last executing test programs: 22m26.289913669s ago: executing program 32 (id=40): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010326bd7000fedbdf250d0000008b062c0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0xfffffdfa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x34}}, 0x24008801) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4040000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x5, 0x10000}, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000200)={0x800, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5, 0xffffffffffffffff}) syz_open_dev$vcsu(&(0x7f0000000400), 0x8, 0x101) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000500)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22m7.221190621s ago: executing program 33 (id=66): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) syz_open_dev$sndmidi(0x0, 0x1, 0x40503) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) flistxattr(r1, &(0x7f0000000880)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 18m52.131902657s ago: executing program 34 (id=247): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@mpls_newroute={0x144, 0x18, 0x10, 0x70bd28, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0xf6, 0x0, 0x4, 0x0, 0x0, 0x800}, [@RTA_DST={0x8, 0x1, {0xe, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x3}, {0x9}, {0x7, 0x0, 0x1}, {0x9}, {0x400}, {}, {0xe8}, {0x2}, {0x5, 0x0, 0x1}, {0x75e}, {0x0, 0x0, 0x1}, {0x3}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x9}, {0x1, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x19c}, {0x9}, {0x7, 0x0, 0x1}, {0x400}, {0xac08b}, {0x1f1c, 0x0, 0x1}, {0x1}, {0x8}, {0x2, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0xff}, {0x8, 0x0, 0x1}, {0x40000}, {0x3ff}]}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0xf8001, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x36, 0x0, 0x1}, {0x2159}, {}, {0xd}, {0x6, 0x0, 0x1}, {0x717, 0x0, 0x1}, {0x5}, {0x8, 0x0, 0x1}, {0x800}, {0x800}, {0x6, 0x0, 0x1}, {0x95c1, 0x0, 0x1}, {0x9}, {0x92, 0x0, 0x1}, {0x100}, {0x9}, {0x7ff}, {0x8, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0xfff}, {0x2, 0x0, 0x1}, {0x1}, {0x401, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3d8, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}]}]}, 0x144}}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[]) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/141, 0x8d) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$iso9660(&(0x7f00000008c0), &(0x7f0000000040)='./file0\x00', 0x1080a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x66f, &(0x7f0000000240)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000980), 0x800) socket(0x2, 0x80805, 0x0) 18m14.695740464s ago: executing program 35 (id=285): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_pidfd_open(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x41, 0x0, "d86adaa9ce82e10f6177fa999685c43d5042ddd6740fb249181d73dab87ea2fa8ee95f3f70c56ff9ef31c4fc281a67440ff0e38e6ba0997b1028741368abc8cd7c8d9d9ae736ede0eb4ff476a0469d17"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000040)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {0x0, 0xc}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 17m30.861678511s ago: executing program 36 (id=333): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYBLOB="772c24d1e93c35b53ec50852bfa3820e4c4d6e08907207ae16990cf4f1a24902000000289baae0cdcf9dfb831deb9ce02d12992db889c06667d2fe6128688bc2d4f49d6c05", @ANYRESOCT], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)='pipefs\x00', 0x200000, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x2) 16m24.369870183s ago: executing program 37 (id=388): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000005000000000000000000009500000000616300"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 16m15.08663406s ago: executing program 38 (id=403): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xab, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b923, r0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(0x0, 0x276, 0x200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x8041, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x2a) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x26) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x100}}}, 0x6) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 15m26.587200549s ago: executing program 39 (id=455): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x41, 0x0, "d86adaa9ce82e10f6177fa999685c43d5042ddd6740fb249181d73dab87ea2fa8ee95f3f70c56ff9ef31c4fc281a67440ff0e38e6ba0997b1028741368abc8cd7c8d9d9ae736ede0eb4ff476a0469d17"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8971, &(0x7f0000000040)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 15m22.78705235s ago: executing program 40 (id=458): clock_gettime(0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$eJzs3Au0j9XWMPA511oPm6R/klvWXPPhn1wWSZJLQi5JkiRJbgkJSZKQ3HJLQhJyT3IPyS12cr/fck+SI0mSkNyS9Q2d3s95T+d9O+93+j7fOHv+xljjv+Z+njn/a+25x36e5z/G3t91GFy5bpUKtZkZ/iX415fuAJACAP0A4DoAiACgeJbiWS4fz6Cx+7/2JuLP9ci0q70CcTVJ/9M26X/aJv1P26T/aZv0P22T/qdt0v+0TfovRFq2dXrO62Wk3SGf/6dlcv3/N3K48Jiv1he+seP/IEX6n7ZJ/9M26X/aJv1P26T/aZv0/99f+f/mmPQ/bZP+C5GWXe3Pn2Vc3XG1f/6EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQN58IVBgD+Y3611yWEEEIIIYQQQog/T0h/tVcghBBCCCGEEEKI//sQFGgwEEE6SA8pkAEywjWQCa6FzHAdJOB6yAI3QFa4EbJBdsgBOSEX3AS5wQKBA4YY8kBeSMLNkA9ugfxQAApCIfBQGIrArVAUboNicDsUhzugBNwJJaEUlIYycBeUhbuhHJSHCnAPVIRKUBmqwL1QFe6DanA/VIcHoAY8CDXhIagFD0NteATqwKNQFx6DevA41IcG0BAaQeP/o/yXoAu8DF2hG3SHHtATXoFe0Bv6QF/oB69Cf3gNBsDrMBAGwWB4A4bAmzAU3oJhMBxGwNswEkbBaBgDY2EcjId3YAK8CxPhPZgEk2EKTIVpMB1mwPswE2bBbPgA5sCHMBfmwXxYAAvhI1gEiyEVPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXvgc9sEXsB++/B/mn/27/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIW5MTcSEjIy5sE8mMQk5sN8mB/zY0EsiB49FsEiWBRvw2JYDItjcSyBJbAklsJSWAbLYFksi+WwHFbAClgRK2JlrIz34r14H1bDalgdq2MNrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rY0NsiI2xMTbBJtgUm2JzbI4tsAW2xJbYGltjG2yDbbEttsN22B7bYwfsgB2xE3bCl/AlfBlfxm5YUfXAntgTe2Ev7IN9sS++iv3xNXwNX8eBOAgH4xv4Br6JQ/EMDsPhOAJHYFk1CkfjGGQ1DsfjeJyAE3AiTsRJOBkn41SchtNxBs7AmTgLZ+EHOAc/xA9xHs7DBbgQF+IiXIypmIpL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/FT3I7bcSfuxN24Gz/Dz/Bz/BwH4n7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHF7AC3gRX8j1TZ3dBdYNBHWZUUalU+lUikpRGVVGlUllUplVZpVQCZVFZVHlACCbyqZyqBwql8qlcqvcihQpVrHKo/KkAIDKp/Kp/Cq/KqgKKq+8KqKKqKKqqCqmiqni6g5VQt2pSqpSqpkvo8qosqq5L6fKqwqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqqHVC3VA/vgI+pyZ+qqQVhPDcb6qoFqqBqpN/EJ1UQNxaaqmWqunlLDcRi2VE18a/WMaqNGY1v1nBqDz6v2ahx2UC+qjqqT6qxeUl1UU99VdVOTsIfqqaZiL9Vb9VF91UyspC53rLJ6XQ1Ug9Rg9YZagG+qoeotNUwNVyPU22qkGqVGqzFqrBqnxqt31AT1rpqo3lOT1GQ1RU1V09R0NUO9r2aqWWq2+kDNUR+quWqemq8WqIXqI7VILVap6mO1RH2ilqplarlaoVaqVWq1WqPWqnVqvdqgNqpNarPaoraqT9U2tV3tUDvVLrVb7VGfqb3qc7VPfaH2qy/VAfUXdVB9pQ6pr9Vh9Y06or5VR9V36pj6Xh1XP6gT6qQ6pX5Up9VP6ow6q86p8+qC+lldVL+oSyoo0KiV1troSKfT6XWKzqAz6mt0Jn2tzqyv0wl9vc6ib9BZ9Y06m86uc+icOpe+SefWVpN2mnWs8+i8Oqlv1vn0LTq/LqAL6kLa68K6iL5VF9W36WL6dl1c36FL6Dt1SV1Kl9Zl9F26rL5bl9PldQV9j66oK+nKuoq+V1fV9+lq+n5dXT+ga+gHdU39kK6lH9a19SO6jn5U19WP6Xr6cV1fN9ANdSPdWD+hm+gndVPdTDfXT+kW+mndUrfSrfUzuo1+VrfVz+l2+nndXr+gO+gXdUfdSXfWv+hLOuiuupvurnvonvoV3Uv31n10X91Pv6r769f0AP26HqgH6cH6DT1Ev6mH6rf0MD1cj9Bv65F6lB6tx+ixepwer9/RE/S7eqJ+T0/Sk/UUPVVP09N1n98qzf67/B6/XXX/Nv/df5A/4Nd336K36k/1Nr1d79A79S69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf00YAA+pg+ro/rE/qkPq9/1Kf1T/qMPqvP6vP6gr6gL/72PQCDRhltjIlMOpPepJgMJqO5xmQy15rM5jqTMNebLOYGk9XcaLKZ7CaHyWlymZtMbmMNGWfYxCaPyWuS5maTz9xi8psCpqApZLwpbIqYW//l/D9aX2PT2DQxTUxT09Q0N81NC9PCtDQtTWvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQ2nU0X08V0NV1Nd9Pd9DSvmF6mt+lj+pp+5lXT3/Q3A8wAM9AMNIPNYDPEDDFDzVAzzAwzI8wIM9KMNKPNaDPWjDXjzXgzwUwwE81EM8lMMlPMFDPNTDMzzAwz08w0s81sM8fMMXPNXDPfzDcLzUKzyCwyqSbVLDFLzFKzzCwzK8wKs8qsMmvMGrPOrDMbzAazyWwyS81Ws9VsM9vMDrPD7DK7zB6zx+w1e80+s8/sN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXOsx3Fz3JwwJ8wpc8qcNqfNGXPGnDPnzAVzwVw0F80lc+nybV+kIhWZyETponRRSpQSZYwyRpmiTFHmKHOUiBJRlihLlDW6McoWZY9yRDmjXNFNUe7IRhS5iKM4yhPljZLRzVG+6JYof1QgKhgVinxUOCoS3RoVjW6LikW3R8WjO6IS0Z1RyahUVDoqE90VlY3ujspF5aMK0T1RxahSVDmqEt0bVY3ui6pF90fVoweiGtGDUc3ooahW9HBUO3okqhM9GtWNHovqRY9H9aMGUcOoUdT4T60fwpnsT/qutpvtbnvYnvYV28v2tn1sX9vPvmr729fsAPu6HWgH2cH2DTvEvmmH2rfsMDvcjrBv25F2lB1tx9ixdpwdb9+xE+y7dqJ9z06yk+0UO9VOs9PtDPu+nWln2dn2AzvHfmjn2nl2vl1gF9qP7CK72Kbaj+0S+4ldapfZ5XaFXWlXnb8ewK616+x6u8FutJvsZrvFbrWf2m12u91hd9pddrfdYz+ze+3ndp/9wu63X9oD9i/2oP3KHrJf28P2G3vEfmuP2u/sMfu9PW5/sCfsSXvK/mhP25/sGXvWnrPn7QX7s71of7GXbLh8c3/58k6GDKWjdJRCKZSRMlImykSZKTMlKEFZKAtlpayUjbJRDspBuSgX5abcdBkTUx7KQ0lKUj7KR/kpPxWkguTJUxEqQkWpKBWjYlScilMJKkElqSSVptJ0F91Fd9PdVJ7K0z10D1WiSlSFqlBVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSQGlJjakxNqAk1pabUnJpTC2pBLakltabW1IbaUFtqS+2oHbWn9tSBOlBH6kidqTN1oS7UlbpSd+pOPakn9aJe1If6UD/qR/2pPw2gATSQBtJgGkxDaAgNpaE0jIbTCHqbRtIoGk1jaCyNo/E0nibQBJpIE2kSTaIpNIWm0TSaQTNoJs2k2TSb5tAcmktzaT7Np4W0kBbRIkqlVFpCS2gpLaXltJxW0kpaTatpLa2l9bSeNtJG2kybaSttpW20jXbQDtpFu2gP7aG9tJf20T7aT/vpAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaBTdIpO02k6Q2foHJ2jC/QzXaRf6BIFSnEKMrprXCZ3rcvsrnMpLoP72ziHy+lyuZtcbmddNpf9P8XknMvvCriCrpDzrrAr4m79XVzSlXKlXRl3lyvr7nblfhdXdfe5au5+V9094Kq4e3+L0/8a13APupruMVfLPe5quwaujmvk6rrHXD33uKvvGriGrpFr4Z52LV0r19o949q4Z38XL3KL3Vq3zq13G9xe97k75867o+47d8H97Lq6bq6fe9X1d6+5Ae51N9AN+l08wr3tRrpRbrQb48a6cb+Lp7ipbpqb7ma4991MN+t38UL3kZvjUt1cN8/Ndwt+jS+vKdV97Ja4T9xSt8wtdyvcSrfKrXZr/vdaV7hNbrPb4va4z9w2t93tcDvdLrf71/jyPva5L9x+96U74r51B91X7pA75g67b36NL+/vmPveHXc/uBPupDvlfnSn3U/ujDv76/4v7/1H94u75IIDRlas2XDE6Tg9p3AGzsjXcCa+ljPzdZzg6zkL38BZ+UbOxtk5B+fkXHwT52bLxI6ZY87DeTnJN3M+voXzcwEuyIXYc2EuwrdyUb6Ni/HtXJzv4BJ8J5fkUlyay/BdXJbv5nJcnivwPVyRK3FlrsL3clW+j6vx/VydH+Aa/CDX5Ie4Fj/MtfkRrsOPcl1+jOvx41yfG3BDbsSN+Qluwk9yU27GzfkpbsFPc0tuxa35GW7Dz3Jbfo7b8fPcnl/gDvwid+RO3Jlf4i78Mnflbtyde3BPfoV7cW/uw325H7/K/fk1HsCv80AexIP5DR7Cb/JQfouH8XAewW/zSB7Fo3kMj+VxPJ7f4bMLW+W4fK83iSfzFJ7K03g6z+D3eSbP4tn8Ac/hD3kuz+P5vIAX8ke8iBdzKn/MS/gTXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyp/yNt7OO3gn7+LdvIc/4738Oe/jL3g/f8kH+C98kL/iQ/w1H+Zv+Ah/y0f5Oz7G3/Nx/oFP8Ek+xT/yaf6Jz/BZPsfn+QL/zBf5F77EgSHGWMU6NnEUp4vTxylxhjhjfE2cKb42zhxfFyfi6+Ms8Q1x1vjGOFucPc4R54xzxTfFuWMbU+xijuM4T5w3TsY3x/niW+L8cYG4YFwo9nHhuEh8a1w0vi0uFt8eF4/viEvEd8Yl41LxYw+Uie+Ky8Z3x+Xi8nGF+J64YlwprhxXie+Nq8b3xdXi++Pq8QNxsfjBuGb8UFwrfjiuHT8S14kfjevGj8X14sfj+nGDuGHcKG4cPxE3iZ+Mm8bN4ubxU3GL+Om4Zdwqbh0/E7eJn/3D493jHnHP+JX4lTiE+/X85ILkwuRHyUXJxcnU5MfJJclPkkuTy5LLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSIVRJDx698tobH/l0Pr1P8Rl8Rn+Nz+Sv9Zn9dT7hr/dZ/A0+q7/RZ/PZfQ6f0+fyN/nc3nryzrOPfR6f1yf9zT6fv8Xn9wV8QV/Ie1/YF/GNfGPf2DfxT/qmvplv7p/yT/mn/dO+lW/ln/Ft/LO+rX/Ot/PP+/b+Bf+Cf9F39J18Z/+S7+Jf9l19N9/dd/c9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/Zz8s/xc/1cP9/P9wv9Qr/IL/KpPtUv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+1P+y/8Uf8t/6o/84f89/74/4Hf8Kf9Kf8j/60/8mf8Wf9OX/eX/A/+4v+F3/JBz8+8U5iQuLdxMTEe4lJicmJKYmpiWmJ6YkZifcTMxOzErMTHyTmJD5MzE3MS8xPLEgsTHyUWJRYnEhNfJxYkvgksTSxLLE8sSKxMrEqEcJN2+KQJ+QNyXBzyBduCflDgVAwFAo+FA5Fwq2haLgtFAu3h+LhjlAi3BlKhlKhdHg81A8NQsPQKDQOT4Qm4cnQNDQLzcNToUV4OrQMrULr8ExoE54NbcNzoV14PrQPL4QO4cXQMXQKncNLoUt4OXQN3UL30CP0DK+EXqF36BP6hn7h1dA/vBYGhNfDwDAoDA5vhCHhzTA0vBWGheFhRHg7jAyjwugwJowN48L48E6YEN4NE8N7YVKYHKaEqWFamB5mhPfDzDArzA4fhDnhwzA3zAvzw4KwMHwUFoXFITV8HJaET8LSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBp2Ba2hx1hZ9gVdoc94bOwN3we9oUvwv7wZTgQ/hIOhq/CofB1OBy+CUfCt+Fo+C4cC9+H4+GHcCKcDKfCj+F0+CmcCWfDuXA+XAg/h4vhl3BJ/mZNCCGEEOKfov/geI9/8DX127isJwBcuz3n4b+vuTHbX+e9Va4WCQB4pluHR/5jVKzYvXv3385dqiHKOw8AElfy08GVeBk0//W1GRT9h+vrrTpd4D+on7wDIOOVyr/KCFfqPw2toRnc9l/Uf+KpEYtKxOey/Df15wHkz3slJwNcia/UL/Zf1M/e5A/Wn+Gr8QBN/yYnE1yJr9QvAk/Cs9D6P50phBBCCCGEEEL8VW9Vut0fPT9ffj7PZa7kpIcr8ZXnz3/8fC6EEEIIIYQQQoir7/lOnVs90bp1s3b/5GSbBvinT04zk3L/fyxDJjL50yZX+zeTEEIIIYQQ4s925ab/aq9ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIu/5f/Duxq71HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4mr7XwEAAP//7d019A==") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x32d800, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) 12m18.960373497s ago: executing program 41 (id=607): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) r5 = eventfd2(0x1, 0x0) r6 = epoll_create1(0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r6, 0x0, 0x0, 0x5e}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@grpid}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noload}, {@data_err_ignore}, {@dax_never, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x469, &(0x7f0000000e40)="$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") 11m59.941447897s ago: executing program 42 (id=632): socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240), &(0x7f0000000040)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000a00)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x72}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x4d3, 0x6c}, @in=@dev, {0x0, 0x0, 0x0, 0x20, 0x0, 0xef}, {0x0, 0x0, 0x0, 0xd}, {0x0, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x134}}, 0x0) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) 11m4.873560783s ago: executing program 43 (id=693): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pipe2(&(0x7f0000000040), 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETAF(r4, 0x560a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10m31.880491164s ago: executing program 0 (id=788): syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) eventfd2(0xff, 0x80001) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 10m28.492678197s ago: executing program 0 (id=792): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x0, &(0x7f00000009c0)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = dup(r5) fallocate(r6, 0x11, 0x0, 0x74000) r7 = eventfd(0x5) syz_open_dev$vcsa(&(0x7f0000000340), 0x1, 0x180) r8 = syz_open_dev$vcsu(&(0x7f0000000540), 0x7, 0x80) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x14002, 0x0) io_submit(r4, 0x5, &(0x7f0000000700)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000180), 0x0, 0xfffffffffffffffb, 0x0, 0x2, r7}, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x3ff, r2, &(0x7f0000000500)="a115e463e8bb0a5d584c79f0", 0xc, 0x7, 0x0, 0x0, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x81, r3, &(0x7f00000005c0)="6270cdea2e33b2050916e60c093108673270e2246fd29a679fad93ad5366834f485f9b06ab31d2faf3aa9ede9c3bc00c6009ad7dfa53e33e15430542ebe89485e6bfc7e8ba3da66a714cd4bdde08a2f24db2355292e9b43ade252c445e98ec69e10f90affe2ce44243b50658b943d4d8953d2587d8273a8abbee34e57f66845e8e371a9dc31574ffb18316a05b3800cf9a39a8c2d490be890c5689ee586253289f28ff46e9e8", 0xa6, 0x9, 0x0, 0x1, r9}]) sendto$inet6(r0, 0x0, 0x0, 0xbcaf, 0x0, 0x0) ioctl$BLKIOOPT(r9, 0x1279, &(0x7f0000000740)) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(r10, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x400000000000165, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) open_by_handle_at(0xffffffffffffff9c, 0x0, 0xfeffffffffffffff) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 10m23.746159053s ago: executing program 0 (id=798): r0 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f0000001240)=0x3, 0x5, 0xffff7ffc, 0x0, &(0x7f0000001200)=0x3, 0x85000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup2(r6, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x58, r10, 0x1, 0x70bd24, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "508ac195ffda62d1c0c8734951cc4a1d977458ffe8"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56f4b, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0x801e}, {0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x6, 0x4, 0x1, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0x1, 0xfff, 0x401, 0x2, 0x5, 0x1, 0x6}}, {0x10, 0x2, [0xfff2, 0x6, 0x52be, 0x358, 0x0, 0xafc1]}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m11.682836845s ago: executing program 0 (id=820): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xf9, 0x68, 0xca, 0x20, 0x4b4, 0x930b, 0x3ea5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x46, 0x0, 0x0, 0x69, 0x1f, 0x62}}]}}]}}, 0x0) 10m11.354287464s ago: executing program 1 (id=823): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002fc0)) 10m10.89345467s ago: executing program 1 (id=825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000100)=0x7d) 10m9.879782884s ago: executing program 1 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}}, 0x0) 10m9.476023015s ago: executing program 1 (id=829): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m9.120033346s ago: executing program 1 (id=832): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x2d0634a4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) 10m8.622978347s ago: executing program 1 (id=833): r0 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f0000001240)=0x3, 0x5, 0xffff7ffc, 0x0, &(0x7f0000001200)=0x3, 0x85000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup2(r6, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x58, r10, 0x1, 0x70bd24, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "508ac195ffda62d1c0c8734951cc4a1d977458ffe8"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56f4b, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0x801e}, {0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x6, 0x4, 0x1, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0x1, 0xfff, 0x401, 0x2, 0x5, 0x1, 0x6}}, {0x10, 0x2, [0xfff2, 0x6, 0x52be, 0x358, 0x0, 0xafc1]}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m8.621277432s ago: executing program 0 (id=834): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 10m6.815124515s ago: executing program 0 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x7, 0x2, "386e3b6a3f01"}}) 9m53.257566296s ago: executing program 44 (id=833): r0 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f0000001240)=0x3, 0x5, 0xffff7ffc, 0x0, &(0x7f0000001200)=0x3, 0x85000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x3, 0xff) r7 = dup2(r6, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x58, r10, 0x1, 