][ T4287] usb 3-1: Product: syz [ 845.900359][ T4287] usb 3-1: Manufacturer: syz [ 845.905012][ T4287] usb 3-1: SerialNumber: syz [ 847.091666][T13909] misc userio: Invalid payload size [ 847.186713][T13909] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 847.283136][ T4287] asix: probe of 3-1:127.57 failed with error -22 [ 847.358058][T13909] rnbd_client L1255: Session s. not found, and path parameter not given [ 847.815558][ T957] usb 3-1: USB disconnect, device number 58 [ 849.820339][ T4287] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 849.954747][T13953] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 850.045291][ T4287] usb 6-1: Using ep0 maxpacket: 32 [ 850.082622][ T4287] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 850.112382][ T4287] usb 6-1: config 0 has no interface number 1 [ 850.192644][ T4287] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 850.276076][ T4287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.342211][ T4287] usb 6-1: Product: syz [ 850.346435][ T4287] usb 6-1: Manufacturer: syz [ 850.511589][T13958] loop4: detected capacity change from 0 to 32768 [ 850.529315][T13958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2436 (13958) [ 850.562379][ T4287] usb 6-1: SerialNumber: syz [ 850.609719][ T4287] usb 6-1: config 0 descriptor?? [ 850.643637][T13958] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 850.654044][T13958] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 850.662743][T13958] BTRFS info (device loop4): turning on sync discard [ 850.669453][T13958] BTRFS info (device loop4): using free space tree [ 850.790686][ T4287] viperboard 6-1:0.61: version 0.00 found at bus 006 address 028 [ 850.869570][ T4287] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 850.911505][T13958] BTRFS info (device loop4): enabling ssd optimizations [ 850.951858][ T4287] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 851.077903][ T27] audit: type=1800 audit(1787691085.215:64): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2436" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 851.160509][ T4287] viperboard 6-1:0.0: version 0.b2 found at bus 006 address 028 [ 852.992603][ T4287] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 853.076943][ T4287] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 853.192069][ T4287] usb 6-1: USB disconnect, device number 28 [ 853.305166][ T4274] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 854.390311][ T6807] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 854.643303][ T6807] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 854.690313][ T6807] usb 6-1: config 127 has no interface number 0 [ 854.741206][ T6807] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 854.798518][ T6807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.840328][ T6807] usb 6-1: Product: syz [ 854.844592][ T6807] usb 6-1: Manufacturer: syz [ 854.890316][ T6807] usb 6-1: SerialNumber: syz [ 855.195226][T14001] misc userio: Invalid payload size [ 855.294375][T14001] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 855.355608][ T6807] asix: probe of 6-1:127.57 failed with error -22 [ 855.469576][T14001] rnbd_client L1255: Session s. not found, and path parameter not given [ 855.922394][ T6807] usb 6-1: USB disconnect, device number 29 [ 856.573479][T14021] Config c/1 of g_uac2 needs at least one function. [ 856.620411][T14021] udc usbip-vudc.0: failed to start g_uac2: -22 [ 856.626706][T14021] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 856.761395][T14021] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 856.960968][T14023] loop1: detected capacity change from 0 to 64 [ 857.300715][T14031] loop2: detected capacity change from 0 to 128 [ 857.387067][T14031] ufs: ufs_fill_super(): bad magic number [ 857.671157][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2449'. [ 857.801910][T14035] sctp: [Deprecated]: syz.3.2449 (pid 14035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 857.801910][T14035] Use struct sctp_sack_info instead [ 858.020392][T14044] loop2: detected capacity change from 0 to 512 [ 858.054512][T14044] EXT4-fs: Ignoring removed bh option [ 858.141206][T14044] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 858.208511][T14044] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 858.291146][T14044] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2457: Corrupt directory, running e2fsck is recommended [ 858.381030][T14044] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 858.430903][T14044] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.2457: corrupted in-inode xattr [ 858.512865][T14044] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2457: couldn't read orphan inode 15 (err -117) [ 858.590354][T14044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 858.693654][T14044] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 858.781311][T14044] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 858.830509][T14044] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2457: Corrupt directory, running e2fsck is recommended [ 858.929903][T14061] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 859.030354][T14061] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 859.122109][T14061] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2457: Corrupt directory, running e2fsck is recommended [ 859.216396][T14044] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 859.301236][T14044] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 859.381106][T14044] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2457: Corrupt directory, running e2fsck is recommended [ 859.602760][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 859.746091][T14073] loop4: detected capacity change from 0 to 64 [ 859.760410][ T6807] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 859.951703][ T6807] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 859.989230][ T6807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.028568][ T6807] usb 6-1: config 0 descriptor?? [ 860.260823][ T6807] [drm] vendor descriptor length:6 data:06 5f 01 00 04 03 00 00 00 00 00 [ 860.472691][ T6807] [drm:udl_init] *ERROR* Selecting channel failed [ 860.560668][ T6807] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 860.592532][ T6807] [drm] Initialized udl on minor 2 [ 860.646489][ T6807] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 860.694667][ T6807] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 860.754408][ T6807] usb 6-1: USB disconnect, device number 30 [ 860.851230][ T6808] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 860.929514][ T6808] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 860.969065][ T6808] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 863.478984][T14102] loop2: detected capacity change from 0 to 512 [ 863.524400][T14102] EXT4-fs: Ignoring removed bh option [ 863.584520][T14102] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 863.655889][T14102] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 863.699930][T14102] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2475: Corrupt directory, running e2fsck is recommended [ 863.799268][T14102] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 863.858608][T14102] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.2475: corrupted in-inode xattr [ 863.916728][T14102] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2475: couldn't read orphan inode 15 (err -117) [ 863.999966][T14102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 864.075317][T14102] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 864.154659][T14102] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 864.239589][T14102] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2475: Corrupt directory, running e2fsck is recommended [ 864.356564][T14116] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 864.509606][T14116] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 864.592263][T14116] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2475: Corrupt directory, running e2fsck is recommended [ 864.861571][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 867.000313][ T4287] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 869.962979][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.969340][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.264805][T14166] loop4: detected capacity change from 0 to 512 [ 870.407868][T14166] EXT4-fs: Ignoring removed bh option [ 870.540127][T14166] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 870.570323][ T6808] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 870.709173][T14166] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 870.770349][ T6808] usb 2-1: Using ep0 maxpacket: 8 [ 870.781757][ T6808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 870.842628][ T6808] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 870.884905][ T6808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.897697][T14166] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2493: Corrupt directory, running e2fsck is recommended [ 870.959401][ T6808] usb 2-1: config 0 descriptor?? [ 