0x70bd24, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "508ac195ffda62d1c0c8734951cc4a1d977458ffe8"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56f4b, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0x801e}, {0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x6, 0x4, 0x1, 0x5, 0x4, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x3, 0x1, 0xfff, 0x401, 0x2, 0x5, 0x1, 0x6}}, {0x10, 0x2, [0xfff2, 0x6, 0x52be, 0x358, 0x0, 0xafc1]}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m51.490985752s ago: executing program 45 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x7, 0x2, "386e3b6a3f01"}}) 8m2.213689184s ago: executing program 5 (id=1126): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) 8m1.033113116s ago: executing program 5 (id=1130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7fffffff, 0x1}}, 0x20) 7m59.271994386s ago: executing program 5 (id=1134): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 7m57.251984268s ago: executing program 5 (id=1139): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001cc0)="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", 0x22b}, {&(0x7f0000000a40)="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", 0x20a}], 0x2}, 0x0) 7m56.623172466s ago: executing program 5 (id=1143): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = eventfd2(0xff, 0x80001) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) 7m53.891749391s ago: executing program 5 (id=1149): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000dc0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) r4 = eventfd2(0x1, 0x0) r5 = epoll_create1(0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r5, 0x0, 0x0, 0x5e}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0x0, 0xff38, 0x3, 0x3}}}}, 0xd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@grpid}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noload}, {@data_err_ignore}, {@dax_never, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x469, &(0x7f0000000e40)="$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") 7m37.963927583s ago: executing program 46 (id=1149): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000dc0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) r4 = eventfd2(0x1, 0x0) r5 = epoll_create1(0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r5, 0x0, 0x0, 0x5e}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0x0, 0xff38, 0x3, 0x3}}}}, 0xd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@grpid}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noload}, {@data_err_ignore}, {@dax_never, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x469, &(0x7f0000000e40)="$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") 3m1.468815579s ago: executing program 7 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000400)={[{@nodatacow}, {@subvol={'subvol', 0x3d, 'subj_type'}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@subvol={'subvol', 0x3d, 'sd_spread\x00R\xf3Q\xcd\x82\x97\xf1i\x84\r\x884\xect\xd2}\xec\xebQ\x88\x9az\xf4\xa1\x9eUk`\x8f\x17\xc62\xa8\xc1\xc6\x82<\xa4~ck\x16\xa3\x98w^?\xb5\x17\x14\x88{\x93\xe7\"z\xfb\f0\x8f\xd4w\xc9R\x88T\xc2\x1a\x8b\x02\xbd\x13\xe7\xb1{(\xb8Fg\x18\xe2P\xcd1\xbf)\xc1\xc2yEm\xbddG\xe7\x10\xfe\xa2\xb1t\x93a1H\\\xb9\xc5\xad\x02\xc3e\x05\x10\x88v\xdd\x0e\f\x8a\xdd`\xd7\a\xa3O~\x1aO\x96\xb6\xde\x1fU\xb14Z\x83\xa9p\x90Y\xe2\xd0+\xb4\x94/k\x10O\xfb\r\xf7\xc8.\xec5\xea\x11\x9f\f\xb6\x1c\xf4\xa2\xc7\x14L\xce\x81O'}}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@discard}], [{@euid_lt}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, 'ref_verify'}}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") 2m58.017439171s ago: executing program 7 (id=1725): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14419e5465f0006fc8afa8e488a8", 0xe, 0x0, &(0x7f00000005c0)={0x11, 0x0, r1, 0x1, 0x40}, 0x14) 2m57.319707876s ago: executing program 7 (id=1731): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = eventfd2(0xff, 0x80001) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) getpid() ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r2, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) 2m55.90898609s ago: executing program 7 (id=1733): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=@newlink={0x2c, 0x10, 0x401, 0xfffffffe, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 2m54.908703064s ago: executing program 7 (id=1736): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 2m53.992527787s ago: executing program 7 (id=1741): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) r5 = eventfd2(0x1, 0x0) r6 = epoll_create1(0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r6, 0x0, 0x0, 0x5e}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0x0, 0xff38, 0x3, 0x3}}}}, 0xd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@grpid}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noload}, {@data_err_ignore}, {@dax_never, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x469, &(0x7f0000000e40)="$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") 2m38.836568404s ago: executing program 47 (id=1741): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) r5 = eventfd2(0x1, 0x0) r6 = epoll_create1(0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000240)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x9, r6, 0x0, 0x0, 0x5e}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0x0, 0xff38, 0x3, 0x3}}}}, 0xd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@grpid}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@noload}, {@data_err_ignore}, {@dax_never, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x469, &(0x7f0000000e40)="$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") 22.683684762s ago: executing program 9 (id=2236): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x201) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r1, 0x0, 0x0, 0x9000f4) 17.939846391s ago: executing program 9 (id=2252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 17.563623871s ago: executing program 3 (id=2253): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000000a80)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 16.824048502s ago: executing program 3 (id=2257): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 15.467085284s ago: executing program 9 (id=2261): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r1, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) 15.248964096s ago: executing program 3 (id=2262): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGRDESC(r1, 0x4008c002, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0}) 13.418857983s ago: executing program 6 (id=2266): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) 12.79504036s ago: executing program 8 (id=2267): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x2c}}, 0x0) 12.374665515s ago: executing program 4 (id=2268): r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@loopback, @local}, 0xc) 12.232483528s ago: executing program 9 (id=2270): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) 10.840025364s ago: executing program 8 (id=2271): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x6d42, &(0x7f0000000280)={0x0, 0x32c8, 0x1000}, &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) 10.649454717s ago: executing program 6 (id=2272): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r1, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) 10.555942089s ago: executing program 4 (id=2273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) 10.481828559s ago: executing program 2 (id=2274): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(0x0) syz_usbip_server_init(0x1) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r4, r4, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=r4}, 0x20) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) syz_init_net_socket$llc(0x1a, 0x802, 0x0) socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.373684254s ago: executing program 4 (id=2275): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20002000}, 0x8004) 9.507416262s ago: executing program 6 (id=2276): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c00010062697477697365000800028001"], 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 8.431132158s ago: executing program 2 (id=2277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r3, 0x1, 0x70bd2d, 0xffffffff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000, 0x0, 0x408c0}, 0x0) 8.39735418s ago: executing program 8 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000845}, 0x40000) 8.39420364s ago: executing program 3 (id=2279): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = eventfd2(0xff, 0x80001) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r2, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) 8.110549556s ago: executing program 4 (id=2280): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x169001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 8.054524673s ago: executing program 6 (id=2281): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.008757666s ago: executing program 2 (id=2282): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r1, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) 6.981233205s ago: executing program 8 (id=2283): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x6}}}, 0x7) 5.553445128s ago: executing program 2 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_a, @broadcast, @random="b138179a5987"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0xb, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x6}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x19}]}]}, 0x94}}, 0x0) 5.261639487s ago: executing program 8 (id=2285): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) 5.073682879s ago: executing program 3 (id=2286): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x3f0, &(0x7f00000008c0)="$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") ioperm(0x284, 0x7f, 0xe3) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8", 0x4d}, {0x0}], 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$UHID_INPUT(r2, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$inet(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) 3.399434587s ago: executing program 2 (id=2287): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @remote, 0x80000}}}, 0x108) 3.071877113s ago: executing program 4 (id=2288): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r1, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) 2.96588177s ago: executing program 6 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 2.856378816s ago: executing program 9 (id=2290): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(0x0) syz_usbip_server_init(0x1) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r4, r4, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=r4}, 0x20) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) syz_init_net_socket$llc(0x1a, 0x802, 0x0) socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.106248891s ago: executing program 2 (id=2291): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002, 0x7f6b865f85bebf9c}, 0x0) 1.105592509s ago: executing program 9 (id=2292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x4c, r2, 0xb97534d5fe9704cf, 0x800004, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x782}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.039113398s ago: executing program 3 (id=2293): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000016c0)={0x0, "47b2e476de14b15cc06b4bd55577198e"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.038527971s ago: executing program 8 (id=2294): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "18f19185e9e9e293"}}, 0x38}}, 0x0) 124.329044ms ago: executing program 4 (id=2295): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x1, 0x334, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000100"}}, 0x48}}, 0x0) 0s ago: executing program 6 (id=2296): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x2d0634a4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) accept4(r1, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300), 0x1) kernel console output (not intermixed with test programs): eep mac addresses unique to avoid problems! [ 1287.025241][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.533544][T13347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.673041][T13347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.681850][T13347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.652920][T13347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.180293][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.273303][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.979343][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.011795][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.050683][T13778] loop9: detected capacity change from 0 to 4096 [ 1294.068584][T13778] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1294.258853][T13788] loop7: detected capacity change from 0 to 512 [ 1294.403442][T13793] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.1175'. [ 1294.427688][T13793] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.1175'. [ 1294.429826][T13788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.542311][T13778] ntfs3(loop9): failed to convert "076c" to cp932 [ 1294.816941][ T5887] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1295.283206][ T5887] usb 9-1: Using ep0 maxpacket: 8 [ 1295.415721][ T5887] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1295.641999][ T5887] usb 9-1: config 179 has no interface number 0 [ 1295.767344][ T5887] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 1295.853249][ T5887] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1296.053901][ T5887] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1296.153994][ T9738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.199363][ T5887] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1296.266857][ T5887] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1296.520953][ T5887] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1296.528970][ T5887] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1296.545074][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.560944][T13794] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1296.701336][T13812] loop6: detected capacity change from 0 to 512 [ 1297.527739][T13812] ext4: Bad value for 'dax' [ 1297.532525][ T5887] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input15 [ 1297.880546][T13815] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1580'. [ 1298.153429][ T10] usb 9-1: USB disconnect, device number 11 [ 1298.153481][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1298.168687][ T10] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1298.182161][T13815] unsupported nlmsg_type 40 [ 1301.093273][ T969] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1301.289558][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 1301.315454][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.340001][ T969] usb 4-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 1301.371773][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.412929][ T5880] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1301.431754][ T969] usb 4-1: config 0 descriptor?? [ 1301.574616][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 1301.622644][ T5880] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1301.698306][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.787233][ T5880] usb 9-1: Product: syz [ 1301.857091][ T5880] usb 9-1: Manufacturer: syz [ 1301.927398][ T5880] usb 9-1: SerialNumber: syz [ 1302.138394][ T5880] usb 9-1: config 0 descriptor?? [ 1302.495902][ T5880] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1302.544260][ T969] usb 4-1: USB disconnect, device number 13 [ 1302.548195][ T5880] usb 9-1: setting power ON [ 1302.586005][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 1302.672515][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1302.732218][ T5880] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1302.750209][ T5880] usb 9-1: media controller created [ 1302.772988][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1302.940092][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1303.070752][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.113054][ T969] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1303.212376][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.401953][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.445805][ T969] usb 5-1: Using ep0 maxpacket: 8 [ 1303.709113][ T24] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1303.868197][ T969] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1303.967007][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.034985][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.188742][ T969] usb 5-1: Product: syz [ 1304.281670][ T969] usb 5-1: Manufacturer: syz [ 1304.395577][ T969] usb 5-1: SerialNumber: syz [ 1304.404592][ T24] usb 10-1: config 0 descriptor?? [ 1304.875633][ T969] usb 5-1: config 0 descriptor?? [ 1305.288335][T13887] loop6: detected capacity change from 0 to 256 [ 1305.306900][ T969] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1305.321194][ T969] usb 5-1: setting power ON [ 1305.331820][ T969] dvb-usb: bulk message failed: -22 (2/0) [ 1305.351948][T13887] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1305.372564][T13887] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1305.388240][ T969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1305.433544][ C1] raw-gadget.2 gadget.9: ignoring, device is not running [ 1305.441046][ C1] raw-gadget.2 gadget.9: ignoring, device is not running [ 1305.448656][ C1] raw-gadget.2 gadget.9: ignoring, device is not running [ 1305.456221][ C1] raw-gadget.2 gadget.9: ignoring, device is not running [ 1305.463933][ C1] raw-gadget.2 gadget.9: ignoring, device is not running [ 1305.474523][ T24] usbhid 10-1:0.0: can't add hid device: -32 [ 1305.482692][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1305.573121][T13882] dvb-usb: bulk message failed: -22 (3/0) [ 1305.663161][T13882] usb 9-1: gpio_write failed. [ 1305.797078][ T969] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1305.846976][T13882] cxusb: i2c wr: len=80 is too big! [ 1305.846976][T13882] [ 1305.867993][ T24] usb 10-1: USB disconnect, device number 8 [ 1306.227371][ T5880] usb 9-1: selecting invalid altsetting 6 [ 1306.752991][ T969] usb 5-1: media controller created [ 1306.933841][ T5880] usb 9-1: digital interface selection failed (-22) [ 1306.947920][ T5880] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1306.977604][ T5880] usb 9-1: setting power OFF [ 1306.990974][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 1307.375920][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1307.399260][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1307.461138][ T5880] (NULL device *): no alternate interface [ 1307.485148][ T969] usb 5-1: selecting invalid altsetting 6 [ 1307.548514][ T969] usb 5-1: digital interface selection failed (-22) [ 1307.558806][ T969] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1307.572568][ T969] usb 5-1: setting power OFF [ 1307.586366][ T969] dvb-usb: bulk message failed: -22 (2/0) [ 1307.592325][ T969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1307.619105][ T969] (NULL device *): no alternate interface [ 1308.638344][ T969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1308.675352][ T969] usb 5-1: USB disconnect, device number 12 [ 1309.041061][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1309.194546][T13917] random: crng reseeded on system resumption [ 1309.236400][ T5823] Bluetooth: hci8: unexpected event for opcode 0x2011 [ 1309.236538][ T5880] usb 9-1: USB disconnect, device number 12 [ 1310.013476][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.023902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.669428][T13945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.680391][T13945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.843733][T13945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.861697][T13945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.967685][T13945] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.977558][T13945] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.988730][T13945] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.998038][ T8901] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1311.031613][T13945] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.197494][ T8901] usb 10-1: Using ep0 maxpacket: 16 [ 1311.399709][ T8901] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 150 [ 1311.540013][ T8901] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1311.744660][ T8901] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=e6.40 [ 1311.755155][ T8901] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1311.782450][ T8901] usb 10-1: Product: syz [ 1311.798767][ T8901] usb 10-1: Manufacturer: syz [ 1311.827388][T13949] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1313.273155][ T5823] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 1313.282318][ T5823] Bluetooth: hci8: Injecting HCI hardware error event [ 1313.884882][ T5833] Bluetooth: hci8: hardware error 0x00 [ 1315.466865][ T8901] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1315.484798][ T8901] usb 10-1: USB disconnect, device number 9 [ 1315.593581][T13966] Bluetooth: MGMT ver 1.23 [ 1316.000044][ T5833] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1316.094113][ T8901] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1316.616714][ T8901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1316.647976][ T8901] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1316.690047][ T8901] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1316.833444][ T8902] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1317.753348][ T8901] usb 10-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1317.762655][ T8901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.804973][ T8901] usb 10-1: config 0 descriptor?? [ 1317.811207][T13967] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1317.942971][ T8902] usb 9-1: Using ep0 maxpacket: 32 [ 1317.951047][ T8902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.985602][ T8902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.020239][ T8902] usb 9-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1318.359954][ T8902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.373562][ T8901] aureal 0003:0755:2626.0007: global environment stack underflow [ 1318.407036][ T8901] aureal 0003:0755:2626.0007: item 0 0 1 11 parsing failed [ 1318.419318][ T8901] aureal 0003:0755:2626.0007: probe with driver aureal failed with error -22 [ 1318.546845][T13999] loop7: detected capacity change from 0 to 512 [ 1318.563704][T13999] ext4: Bad value for 'dax' [ 1319.079731][ T8902] usb 9-1: config 0 descriptor?? [ 1319.183059][T11180] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1319.383028][T11180] usb 4-1: Using ep0 maxpacket: 32 [ 1319.433093][T11180] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1319.489990][T11180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.493694][ T8901] usb 10-1: USB disconnect, device number 10 [ 1319.518331][ T8902] hid (null): report_id 0 is invalid [ 1319.540634][T11180] usb 4-1: config 0 descriptor?? [ 1319.571182][ T8902] hid-u2fzero 0003:10C4:8ACF.0008: report_id 0 is invalid [ 1319.638631][ T8902] hid-u2fzero 0003:10C4:8ACF.0008: item 0 0 1 8 parsing failed [ 1319.659205][T11180] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1319.727123][ T8902] hid-u2fzero 0003:10C4:8ACF.0008: probe with driver hid-u2fzero failed with error -22 [ 1321.785702][T11180] gspca_nw80x: reg_w err -71 [ 1321.791042][T11180] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1321.816260][T11180] usb 4-1: USB disconnect, device number 15 [ 1322.434933][ T8902] usb 9-1: USB disconnect, device number 13 [ 1322.893002][ T8901] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1323.211309][ T8901] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1323.431491][ T8901] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.607505][ T8901] usb 10-1: Product: syz [ 1323.697045][ T8901] usb 10-1: Manufacturer: syz [ 1323.763061][ T8901] usb 10-1: SerialNumber: syz [ 1323.846036][ T8901] usb 10-1: config 0 descriptor?? [ 1323.944538][T14044] loop7: detected capacity change from 0 to 256 [ 1324.062363][T14044] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1324.135217][T14044] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1324.389454][ T8901] airspy 10-1:0.0: Board ID: 00 [ 1324.409805][ T8901] airspy 10-1:0.0: Firmware version: [ 1324.593770][ T8901] airspy 10-1:0.0: usb_control_msg() failed -71 request 11 [ 1324.848317][ T8901] airspy 10-1:0.0: Registered as swradio24 [ 1324.883143][ T8901] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1324.993803][ T8901] usb 10-1: USB disconnect, device number 11 [ 1325.403119][T11180] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1325.622872][T11180] usb 5-1: Using ep0 maxpacket: 8 [ 1325.630446][T11180] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1325.744921][T11180] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1325.765440][T11180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.796463][T11180] usb 5-1: config 0 descriptor?? [ 1326.330848][T11180] kye 0003:0458:4018.0009: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 1327.233302][T11180] usb 5-1: USB disconnect, device number 13 [ 1327.699139][T14084] loop8: detected capacity change from 0 to 64 [ 1327.730833][T14076] fido_id[14076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1328.092988][ T8902] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1328.982946][ T8902] usb 10-1: Using ep0 maxpacket: 32 [ 1329.001928][ T8902] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1329.053477][ T8902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.122892][ T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1329.140244][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1666'. [ 1329.215144][ T8902] usb 10-1: config 0 descriptor?? [ 1329.268145][ T8902] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1329.280734][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1666'. [ 1329.326541][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 1329.358345][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1329.358720][T14101] netlink: 'syz.4.1666': attribute type 20 has an invalid length. [ 1329.388847][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1329.426379][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1329.457592][ T969] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1329.476282][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1329.505850][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.586310][ T47] usbtmc 4-1:16.0: bulk endpoints not found [ 1329.665900][ T969] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.707670][ T969] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1329.741211][ T969] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1329.803548][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.817210][ T8901] usb 4-1: USB disconnect, device number 16 [ 1329.891423][ T969] usb 7-1: config 0 descriptor?? [ 1329.892520][ T8902] gspca_nw80x: reg_w err -71 [ 1329.909471][ T8902] nw80x 10-1:0.0: probe with driver nw80x failed with error -71 [ 1329.964867][ T8902] usb 10-1: USB disconnect, device number 12 [ 1330.263030][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1330.483904][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1330.523844][ T969] hid-alps 0003:044E:1215.000A: collection stack underflow [ 1330.673727][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.758807][ T969] hid-alps 0003:044E:1215.000A: item 0 2 0 12 parsing failed [ 1331.001463][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.063238][ T969] hid-alps 0003:044E:1215.000A: parse failed [ 1331.202899][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1331.212246][ T969] hid-alps 0003:044E:1215.000A: probe with driver hid-alps failed with error -22 [ 1331.285405][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.338236][ T969] usb 7-1: USB disconnect, device number 3 [ 1331.369925][ T24] usb 5-1: config 0 descriptor?? [ 1331.836212][ T24] lua 0003:1E7D:2C2E.000B: item fetching failed at offset 5/7 [ 1331.853765][ T24] lua 0003:1E7D:2C2E.000B: parse failed [ 1331.859722][ T24] lua 0003:1E7D:2C2E.000B: probe with driver lua failed with error -22 [ 1332.039025][ T8902] usb 5-1: USB disconnect, device number 14 [ 1335.966680][T14178] loop6: detected capacity change from 0 to 512 [ 1338.203136][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 1338.240286][T14199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1697'. [ 1338.799690][T14178] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 1339.752637][T14214] loop9: detected capacity change from 0 to 512 [ 1339.768785][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1339.897365][T14214] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.1703: invalid indirect mapped block 4294967295 (level 1) [ 1339.979699][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1340.027193][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1340.028314][T14214] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.1703: invalid indirect mapped block 4294967295 (level 1) [ 1340.052921][ T969] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1340.072129][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1340.140602][ T10] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1340.143353][T14214] EXT4-fs (loop9): 2 truncates cleaned up [ 1340.180518][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.205329][T14214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.218746][ T10] usb 4-1: config 0 descriptor?? [ 1340.246241][T14205] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1340.283298][ T969] usb 7-1: Using ep0 maxpacket: 16 [ 1340.296374][ T969] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1340.333705][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.341771][ T969] usb 7-1: Product: syz [ 1340.382973][ T969] usb 7-1: Manufacturer: syz [ 1340.387649][ T969] usb 7-1: SerialNumber: syz [ 1340.440720][ T969] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1340.447531][ T969] r8152-cfgselector 7-1: config 0 descriptor?? [ 1340.763021][ T10] aureal 0003:0755:2626.000C: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 1340.784893][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.814673][ T10] aureal 0003:0755:2626.000C: unknown main item tag 0x6 [ 1340.821728][ T10] aureal 0003:0755:2626.000C: report_id 29495 is invalid [ 1340.899770][ T10] aureal 0003:0755:2626.000C: item 0 2 1 8 parsing failed [ 1340.944097][ T10] aureal 0003:0755:2626.000C: probe with driver aureal failed with error -22 [ 1341.005733][ T969] r8152-cfgselector 7-1: USB disconnect, device number 4 [ 1341.014933][ T10] usb 4-1: USB disconnect, device number 17 [ 1341.228266][T14241] loop9: detected capacity change from 0 to 512 [ 1341.350706][T14241] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.843176][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1715'. [ 1342.933276][T14257] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1715'. [ 1343.064059][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.660776][T14269] loop9: detected capacity change from 0 to 256 [ 1344.451597][T14272] loop7: detected capacity change from 0 to 32768 [ 1344.472282][T14272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1720 (14272) [ 1344.494207][T14269] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1344.507511][T14272] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1344.517965][T14272] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 1344.526790][T14272] BTRFS info (device loop7): using free-space-tree [ 1344.572421][T14269] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1344.764106][T14290] loop6: detected capacity change from 0 to 8 [ 1346.152146][T14272] BTRFS info (device loop7): rebuilding free space tree [ 1346.383598][T14272] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1346.720053][T14302] loop9: detected capacity change from 0 to 256 [ 1346.856960][T14302] exfat: Bad value for 'dmask' [ 1346.993501][ T8901] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1347.233269][ T8901] usb 4-1: Using ep0 maxpacket: 16 [ 1347.271071][ T8901] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1347.315937][ T8901] usb 4-1: config 0 has no interface number 0 [ 1347.342605][ T8901] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1347.422926][ T8901] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1347.507715][ T8901] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1347.566809][ T8901] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1347.599721][T14318] support for the xor transformation has been removed. [ 1347.613100][ T8901] usb 4-1: Product: syz [ 1347.617311][ T8901] usb 4-1: SerialNumber: syz [ 1348.645369][ T8901] usb 4-1: config 0 descriptor?? [ 1348.682250][ T8901] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1348.994930][ T8901] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 1349.027522][T14327] loop6: detected capacity change from 0 to 512 [ 1349.084558][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.093220][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.103915][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.111201][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.118854][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.126633][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.133899][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.141272][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.148725][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.157390][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1349.225815][ T8901] usb 4-1: USB disconnect, device number 18 [ 1349.231857][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1349.291452][T14327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.556130][T14338] netlink: 'syz.9.1735': attribute type 16 has an invalid length. [ 1349.625277][T14338] netlink: 'syz.9.1735': attribute type 3 has an invalid length. [ 1349.693091][T14338] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.1735'. [ 1350.498711][ T8901] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1350.592601][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.508949][ T969] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1353.735518][ T969] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1353.993076][ T969] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1354.291365][ T969] usb 9-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1354.475389][ T969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.575910][ T969] usb 9-1: config 0 descriptor?? [ 1354.643288][T14370] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1354.997465][T14392] loop9: detected capacity change from 0 to 512 [ 1355.095223][T14392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.398119][ T8901] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1355.424597][ T969] pantherlord 0003:0810:0001.000D: unknown main item tag 0x3 [ 1355.474833][T14403] loop7: detected capacity change from 0 to 512 [ 1355.482548][T14403] ext4: Bad value for 'dax' [ 1355.601694][ T969] pantherlord 0003:0810:0001.000D: hidraw0: USB HID vff.fc Device [HID 0810:0001] on usb-dummy_hcd.8-1/input0 [ 1355.945894][ T969] pantherlord 0003:0810:0001.000D: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1356.063562][T14406] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1755'. [ 1356.106353][ T969] usb 9-1: USB disconnect, device number 14 [ 1356.324273][ T8901] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 1356.336352][ T8901] usb 5-1: config 0 has no interface number 0 [ 1356.342616][ T8901] usb 5-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1356.378121][ T8901] usb 