871.104863][T14166] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 871.191831][ T6808] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 871.225891][T14166] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.2493: corrupted in-inode xattr [ 871.270316][ T6807] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 871.310437][ T4325] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 871.349779][T14166] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2493: couldn't read orphan inode 15 (err -117) [ 871.459110][ T6808] usb 2-1: USB disconnect, device number 70 [ 871.480359][ T6807] usb 6-1: Using ep0 maxpacket: 8 [ 871.521702][ T4325] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 871.551906][ T6807] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 871.570772][T14166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 871.579850][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.589019][ T6807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.652239][ T4325] usb 3-1: config 0 descriptor?? [ 871.660928][ T6807] usb 6-1: Product: syz [ 871.665145][ T6807] usb 6-1: Manufacturer: syz [ 871.669764][ T6807] usb 6-1: SerialNumber: syz [ 871.735219][ T6807] usb 6-1: config 0 descriptor?? [ 871.780482][T14166] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 871.806968][ T6807] gspca_main: se401-2.14.0 probing 047d:5003 [ 871.862520][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 871.869883][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 871.877069][ T4325] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 871.885646][ T4325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 871.950603][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 871.957808][ T4325] [drm:udl_init] *ERROR* Selecting channel failed [ 872.008328][ T4325] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 872.056626][ T4325] [drm] Initialized udl on minor 2 [ 872.190320][ T6807] usb 6-1: reset high-speed USB device number 31 using dummy_hcd [ 873.944963][T14166] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 874.183879][ T4325] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 874.241778][ T4325] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 874.312328][ T4325] usb 3-1: USB disconnect, device number 59 [ 874.387465][ T6808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 874.428402][T14166] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2493: Corrupt directory, running e2fsck is recommended [ 874.455505][ T6808] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 874.509133][ T6808] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 874.759845][T14181] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 874.984381][T14181] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 875.140757][T14181] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2493: Corrupt directory, running e2fsck is recommended [ 876.614014][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 876.722803][ T6807] gspca_se401: read req failed req 0x06 error -19 [ 876.785266][ T6807] usb 6-1: USB disconnect, device number 31 [ 878.480309][ T4325] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 880.391705][ T4325] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 880.450828][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.515570][ T4325] usb 2-1: config 0 descriptor?? [ 880.744769][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 880.752289][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 880.759584][ T4325] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 880.796845][ T4325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 880.860818][ T4325] [drm:udl_init] *ERROR* Selecting channel failed [ 880.898692][ T4325] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 880.930281][ T4325] [drm] Initialized udl on minor 2 [ 880.969504][ T4325] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 882.771589][ T4325] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 882.818543][ T4325] usb 2-1: USB disconnect, device number 71 [ 882.894243][ T6808] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 882.966474][ T6808] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 884.039566][ T6808] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 884.545390][T14231] loop4: detected capacity change from 0 to 512 [ 884.686742][T14231] EXT4-fs: Ignoring removed bh option [ 884.941213][T14231] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 885.165284][T14231] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 885.288139][T14231] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2514: Corrupt directory, running e2fsck is recommended [ 885.571690][T14231] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 885.580605][ T6808] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 885.752262][T14238] loop1: detected capacity change from 0 to 128 [ 885.768917][T14231] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.2514: corrupted in-inode xattr [ 885.851331][ T6808] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 885.932962][ T6808] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 885.992542][ T6808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.017287][T14231] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2514: couldn't read orphan inode 15 (err -117) [ 886.034616][ T6808] usb 6-1: Product: syz [ 886.038804][ T6808] usb 6-1: Manufacturer: syz [ 886.091410][ T6808] usb 6-1: SerialNumber: syz [ 886.135913][ T6808] usb 6-1: config 0 descriptor?? [ 886.216113][T14231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 886.240531][ T6808] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 886.296173][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 886.393774][T14231] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 886.580339][T14231] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 886.690291][ T4325] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 886.718302][T14231] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2514: Corrupt directory, running e2fsck is recommended [ 886.887740][T14244] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 886.930292][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 886.949055][ T4325] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 887.720353][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.744402][T14244] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 887.762310][ T4325] usb 3-1: Product: syz [ 887.775346][ T4325] usb 3-1: Manufacturer: syz [ 887.792039][ T4325] usb 3-1: SerialNumber: syz [ 887.823179][ T4325] usb 3-1: config 0 descriptor?? [ 887.837201][T14244] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2514: Corrupt directory, running e2fsck is recommended [ 887.867533][ T4325] gspca_main: se401-2.14.0 probing 047d:5003 [ 888.205073][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 888.211025][ T4325] usb 3-1: reset high-speed USB device number 60 using dummy_hcd [ 888.894752][ T6808] usb 6-1: USB disconnect, device number 32 [ 889.291392][ T4325] gspca_se401: read req failed req 0x06 error -19 [ 890.830875][ T4325] usb 3-1: USB disconnect, device number 60 [ 895.090432][T14302] misc userio: Invalid payload size [ 895.102849][T14301] loop1: detected capacity change from 0 to 1024 [ 895.133984][T14302] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 895.144171][ T6808] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 895.169393][T14301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 895.202813][T14302] rnbd_client L1255: Session s. not found, and path parameter not given [ 895.210756][T14301] EXT4-fs: Ignoring removed i_version option [ 895.280350][T14301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 895.319816][T14301] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 895.361948][ T6808] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 895.382726][T14301] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 895.400590][ T6808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.411672][T14301] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.445915][ T6808] usb 4-1: config 0 descriptor?? [ 895.491733][T14301] EXT4-fs (loop1): shut down requested (0) [ 895.543897][T14307] EXT4-fs (loop1): shut down requested (0) [ 895.649857][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 895.684063][ T6808] [drm] vendor descriptor length:6 data:06 5f 01 00 04 03 00 00 00 00 00 [ 895.873722][T14311] loop5: detected capacity change from 0 to 512 [ 895.895443][ T6808] [drm:udl_init] *ERROR* Selecting channel failed [ 895.918603][T14311] EXT4-fs: Ignoring removed bh option [ 895.945652][ T6808] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 895.969937][T14311] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 895.996283][ T6808] [drm] Initialized udl on minor 2 [ 896.023750][ T6808] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 896.039994][T14311] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 896.075083][ T6808] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 896.088556][T14311] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2529: Corrupt directory, running e2fsck is recommended [ 