5-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1356.393366][ T8901] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1356.405477][ T8901] usb 5-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1356.415496][ T8901] usb 5-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1356.435652][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.513782][ T8901] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1356.571508][ T8901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.637871][ T8901] usb 5-1: Product: syz [ 1356.642129][ T8901] usb 5-1: Manufacturer: syz [ 1356.702279][ T8901] usb 5-1: SerialNumber: syz [ 1356.763584][ T8901] usb 5-1: config 0 descriptor?? [ 1356.844676][T14408] fido_id[14408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1357.508935][T14417] xt_hashlimit: size too large, truncated to 1048576 [ 1357.799001][T14397] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1357.806294][T14418] loop9: detected capacity change from 0 to 256 [ 1358.292518][ T8901] usb 5-1: can't set config #0, error -71 [ 1358.310775][ T8901] usb 5-1: USB disconnect, device number 15 [ 1358.354226][T14418] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1358.467789][T14418] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1363.769592][T14459] loop8: detected capacity change from 0 to 512 [ 1363.893897][T14459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.275421][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.372876][ T969] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1365.625583][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 1365.660424][ T969] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1365.698693][ T969] usb 5-1: config 0 has no interface number 0 [ 1365.722711][ T969] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1365.784094][ T969] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1365.846929][ T969] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1365.883138][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.891194][ T969] usb 5-1: Product: syz [ 1365.935181][ T969] usb 5-1: Manufacturer: syz [ 1365.941062][ T969] usb 5-1: SerialNumber: syz [ 1365.970470][ T969] usb 5-1: config 0 descriptor?? [ 1366.073290][ T8902] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1366.262881][ T8902] usb 7-1: Using ep0 maxpacket: 32 [ 1366.280765][ T8902] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1366.311198][ T8902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.390224][ T8902] usb 7-1: config 0 descriptor?? [ 1366.621563][ T8902] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1366.671117][ T969] appletouch 5-1:0.85: Geyser mode initialized. [ 1366.693483][ T969] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input17 [ 1366.695472][ T8902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1366.807798][ T8902] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1366.837829][ T8902] usb 7-1: media controller created [ 1366.847967][T14492] loop9: detected capacity change from 0 to 512 [ 1366.879633][ T969] usb 5-1: USB disconnect, device number 16 [ 1366.937381][T14494] block nbd3: shutting down sockets [ 1366.989492][T14492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.990050][ T8902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1368.675012][ T969] appletouch 5-1:0.85: input: appletouch disconnected [ 1368.766183][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1368.860495][ T8902] az6027: usb out operation failed. (-71) [ 1369.243898][ T8902] az6027: usb out operation failed. (-71) [ 1369.249698][ T8902] stb0899_attach: Driver disabled by Kconfig [ 1369.264922][ T8902] az6027: no front-end attached [ 1369.264922][ T8902] [ 1369.281332][ T8902] az6027: usb out operation failed. (-71) [ 1369.287202][ T8902] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1369.297289][ T8902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input18 [ 1369.312444][ T8902] dvb-usb: schedule remote query interval to 400 msecs. [ 1369.319525][ T8902] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1369.330751][ T8902] usb 7-1: USB disconnect, device number 5 [ 1369.453256][ T969] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1369.673302][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 1369.694076][ T969] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1369.720496][ T969] usb 4-1: config 0 has no interface number 0 [ 1369.807424][T14518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1369.818909][T14518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1369.827214][T14518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1369.837472][T14518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1369.847186][T14518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1369.864408][ T969] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1369.912280][ T8902] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1369.924244][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.753331][ T969] usb 4-1: Product: syz [ 1370.757585][ T969] usb 4-1: Manufacturer: syz [ 1370.762233][ T969] usb 4-1: SerialNumber: syz [ 1370.818807][ T969] usb 4-1: config 0 descriptor?? [ 1370.836986][ T969] smsc95xx v2.0.0 [ 1371.378971][T14532] loop8: detected capacity change from 0 to 512 [ 1371.480835][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.492939][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.517220][T14532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1371.570762][ T969] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1371.594240][ T969] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1371.634922][T14532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.638197][ T5980] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.653066][ T969] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1371.695550][T14532] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.723737][ T969] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1371.925135][ T969] usb 4-1: USB disconnect, device number 19 [ 1371.993522][ T5833] Bluetooth: hci1: command tx timeout [ 1372.306494][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.505045][ T5980] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.022966][T14554] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1373.029638][T14554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1373.037606][T14554] vhci_hcd vhci_hcd.0: Device attached [ 1373.306327][T14560] loop9: detected capacity change from 0 to 512 [ 1373.337579][T14558] vhci_hcd: connection closed [ 1373.339280][ T6039] vhci_hcd: stop threads [ 1373.356455][ T5980] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.367742][ T6039] vhci_hcd: release socket [ 1373.367813][ T6039] vhci_hcd: disconnect device [ 1373.379378][ T5880] vhci_hcd: vhci_device speed not set [ 1373.398923][T14560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1373.513095][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1373.729332][ T5980] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.792882][ T5887] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1373.941475][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.983215][ T5887] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1373.992331][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.032950][ T5887] usb 4-1: Product: syz [ 1374.043332][ T8902] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1374.053025][ T5887] usb 4-1: Manufacturer: syz [ 1374.057666][ T5887] usb 4-1: SerialNumber: syz [ 1374.073239][T14518] Bluetooth: hci1: command tx timeout [ 1374.201035][ T5887] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1374.235669][ T8902] usb 5-1: Using ep0 maxpacket: 32 [ 1374.255987][ T8902] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1374.277260][T14512] chnl_net:caif_netlink_parms(): no params data found [ 1374.293517][ T8902] usb 5-1: config 0 has no interface number 0 [ 1374.299758][ T8902] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.423456][ T8902] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1374.492706][ T8902] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1374.512027][ T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1375.334478][ T8902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.342569][ T8902] usb 5-1: Product: syz [ 1375.353244][ T8902] usb 5-1: Manufacturer: syz [ 1375.357905][ T8902] usb 5-1: SerialNumber: syz [ 1375.444436][ T8902] usb 5-1: config 0 descriptor?? [ 1375.937658][T14578] loop6: detected capacity change from 0 to 512 [ 1376.040289][ T5980] bridge_slave_1: left allmulticast mode [ 1376.055993][T14578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.112854][ T5980] bridge_slave_1: left promiscuous mode [ 1376.143737][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.168180][T14518] Bluetooth: hci1: command tx timeout [ 1376.257789][T14588] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1376.266859][T14588] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1376.281867][ T5980] bridge_slave_0: left allmulticast mode [ 1376.309040][ T8902] appletouch 5-1:0.85: Geyser mode initialized. [ 1376.334585][ T5980] bridge_slave_0: left promiscuous mode [ 1376.372967][ T8902] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input19 [ 1376.393940][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.465616][ C0] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1376.712846][ T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1376.732719][ T47] ath9k_htc: Failed to initialize the device [ 1377.110630][T11180] usb 5-1: USB disconnect, device number 17 [ 1377.225103][ T47] usb 4-1: ath9k_htc: USB layer deinitialized [ 1377.386379][ T5887] usb 4-1: USB disconnect, device number 20 [ 1377.592153][T11180] appletouch 5-1:0.85: input: appletouch disconnected [ 1377.633831][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.240747][T14518] Bluetooth: hci1: command tx timeout [ 1380.060789][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.083622][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.096551][ T5980] bond0 (unregistering): Released all slaves [ 1380.615131][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.622645][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.630403][T14512] bridge_slave_0: entered allmulticast mode [ 1380.643398][T14512] bridge_slave_0: entered promiscuous mode [ 1380.676418][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.713207][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.735403][T14512] bridge_slave_1: entered allmulticast mode [ 1380.764153][T14512] bridge_slave_1: entered promiscuous mode [ 1381.692900][ T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1382.074316][ T5880] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1382.136452][ T47] usb 5-1: config 0 has no interfaces? [ 1382.142070][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1383.038920][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.060388][ T47] usb 5-1: config 0 descriptor?? [ 1383.202449][ T5880] usb 10-1: config 0 has an invalid interface number: 189 but max is 0 [ 1383.226037][ T5880] usb 10-1: config 0 has no interface number 0 [ 1383.242659][ T5880] usb 10-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1383.284770][ T47] usb 5-1: USB disconnect, device number 18 [ 1383.289050][ T5880] usb 10-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1383.305039][T14512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.336805][T14512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.346301][ T5880] usb 10-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1383.472968][ T8902] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1383.516055][ T5880] usb 10-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1383.619314][ T5880] usb 10-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1383.663244][ T5880] usb 10-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1383.679547][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.688277][ T5880] usb 10-1: Product: syz [ 1383.692585][ T5880] usb 10-1: Manufacturer: syz [ 1383.697721][ T5880] usb 10-1: SerialNumber: syz [ 1383.713628][ T8902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1383.735466][ T8902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.747225][ T5880] usb 10-1: config 0 descriptor?? [ 1383.791800][ T8902] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1383.801799][T14640] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1383.809559][ T8902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.841855][ T5880] ums-alauda 10-1:0.189: USB Mass Storage device detected [ 1383.854719][ T8902] usb 4-1: config 0 descriptor?? [ 1383.963579][ T5880] scsi host1: usb-storage 10-1:0.189 [ 1383.991068][ T5980] hsr_slave_0: left promiscuous mode [ 1384.085290][ T5880] usb 10-1: USB disconnect, device number 13 [ 1384.114939][ T5980] hsr_slave_1: left promiscuous mode [ 1384.144069][T14662] openvswitch: netlink: Multiple metadata blocks provided [ 1384.159322][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.201357][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.264529][T14663] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1821'. [ 1384.310571][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.341299][ T8902] magicmouse 0003:05AC:0265.000E: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 1384.356556][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.527249][ T5980] veth1_macvtap: left promiscuous mode [ 1384.562282][ T5880] usb 4-1: USB disconnect, device number 21 [ 1384.571945][ T5980] veth0_macvtap: left promiscuous mode [ 1384.596095][ T5980] veth1_vlan: left promiscuous mode [ 1384.601524][ T5980] veth0_vlan: left promiscuous mode [ 1384.726144][T14666] fido_id[14666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1384.863843][ T8902] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1385.193488][ T8902] usb 9-1: Using ep0 maxpacket: 16 [ 1385.228246][ T8902] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.326389][ T8902] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.429520][ T8902] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1385.515936][ T8902] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1385.566733][ T8902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.623663][ T8902] usb 9-1: config 0 descriptor?? [ 1386.014305][ T5887] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1386.083500][T14670] loop8: detected capacity change from 0 to 256 [ 1386.098144][T14670] vfat: Unknown parameter 'uni_xý' [ 1386.206722][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 1386.347572][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1386.530755][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1386.572999][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1386.607693][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.660366][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1386.693952][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.905868][ T8902] hid (null): invalid report_size 1953394281 [ 1386.912018][ T8902] hid (null): unknown global tag 0xe [ 1386.918021][ T8902] hid (null): unknown global tag 0xc [ 1386.924422][ T8902] hid (null): nested delimiters [ 1386.943313][ T8902] hid (null): unknown global tag 0xd [ 1386.953813][ T8902] hid (null): unknown global tag 0xe [ 1386.959408][ T8902] hid (null): unknown global tag 0xc [ 1386.964866][ T8902] hid (null): global environment stack overflow [ 1387.003006][ T5887] usb 5-1: usb_control_msg returned -32 [ 1387.041203][ T8902] usb 9-1: USB disconnect, device number 15 [ 1387.042904][ T5887] usbtmc 5-1:16.0: can't read capabilities [ 1387.142202][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 1387.160049][ T5887] usb 5-1: USB disconnect, device number 19 [ 1388.123147][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 1391.278002][T14512] team0: Port device team_slave_0 added [ 1391.352020][T14512] team0: Port device team_slave_1 added [ 1391.671330][T14512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.706238][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.788737][T14512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.801530][ T8902] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1391.818939][T14512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.826463][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.855087][ T47] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1391.856778][T14512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.008242][ T8902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.019365][T14724] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1392.025903][T14724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1392.033562][T14724] vhci_hcd vhci_hcd.0: Device attached [ 1392.042191][ T8902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.053199][ T8902] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1392.071381][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1392.082834][ T8902] usb 9-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 1392.319876][ T8902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.336805][ T8902] usb 9-1: config 0 descriptor?? [ 1392.354422][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.379145][T14725] vhci_hcd: connection closed [ 1392.382059][ T1139] vhci_hcd: stop threads [ 1392.393194][ T47] usb 10-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1392.398832][ T1139] vhci_hcd: release socket [ 1392.408814][ T1139] vhci_hcd: disconnect device [ 1392.417787][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.443607][ T8901] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1392.451138][ T8901] usb 39-1: enqueue for inactive port 0 [ 1392.458991][ T47] usb 10-1: config 0 descriptor?? [ 1392.490515][T14512] hsr_slave_0: entered promiscuous mode [ 1392.510800][T14512] hsr_slave_1: entered promiscuous mode [ 1392.531113][T14512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1392.542008][T14512] Cannot create hsr debugfs directory [ 1392.562986][ T8901] vhci_hcd: vhci_device speed not set [ 1392.819935][T14735] loop6: detected