896.125553][ T6808] usb 4-1: USB disconnect, device number 91 [ 896.157729][ T6807] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 896.172753][T14311] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 896.195915][ T6807] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 896.215762][T14311] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.2529: corrupted in-inode xattr [ 896.237423][ T6807] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 896.283057][T14311] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2529: couldn't read orphan inode 15 (err -117) [ 896.346182][T14311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 896.460406][T14311] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 896.561519][T14311] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 898.581356][T14311] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2529: Corrupt directory, running e2fsck is recommended [ 900.415067][T14317] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 900.493028][T14317] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 900.582846][T14317] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2529: Corrupt directory, running e2fsck is recommended [ 900.665984][T14332] loop4: detected capacity change from 0 to 1024 [ 900.744186][T14332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 900.768818][T11427] EXT4-fs (loop5): unmounting filesystem. [ 900.782564][T14332] EXT4-fs: Ignoring removed i_version option [ 900.890585][T14332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 900.939285][T14332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 901.030152][T14332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 901.063832][T14332] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.133270][T14332] EXT4-fs (loop4): shut down requested (0) [ 901.244557][T14346] loop2: detected capacity change from 0 to 1024 [ 901.270343][ T6808] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 901.303187][T14346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 901.312126][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 901.359920][T14346] EXT4-fs: Ignoring removed i_version option [ 901.412096][T14346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 901.471704][ T6808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 901.491680][T14346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 901.527978][ T6808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 901.568959][T14348] misc userio: Invalid payload size [ 901.575750][T14346] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 901.587671][ T6808] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.611737][T14348] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 901.626189][T14346] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 901.660056][ T6808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 901.671666][T14348] rnbd_client L1255: Session s. not found, and path parameter not given [ 901.674185][T14346] EXT4-fs (loop2): shut down requested (0) [ 901.698829][ T6808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 901.713833][ T6808] usb 6-1: Product: syz [ 901.719055][ T6808] usb 6-1: Manufacturer: syz [ 901.725477][T14355] EXT4-fs (loop2): shut down requested (0) [ 901.740361][ T6808] usb 6-1: SerialNumber: syz [ 901.809684][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 901.920329][ T6807] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 903.001836][ T6807] usb 4-1: Using ep0 maxpacket: 8 [ 903.071047][ T6808] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 904.109149][ T6807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.157718][ T6808] usb 6-1: USB disconnect, device number 33 [ 904.209580][ T6807] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 904.222688][ T6808] usblp0: removed [ 904.287229][ T6807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.325555][ T6807] usb 4-1: config 0 descriptor?? [ 905.943515][ T6807] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 906.386380][ T6807] usb 4-1: USB disconnect, device number 92 [ 906.633138][T14373] loop3: detected capacity change from 0 to 64 [ 906.704985][T14377] loop5: detected capacity change from 0 to 512 [ 906.884331][T14377] ext4: Bad value for 'data' [ 907.210440][ T4325] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 907.420349][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 907.435780][ T4325] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 907.484289][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.540086][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.675659][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.746675][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.827450][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.898341][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.224882][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.280520][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.358868][ T4325] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 908.415991][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 908.460132][T14393] loop3: detected capacity change from 0 to 736 [ 908.472478][ T4325] usb 2-1: SerialNumber: syz [ 908.509623][ T4325] usb 2-1: config 0 descriptor?? [ 908.586312][ T4325] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input122 [ 909.028003][T14375] input: syz1 as /devices/virtual/input/input123 [ 909.269026][T14395] loop5: detected capacity change from 0 to 4096 [ 909.563287][T14395] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 912.371380][T14410] Config c/1 of g_uac2 needs at least one function. [ 912.428258][T14410] udc usbip-vudc.0: failed to start g_uac2: -22 [ 912.490490][T14410] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 912.547460][T14410] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 912.744908][ T3624] bcm5974 2-1:0.0: could not read from device [ 914.243402][ T4325] usb 2-1: USB disconnect, device number 72 [ 916.434380][T14422] loop4: detected capacity change from 0 to 64 [ 916.989689][T14430] loop5: detected capacity change from 0 to 512 [ 917.097246][T14430] ext4: Bad value for 'data' [ 917.866196][T14444] loop4: detected capacity change from 0 to 1024 [ 918.681759][T14454] Config c/1 of g_uac2 needs at least one function. [ 920.285343][T14454] udc usbip-vudc.0: failed to start g_uac2: -22 [ 920.314728][T14454] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 920.621295][T14454] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 920.890369][ T6808] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 920.911830][T14462] loop3: detected capacity change from 0 to 128 [ 921.018099][T14462] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 921.092436][T14462] hpfs: filesystem error: improperly stopped [ 921.098505][T14462] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 921.170352][ T6808] usb 3-1: Using ep0 maxpacket: 16 [ 923.229826][T14462] hpfs: You really don't want any checks? You are crazy... [ 923.281229][T14462] hpfs: hpfs_map_sector(): read error [ 923.286736][T14462] hpfs: code page support is disabled [ 923.355233][T14462] hpfs: hpfs_map_4sectors(): unaligned read [ 923.415694][T14462] hpfs: hpfs_map_4sectors(): unaligned read [ 923.434483][ T6808] usb 3-1: device descriptor read/all, error -71 [ 923.500654][T14462] hpfs: filesystem error: unable to find root dir [ 923.602099][T14462] hpfs: hpfs_map_4sectors(): unaligned read [ 925.584368][T14470] loop2: detected capacity change from 0 to 512 [ 925.602706][T14470] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 925.652623][T14470] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 925.670727][T14470] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.2581: corrupted inode contents [ 925.688969][T14470] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.2581: mark_inode_dirty error [ 925.703084][T14470] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2581: invalid indirect mapped block 1 (level 1) [ 925.717198][T14470] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.2581: corrupted inode contents [ 925.734114][T14470] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 925.743359][T14470] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.2581: corrupted inode contents [ 925.755728][T14470] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.2581: mark_inode_dirty error [ 925.768208][T14470] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 925.777994][T14470] EXT4-fs (loop2): 1 truncate cleaned up [ 925.783809][T14470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 925.852103][T14462] hpfs: hpfs_map_4sectors(): unaligned read [ 926.470332][ T6808] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 926.533150][T14470] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.2581: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 926.849825][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 926.855842][ T4325] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 927.061821][ T4325] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 927.100401][ T4325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.151627][ T4325] usb 6-1: config 0 descriptor?? [ 927.318560][T14487] loop2: detected capacity change from 0 to 32768 [ 927.331104][T14487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2586 (14487) [ 927.386522][T14487] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 927.397227][T14487] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 927.406014][T14487] BTRFS info (device loop2): turning on sync discard [ 927.412765][T14487] BTRFS info (device loop2): using free space tree [ 927.575100][ T4325] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 927.600307][T14487] BTRFS info (device loop2): enabling ssd optimizations [ 927.631231][ T4325] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 927.742086][ T27] audit: type=1800 audit(1787691161.885:65): pid=14487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2586" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 927.784619][ T4325] [drm:udl_init] *ERROR* Selecting channel failed [ 929.667900][ T4325] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 929.727124][ T4325] [drm] Initialized udl on minor 2 [ 929.846570][ T4325] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 929.919523][ T4325] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 929.968064][ T4325] usb 6-1: USB disconnect, device number 34 [ 930.009849][T14515] Config c/1 of g_uac2 needs at least one function. [ 930.040903][ T6807] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 930.081476][T14515] udc usbip-vudc.0: failed to start g_uac2: -22 [ 930.087786][T14515] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 930.096841][ T6807] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 930.147905][ T6807] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 930.200491][T14515] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 930.517596][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 930.643199][ T27] audit: type=1326 audit(1787691164.785:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba239e0d9 code=0x7ffc0000 [ 931.402618][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.409164][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.304362][T14523] loop1: detected capacity change from 0 to 512 [ 932.596848][T14522] loop3: detected capacity change from 0 to 1024 [ 932.641415][ T27] audit: type=1326 audit(1787691164.815:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba239e0d9 code=0x7ffc0000 [ 932.679631][T14523] ext4: Bad value for 'data' [ 932.713366][T14522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 932.755030][T14517] loop4: detected capacity change from 0 to 2048 [ 932.822264][T14522] EXT4-fs: Ignoring removed i_version option [ 932.828309][T14522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 932.942683][ T27] audit: type=1326 audit(1787691164.865:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3ba239e0d9 code=0x7ffc0000 [ 933.006015][T14522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 933.106038][ T4265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4265) [ 933.141229][T14530] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2595'. [ 933.160997][T14522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 933.170156][T14522] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.200312][ T27] audit: type=1326 audit(1787691164.865:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3ba239de42 code=0x7ffc0000 [ 933.336550][T14522] EXT4-fs (loop3): shut down requested (0) [ 933.431670][T14535] EXT4-fs (loop3): shut down requested (0) [ 933.441123][ T27] audit: type=1326 audit(1787691164.875:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba239e0d9 code=0x7ffc0000 [ 933.465555][T14517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 933.539050][T14533] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 933.680734][T14533] EXT4-fs (loop3): Remounting filesystem read-only [ 933.687368][ T27] audit: type=1326 audit(1787691164.885:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ba235e90e code=0x7ffc0000 [ 933.841389][ T27] audit: type=1326 audit(1787691166.895:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3ba239df07 code=0x7ffc0000 [ 933.932117][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 933.991369][ T27] audit: type=1326 audit(1787691166.895:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ba235e90e code=0x7ffc0000 [ 934.020386][ T7958] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 934.790273][ T7958] usb 6-1: device descriptor read/64, error -71 [ 935.840297][ T7958] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 936.049495][ T27] audit: type=1326 audit(1787691166.895:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba239dd6b code=0x7ffc0000 [ 936.190338][ T7958] usb 6-1: device descriptor read/64, error -71 [ 936.250300][ T27] audit: type=1326 audit(1787691167.265:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3ba235e90e code=0x7ffc0000 [ 936.350547][ T7958] usb usb6-port1: attempt power cycle [ 936.549082][T14550] loop1: detected capacity change from 0 to 32768 [ 936.558613][T14550] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 936.659610][ T27] audit: type=1326 audit(1787691167.265:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3ba235e90e code=0x7ffc0000 [ 936.930302][ T7958] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 938.581394][ T7958] usb 6-1: device descriptor read/8, error -71 [ 938.692673][ T27] audit: type=1326 audit(1787691167.265:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ba239cf47 code=0x7ffc0000 [ 939.274766][ T27] audit: type=1326 audit(1787691167.265:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.4.2591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3ba239f34a code=0x7ffc0000 [ 941.685306][T14581] loop1: detected capacity change from 0 to 1024 [ 941.777084][T14581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 943.534649][T14581] EXT4-fs: Ignoring removed i_version option [ 943.614271][T14586] loop3: detected capacity change from 0 to 512 [ 943.630416][T14581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 943.662527][T14581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 943.688604][T14586] ext4: Bad value for 'data' [ 943.918576][T14581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 943.967838][T14581] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.988069][T14587] loop4: detected capacity change from 0 to 2048 [ 945.162850][T14591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 946.094749][T14591] EXT4-fs (loop1): Remounting filesystem read-only [ 946.166599][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 946.582262][ T4265] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 946.842324][T14603] loop2: detected capacity change from 0 to 32768 [ 946.972996][T14603] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 946.983338][T14603] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 946.992042][T14603] BTRFS info (device loop2): turning on sync discard [ 946.998813][T14603] BTRFS info (device loop2): using free space tree [ 947.280429][T14603] BTRFS info (device loop2): enabling ssd optimizations [ 948.123901][ T27] audit: type=1800 audit(1787691182.265:79): pid=14603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2614" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 950.711986][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 951.206619][ T4265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (4265) [ 953.537968][T14651] loop1: detected capacity change from 0 to 512 [ 953.618337][T14644] loop3: detected capacity change from 0 to 1024 [ 953.658256][T14644] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 954.556592][T14651] EXT4-fs (loop1): Test dummy encryption mode enabled [ 955.313430][T14651] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2624: inode has both inline data and extents flags [ 955.382168][T14651] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2624: couldn't read orphan inode 15 (err -117) [ 955.440478][T14651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 955.956994][T14651] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 956.287289][T14651] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 956.560079][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 956.937420][T14687] loop1: detected capacity change from 0 to 32768 [ 956.953958][T14687] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 959.045820][T14685] loop4: detected capacity change from 0 to 1024 [ 959.099772][ T4265] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 959.260686][T14685] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 959.486456][T14685] EXT4-fs (loop4): orphan cleanup on readonly fs [ 959.597699][T14685] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 959.902675][T14685] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 960.133844][T14685] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 960.335290][T14685] EXT4-fs (loop4): 1 truncate cleaned up [ 960.418606][T14685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 960.730080][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 962.651010][T14721] loop1: detected capacity change from 0 to 1024 [ 962.679998][T14721] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 963.896869][T14731] loop1: detected capacity change from 0 to 512 [ 964.012606][T14731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 964.126358][T14731] fs-verity: sha256 using implementation "sha256-avx2" [ 964.240812][T14731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.2641: bg 0: bad block bitmap checksum [ 964.530930][ T4282] EXT4-fs (loop1): unmounting filesystem. [ 964.992782][T14750] 9pnet_fd: Insufficient options for proto=fd [ 965.111426][T14750] loop3: detected capacity change from 0 to 1764 [ 965.460365][ T4350] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 965.595285][T14764] loop3: detected capacity change from 0 to 512 [ 965.636201][T14764] EXT4-fs: Ignoring removed bh option [ 965.690320][ T4350] usb 2-1: Using ep0 maxpacket: 16 [ 965.695606][T14764] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 965.726237][ T4350] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 965.765481][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.786150][T14764] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 965.827337][T14764] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2652: Corrupt directory, running e2fsck is recommended [ 965.841559][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.883071][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.902275][T14764] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 965.931920][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.960530][T14764] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.2652: corrupted in-inode xattr [ 965.991139][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.020798][T14764] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2652: couldn't read orphan inode 15 (err -117) [ 966.043331][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.070558][T14764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 966.098235][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.155503][T14764] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 966.169620][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.231458][ T4350] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 966.252126][T14764] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 966.281050][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 966.310135][T14764] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2652: Corrupt directory, running e2fsck is recommended [ 966.350787][ T4350] usb 2-1: SerialNumber: syz [ 966.370770][ T4350] usb 2-1: config 0 descriptor?? [ 966.400325][T14764] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.2652: path /527/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 966.433684][ T4350] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input124 [ 966.602612][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 966.731852][T14759] input: syz1 as /devices/virtual/input/input125 [ 967.145426][T14778] misc userio: Invalid payload size [ 967.154022][ T3624] bcm5974 2-1:0.0: could not read from device [ 967.176222][ T4350] usb 2-1: USB disconnect, device number 73 [ 967.201670][T14778] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 967.253258][T14778] rnbd_client L1255: Session s. not found, and path parameter not given [ 969.503918][T14786] loop1: detected capacity change from 0 to 131072 [ 969.519601][T14786] XFS: ikeep mount option is deprecated. [ 969.598112][T14786] XFS (loop1): Mounting V5 Filesystem [ 969.693016][T14786] XFS (loop1): Starting recovery (logdev: internal) [ 969.740860][T14786] XFS (loop1): Ending recovery (logdev: internal) [ 970.729987][ T4282] XFS (loop1): Unmounting Filesystem [ 971.032202][T14806] loop4: detected capacity change from 0 to 64 [ 971.161595][T14806] hfs: unable to locate alternate MDB [ 971.167041][T14806] hfs: continuing without an alternate MDB [ 972.500390][ T4287] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 972.680505][ T4287] usb 2-1: device descriptor read/64, error -71 [ 972.960262][ T4287] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 973.031776][T14824] misc userio: Invalid payload size [ 973.078788][T14824] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 973.120436][ T4287] usb 2-1: device descriptor read/64, error -71 [ 973.169609][T14824] rnbd_client L1255: Session s. not found, and path parameter not given [ 973.250472][ T4287] usb usb2-port1: attempt power cycle [ 973.709164][T14830] jffs2: notice: (14830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 973.726401][ T4287] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 973.772073][ T4287] usb 2-1: device descriptor read/8, error -71 [ 974.920374][ T6801] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 975.130281][ T6801] usb 3-1: Using ep0 maxpacket: 16 [ 975.265561][ T6801] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 976.110960][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.170921][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.228108][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.280856][T14850] loop4: detected capacity change from 0 to 64 [ 976.290159][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.340981][T14850] hfs: unable to locate alternate MDB [ 976.347523][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.374327][T14850] hfs: continuing without an alternate MDB [ 976.411810][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.478057][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.546193][ T6801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.613085][ T6801] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 977.400286][ T6801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 977.408410][ T6801] usb 3-1: SerialNumber: syz [ 977.481636][ T6801] usb 3-1: config 0 descriptor?? [ 977.543040][ T6801] usb 3-1: can't set config #0, error -71 [ 977.577786][ T6801] usb 3-1: USB disconnect, device number 63 [ 978.620383][ T6801] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 978.841700][ T6801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 978.864118][ T6801] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 978.917543][ T6801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.991717][ T6801] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 979.024704][ T6801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 979.058794][ T6801] usb 4-1: Product: syz [ 979.076553][ T6801] usb 4-1: Manufacturer: syz [ 979.094700][ T6801] usb 4-1: SerialNumber: syz [ 979.332260][ T6801] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 979.400528][ T6801] usb 4-1: USB disconnect, device number 94 [ 979.451367][ T6801] usblp0: removed [ 981.630285][ T4287] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 981.840308][ T4287] usb 3-1: Using ep0 maxpacket: 16 [ 981.855388][ T4287] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 981.898879][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.950877][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.012042][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.067134][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.121718][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.173438][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.222043][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.291167][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.341172][ T4287] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 982.390365][ T4287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 982.430337][ T4287] usb 3-1: SerialNumber: syz [ 982.465669][ T4287] usb 3-1: config 0 descriptor?? [ 982.510329][ T4287] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input134 [ 982.788851][T14893] input: syz1 as /devices/virtual/input/input135 [ 982.941745][ T3624] bcm5974 3-1:0.0: could not read from device [ 982.981311][ T4287] usb 3-1: USB disconnect, device number 64 [ 983.735349][T14912] loop4: detected capacity change from 0 to 131072 [ 983.742677][T14912] XFS: ikeep mount option is deprecated. [ 983.784677][T14912] XFS (loop4): Mounting V5 Filesystem [ 983.841751][T14912] XFS (loop4): Starting recovery (logdev: internal) [ 983.905966][T14912] XFS (loop4): Ending recovery (logdev: internal) [ 984.021706][ T4274] XFS (loop4): Unmounting Filesystem [ 984.290351][ T4287] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 984.490256][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 984.506035][ T4287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.530256][ T9252] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 984.561151][ T4287] usb 4-1: config 0 has no interfaces? [ 984.566657][ T4287] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.657384][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.714227][ T9252] usb 3-1: device descriptor read/64, error -71 [ 984.726615][ T4287] usb 4-1: config 0 descriptor?? [ 985.610307][ T9252] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 985.790481][ T9252] usb 3-1: device descriptor read/64, error -71 [ 985.821064][ T4287] usb 4-1: USB disconnect, device number 95 [ 985.910456][ T9252] usb usb3-port1: attempt power