capacity change from 0 to 1024 [ 1392.821814][ T8902] thrustmaster 0003:044F:B65A.0010: nested delimiters [ 1392.863963][ T8902] thrustmaster 0003:044F:B65A.0010: item 0 2 2 10 parsing failed [ 1392.873718][T14735] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1392.874373][ T8902] thrustmaster 0003:044F:B65A.0010: parse failed [ 1392.930474][ T8902] thrustmaster 0003:044F:B65A.0010: probe with driver thrustmaster failed with error -22 [ 1392.948507][T14735] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.1848: lblock 1 mapped to illegal pblock 1 (length 1) [ 1392.967954][ T47] magicmouse 0003:05AC:0265.0011: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.9-1/input0 [ 1393.098790][T14735] Quota error (device loop6): write_blk: dquota write failed [ 1393.142948][T14735] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1393.165011][ T8902] usb 9-1: USB disconnect, device number 16 [ 1393.240269][T14735] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1848: Failed to acquire dquot type 0 [ 1393.252849][ T6037] usb 10-1: USB disconnect, device number 14 [ 1393.297871][T14735] EXT4-fs error (device loop6): ext4_free_blocks:6586: comm syz.6.1848: Freeing blocks not in datazone - block = 0, count = 4096 [ 1393.404444][T14735] EXT4-fs error (device loop6): ext4_read_inode_bitmap:138: comm syz.6.1848: Invalid inode bitmap blk 0 in block_group 0 [ 1393.439489][ T5985] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1393.474471][T14735] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 1393.512141][ T5985] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1393.522616][T14735] EXT4-fs (loop6): 1 orphan inode deleted [ 1393.533341][ T5985] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 1393.557367][T14740] fido_id[14740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1393.560516][T14735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.974581][T14735] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm syz.6.1848: lblock 1 mapped to illegal pblock 1 (length 1) [ 1394.140525][T14735] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1 [ 1394.228111][T14735] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 60928 [ 1394.384319][T14735] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1848: Failed to acquire dquot type 0 [ 1394.631760][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.655189][ T1155] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1394.696966][ T1155] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1394.728356][ T1155] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 1394.871775][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1394.930830][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1858'. [ 1395.344128][T14772] loop6: detected capacity change from 0 to 512 [ 1395.421128][T14772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1395.533227][ T8902] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1395.763507][ T8902] usb 10-1: Using ep0 maxpacket: 8 [ 1395.825971][ T8902] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1396.623127][ T8902] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1396.643700][ T8902] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1396.655074][ T8902] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1396.665289][ T8902] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1396.678461][ T8902] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1396.688629][ T8902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.708710][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.939336][ T8902] usb 10-1: GET_CAPABILITIES returned 0 [ 1396.963465][ T8902] usbtmc 10-1:16.0: can't read capabilities [ 1396.990527][T14786] loop8: detected capacity change from 0 to 256 [ 1397.160932][ T8902] usb 10-1: USB disconnect, device number 15 [ 1397.432990][T14786] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1398.362724][T14786] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1399.888147][T14512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1399.969621][T14512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1400.073539][T14512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1402.135012][T14512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1403.449204][T14819] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1879'. [ 1403.931864][T14810] loop6: detected capacity change from 0 to 131072 [ 1403.982296][T14823] loop9: detected capacity change from 0 to 40427 [ 1404.023118][T14810] F2FS-fs (loop6): Invalid log sectors per block(570425347) log sectorsize(9) [ 1404.032079][T14810] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1404.068079][T14823] F2FS-fs (loop9): Invalid log sectorsize (512) [ 1404.074497][T14823] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1404.111945][T14823] F2FS-fs (loop9): invalid crc value [ 1404.131145][T14810] F2FS-fs (loop6): invalid crc value [ 1404.333620][T14823] F2FS-fs (loop9): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:6,ofs:0,cpver:1219692001,blkaddr:4098] [ 1404.481470][T14810] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1404.508767][T14823] F2FS-fs (loop9): Failed to read root inode [ 1404.582337][T14810] F2FS-fs (loop6): Bad quota inode 2:50331648 [ 1404.588634][T14810] F2FS-fs (loop6): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1404.599973][T14810] F2FS-fs (loop6): Cannot turn on quotas: error -22 [ 1404.669232][T14512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.685849][T14810] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1404.693042][T14810] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 1404.803505][T14512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1404.840657][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.847953][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.881362][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.888698][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.494471][T14840] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1885'. [ 1405.531027][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1887'. [ 1406.510235][T14512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.039345][T14512] veth0_vlan: entered promiscuous mode [ 1407.199825][T14512] veth1_vlan: entered promiscuous mode [ 1407.210711][T14864] Driver unsupported XDP return value 0 on prog (id 357) dev N/A, expect packet loss! [ 1407.346651][T14512] veth0_macvtap: entered promiscuous mode [ 1407.381121][T14512] veth1_macvtap: entered promiscuous mode [ 1407.488327][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.526668][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.571363][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.602356][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.644912][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.682801][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.709262][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1407.736565][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.790477][T14512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.917155][T14867] netlink: 'syz.8.1898': attribute type 1 has an invalid length. [ 1407.947047][T14867] nbd: error processing sock list [ 1407.965100][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.975834][ T5880] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1408.064366][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.075093][T14867] block nbd1: shutting down sockets [ 1408.092901][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.113314][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.134210][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.154341][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.172853][T14512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.193092][T14512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.214784][T14512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.223172][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 1408.268010][T14512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.299566][ T5880] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1408.353182][T14512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.362480][T14512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.371556][ T5880] usb 10-1: config 0 has no interface number 0 [ 1408.380338][ T5880] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1408.390327][T14512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.402224][ T5880] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1408.426062][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.442034][ T5880] usb 10-1: Product: syz [ 1408.455518][ T5880] usb 10-1: Manufacturer: syz [ 1408.470472][ T5880] usb 10-1: SerialNumber: syz [ 1408.511465][ T5880] usb 10-1: config 0 descriptor?? [ 1408.545689][ T5880] smsc75xx v1.0.0 [ 1408.549403][ T5880] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1408.585544][ T5880] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 1408.775159][ T5880] usb 10-1: USB disconnect, device number 16 [ 1408.836925][T13246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.875766][T13246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.048177][T13246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.075427][T13246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.459101][T14885] loop6: detected capacity change from 0 to 32768 [ 1409.466967][T14885] XFS: ikeep mount option is deprecated. [ 1409.472678][T14885] XFS: ikeep mount option is deprecated. [ 1409.478518][T14885] XFS: noikeep mount option is deprecated. [ 1409.522357][T14888] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1409.555795][T14888] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1409.577977][T14885] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1409.981057][T14885] XFS (loop6): Ending clean mount [ 1410.175544][T14885] XFS: ikeep mount option is deprecated. [ 1410.181268][T14885] XFS: ikeep mount option is deprecated. [ 1411.334438][T13347] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1413.076379][T14946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1920'. [ 1413.131856][T14949] loop8: detected capacity change from 0 to 256 [ 1413.277723][T14949] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1413.334223][T14949] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1418.109763][T15004] loop8: detected capacity change from 0 to 1024 [ 1418.319256][ T30] audit: type=1800 audit(1746682588.450:117): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1937" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1418.339969][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.724982][ T6037] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1423.747215][T15075] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1423.753777][T15075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1423.763394][T15075] vhci_hcd vhci_hcd.0: Device attached [ 1424.051185][T15076] vhci_hcd: connection closed [ 1424.074905][ T5985] vhci_hcd: stop threads [ 1424.102873][ T5985] vhci_hcd: release socket [ 1424.107684][ T5985] vhci_hcd: disconnect device [ 1424.126534][ T5880] usb 51-1: new low-speed USB device number 5 using vhci_hcd [ 1424.182998][ T5880] usb 51-1: enqueue for inactive port 0 [ 1424.193789][ T6037] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1424.224955][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1424.240141][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 1424.282060][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1424.305635][T15080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.305766][ T5880] vhci_hcd: vhci_device speed not set [ 1424.325375][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1424.333294][T15080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.388653][T15080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.393394][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1424.417764][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1424.424991][T15080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.460821][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1424.479704][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1424.490871][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1424.504311][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1424.519286][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1424.528878][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1424.550775][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1425.556959][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1425.575245][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1425.586449][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1425.597830][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1425.620779][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1425.657348][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1425.679841][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1425.713356][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1425.757759][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1425.786892][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1425.832019][ T6037] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1425.899595][ T6037] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1425.937128][ T6037] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1425.973095][ T6037] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1426.012211][ T6037] usb 4-1: Product: syz [ 1426.032135][T15100] Context (ID=0x1) not attached to queue pair (handle=0x4df:0x0) [ 1426.047657][ T6037] usb 4-1: Manufacturer: syz [ 1426.061456][ T6037] usb 4-1: SerialNumber: syz [ 1426.101621][ T6037] usb 4-1: config 0 descriptor?? [ 1426.140949][ T6037] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1426.377148][ T6037] usb 4-1: USB disconnect, device number 22 [ 1426.420579][ T6037] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1428.389754][T15137] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1428.396332][T15137] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1428.404346][T15137] vhci_hcd vhci_hcd.0: Device attached [ 1428.700940][T15142] vhci_hcd: connection closed [ 1428.701658][T13246] vhci_hcd: stop threads [ 1428.828951][T13246] vhci_hcd: release socket [ 1428.845536][T13246] vhci_hcd: disconnect device [ 1429.376182][ T47] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1429.613662][ T47] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1429.642854][ T47] usb 4-1: config 0 has no interface number 0 [ 1429.649064][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1429.712862][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1429.751548][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1429.774084][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.830671][ T47] usb 4-1: config 0 descriptor?? [ 1429.847310][T15148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1429.909433][ T47] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1429.990629][T15156] loop9: detected capacity change from 0 to 1024 [ 1430.019347][T15157] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1980'. [ 1430.120859][T15156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1430.206996][ T47] usb 4-1: USB disconnect, device number 23 [ 1430.213164][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1430.233010][T15156] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1430.359853][T15156] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1430.493378][T15156] EXT4-fs (loop9): Remounting filesystem read-only [ 1430.776819][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.625479][ T8901] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1431.729843][T15173] loop9: detected capacity change from 0 to 256 [ 1431.840754][ T8901] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1432.180826][ T8901] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1432.384925][ T8901] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1432.490002][ T8901] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1432.539479][T15173] FAT-fs (loop9): Directory bread(block 64) failed [ 1432.573810][ T8901] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1432.585154][T15173] FAT-fs (loop9): Directory bread(block 65) failed [ 1432.599387][T15173] FAT-fs (loop9): Directory bread(block 66) failed [ 1432.619383][ T8901] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1432.621319][T15173] FAT-fs (loop9): Directory bread(block 67) failed [ 1432.638830][ T8901] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1432.669795][ T8901] usb 9-1: Product: syz [ 1432.674711][T15173] FAT-fs (loop9): Directory bread(block 68) failed [ 1432.697467][T15173] FAT-fs (loop9): Directory bread(block 69) failed [ 1432.709635][ T8901] usb 9-1: Manufacturer: syz [ 1432.731179][T15173] FAT-fs (loop9): Directory bread(block 70) failed [ 1432.751048][ T8901] cdc_wdm 9-1:1.0: skipping garbage [ 1432.815427][T15173] FAT-fs (loop9): Directory bread(block 71) failed [ 1432.836345][ T8901] cdc_wdm 9-1:1.0: skipping garbage [ 1432.842488][T15173] FAT-fs (loop9): Directory bread(block 72) failed [ 1432.857591][T15173] FAT-fs (loop9): Directory bread(block 73) failed [ 1432.881859][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.888384][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.908243][ T8901] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1432.919697][ T8901] cdc_wdm 9-1:1.0: Unknown control protocol [ 1433.007505][ T8901] usb 9-1: USB disconnect, device number 17 [ 1433.627443][ T8901] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1433.659890][T15192] loop9: detected capacity change from 0 to 2048 [ 1433.729708][T15192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1433.765038][T15197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1433.836760][ T8901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.882711][ T8901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.893256][ T6037] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1433.935268][ T8901] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1433.965142][ T8901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.029469][ T8901] usb 5-1: config 0 descriptor?? [ 1434.051256][ T6037] usb 4-1: Using ep0 maxpacket: 16 [ 1434.094670][ T6037] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1434.140655][ T6037] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1434.170941][ T6037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.199297][ T6037] usb 4-1: Product: syz [ 1434.230762][ T6037] usb 4-1: Manufacturer: syz [ 1434.256324][ T6037] usb 4-1: SerialNumber: syz [ 1434.287008][ T6037] usb 4-1: config 0 descriptor?? [ 1434.304167][T15201] sp0: Synchronizing with TNC [ 1434.330941][ T6037] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1434.384966][ T6037] usb 4-1: Detected FT232R [ 1434.518072][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.558464][ T6037] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1434.565681][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.565722][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.565758][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.565793][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.565828][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.565871][ T8901] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1434.574249][ T8901] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1434.715862][ T8901] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 1434.918186][ T8901] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 1434.948693][ T8901] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 1435.028470][T15215] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1435.035065][T15215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1435.043246][T15215] vhci_hcd vhci_hcd.0: Device attached [ 1435.290015][ T8901] usb 5-1: USB disconnect, device number 20 [ 1435.413012][ T5880] usb 49-1: new low-speed USB device number 9 using vhci_hcd [ 1435.599809][T15209] fido_id[15209]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:10C4:EA90.0012/report_descriptor': No such device [ 1435.752401][T15216] vhci_hcd: connection reset by peer [ 1435.927804][ T1155] vhci_hcd: stop threads [ 1436.047866][ T1155] vhci_hcd: release socket [ 1436.176954][ T1155] vhci_hcd: disconnect device [ 1436.339979][ T6037] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1436.356201][ T6037] usb 4-1: USB disconnect, device number 24 [ 1436.416439][ T6037] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1436.429231][ T6037] ftdi_sio 4-1:0.0: device disconnected [ 1438.007441][T15235] loop8: detected capacity change from 0 to 4096 [ 1438.043533][T15241] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1438.086552][T15241] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1438.227861][T15244] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1438.301434][T15248] loop6: detected capacity change from 0 to 256 [ 1438.705420][ T8901] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1438.962181][ T8901] usb 10-1: Using ep0 maxpacket: 32 [ 1439.012596][ T8901] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1439.125012][ T8901] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1439.262935][ T8901] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1439.424574][ T8901] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1439.509849][ T8901] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1439.574226][ T8901] usb 10-1: Product: syz [ 1439.578558][ T8901] usb 10-1: Manufacturer: syz [ 1439.612890][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1439.678650][ T8901] usb 10-1: SerialNumber: syz [ 1439.762578][ T8901] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input20 [ 1439.855341][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.902997][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.934514][T15264] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1439.941113][T15264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1439.950755][T15264] vhci_hcd vhci_hcd.0: Device attached [ 1440.214308][ T10] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1440.229642][ T8902] usb 10-1: USB disconnect, device number 17 [ 1440.229815][ C1] appletouch 10-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1440.268901][T15267] vhci_hcd: connection closed [ 1440.271392][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.273943][ T5973] vhci_hcd: stop threads [ 1440.279629][ T8902] appletouch 10-1:1.0: input: appletouch disconnected [ 1440.301059][ T5973] vhci_hcd: release socket [ 1440.306115][ T5973] vhci_hcd: disconnect device [ 1440.322882][T11180] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1440.325929][ T10] usb 7-1: config 0 descriptor?? [ 1440.495069][T11180] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1440.512959][T11180] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1440.523564][T11180] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1440.532584][T11180] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1440.544722][T11180] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1440.558594][T11180] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1440.568177][T11180] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1440.578948][T11180] usb 9-1: Product: syz [ 1440.592324][T11180] usb 9-1: Manufacturer: syz [ 1440.609712][T11180] cdc_wdm 9-1:1.0: skipping garbage [ 1440.615432][T11180] cdc_wdm 9-1:1.0: skipping garbage [ 1440.635076][T11180] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1440.636693][ T5880] vhci_hcd: vhci_device speed not set [ 1440.640991][T11180] cdc_wdm 9-1:1.0: Unknown control protocol [ 1440.945630][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1440.962837][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1440.970257][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1440.981315][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1441.023208][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1441.030223][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1441.053046][ T10] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1441.092553][ T10] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1441.250355][ T10] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00 [ 1441.461288][ T10] cp2112 0003:10C4:EA90.0013: error requesting SMBus config [ 1441.507727][ T10] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 1441.596009][T11180] usb 9-1: USB disconnect, device number 18 [ 1441.604711][ T10] usb 7-1: USB disconnect, device number 6 [ 1441.720822][T15280] loop9: detected capacity change from 0 to 2048 [ 1441.775262][T15280] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1441.838784][T15285] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1442.553769][ T5880] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1442.682044][T15301] loop8: detected capacity change from 0 to 512 [ 1442.682905][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1442.714734][ T8901] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1442.740377][T15301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.742944][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 1442.804119][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1442.842991][ T5880] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1442.869477][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1442.906151][ T8901] usb 7-1: Using ep0 maxpacket: 8 [ 1442.917804][ T8901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.928984][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1442.946341][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1442.957550][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1442.969253][ T8901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.979677][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.992953][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1443.015118][ T8901] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1443.027705][ T5880] usb 4-1: SerialNumber: syz [ 1443.044003][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1443.061755][ T8901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.872019][ T10] pvrusb2: ********** [ 1443.876979][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1443.887474][ T10] pvrusb2: Important functionality might not be entirely working. [ 1443.895691][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1443.907722][ T10] pvrusb2: ********** [ 1443.937113][T15287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1443.954143][ T2336] pvrusb2: Invalid write control endpoint [ 1443.974354][ T8901] usb 7-1: config 0 descriptor?? [ 1444.099650][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.053202][ T972] usb 3-1: USB disconnect, device number 2 [ 1445.061754][ T5880] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1445.077764][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.077764][T15320] nbd9: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1445.081758][ T5880] usb 4-1: USB disconnect, device number 25 [ 1445.127525][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.127525][T15320] nbd9: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1445.158494][ T8901] steelseries 0003:1038:1410.0014: item fetching failed at offset 5/7 [ 1445.182970][ T8901] steelseries 0003:1038:1410.0014: parse failed [ 1445.199136][ T8901] steelseries 0003:1038:1410.0014: probe with driver steelseries failed with error -22 [ 1445.201408][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1445.249532][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.249532][T15320] nbd9: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1445.386263][ T2336] pvrusb2: Invalid write control endpoint [ 1445.415012][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1445.436236][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1445.461088][ T5880] usb 7-1: USB disconnect, device number 7 [ 1445.481502][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1445.494557][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.494557][T15320] nbd9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1445.513021][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1445.516047][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.516047][T15320] nbd9: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1445.549396][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1445.551305][ T2336] pvrusb2: Device being rendered inoperable [ 1445.573694][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.573694][T15320] nbd9: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1445.606177][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1445.620498][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1445.630704][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1445.689937][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.689937][T15320] nbd9: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1445.693379][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1445.714713][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1445.728202][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.728202][T15320] nbd9: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1445.742650][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1445.752922][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1445.762724][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.762724][T15320] nbd9: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1445.802927][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1445.813716][T15320] syz.9.2042: attempt to access beyond end of device [ 1445.813716][T15320] nbd9: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1445.839241][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1445.851697][T15320] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1445.911123][T15320] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1446.074339][ T5880] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1446.242947][ T5880] usb 9-1: Using ep0 maxpacket: 8 [ 1446.270034][ T5880] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.270386][T15339] macsec1: entered allmulticast mode [ 1446.296036][T15339] dummy0: entered allmulticast mode [ 1446.312568][ T5880] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1446.338826][ T5880] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1446.353043][T15339] dummy0: left allmulticast mode [ 1446.359962][ T5880] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1446.411165][ T5880] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.469827][ T5880] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1446.601563][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.975833][ T5880] usb 9-1: usb_control_msg returned -32 [ 1446.981494][ T5880] usbtmc 9-1:16.0: can't read capabilities [ 1447.517193][T15362] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0 [ 1447.754871][ T6037] usb 9-1: USB disconnect, device number 19 [ 1448.110788][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 1448.805529][ T5880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1449.774019][ T972] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1449.802951][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 1449.812155][ T5880] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1449.831097][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1449.841662][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1449.865622][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1449.906985][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.954609][ T972] usb 9-1: Using ep0 maxpacket: 8 [ 1449.983128][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1450.013103][ T972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1450.024211][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.040793][ T972] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1450.073261][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.149250][ T972] usb 9-1: config 0 descriptor?? [ 1450.235716][T15387] loop6: detected capacity change from 0 to 256 [ 1450.298331][ T5880] usb 5-1: usb_control_msg returned -32 [ 1450.357325][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 1450.418769][T15387] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1450.984417][T15387] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1451.178421][ T972] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1451.495760][T15393] loop9: detected capacity change from 0 to 1024 [ 1451.503527][ T972] usb 9-1: USB disconnect, device number 20 [ 1451.542930][ T8901] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1451.743044][ T8901] usb 4-1: Using ep0 maxpacket: 32 [ 1451.982961][ T8901] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1452.382924][ T8901] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1452.410991][ T8901] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1452.446884][ T8901] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1452.466941][ T5880] usb 5-1: USB disconnect, device number 21 [ 1452.547908][ T8901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1452.612935][ T8901] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1452.622277][ T8901] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1452.662845][ T8901] usb 4-1: Product: syz [ 1452.667079][ T8901] usb 4-1: Manufacturer: syz [ 1452.671705][ T8901] usb 4-1: SerialNumber: syz [ 1452.720251][ T8901] usb 4-1: config 0 descriptor?? [ 1452.729409][T10620] hfsplus: b-tree write err: -5, ino 4 [ 1452.752459][ T8901] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1452.773189][T15403] loop8: detected capacity change from 0 to 512 [ 1452.781595][ T8901] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1452.828232][T15403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1452.861974][T15404] syzkaller1: entered promiscuous mode [ 1452.887500][T15403] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1452.898149][T15404] syzkaller1: entered allmulticast mode [ 1452.998611][T15403] EXT4-fs (loop8): 1 truncate cleaned up [ 1453.065623][T15403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1453.313416][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.795330][ T5880] usb 4-1: USB disconnect, device number 26 [ 1453.823242][ T5880] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1453.984237][T15431] loop8: detected capacity change from 0 to 256 [ 1454.088950][T15431] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1454.111710][T15431] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1454.870569][ T30] audit: type=1326 audit(1746682624.990:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15442 comm="syz.9.2088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f421d78e969 code=0x0 [ 1455.313220][ T5880] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1455.328000][T15456] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2093'. [ 1455.413261][ T8901] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1455.482863][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 1455.500602][ T5880] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1455.510828][ T5880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1455.557250][ T5880] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1455.577720][ T5880] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1455.617414][ T8901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1455.626694][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.641413][ T8901] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1455.683432][ T8901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1455.693288][ T5880] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1455.713564][ T5880] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1455.722054][ T5880] usb 4-1: Product: syz [ 1455.793988][ T8901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1455.825644][ T5880] usb 4-1: Manufacturer: syz [ 1455.830318][ T5880] usb 4-1: SerialNumber: syz [ 1455.835291][ T8901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1455.848756][ T8901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1455.860151][ T8901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1455.869464][ T5880] usb 4-1: config 0 descriptor?? [ 1455.874696][ T8901] usb 3-1: Product: syz [ 1455.881802][ T5880] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1455.891291][ T8901] usb 3-1: Manufacturer: syz [ 1455.905203][ T5880] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1455.915732][ T8901] cdc_wdm 3-1:1.0: skipping garbage [ 1455.929798][ T8901] cdc_wdm 3-1:1.0: skipping garbage [ 1455.944212][ T8901] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1455.950193][ T8901] cdc_wdm 3-1:1.0: Unknown control protocol [ 1457.740814][ T5880] usb 3-1: USB disconnect, device number 3 [ 1457.886950][ T8901] usb 4-1: USB disconnect, device number 27 [ 1457.886969][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 1457.923109][T15450] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1457.942233][T15478] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1458.034617][ T8901] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1458.763595][ T30] audit: type=1326 audit(1746682628.890:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9998e969 code=0x7ffc0000 [ 1458.782939][T11180] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1458.869919][ T30] audit: type=1326 audit(1746682628.890:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1458.983234][T11180] usb 10-1: Using ep0 maxpacket: 16 [ 1459.300482][ T8901] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1459.312688][ T30] audit: type=1326 audit(1746682628.890:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1459.333875][T11180] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1459.336394][ T30] audit: type=1326 audit(1746682628.890:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9998e969 code=0x7ffc0000 [ 1459.367617][ T5880] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1459.375263][ T30] audit: type=1326 audit(1746682628.890:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1459.400141][ T30] audit: type=1326 audit(1746682628.890:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9998e969 code=0x7ffc0000 [ 1459.426393][ T30] audit: type=1326 audit(1746682628.900:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1459.449203][ T30] audit: type=1326 audit(1746682628.900:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1459.471558][ T30] audit: type=1326 audit(1746682628.900:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1459.732907][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 1459.740603][ T5880] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1459.750718][ T8901] usb 7-1: config 0 has an invalid interface number: 242 but max is 29 [ 1460.719847][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1460.729973][ T8901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 30 [ 1460.750870][ T8901] usb 7-1: config 0 has no interface number 0 [ 1460.752918][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1460.752941][ T30] audit: type=1326 audit(1746682630.850:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1460.763263][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1460.792911][T11180] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.932333][T11180] usb 10-1: config 0 descriptor?? [ 1460.937891][ T30] audit: type=1326 audit(1746682630.850:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1460.964472][T11180] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1460.993099][ T8901] usb 7-1: config 0 interface 242 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.031018][ T8901] usb 7-1: config 0 interface 242 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.071619][ T8901] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1461.091890][ T5880] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1461.116629][ T8901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.142887][ T30] audit: type=1326 audit(1746682630.850:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.191939][ T5880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1461.210625][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.221315][ T8901] usb 7-1: config 0 descriptor?? [ 1461.250976][ T30] audit: type=1326 audit(1746682630.850:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.273354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.314856][ T30] audit: type=1326 audit(1746682630.850:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.359802][ T30] audit: type=1326 audit(1746682630.850:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.397880][ T30] audit: type=1326 audit(1746682630.850:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.423323][ T30] audit: type=1326 audit(1746682630.850:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.452075][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1461.473237][ T30] audit: type=1326 audit(1746682630.850:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.524035][ T5880] usb 3-1: GET_CAPABILITIES returned 0 [ 1461.529760][ T5880] usbtmc 3-1:16.0: can't read capabilities [ 1461.530250][ T30] audit: type=1326 audit(1746682630.850:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.8.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb9992ab39 code=0x7ffc0000 [ 1461.559655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.722939][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1461.729609][ T8901] hid (null): report_id 0 is invalid [ 1461.769006][ T8901] uclogic 0003:256C:006D.0015: interface is invalid, ignoring [ 1461.805027][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1461.816806][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1461.847255][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1461.948602][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1461.971597][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1461.981593][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.050690][ T47] usb 3-1: USB disconnect, device number 4 [ 1462.093390][ T5880] usb 7-1: USB disconnect, device number 8 [ 1462.208005][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1462.223261][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1462.270063][ T6037] usb 10-1: USB disconnect, device number 18 [ 1462.398398][T15510] syz_tun: entered allmulticast mode [ 1462.427523][T15509] syz_tun: left allmulticast mode [ 1462.435902][ T10] usb 4-1: USB disconnect, device number 28 [ 1464.847397][ T5880] kernel write not supported for file /sysvipc/msg (pid: 5880 comm: kworker/0:3) [ 1465.369150][T15535] loop6: detected capacity change from 0 to 4096 [ 1465.424194][T15535] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1465.820004][T15535] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1467.076647][T15560] dummy0: entered promiscuous mode [ 1467.120028][T15560] macsec1: entered allmulticast mode [ 1467.146653][T15560] dummy0: entered allmulticast mode [ 1467.214496][T15560] dummy0: left allmulticast mode [ 1467.228615][T15560] dummy0: left promiscuous mode [ 1468.571807][T15574] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2133'. [ 1468.677421][T15574] batadv1: entered promiscuous mode [ 1468.700690][T15574] batadv1: entered allmulticast mode [ 1468.833934][ T8901] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1468.891718][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1469.033785][ T8901] usb 3-1: Using ep0 maxpacket: 32 [ 1469.047705][ T8901] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1469.056197][ T8901] usb 3-1: config 0 has no interface number 0 [ 1469.080272][ T8901] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1469.120779][ T8901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.149455][ T8901] usb 3-1: Product: syz [ 1469.158952][ T8901] usb 3-1: Manufacturer: syz [ 1469.168450][ T8901] usb 3-1: SerialNumber: syz [ 1469.180264][ T8901] usb 3-1: config 0 descriptor?? [ 1469.193328][ T8901] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1470.402924][ T8901] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1470.521444][T15588] loop8: detected capacity change from 0 to 512 [ 1470.548973][ T8901] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1470.571291][T15588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.068398][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1471.069091][ T47] usb 3-1: USB disconnect, device number 5 [ 1471.115687][T15596] loop6: detected capacity change from 0 to 512 [ 1471.164533][T15596] /dev/loop6: Can't open blockdev [ 1471.204370][ T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1471.368637][ T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1471.746319][ T47] quatech2 3-1:0.51: device disconnected [ 1472.926602][ T8901] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1473.118746][ T8901] usb 4-1: Using ep0 maxpacket: 8 [ 1473.174617][ T8901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1473.196411][ T8901] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1473.216862][ T8901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.249375][ T8901] usb 4-1: config 0 descriptor?? [ 1473.453283][ T5880] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1473.544469][ T8901] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1473.613245][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1473.623726][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 1473.635254][ T5880] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1473.655483][ T5880] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1473.666443][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.683254][ T5880] usb 10-1: Product: syz [ 1473.687612][ T5880] usb 10-1: Manufacturer: syz [ 1473.703964][ T5880] usb 10-1: SerialNumber: syz [ 1473.724395][ T5880] usb 10-1: config 0 descriptor?? [ 1473.773073][T11180] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1473.788276][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1473.803073][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.811179][ T10] usb 3-1: Product: syz [ 1473.846282][ T10] usb 3-1: Manufacturer: syz [ 1473.850990][ T10] usb 3-1: SerialNumber: syz [ 1473.884553][ T10] usb 3-1: config 0 descriptor?? [ 1473.904039][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 1473.945420][T11180] usb 5-1: Using ep0 maxpacket: 16 [ 1473.984243][T11180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 1474.010389][T11180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 1474.052372][T11180] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1474.076278][ T8902] usb 4-1: USB disconnect, device number 29 [ 1474.084322][T11180] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1474.122644][T11180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.146990][ T5880] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1474.167507][T11180] usb 5-1: config 0 descriptor?? [ 1474.219233][T11180] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 1474.281231][T10917] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.422171][T11180] usb 5-1: USB disconnect, device number 22 [ 1474.833929][ T5880] usb 10-1: USB disconnect, device number 19 [ 1475.911513][ T10] ch341-uart ttyUSB0: failed to read break control: -110 [ 1475.942974][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1478.081957][ T10] usb 3-1: USB disconnect, device number 6 [ 1478.115135][ T10] ch341 3-1:0.0: device disconnected [ 1478.474518][T15642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1479.740750][T15664] loop6: detected capacity change from 0 to 256 [ 1479.802319][T15664] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1479.830243][T15664] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1481.481147][T15676] loop6: detected capacity change from 0 to 512 [ 1481.565082][T15676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1485.759364][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2173'. [ 1486.220251][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2174'. [ 1487.151975][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1487.198343][T15734] loop9: detected capacity change from 0 to 64 [ 1487.627550][T15734] minix_free_block (loop9:2): bit already cleared [ 1487.672905][T15734] minix_free_block (loop9:3): bit already cleared [ 1487.713840][T15734] minix_free_block (loop9:4): bit already cleared [ 1487.859939][T15739] loop8: detected capacity change from 0 to 4096 [ 1487.879183][T15739] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1487.963953][T15741] syzkaller1: entered promiscuous mode [ 1487.969512][T15741] syzkaller1: entered allmulticast mode [ 1489.119518][T15754] ntfs3(loop8): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 1489.215135][T15759] ntfs3(loop8): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 1489.638795][T15767] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1489.712682][ T8901] IPVS: starting estimator thread 0... [ 1490.702846][T15772] IPVS: using max 22 ests per chain, 52800 per kthread [ 1491.980585][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2193'. [ 1492.080202][ C0] vkms_vblank_simulate: vblank timer overrun [ 1492.376178][T15784] loop8: detected capacity change from 0 to 4096 [ 1494.095300][T15810] loop6: detected capacity change from 0 to 128 [ 1494.211571][T15810] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1494.245583][T15810] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1494.302361][T15817] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1494.323523][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.330221][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.418352][T13347] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1494.474193][ T47] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1494.703831][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1494.913564][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1495.129542][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1495.350114][ T47] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1495.440633][ T47] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1495.500492][ T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.524061][ T47] usb 10-1: Product: syz [ 1495.528363][ T47] usb 10-1: Manufacturer: syz [ 1495.573013][ T47] usb 10-1: SerialNumber: syz [ 1495.587622][ T47] usb 10-1: config 0 descriptor?? [ 1495.840565][T15830] loop8: detected capacity change from 0 to 256 [ 1495.985084][T15830] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1496.000331][ T47] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1496.062359][T15830] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1496.426517][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 1496.500574][T15832] loop6: detected capacity change from 0 to 2048 [ 1496.969758][T15836] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1497.002714][ T8901] usb 10-1: USB disconnect, device number 20 [ 1498.033684][T15843] loop9: detected capacity change from 0 to 1024 [ 1498.071666][T15843] EXT4-fs: Ignoring removed mblk_io_submit option [ 1498.137575][T15843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1498.767932][T15851] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1498.774503][T15851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1498.782301][T15851] vhci_hcd vhci_hcd.0: Device attached [ 1499.146440][T15858] vhci_hcd: connection closed [ 1499.147087][ T13] vhci_hcd: stop threads [ 1499.172203][ T13] vhci_hcd: release socket [ 1499.182603][ T13] vhci_hcd: disconnect device [ 1499.211499][ T5887] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1499.232469][ T5887] usb 45-1: enqueue for inactive port 0 [ 1499.285731][T10801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.365470][ T5887] vhci_hcd: vhci_device speed not set [ 1499.857298][T15873] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1500.242805][T15881] loop6: detected capacity change from 0 to 256 [ 1500.308764][T15881] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1500.337474][T15881] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1500.433089][ T5880] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1500.623207][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 1500.648964][ T5880] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1500.662400][T15865] loop8: detected capacity change from 0 to 32768 [ 1500.683509][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.719735][T15865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2220 (15865) [ 1500.755983][ T5880] usb 5-1: Product: syz [ 1500.880845][ T5880] usb 5-1: Manufacturer: syz [ 1501.033265][ T5880] usb 5-1: SerialNumber: syz [ 1501.137584][ T5880] usb 5-1: config 0 descriptor?? [ 1501.199715][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1501.533265][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2231'. [ 1501.542389][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2231'. [ 1501.596009][T15865] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1501.631482][T15865] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1501.677562][T15865] BTRFS info (device loop8): using free-space-tree [ 1502.321225][ T5880] gspca_sonixj: reg_w1 err -71 [ 1502.403676][ T5880] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1502.445825][ T5880] usb 5-1: USB disconnect, device number 23 [ 1502.758538][T15865] BTRFS warning (device loop8): failed to trim 1 device(s), last error -512 [ 1502.866826][T15925] loop6: detected capacity change from 0 to 512 [ 1502.917517][T15925] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1502.969593][T15925] EXT4-fs (loop6): 1 truncate cleaned up [ 1502.985143][T15925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1503.009508][T10917] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1503.069365][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 1503.139523][T15925] EXT4-fs error (device loop6): ext4_check_dx_root:2204: inode #2: comm syz.6.2240: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 1503.473032][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.583359][ T5887] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1503.923017][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 1503.995181][ T5887] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1504.159123][ T5887] usb 5-1: config 0 has no interface number 0 [ 1504.294510][ T5887] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.413061][ T5887] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1504.422290][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.557296][ T5887] usb 5-1: config 0 descriptor?? [ 1504.702303][ T5887] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1504.889613][T15917] loop9: detected capacity change from 0 to 40427 [ 1504.966051][T15917] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1505.040888][T15917] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1505.280956][ T5880] usb 5-1: USB disconnect, device number 24 [ 1505.487920][T15917] F2FS-fs (loop9): Failed to start F2FS issue_checkpoint_thread (-4) [ 1505.647470][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1505.647499][ T30] audit: type=1326 audit(1746682675.760:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6218e969 code=0x7ffc0000 [ 1506.253031][ T30] audit: type=1326 audit(1746682675.780:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6218e969 code=0x7ffc0000 [ 1506.275843][ T30] audit: type=1326 audit(1746682675.800:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7efc6218e969 code=0x7ffc0000 [ 1506.299457][ T30] audit: type=1326 audit(1746682675.800:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6218e969 code=0x7ffc0000 [ 1506.322343][ T30] audit: type=1326 audit(1746682675.800:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15946 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6218e969 code=0x7ffc0000 [ 1507.726665][T15969] loop8: detected capacity change from 0 to 1024 [ 1508.023956][T11180] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1508.128267][T15969] hfsplus: request for non-existent node 33554434 in B*Tree [ 1508.236934][T15969] hfsplus: request for non-existent node 33554434 in B*Tree [ 1508.953073][T15979] netlink: 'syz.3.2257': attribute type 21 has an invalid length. [ 1509.006545][T11180] usb 3-1: Using ep0 maxpacket: 16 [ 1509.021315][T15981] loop6: detected capacity change from 0 to 1024 [ 1509.056150][T15982] netlink: 'syz.3.2257': attribute type 21 has an invalid length. [ 1509.099234][T15981] EXT4-fs: Ignoring removed mblk_io_submit option [ 1509.172365][T15979] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2257'. [ 1509.197668][T15982] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2257'. [ 1509.220854][T15981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.506170][T11180] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1509.528736][T11180] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1509.554524][T11180] usb 3-1: can't read configurations, error -71 [ 1509.561780][T15981] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.2258: Abort forced by user [ 1509.636250][T15981] EXT4-fs (loop6): Remounting filesystem read-only [ 1509.704838][T15981] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1511.692564][T13347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.764304][ T6037] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1511.953751][ T6037] usb 4-1: Using ep0 maxpacket: 8 [ 1511.969529][ T6037] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1511.998631][ T6037] usb 4-1: config 0 has no interface number 0 [ 1512.062839][ T6037] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1512.115134][ T6037] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1512.179200][ T6037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.602050][ T6037] usb 4-1: config 0 descriptor?? [ 1513.521418][ T6037] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1515.328321][T16036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1515.334930][T16036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1515.365986][T16036] vhci_hcd vhci_hcd.0: Device attached [ 1515.709245][T16038] vhci_hcd: connection closed [ 1515.714282][ T1139] vhci_hcd: stop threads [ 1515.744823][ T1139] vhci_hcd: release socket [ 1515.793124][T11180] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1515.816026][ T1139] vhci_hcd: disconnect device [ 1515.906602][T11180] usb 37-1: enqueue for inactive port 0 [ 1516.168590][T11180] vhci_hcd: vhci_device speed not set [ 1516.333522][T16042] netlink: 'syz.6.2276': attribute type 12 has an invalid length. [ 1516.373089][ T5887] usb 4-1: USB disconnect, device number 30 [ 1516.378787][T16042] netlink: 'syz.6.2276': attribute type 29 has an invalid length. [ 1516.409680][T16042] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2276'. [ 1516.431467][T16042] netlink: 'syz.6.2276': attribute type 1 has an invalid length. [ 1516.440323][T16042] netlink: 'syz.6.2276': attribute type 2 has an invalid length. [ 1516.567597][T16042] netlink: 39 bytes leftover after parsing attributes in process `syz.6.2276'. [ 1518.257845][T16057] loop5: detected capacity change from 0 to 95 [ 1518.553342][ T5887] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1519.280147][T16057] loop5: detected capacity change from 95 to 6551 [ 1519.293090][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 1519.328695][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 1519.361482][T13908] Buffer I/O error on dev loop5, logical block 818, async page read [ 1519.372035][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 1519.422885][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1519.462421][ T5887] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1519.496797][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.564098][ T5887] usb 7-1: config 0 descriptor?? [ 1519.631905][ T5887] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 1520.840041][ T5880] usb 7-1: USB disconnect, device number 9 [ 1522.218191][T16080] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1522.224781][T16080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1522.232917][T16080] vhci_hcd vhci_hcd.0: Device attached [ 1522.733063][ T8901] usb 51-1: new low-speed USB device number 7 using vhci_hcd [ 1522.977669][T16081] vhci_hcd: connection reset by peer [ 1523.075478][T10612] vhci_hcd: stop threads [ 1523.141173][T10612] vhci_hcd: release socket [ 1523.672944][T10612] vhci_hcd: disconnect device [ 1524.490872][T16090] loop6: detected capacity change from 0 to 63 [ 1524.692148][T13217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1524.723027][T16090] Buffer I/O error on dev loop6, logical block 0, async page read [ 1524.798442][T16090] Buffer I/O error on dev loop6, logical block 0, async page read [ 1524.814698][T16093] ------------[ cut here ]------------ [ 1524.821597][T16093] WARNING: CPU: 1 PID: 16093 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 1524.832287][T16093] Modules linked in: [ 1524.836798][T16093] CPU: 1 UID: 0 PID: 16093 Comm: syz.9.2292 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1524.849137][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1524.859462][T16093] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 1524.865995][T16093] Code: 48 8d 35 00 00 00 00 e8 1e 7c b6 f6 e8 39 1c c0 f6 e9 25 fe ff ff e8 7f a3 d9 f6 90 0f 0b 90 e9 17 fe ff ff e8 71 a3 d9 f6 90 <0f> 0b 90 eb b1 e8 66 a3 d9 f6 e8 31 4c bf f6 31 ff 89 c3 89 c6 e8 [ 1524.870385][T13217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1524.885962][T16093] RSP: 0018:ffffc9001211f200 EFLAGS: 00010287 [ 1524.886051][T16093] RAX: 0000000000000695 RBX: ffff88805690c000 RCX: ffffc90014000000 [ 1524.886086][T16093] RDX: 0000000000080000 RSI: ffffffff8ae18ecf RDI: 0000000000000005 [ 1524.886119][T16093] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1524.886144][T16093] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880680b1300 [ 1524.886171][T16093] R13: ffff88806f8d0e40 R14: ffff888064cb0000 R15: 0000000000000000 [ 1524.886206][T16093] FS: 00007f421e6b76c0(0000) GS:ffff888124ae5000(0000) knlGS:0000000000000000 [ 1524.950745][T16093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1524.957762][T16093] CR2: 0000200000001080 CR3: 0000000057d32000 CR4: 0000000000350ef0 [ 1524.965900][T16093] Call Trace: [ 1524.969215][T16093] [ 1524.972206][T16093] rate_control_rate_init_all_links+0x76/0x1e0 [ 1524.976189][T13217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1524.978505][T16093] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 1524.992644][T16093] sta_apply_parameters+0xb82/0x17d0 [ 1524.998142][T16093] ieee80211_add_station+0x3fa/0x6c0 [ 1525.003619][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.009347][T16093] nl80211_new_station+0x144f/0x1bc0 [ 1525.014911][T16093] ? __pfx_nl80211_new_station+0x10/0x10 [ 1525.022140][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.028610][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.036351][T16093] ? nl80211_pre_doit+0x1b0/0xb10 [ 1525.041490][T16093] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1525.048040][T16093] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1525.054275][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.059981][T16093] ? trace_cap_capable+0x18d/0x200 [ 1525.065253][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.070868][T13217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1525.079122][T16093] ? security_capable+0x7e/0x260 [ 1525.079210][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.079270][T16093] ? ns_capable+0xd7/0x110 [ 1525.079326][T16093] genl_rcv_msg+0x55c/0x800 [ 1525.079409][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1525.079481][T16093] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1525.079561][T16093] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1525.079631][T16093] ? __pfx_nl80211_new_station+0x10/0x10 [ 1525.079710][T16093] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1525.079787][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.079859][T16093] ? __lock_acquire+0xaa4/0x1ba0 [ 1525.079952][T16093] netlink_rcv_skb+0x16d/0x440 [ 1525.080020][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1525.080083][T16093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1525.080169][T16093] ? __pfx_down_read+0x10/0x10 [ 1525.157589][T13217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1525.161632][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.175339][T16093] ? netlink_deliver_tap+0x1ae/0xd30 [ 1525.180743][T16093] genl_rcv+0x28/0x40 [ 1525.184871][T16093] netlink_unicast+0x53d/0x7f0 [ 1525.189708][T16093] ? __pfx_netlink_unicast+0x10/0x10 [ 1525.195301][T16093] ? __lock_acquire+0xaa4/0x1ba0 [ 1525.200384][T16093] netlink_sendmsg+0x8d1/0xdd0 [ 1525.205379][T16093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.210764][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.216601][T16093] ____sys_sendmsg+0xa98/0xc70 [ 1525.221458][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.228099][T16093] ? copy_msghdr_from_user+0x10a/0x160 [ 1525.234157][T16093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1525.239542][T16093] ___sys_sendmsg+0x134/0x1d0 [ 1525.244372][T16093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1525.249667][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.255459][T16093] __sys_sendmsg+0x16d/0x220 [ 1525.260115][T16093] ? __pfx___sys_sendmsg+0x10/0x10 [ 1525.265329][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.271021][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.277017][T16093] ? rcu_is_watching+0x12/0xc0 [ 1525.281853][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.287623][T16093] do_syscall_64+0xcd/0x260 [ 1525.292215][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.298500][T16093] RIP: 0033:0x7f421d78e969 [ 1525.303050][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1525.322835][T16093] RSP: 002b:00007f421e6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.332075][T16093] RAX: ffffffffffffffda RBX: 00007f421d9b5fa0 RCX: 00007f421d78e969 [ 1525.340597][T16093] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1525.348718][T16093] RBP: 00007f421d810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1525.356797][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.364867][T16093] R13: 0000000000000000 R14: 00007f421d9b5fa0 R15: 00007ffe474c8bc8 [ 1525.372957][T16093] [ 1525.376027][T16093] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1525.383349][T16093] CPU: 1 UID: 0 PID: 16093 Comm: syz.9.2292 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 1525.395458][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1525.405633][T16093] Call Trace: [ 1525.408939][T16093] [ 1525.411907][T16093] dump_stack_lvl+0x3d/0x1f0 [ 1525.416567][T16093] panic+0x71c/0x800 [ 1525.420533][T16093] ? __pfx_panic+0x10/0x10 [ 1525.425038][T16093] ? show_trace_log_lvl+0x29b/0x3e0 [ 1525.430345][T16093] ? rate_control_rate_init+0x5c0/0x720 [ 1525.435975][T16093] check_panic_on_warn+0xab/0xb0 [ 1525.440986][T16093] __warn+0xf6/0x3c0 [ 1525.444945][T16093] ? rate_control_rate_init+0x5c0/0x720 [ 1525.450612][T16093] report_bug+0x3c3/0x580 [ 1525.454990][T16093] ? rate_control_rate_init+0x5c0/0x720 [ 1525.460591][T16093] handle_bug+0x184/0x210 [ 1525.464979][T16093] exc_invalid_op+0x17/0x50 [ 1525.469547][T16093] asm_exc_invalid_op+0x1a/0x20 [ 1525.474435][T16093] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 1525.480646][T16093] Code: 48 8d 35 00 00 00 00 e8 1e 7c b6 f6 e8 39 1c c0 f6 e9 25 fe ff ff e8 7f a3 d9 f6 90 0f 0b 90 e9 17 fe ff ff e8 71 a3 d9 f6 90 <0f> 0b 90 eb b1 e8 66 a3 d9 f6 e8 31 4c bf f6 31 ff 89 c3 89 c6 e8 [ 1525.500314][T16093] RSP: 0018:ffffc9001211f200 EFLAGS: 00010287 [ 1525.506431][T16093] RAX: 0000000000000695 RBX: ffff88805690c000 RCX: ffffc90014000000 [ 1525.514435][T16093] RDX: 0000000000080000 RSI: ffffffff8ae18ecf RDI: 0000000000000005 [ 1525.522435][T16093] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1525.530705][T16093] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880680b1300 [ 1525.538716][T16093] R13: ffff88806f8d0e40 R14: ffff888064cb0000 R15: 0000000000000000 [ 1525.546745][T16093] ? rate_control_rate_init+0x5bf/0x720 [ 1525.552371][T16093] rate_control_rate_init_all_links+0x76/0x1e0 [ 1525.558682][T16093] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 1525.565013][T16093] sta_apply_parameters+0xb82/0x17d0 [ 1525.570384][T16093] ieee80211_add_station+0x3fa/0x6c0 [ 1525.575733][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.581412][T16093] nl80211_new_station+0x144f/0x1bc0 [ 1525.586766][T16093] ? __pfx_nl80211_new_station+0x10/0x10 [ 1525.592539][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.598259][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.604042][T16093] ? nl80211_pre_doit+0x1b0/0xb10 [ 1525.609159][T16093] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1525.614774][T16093] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1525.620999][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.626670][T16093] ? trace_cap_capable+0x18d/0x200 [ 1525.631873][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.637571][T16093] ? security_capable+0x7e/0x260 [ 1525.642572][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.648245][T16093] ? ns_capable+0xd7/0x110 [ 1525.652707][T16093] genl_rcv_msg+0x55c/0x800 [ 1525.657273][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1525.662385][T16093] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1525.667821][T16093] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1525.673424][T16093] ? __pfx_nl80211_new_station+0x10/0x10 [ 1525.679111][T16093] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1525.684623][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.690313][T16093] ? __lock_acquire+0xaa4/0x1ba0 [ 1525.695334][T16093] netlink_rcv_skb+0x16d/0x440 [ 1525.700154][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1525.705327][T16093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1525.710693][T16093] ? __pfx_down_read+0x10/0x10 [ 1525.715582][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.721350][T16093] ? netlink_deliver_tap+0x1ae/0xd30 [ 1525.726777][T16093] genl_rcv+0x28/0x40 [ 1525.730824][T16093] netlink_unicast+0x53d/0x7f0 [ 1525.735653][T16093] ? __pfx_netlink_unicast+0x10/0x10 [ 1525.741089][T16093] ? __lock_acquire+0xaa4/0x1ba0 [ 1525.746191][T16093] netlink_sendmsg+0x8d1/0xdd0 [ 1525.751134][T16093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.756478][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.762176][T16093] ____sys_sendmsg+0xa98/0xc70 [ 1525.766995][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.772669][T16093] ? copy_msghdr_from_user+0x10a/0x160 [ 1525.778178][T16093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1525.783546][T16093] ___sys_sendmsg+0x134/0x1d0 [ 1525.788266][T16093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1525.793538][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.799252][T16093] __sys_sendmsg+0x16d/0x220 [ 1525.803897][T16093] ? __pfx___sys_sendmsg+0x10/0x10 [ 1525.809044][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.814720][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.820443][T16093] ? rcu_is_watching+0x12/0xc0 [ 1525.825271][T16093] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1525.830974][T16093] do_syscall_64+0xcd/0x260 [ 1525.835550][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.841498][T16093] RIP: 0033:0x7f421d78e969 [ 1525.845957][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1525.865606][T16093] RSP: 002b:00007f421e6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.874081][T16093] RAX: ffffffffffffffda RBX: 00007f421d9b5fa0 RCX: 00007f421d78e969 [ 1525.882090][T16093] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 1525.890099][T16093] RBP: 00007f421d810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1525.898203][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1525.906287][T16093] R13: 0000000000000000 R14: 00007f421d9b5fa0 R15: 00007ffe474c8bc8 [ 1525.914344][T16093] [ 1525.917680][T16093] Kernel Offset: disabled [ 1525.922085][T16093] Rebooting in 86400 seconds..