cycle [ 986.350264][ T9252] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 986.420687][ T9252] usb 3-1: device descriptor read/8, error -71 [ 986.470961][T14962] jffs2: notice: (14962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 986.699088][ T9252] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 986.761109][ T9252] usb 3-1: device descriptor read/8, error -71 [ 986.900352][ T9252] usb usb3-port1: unable to enumerate USB device [ 987.710262][ T9252] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 987.930423][ T9252] usb 2-1: Using ep0 maxpacket: 16 [ 987.946079][ T9252] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 987.994639][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.051779][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.108401][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.181033][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.241249][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.293910][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.341273][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.393051][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.467350][ T9252] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 988.514443][ T9252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 989.229842][ T9252] usb 2-1: SerialNumber: syz [ 989.262588][ T9252] usb 2-1: config 0 descriptor?? [ 989.314625][ T9252] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input136 [ 989.551829][T14966] input: syz1 as /devices/virtual/input/input137 [ 990.302779][T14985] loop4: detected capacity change from 0 to 131072 [ 990.310051][T14985] XFS: ikeep mount option is deprecated. [ 990.396325][T14985] XFS (loop4): Mounting V5 Filesystem [ 990.433625][ T3624] bcm5974 2-1:0.0: could not read from device [ 990.485237][ T9252] usb 2-1: USB disconnect, device number 78 [ 990.497893][T14985] XFS (loop4): Starting recovery (logdev: internal) [ 990.514112][ T8469] bcm5974 2-1:0.0: could not read from device [ 990.559270][T14985] XFS (loop4): Ending recovery (logdev: internal) [ 990.630466][ T3624] bcm5974 2-1:0.0: could not read from device [ 990.686661][ T4274] XFS (loop4): Unmounting Filesystem [ 990.931836][T14997] jffs2: notice: (14997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 993.031349][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.037666][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.720425][ T4287] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 994.790350][ T4287] usb 3-1: Using ep0 maxpacket: 8 [ 994.804329][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.863773][ T4287] usb 3-1: config 0 has no interfaces? [ 994.903785][ T4287] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 994.952481][ T4287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.017927][ T4287] usb 3-1: config 0 descriptor?? [ 996.040395][ T9252] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 996.210525][ T9252] usb 2-1: device descriptor read/64, error -71 [ 996.254371][ T4350] usb 3-1: USB disconnect, device number 69 [ 996.415318][T15044] jffs2: notice: (15044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 996.520573][ T9252] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 996.805757][ T9252] usb 2-1: device descriptor read/64, error -71 [ 998.092525][ T9252] usb usb2-port1: attempt power cycle [ 1000.150355][ T4350] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1000.350315][ T4350] usb 4-1: Using ep0 maxpacket: 16 [ 1000.376956][ T4350] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1000.421742][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.474087][T15081] jffs2: notice: (15081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1000.494471][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.536204][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.608361][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.668518][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.750006][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.791344][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.838445][ T4350] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.916782][ T4350] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1001.625601][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1001.660323][ T4350] usb 4-1: SerialNumber: syz [ 1001.680801][ T4350] usb 4-1: config 0 descriptor?? [ 1001.731123][ T4350] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input138 [ 1001.860397][ T9252] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1002.951436][ T3624] bcm5974 4-1:0.0: could not read from device [ 1003.030322][ T9252] usb 2-1: device descriptor read/64, error -71 [ 1003.050382][ T3624] bcm5974 4-1:0.0: could not read from device [ 1003.061521][ T4350] usb 4-1: USB disconnect, device number 96 [ 1003.155878][T15102] loop3: detected capacity change from 0 to 2048 [ 1003.210514][T15102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1003.302121][ T9252] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1003.490449][ T9252] usb 2-1: device descriptor read/64, error -71 [ 1003.630641][ T9252] usb usb2-port1: attempt power cycle [ 1004.287633][T15116] jffs2: notice: (15116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1006.061439][T15139] loop4: detected capacity change from 0 to 2048 [ 1006.101639][T15139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1006.200395][ T9252] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1006.240864][T15144] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2772'. [ 1006.290396][ T4350] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1006.401029][ T9252] usb 3-1: Using ep0 maxpacket: 8 [ 1006.413493][ T9252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.453928][ T9252] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1006.467835][T15148] jffs2: notice: (15148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1006.484673][ T4350] usb 4-1: device descriptor read/64, error -71 [ 1006.504985][ T9252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.548178][ T9252] usb 3-1: config 0 descriptor?? [ 1006.586654][ T9252] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1006.765424][ T4350] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1007.925509][ T4350] usb 4-1: device descriptor read/64, error -71 [ 1007.980502][ T9252] usb 3-1: USB disconnect, device number 70 [ 1008.080541][ T4350] usb usb4-port1: attempt power cycle [ 1008.500282][ T4350] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1008.520440][ T9252] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1008.570686][ T4350] usb 4-1: device descriptor read/8, error -71 [ 1008.661314][T15175] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2784'. [ 1008.730323][ T9252] usb 2-1: Using ep0 maxpacket: 16 [ 1008.741851][ T9252] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 1008.790713][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.840543][ T4350] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1008.849303][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.891862][T15177] jffs2: notice: (15177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1008.918916][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.960822][ T4350] usb 4-1: device descriptor read/8, error -71 [ 1008.967151][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.041186][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.080455][ T4350] usb usb4-port1: unable to enumerate USB device [ 1009.115642][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.176996][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.238543][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.288924][ T9252] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1009.339626][ T9252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1009.399288][ T9252] usb 2-1: SerialNumber: syz [ 1009.440228][ T9252] usb 2-1: config 0 descriptor?? [ 1009.504858][ T9252] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input139 [ 1009.759832][T15166] input: syz1 as /devices/virtual/input/input140 [ 1010.010866][ T3624] bcm5974 2-1:0.0: could not read from device [ 1010.090405][ T9252] usb 2-1: USB disconnect, device number 85 [ 1010.160396][ T4263] bcm5974 2-1:0.0: could not read from device [ 1011.302909][ T6808] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1011.461100][T15214] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2795'. [ 1011.530336][ T6808] usb 4-1: Using ep0 maxpacket: 8 [ 1011.557186][ T6808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.585669][ T6808] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1011.611636][T15218] jffs2: notice: (15218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1011.631080][ T6808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.655626][ T6808] usb 4-1: config 0 descriptor?? [ 1011.674874][ T6808] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1011.820361][ T9252] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1011.980301][ T9252] usb 5-1: device descriptor read/64, error -71 [ 1012.231203][ T6808] usb 4-1: USB disconnect, device number 101 [ 1012.250343][ T9252] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1012.430357][ T9252] usb 5-1: device descriptor read/64, error -71 [ 1012.550580][ T9252] usb usb5-port1: attempt power cycle [ 1012.970257][ T9252] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1012.989570][T15251] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2807'. [ 1013.010779][ T9252] usb 5-1: device descriptor read/8, error -71 [ 1013.300247][ T9252] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1013.370737][ T9252] usb 5-1: device descriptor read/8, error -71 [ 1013.394204][T15255] jffs2: notice: (15255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1014.258062][ T9252] usb usb5-port1: unable to enumerate USB device [ 1014.820356][ T9252] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1014.901206][T15280] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2818'. [ 1015.030305][ T9252] usb 2-1: Using ep0 maxpacket: 8 [ 1015.052728][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.103562][ T9252] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1015.160453][ T9252] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1015.200058][ T9252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.249577][ T9252] usb 2-1: config 0 descriptor?? [ 1015.268215][ T9252] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1015.416328][T15294] jffs2: notice: (15294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1015.530302][ T6808] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1015.730255][ T6808] usb 5-1: Using ep0 maxpacket: 16 [ 1015.740709][ T6808] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 1015.761934][T15300] loop3: detected capacity change from 0 to 1024 [ 1015.782616][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.796988][T15300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1015.822472][T15300] EXT4-fs: Ignoring removed i_version option [ 1015.829768][ T9252] usb 2-1: USB disconnect, device number 86 [ 1015.840983][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.887267][T15300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1015.905710][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.923535][T15300] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1015.966391][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.995933][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.016982][T15300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1016.037654][T15300] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.049837][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.085314][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.097061][T15300] EXT4-fs (loop3): shut down requested (0) [ 1016.150539][ T6808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.204338][ T6808] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1016.244981][ T6808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1016.285125][ T6808] usb 5-1: SerialNumber: syz [ 1016.307551][ T6808] usb 5-1: config 0 descriptor?? [ 1016.323788][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1016.355475][ T6808] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input141 [ 1016.599520][T15287] input: syz1 as /devices/virtual/input/input142 [ 1016.825289][T15324] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2831'. [ 1016.837005][ T3624] bcm5974 5-1:0.0: could not read from device [ 1016.860780][ T6808] usb 5-1: USB disconnect, device number 79 [ 1018.021352][T15335] jffs2: notice: (15335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1019.804248][T15358] loop1: detected capacity change from 0 to 2048 [ 1019.872237][T15358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.550299][ T6808] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1020.750391][ T6808] usb 2-1: Using ep0 maxpacket: 16 [ 1020.780019][ T6808] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 1020.831347][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.880910][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.931334][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.001842][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.061335][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.841061][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.911420][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.982227][ T6808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.023743][ T6808] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1022.080370][ T6808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1022.120225][ T6808] usb 2-1: SerialNumber: syz [ 1022.156762][ T6808] usb 2-1: config 0 descriptor?? [ 1022.200306][ T6808] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input143 [ 1022.450351][T15364] input: syz1 as /devices/virtual/input/input144 [ 1022.756466][T15392] misc userio: Invalid payload size [ 1022.789167][T15392] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 1022.841952][T15392] rnbd_client L1255: Session s. not found, and path parameter not given [ 1023.390392][ T9252] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1023.430587][ T4287] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1023.603382][ T9252] usb 5-1: no configurations [ 1023.611332][ T9252] usb 5-1: can't read configurations, error -22 [ 1023.620438][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 1023.629526][ T4287] usb 4-1: no configurations [ 1023.639863][ T4287] usb 4-1: can't read configurations, error -22 [ 1023.658278][ T3624] bcm5974 2-1:0.0: could not read from device [ 1023.696517][ T6808] usb 2-1: USB disconnect, device number 87 [ 1024.396831][ T9252] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1024.404531][ T4287] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1024.610464][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 1024.616062][ T9252] usb 5-1: no configurations [ 1024.631145][ T9252] usb 5-1: can't read configurations, error -22 [ 1024.639440][ T4287] usb 4-1: no configurations [ 1024.665211][ T4287] usb 4-1: can't read configurations, error -22 [ 1024.680500][ T9252] usb usb5-port1: attempt power cycle [ 1024.706602][ T4287] usb usb4-port1: attempt power cycle [ 1025.120384][ T9252] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1025.130394][ T4287] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1025.182646][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 1025.188366][ T9252] usb 5-1: no configurations [ 1025.201059][ T9252] usb 5-1: can't read configurations, error -22 [ 1025.208822][ T4287] usb 4-1: no configurations [ 1025.227691][ T4287] usb 4-1: can't read configurations, error -22 [ 1025.380328][ T9252] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1025.400551][ T4287] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1025.421280][ T9252] usb 5-1: no configurations [ 1025.428532][ T9252] usb 5-1: can't read configurations, error -22 [ 1025.449235][ T9252] usb usb5-port1: unable to enumerate USB device [ 1025.456356][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 1025.469740][ T4287] usb 4-1: no configurations [ 1025.484057][ T4287] usb 4-1: can't read configurations, error -22 [ 1025.505879][ T4287] usb usb4-port1: unable to enumerate USB device [ 1027.135020][T15446] misc userio: Invalid payload size [ 1027.163068][T15446] rnbd_client L600: Mapping device /d on session s., (access_mode: rw, nr_poll_queues: 0) [ 1027.210364][ T9252] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1027.231348][T15446] rnbd_client L1255: Session s. not found, and path parameter not given [ 1027.410391][ T9252] usb 2-1: Using ep0 maxpacket: 16 [ 1027.460720][ T9252] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 1027.500054][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.534136][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.575797][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.621470][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.662980][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.714751][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.756555][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.798233][ T9252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.849365][ T9252] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1027.899988][ T9252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1027.930571][ T9252] usb 2-1: SerialNumber: syz [ 1027.965098][ T9252] usb 2-1: config 0 descriptor?? [ 1027.972622][T15455] No source specified [ 1027.997119][ T9252] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input153 [ 1028.232531][T15437] input: syz1 as /devices/virtual/input/input154 [ 1028.900246][ T4350] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1029.090259][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 1029.099391][ T4350] usb 3-1: no configurations [ 1029.109808][ T4350] usb 3-1: can't read configurations, error -22 [ 1029.270362][ T4350] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1029.380815][ T3624] bcm5974 2-1:0.0: could not read from device [ 1029.406623][ T9252] usb 2-1: USB disconnect, device number 88 [ 1029.470365][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 1029.484943][ T4350] usb 3-1: no configurations [ 1030.218563][ T4350] usb 3-1: can't read configurations, error -22 [ 1030.240385][ T4350] usb usb3-port1: attempt power cycle [ 1030.670379][ T4350] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1030.710850][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 1030.719120][ T4350] usb 3-1: no configurations [ 1030.739346][ T4350] usb 3-1: can't read configurations, error -22 [ 1030.920394][ T4350] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1030.960881][ T4350] usb 3-1: Using ep0 maxpacket: 8 [ 1030.971226][ T4350] usb 3-1: no configurations [ 1030.981715][ T4350] usb 3-1: can't read configurations, error -22 [ 1030.995952][ T4350] usb usb3-port1: unable to enumerate USB device [ 1031.498036][T15470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.515144][T15470] nci: nci_start_poll: failed to set local general bytes [ 1031.547624][T15463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.588664][T15463] [ 1031.591041][T15463] ====================================================== [ 1031.598067][T15463] WARNING: possible circular locking dependency detected [ 1031.605104][T15463] syzkaller #0 Not tainted [ 1031.609614][T15463] ------------------------------------------------------ [ 1031.616646][T15463] syz.4.2885/15463 is trying to acquire lock: [ 1031.622710][T15463] ffffffff8d41a128 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 1031.631426][T15463] [ 1031.631426][T15463] but task is already holding lock: [ 1031.638786][T15463] ffff888072efe350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 1031.648094][T15463] [ 1031.648094][T15463] which lock already depends on the new lock. [ 1031.648094][T15463] [ 1031.658496][T15463] [ 1031.658496][T15463] the existing dependency chain (in reverse order) is: [ 1031.667505][T15463] [ 1031.667505][T15463] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 1031.675159][T15463] __mutex_lock+0x12d/0xae0 [ 1031.680185][T15463] nci_start_poll+0x529/0xcc0 [ 1031.685381][T15463] nfc_start_poll+0x141/0x2c0 [ 1031.690581][T15463] nfc_genl_start_poll+0x1d7/0x340 [ 1031.696233][T15463] genl_family_rcv_msg_doit+0x22f/0x350 [ 1031.702305][T15463] genl_rcv_msg+0x601/0x790 [ 1031.707347][T15463] netlink_rcv_skb+0x1ef/0x440 [ 1031.712656][T15463] genl_rcv+0x24/0x40 [ 1031.717160][T15463] netlink_unicast+0x7ad/0x920 [ 1031.722448][T15463] netlink_sendmsg+0x8ad/0xbd0 [ 1031.727730][T15463] ____sys_sendmsg+0x5ed/0x9a0 [ 1031.733022][T15463] ___sys_sendmsg+0x2a2/0x360 [ 1031.738229][T15463] __se_sys_sendmsg+0x1c3/0x2b0 [ 1031.743611][T15463] do_syscall_64+0x4c/0xa0 [ 1031.748569][T15463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.755009][T15463] [ 1031.755009][T15463] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1031.763712][T15463] __mutex_lock+0x12d/0xae0 [ 1031.768746][T15463] nfc_urelease_event_work+0x120/0x310 [ 1031.774746][T15463] process_one_work+0x8ab/0x1160 [ 1031.780219][T15463] worker_thread+0xaf5/0x12a0 [ 1031.785473][T15463] kthread+0x29d/0x330 [ 1031.790082][T15463] ret_from_fork+0x1f/0x30 [ 1031.795054][T15463] [ 1031.795054][T15463] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1031.802891][T15463] __mutex_lock+0x12d/0xae0 [ 1031.807930][T15463] nfc_register_device+0x38/0x300 [ 1031.813487][T15463] nci_register_device+0x89f/0x9f0 [ 1031.819128][T15463] virtual_ncidev_open+0x55/0xc0 [ 1031.824603][T15463] misc_open+0x31f/0x390 [ 1031.829381][T15463] chrdev_open+0x585/0x5f0 [ 1031.834334][T15463] do_dentry_open+0x7dd/0x10b0 [ 1031.839669][T15463] path_openat+0x2674/0x2f10 [ 1031.844795][T15463] do_filp_open+0x1ee/0x420 [ 1031.849827][T15463] do_sys_openat2+0x14b/0x4f0 [ 1031.855041][T15463] __x64_sys_openat+0x135/0x160 [ 1031.860433][T15463] do_syscall_64+0x4c/0xa0 [ 1031.865388][T15463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.871819][T15463] [ 1031.871819][T15463] -> #0 (nci_mutex){+.+.}-{3:3}: [ 1031.878950][T15463] __lock_acquire+0x2d18/0x7c40 [ 1031.884336][T15463] lock_acquire+0x1bb/0x4a0 [ 1031.889371][T15463] __mutex_lock+0x12d/0xae0 [ 1031.894403][T15463] virtual_nci_close+0x13/0x40 [ 1031.899698][T15463] nci_close_device+0x383/0x600 [ 1031.905082][T15463] nci_unregister_device+0x5e/0x250 [ 1031.910807][T15463] virtual_ncidev_close+0x55/0x90 [ 1031.916361][T15463] __fput+0x20a/0x8b0 [ 1031.920869][T15463] task_work_run+0x1d0/0x260 [ 1031.926000][T15463] exit_to_user_mode_loop+0xe6/0x110 [ 1031.931825][T15463] exit_to_user_mode_prepare+0xee/0x180 [ 1031.937902][T15463] syscall_exit_to_user_mode+0x16/0x40 [ 1031.943891][T15463] do_syscall_64+0x58/0xa0 [ 1031.948837][T15463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.955275][T15463] [ 1031.955275][T15463] other info that might help us debug this: [ 1031.955275][T15463] [ 1031.965506][T15463] Chain exists of: [ 1031.965506][T15463] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 1031.965506][T15463] [ 1031.979071][T15463] Possible unsafe locking scenario: [ 1031.979071][T15463] [ 1031.986539][T15463] CPU0 CPU1 [ 1031.991923][T15463] ---- ---- [ 1031.997290][T15463] lock(&ndev->req_lock); [ 1032.001737][T15463] lock(&genl_data->genl_data_mutex); [ 1032.009732][T15463] lock(&ndev->req_lock); [ 1032.016685][T15463] lock(nci_mutex); [ 1032.020584][T15463] [ 1032.020584][T15463] *** DEADLOCK *** [ 1032.020584][T15463] [ 1032.028764][T15463] 1 lock held by syz.4.2885/15463: [ 1032.033873][T15463] #0: ffff888072efe350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 1032.043645][T15463] [ 1032.043645][T15463] stack backtrace: [ 1032.049552][T15463] CPU: 0 PID: 15463 Comm: syz.4.2885 Not tainted syzkaller #0 [ 1032.057034][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1032.067105][T15463] Call Trace: [ 1032.070387][T15463] [ 1032.073320][T15463] dump_stack_lvl+0x188/0x24e [ 1032.078025][T15463] ? load_image+0x410/0x410 [ 1032.082552][T15463] ? show_regs_print_info+0x12/0x12 [ 1032.087767][T15463] ? print_circular_bug+0x12b/0x1a0 [ 1032.092994][T15463] check_noncircular+0x296/0x330 [ 1032.097945][T15463] ? add_chain_block+0x9b0/0x9b0 [ 1032.102890][T15463] ? lockdep_lock+0xf1/0x1f0 [ 1032.107493][T15463] ? _find_first_zero_bit+0xd2/0x100 [ 1032.112794][T15463] __lock_acquire+0x2d18/0x7c40 [ 1032.117668][T15463] ? verify_lock_unused+0x140/0x140 [ 1032.122875][T15463] ? release_firmware_map_entry+0x187/0x187 [ 1032.128782][T15463] ? prb_read_valid+0x60/0x60 [ 1032.133463][T15463] ? llist_add_batch+0x12b/0x180 [ 1032.138417][T15463] ? preempt_schedule+0xbc/0xd0 [ 1032.143283][T15463] ? find_next_clump8+0x1a0/0x1a0 [ 1032.148329][T15463] lock_acquire+0x1bb/0x4a0 [ 1032.152845][T15463] ? virtual_nci_close+0x13/0x40 [ 1032.157890][T15463] ? __irq_work_queue_local+0x12c/0x190 [ 1032.163462][T15463] ? __might_sleep+0xd0/0xd0 [ 1032.168075][T15463] ? read_lock_is_recursive+0x10/0x10 [ 1032.173463][T15463] ? vprintk_emit+0x59f/0x6a0 [ 1032.178157][T15463] ? printk_sprint+0x460/0x460 [ 1032.182932][T15463] __mutex_lock+0x12d/0xae0 [ 1032.187460][T15463] ? virtual_nci_close+0x13/0x40 [ 1032.192418][T15463] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1032.197638][T15463] ? _printk+0xda/0x130 [ 1032.201807][T15463] ? virtual_nci_close+0x13/0x40 [ 1032.206758][T15463] ? mutex_lock_nested+0x10/0x10 [ 1032.211703][T15463] ? load_image+0x410/0x410 [ 1032.216217][T15463] ? nci_send_cmd+0x1db/0x320 [ 1032.220918][T15463] virtual_nci_close+0x13/0x40 [ 1032.225700][T15463] nci_close_device+0x383/0x600 [ 1032.230562][T15463] ? __kmem_cache_free+0xb6/0x200 [ 1032.235601][T15463] ? nci_unregister_device+0x250/0x250 [ 1032.241072][T15463] nci_unregister_device+0x5e/0x250 [ 1032.246273][T15463] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1032.252267][T15463] ? __lock_acquire+0x7c40/0x7c40 [ 1032.257336][T15463] ? virtual_ncidev_open+0xc0/0xc0 [ 1032.262465][T15463] virtual_ncidev_close+0x55/0x90 [ 1032.267501][T15463] __fput+0x20a/0x8b0 [ 1032.271510][T15463] task_work_run+0x1d0/0x260 [ 1032.276115][T15463] ? task_work_cancel+0x220/0x220 [ 1032.281145][T15463] ? __close_range+0x20c/0x770 [ 1032.285920][T15463] ? exit_to_user_mode_loop+0x3b/0x110 [ 1032.291396][T15463] exit_to_user_mode_loop+0xe6/0x110 [ 1032.296704][T15463] exit_to_user_mode_prepare+0xee/0x180 [ 1032.302268][T15463] syscall_exit_to_user_mode+0x16/0x40 [ 1032.307739][T15463] do_syscall_64+0x58/0xa0 [ 1032.312171][T15463] ? clear_bhb_loop+0x60/0xb0 [ 1032.316861][T15463] ? clear_bhb_loop+0x60/0xb0 [ 1032.321549][T15463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1032.327483][T15463] RIP: 0033:0x7f3ba239e0d9 [ 1032.331999][T15463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.351624][T15463] RSP: 002b:00007ffd118a0e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1032.360053][T15463] RAX: 0000000000000000 RBX: 00007f3ba2627da0 RCX: 00007f3ba239e0d9 [ 1032.368047][T15463] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1032.376025][T15463] RBP: 00007f3ba2627da0 R08: 0000000000000006 R09: 0000000000000000 [ 1032.384020][T15463] R10: 00007f3ba2627cb0 R11: 0000000000000246 R12: 00000000000fb4b5 [ 1032.392007][T15463] R13: 00007f3ba262618c R14: 00000000000fb23b R15: 00007ffd118a0f20 [ 1032.400007][T15463]